# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-1
changelog:
  - Update to 2.6.1
  - Resolves: RHEL-5151 - [RFE] defer memberof nested updates
  - Resolves: RHEL-54148 - leaked_storage: Variable "childelems" going out of scope leaks the storage it points to.
  - Resolves: RHEL-60135 - deadlock during cleanAllRuv
  - Resolves: RHEL-61341 - After an initial failure, subsequent online backups will not work.
  - Resolves: RHEL-61349 - Remove deprecated setting for HR time stamps in logs
  - Resolves: RHEL-62875 - Passwords are not being updated to use the configured storage scheme ( nsslapd-enable-upgrade-hash is enabled ).
  - Resolves: RHEL-64438 - VLV errors with RSNv3 and pruning enabled [rhel-9]
  - Resolves: RHEL-64854 - cleanallruv consums CPU and is slow
  - Resolves: RHEL-65506 - AddressSanitizer: double-free
  - Resolves: RHEL-65512 - AddressSanitizer: heap-use-after-free in import_abort_all
  - Resolves: RHEL-65561 - LeakSanitizer: detected memory leaks in dbmdb_public_db_op
  - Resolves: RHEL-65662 - Replication issue between masters using cert based authentication
  - Resolves: RHEL-65664 - LDAP unprotected search query during certificate based authentication
  - Resolves: RHEL-65665 - Ambiguous warning about SELinux in dscreate for non-root user
  - Resolves: RHEL-65741 - LeakSanitizer: memory leak in ldbm_entryrdn.c
  - Resolves: RHEL-65776 - Wrong set of entries returned for some search filters [rhel-9]
  - Resolves: RHEL-67004 - "dsconf config replace" should handle multivalued attributes.
  - Resolves: RHEL-67005 - Online backup hangs sporadically.
  - Resolves: RHEL-67008 - Some replication status data are reset upon a restart.
  - Resolves: RHEL-67020 - 389DirectoryServer Process Stops When Setting up Sorted VLV Index
  - Resolves: RHEL-67024 - Some nsslapd-haproxy-trusted-ip values are discarded upon a restart.
  - Resolves: RHEL-69806 - ipahealthcheck.ds.replication displays WARNING '1 conflict entries found under the replication suffix'
  - Resolves: RHEL-69826 - "Duplicated DN detected" errors when creating indexes or importing entries. [rhel-9]
  - Resolves: RHEL-70127 - Crash in attrlist_find() when the Account Policy plugin is enabled. [rhel-9]
  - Resolves: RHEL-70252 - Freelist ordering causes high wtime
  - Resolves: RHEL-71218 - Sub suffix causes "id2entry - Could not open id2entry err 0" error when the Directory Server starts [rhel-9]
  - Resolves: RHEL-74153 - backup/restore broken [rhel-9]
  - Resolves: RHEL-74158 - If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex [rhel-9]
  - Resolves: RHEL-74163 - Crash during bind when acct policy plugin does not have "alwaysrecordlogin" set [rhel-9]
  - Resolves: RHEL-74168 - On replica consumer, account policy plugin fails to manage the last login history [rhel-9]
  - Resolves: RHEL-74174 - Replication broken after backup restore with freeipa configuration [rhel-9]
  - Resolves: RHEL-74353 - nsslapd-haproxy-trusted-ip is not in schema [rhel-9]
  - Resolves: RHEL-76019 - IPA LDAP error code T3 when no exceeded time limit from a paged search result [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-3
changelog:
  - Resolves: RHEL-18333 Can't rename users member of automember rule
  - Resolves: RHEL-61341 After an initial failure, subsequent online backups will not work.
  - Resolves: RHEL-63887 nsslapd-mdb-max-dbs autotuning doesn't work properly
  - Resolves: RHEL-63891 dbscan crashes when showing statistics for MDB
  - Resolves: RHEL-63998 dsconf should check for number of available named databases
  - Resolves: RHEL-78344 During import of entries without nsUniqueId, a supplier generates duplicate nsUniqueId (LMDB only) [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-4
changelog:
  - Resolves: RHEL-78722 - Failed to set sslversionmax to TLS1.3 in FIPS mode with dsconf $INSTANCE security set --tls-protocol-max TLS1.3


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-3
changelog:
  - Resolves: RHEL-77983 - Defects found by OpenScanHub
  - Resolves: RHEL-79673 - Improve the "result" field of ipa-healthcheck if replicas are busy
  - Resolves: RHEL-80496 - Can't rename users member of automember rule [rhel-9]
  - Resolves: RHEL-81141 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-9]
  - Resolves: RHEL-89736 - dsconf backend replication monitor fails if replica id starts with 0 [rhel-9]
  - Resolves: RHEL-89745 - ns-slapd crash in dbmdb_import_prepare_worker_entry() [rhel-9]
  - Resolves: RHEL-89753 - Nested group does not receive memberOf attribute [rhel-9]
  - Resolves: RHEL-89769 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-9]
  - Resolves: RHEL-89782 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-9]
  - Resolves: RHEL-95768 - Improve error message when bulk import connection is closed [rhel-9]
  - Resolves: RHEL-101189 - lib389/replica.py is using unexisting datetime.UTC in python3.9


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-4
changelog:
  - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-5
changelog:
  - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9]
  - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry
  - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9]
  - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore.
  - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9]
  - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9]
  - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9]
  - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9]
  - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9]
  - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-7
changelog:
  - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9]
  - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9]
  - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9]
  - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9]
  - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9]
  - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy.  [rhel-9]
  - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9]
  - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.8.0-1
changelog:
  - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9]
  - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9]
  - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9]
  - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
  - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9]
  - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default
  - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used.  [rhel-9]
  - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9]
  - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9]
  - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
  - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9]
  - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9]
  - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
  - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9]
  - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9]
  - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9]
  - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9]
  - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9]
  - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9]
  - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9]
  - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9]
  - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9]
  - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x
  - Resolves: RHEL-140089 - Upgrading IDM  to latest version: 389-ds-base and ipa-server breaks replication  [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.8.0-2
changelog:
  - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.8.0-3
changelog:
  - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
  - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
  - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
  - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
  - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
  - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
  - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.8.0-4
changelog:
  - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
  - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
  - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
  - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
  - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
  - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]
  - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.8.0-5
changelog:
  - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8]
  - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]
  - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8]


author: Viktor Ashirov <vashirov@redhat.com> - 2.9.0-1
changelog:
  - Bump version to 2.9.0
  - Resolves: RHEL-165978 - Replication halt caused by an incorrect setting of "nsslapd-changelogmaxage"
  - Resolves: RHEL-166003 - Crash in replica_config_add when manually configuring a replica with an incorrect nsds5ReplicaRoot.
  - Resolves: RHEL-166004 - Possible memory leak when using the Retro Changelog plugin.
  - Resolves: RHEL-168908 - ns-slapd fails to shutdown when deferred memberof update is in progress
  - Resolves: RHEL-168964 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9]
  - Resolves: RHEL-168972 - Replica installation is failing with message MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED [rhel-9]
  - Resolves: RHEL-169530 - Rebase 389-ds-base to 2.9.x
  - Resolves: RHEL-170270 - DS 12 does not handle escape char in bind user [rhel-9]
  - Resolves: RHEL-170275 - dnaSharedConfig: "dnaPortNum: 0" [rhel-9]
  - Resolves: RHEL-170280 - Memory leaks in syncrepl plugin during persistent search operations [rhel-9]
  - Resolves: RHEL-170287 - access log - suspicious wtime  optime negative and large values in internal op [rhel-9]
  - Resolves: RHEL-170477 - An online reinitialization with LMDB is terminating the receiving server [rhel-9]
  - Resolves: RHEL-170480 - dsctl healthcheck DSMOLE0001 inaccurate recommendations when there is more than 1 LDAP backend [rhel-9]
  - Resolves: RHEL-170651 - passwordbadwords attribute of the local password policy is not functioning [rhel-9]
  - Resolves: RHEL-170732 - Memory leaks in IPA context on server restart [rhel-9]
  - Resolves: RHEL-174525 - [RFE] Add OS-level thread names to all server threads [rhel-9]
  - Resolves: RHEL-180717 - Online export is failing when using the option "-s" [rhel-9]


author: Caolán McNamara <caolanm@redhat.com> - 2.4.1-5
changelog:
  - disable building BOX2D_BUILD_UNIT_TESTS due to "SIGSTKSZ ... no
    longer constant on Linux ... redefined to sysconf(_SC_SIGSTKSZ)"
    https://github.com/bminor/glibc/blob/master/NEWS causing build failure


author: Paul Howarth <paul@city-fan.org> - 1.0.5-23
changelog:
  - Don't pass gcc-only compiler flags to other compilers, e.g. clang
    (based on https://src.fedoraproject.org/rpms/Judy/pull-request/3 from
    Timm Baeder)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.53.1-1
changelog:
  - Update to 1.53.1 (dev)
  - Update MPTCP endpoints creation order (RHEL-78752)
  - Print all warnings from nmcli to stderr (RHEL-74255)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.2-1
changelog:
  - Update to 1.53.2 (dev)
  - Fix invalid memory access on Dnsconfd DBUS error (RHEL-83175)
  - Avoid getting transient hostname when "localhost" set in /etc/hostname (RHEL-55730)


author: Filip Pokrývka <fpokryvk@redhat.com> - 1:1.53.3-1
changelog:
  - Update to 1.53.3 (dev)
  - Add more IPv6 prefix delegation options (RHEL-85765)
  - Fix order of parsing port/controller properties in nmcli (RHEL-85767)
  - Improve interface activation logic (RHEL-85766)
  - Fix WireGuard IPv6 firewall rules (RHEL-85763)
  - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.4-1
changelog:
  - Update to 1.53.4 (dev)
  - initrd: add new NBFT parser (RHEL-83061)
  - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
  - Support reapply on OVS settings (RHEL-86877)
  - Add support for configuring the loopback interface in nmtui (RHEL-85770)
  - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
  - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
  - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

  Resolves: RHEL-83061
  Resolves: RHEL-59083
  Resolves: RHEL-87596
  Resolves: RHEL-85770
  Resolves: RHEL-85764
  Resolves: RHEL-85778
  Resolves: RHEL-87168


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.90-1
changelog:
  - Update to 1.54.0 (rc1)
  - Devices not becoming managed sometimes (RHEL-93108)
  - Crash on _l3cfg_notify_cb (RHEL-92314)
  - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.91-1
changelog:
  - Update to 1.54.0 (rc2)
  - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
  - Fix a race condition in ovs tun interface (RHEL-98551)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.92-1
changelog:
  - Update to 1.54.0 (rc3)
  - Fix ipv6 static route deleted with dualstack (RHEL-102772)
  - Allow setting IP method to disabled in port connection (RHEL-102768)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.54.0-1
changelog:
  - Update to 1.54.0
  - Fix reaply on bridge port VLAN (RHEL-102743)
  - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)


author: Vladimír Beneš <vbenes@redhat.com>- 1:1.54.1-1
changelog:
  - Update to 1.54.1
  - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
  - Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
  - Global DNS config without domains silently ignored from D-Bus (RHEL-115973)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.54.2-1
changelog:
  - Update to 1.54.2
  - Support setting protocol version of HSR/PRP (RHEL-122172)
  - Support interlink for HSR/PRP (RHEL-122175)
  - Improve logging of networking off (RHEL-122173 )
  - Don't delete unrelated OVS ports (RHEL-121104)


author: Ján Václav <jvaclav@redhat.com> - 1:1.54.4-1
changelog:
  - Update to 1.54.4
  - fix handling onlink route flag for ECMP routes (RHEL-157391)
  - Add Geneve support (RHEL-154245)
  - Fix arp_missed_max/lacp_active error on reapply (RHEL-157392)
  - Removed 802.1x auth patch as it was released upstream


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1.2.18-2
changelog:
  - Support point-to-point IPSec tunnel (RHEL-20690)
  - Fix crash in libreswan_nmstate_iface_dpd_rsa (RHEL-21221)
  - Support configuring IPSec mode with 'type' (RHEL-21554)


author: Vladimír Beneš <vbenes@redhat.com> - 1.2.27-1
changelog:
  - Update to later upstream release to address regressions (RHEL-56551)
  - Support rightca in ipsec section (RHEL-118819)


author: Vladimír Beneš <vbenes@redhat.com> - 1.2.27-2
changelog:
  - Symetric import/export with nm-auto-default (RHEL-122306)
  - Esp param properly exported (RHEL-122626)
  - Correct leftid export when it contains @


author: Gris Ge <fge@redhat.com> - 1.2.29-1
changelog:
  - Upgrade to 1.2.29
  - Support creating both ends of IPsec (Libreswan) tunnels. (RHEL-85789)
  - Support leftprotoport and rightprotoport options. (RHEL-130907)
  - Fix error on duplicate key 'phase2alg'. (RHEL-131233)
  - Fix import connection with RSA key. (RHEL-127863)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-2
changelog:
  - Resolve issues found by rpmdiff
    - add explicit Requires: on subpackages to avoid the need to test
      interoperability between the various combinations of old and new
      subpackages


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-3
changelog:
  - Add a patch to resolve one more issue found by rpmdiff/rpminspect:
    fix getaddrinfo detection to avoid using gethostbyname.


author: Richard Hughes <rhughes@redhat.com> - 1.2.2-1
changelog:
  - New upstream release
  - Notify systemd when beginning to shutdown
  - Fix possible information disclosure


author: Richard Hughes <rhughes@redhat.com> - 1.2.3-1
changelog:
  - New upstream release
  - Add support for coercing upgrade to distupgrade
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon disappears
  - Remove large transaction size sanity check


author: Milan Crha <mcrha@redhat.com> - 1.2.4-1
changelog:
  - New upstream release
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Honor install_weak_deps=False
  - Improve thread safety on an operation cancellation
  - Let the finish understand the 'cancelled' exit code
  - Only set polkit interactive flag if method call has too
  - Read update information also when getting list of updates
  - Use 'hy_query_get_advisory_pkgs', if available


author: Pete Walter <pwalter@fedoraproject.org> - 2.0.14-1
changelog:
  - Update to 2.0.14
  - Rebase multilib.patch
  - Don't use globs in the form of libFOO.so.* for listing files


author: Neal Gompa <ngompa13@gmail.com> - 2.0.14-6
changelog:
  - Switch to CMake to build SDL2
  - Build JACK support unconditionally since PipeWire-JACK exists in RHEL 9


author: Neal Gompa <ngompa@centosproject.org> - 2.0.18-1
changelog:
  - Update to 2.0.18
    Resolves: rhbz#2028076
  - Fix multilib conflict with SDL_revision.h (rhbz#2008838)
  - Backport fix for building against wayland-1.20+
  - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-10
changelog:
  - wla-Disable-automatic-log-collector.patch [RHEL-7273]
  - Resolves: RHEL-7273
    ([Azure][WALA] Consider to disable Log collector)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-11
changelog:
  - wla-redhat-Add-a-udev-rule-to-avoid-managing-slave-NICs-.patch [RHEL-5880]
  - Resolves: RHEL-5880
    ([Azure][RHEL-9]68-azure-sriov-nm-unmanaged.rules cannot stop NetworkManager-wait-online.service checking SRIOV interface)


author: Jon Maloy <jmaloy@redhat.com> - 2.7.0.6-12
changelog:
  - wla-redhat-Include-10-azure-unmanaged-sriov.rules-into-i.patch [RHEL-40957]
  - Resolves: RHEL-40957
    ([Azure][ARM][RHEL-9] Kdump cannot save vmcore via ssh or nfs)


author: Jon Maloy <jmaloy@redhat.com> - 2.13.1.1-2
changelog:
  - wla-docs-add-waagent-manpage-3401.patch [RHEL-109496]
  - Resolves: RHEL-109496
    ([Azure][WALA][RHEL-9] Missing man page)


author: Jon Maloy <jmaloy@redhat.com> - 2.13.1.1-3
changelog:
  - wla-Use-systemctl-instead-of-service-to-manager-services.patch [RHEL-97572]
  - Resolves: RHEL-97572
    ([Azure][RHEL-9][WALA][Image mode] Cannot find 'service' command)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-7
changelog:
  - wla-redhat-Azure-CVM-specific-udev-rules.patch [bz#2162668]
  - Resolves: bz#2162668
    (Add support for importing remotely sealed TPM2 objects)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-8
changelog:
  - wla-redhat-Explicitly-list-udev-rule-requirements-in-the.patch [bz#2165042]
  - Resolves: bz#2165042
    ([9.0.z] /dev/disk/azure/ is created as symlink to sr0 or sda and not as a directory[Azure])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-9
changelog:
  - wla-redhat-Adjust-tpm2_createprimary-key-attributes-to-m.patch [bz#2167322]
  - Resolves: bz#2167322
    (Adjust TPM primary key creation parameters to match Azure)


author: Ray Strode <rstrode@redhat.com> - 0.6.55-10
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations.
    Resolves: #2057576


author: Kalev Lember <klember@redhat.com> - 3.28-12
changelog:
  - Split highcontrast-icon-theme out to a new subpackage
  - Explicitly require cursor and icon themes required for the gtk2 themes


author: Radovan Sroka <rsroka@redhat.com> - 0.16-102
changelog:
  RHEL 9.5.0 ERRATUM
  - aide fails with "Not enough parameters in db:15384. Trying to continue." unexpectedly
  Resolves: RHEL-27606
  - AIDE fails when using root_prefix option
  Resolves: RHEL-28882


author: Radovan Sroka <rsroka@redhat.com> - 0.16-103
changelog:
  RHEL 9.6.0 ERRATUM
  - /boot/grub2/grubenv's timestamp is getting modified continuously due to "boot_success" implementation
  Resolves: RHEL-4331


author: Attila Lakatos <alakatos@redhat.com> - 0.16-105
changelog:
  RHEL 9.7 ERRATUM
  - CVE-2025-54389 aide: improper output neutralization enables bypassing
  Resolves: RHEL-109912


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-1
changelog:
  RHEL 9.8.0 ERRATUM
  - rebase to 0.19.2
  Resolves: RHEL-110573
  - Switch to libnettle for hashing
  - prevent aide from crashing if database is a HTTPS URL
  Resolves: RHEL-76014
  - prevent aide from exiting if a file is truncated during check
  Resolves: RHEL-1569


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-4
changelog:
  - /boot/grub2/grubenv is excluded from check due to boot_success implementation
  Resolves: RHEL-83776


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-6
changelog:
  - Add aide-migrate-config to automate config migration from pre-0.19 syntax
  Resolves: RHEL-178317
  - Re-add syslog_format config option dropped during rebase to 0.19.2


author: Patrik Koncity <pkoncity@redhat.com> - 0.19.2-7
changelog:
  - Support for included files in /etc/aide.d/
  Resolves: RHEL-178122
  - Increase default values for num_workers
  Resolves: RHEL-178123
  - Add pre-configured systemd timer for aide check
  Resolves: RHEL-178121


author: Jaroslav Kysela <perex@perex.cz> - 2.2.5-2
changelog:
  - add sof-rpl-rt711-l0-rt1316-l12-rt714-l3.tplg for Dell SKU 0BDA
  - add xz compression support (with CRC32)


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.4-1
changelog:
  - Revert "s390x - enable raid1 as a stage2 device" (jkonecny)
    Reverts: RHEL-21691
  - test_module_part_blivet: fix pylint disable (jkonecny)
    Related: RHEL-85416
  - pyanaconda: module.common.task fix cyclic import (jkonecny)
    Related: RHEL-85416
  - pyanaconda: module_manager: fix ciclic import (k.koukiou)
    Related: RHEL-85416
  - pyanaconda: bootloader: fix ImportError (k.koukiou)
    Related: RHEL-85416
  - ruff: enable isort rules and autofix all isort warnings Autofixed with: ruff
    check --exclude pyanaconda/core/kickstart/commands.py --fix --select I .
    (jkonecny)
    Resolves: RHEL-85416
  - Add ruff, a very fast linter (vslavik)
    Related: RHEL-85416
  - Relabel /var/log/ and /root/original-ks.cfg (champetier.etienne)
    Resolves: RHEL-85298


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.5-1
changelog:
  - bootloader: drop write_config_console, just preserve console= (awilliam)
    Resolves: RHEL-98670
  - payload/rpm-ostree: Include program output in exception (walters)
    Resolves: RHEL-45184


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.6-1
changelog:
  - Fix vconsole layout doesn't work for ostree (jkonecny)
    Resolves: RHEL-101057
  - test: make dnf substitutions test check only relevant values (rvykydal)
  - test: add new substitution members in dnf tests (rvykydal)


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.7-1
changelog:
  - pyanaconda: payload: return exception details for payload failures
    (k.koukiou)
  - ui: tui: installation_source: show error message in the TUI screen
    (k.koukiou)
    Resolves: RHEL-4705
  - storage: fix mount point assignment of non-formatted swap partitions
    (rvykydal)
    Related: RHEL-16355
  - storage: include only fstab devices in fsset swap devices property (rvykydal)
    Resolves: RHEL-16355


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.8-1
changelog:
  - Fix: UnboundLocalError: local variable 'e' referenced before assignment
    (k.koukiou)
    Related to: RHEL-4705
  - Emit authselect in KS when fingerprint is enabled (adamkankovsky)
    Resolves: RHEL-85175


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.9-1
changelog:
  - Set Authselect agruments after run in Security module (adamkankovsky)
    Resolves: RHEL-85175
  - Authselect code simplification (adamkankovsky)
    Resolves: RHEL-85175
  - custom: Reallocate partitions when removing a partition (vtrefny)
    Resolves: RHEL-114169


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.10-1
changelog:
  - Fixing authselect logical differences not resolved during backporting
    (adamkankovsky)
    Resolves: RHEL-85175


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.11-1
changelog:
  - bootloader: efi: utilize grub2-common script for handling config file
    generation (k.koukiou)
    Resolves: RHEL-36187


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.12-1
changelog:
  - Fix permissions of the ssh config created by Anaconda (ppolawsk)
    Resolves: RHEL-129787
  - pyanaconda: rpm_ostree: fix _handle_boot_if_not_mount_point method issues
    (k.koukiou)
    Related: RHEL-74145
  - ostree needs to have /boot be bindmounted into sysroot. (a.badger)
    Resolves: RHEL-74145


author: Adam Kankovsky <adamkankovsky@gmail.com> - 34.25.7.15-1
changelog:
  - Increase GUI startup timeout to 120 seconds (mkolman)
    Related: RHEL-148965
    Resolves: RHEL-92999
  - chore: Support multiple console= kernel entries (ppolawsk)
    Resolves: RHEL-101787


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.17-1
changelog:
  - rescue: Set system root to OSTree deployment path (k.koukiou)
    Related: RHEL-135123
  - pyanaconda: storage: fix FindExistingSystems API for ostree based OSes
    (k.koukiou)
    Related: RHEL-135123
  - rescue: detect OSTree deployments in rescue mode and show deployment path
    (k.koukiou)
    Resolves: RHEL-135123
  - rescue: Add warning for immutable systems (k.koukiou)
    Related: RHEL-135123
  - storage: stop creating /etc/mtab symlink during installation (k.koukiou)
    Related: RHEL-135123
  - localization: ensure console font persists via systemd-vconsole-setup
    (k.koukiou)
    Resolves: RHEL-154012


author: Martin Kolman <mkolman@redhat.com> - 8.2.1-1
changelog:
  - initial help content update for RHEL 8.2
  - add help content for the "Connect to Red Hat" spoke
  - drop content for the superseded "System Purpose" spoke
    Resolves: rhbz#1788855


author: Nick Clifton <nickc@redhat.com> - 12.83-1
changelog:
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.
  - Clang & LLVM Plugins: Include install directory in binary.  (RHEL-54069)
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Annocheck: Stop spurious assembler warnings.  (RHEL-53213)
  - Annocheck: Stop warnings about known gaps.    (RHEL-53218)
  - Annocheck: Fix stack realign test.  (#2302427)


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76809)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-76040)


author: Nick Clifton <nickc@redhat.com> - 12.91-1
changelog:
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)


author: Nick Clifton <nickc@redhat.com> - 12.93-1
changelog:
  - Rebuild against LLVM v20.  (RHEL-82001)
  - Rebase to 12.93.
  - Annocheck: Fix test for GO revision.  (RHEL-56031)


author: Nick Clifton <nickc@redhat.com> - 12.96-1
changelog:
  - Annocheck: Fix bugs in debug rpm location code.  Add more glibc exceptions.  (RHEL-95216)
  - Annocheck: Improve performance with multiple debug info files and multiple files to scan.  (#2366180)
  - Annocheck: Update heuristic for detecting gcc files to cope with gcc 15.  (#2365824)


author: Nick Clifton <nickc@redhat.com> - 12.98-1
changelog:
  - Rebase to 12.98.  (RHEL-105574)
  - Improve configure and meson files for consistent builds.
  - Annocheck: Delete the temporary debug info directory after the tests have finished.


author: Nick Clifton <nickc@redhat.com> - 13.14-1
changelog:
  - Rebase to allow rebuilding against LLVM 22.  (RHEL-140420)
  - Annocheck: Do not complain about GO binaries that do not support branch protection.
  - Annocheck: Do not complain about Rust binaries that do not support branch protection.
  - Annocheck: Skip the dynamic-tags test if a GNU Property note is present.
  - Annocheck: Look for compromising characters in pathnames.
  - Require C++17 for building.
  - Annocheck: Ignore Risc-V attribute sections.
  - Annocheck: Change result of failing not-XXX tests from FAIL to MAYB.  Update documentation.
  - Annocheck: Process the .ARM.attributes section.
  - Annocheck: Add more files to the gcc heuristics list.  (RHEL-150659)
  - Annocheck: Add .fc44 to list of known rpm file extensions.
  - Annocheck: Fix compile time warnings from GCC-15 re: strchr returning a const char *.
  - Annocheck: Skip production test for gcc libraries.  (RHEL-123175)
  - Annocheck: Update heuristic to detect gcc libraries.  (RHEL-124869)
  - Annocheck: Change FAIL for binaries built by a cross compiler to a MAYBE.  (RHEL-123175)
  - Annocheck: Improve detection of glibc static maths libraries.  (RHEL-107470)


author: Sergei Petrosian <spetrosi@redhat.com> - 1.3.0-1
changelog:
  - Keep spec consistent with linux-system-roles and simplify
    - Return conditionals related to EL to keep up- and downstream consistent
    - Add pretrans scriplet to remove symlinks if exist to fix issue with update
    - Instead of copying doc and license files create symlinks
    - Dynamically generate %files section
    - Add -t to md2html to generate TOC
    - Do not install roles to /usr/share/microsoft and then create symlinks
      to /usr/share/ansible/roles/, instead install directly to
      /usr/share/ansible/roles/
    - Remove unused removal of ambiguous python shebangs
    - Remove all loops because this RPM contains only one role
    - Remove defsource - simply define the source for mssql
    - 's|$RPM_BUILD_ROOT|%{buildroot}|' for consistency
    - Remove getarchivedir for simplicity
    - Wrap description by 80 symbols and clarify it
    - Remove tests/.fmf dir from the RPM
    Resolves: rhbz#2151281
  - On SQL Server Enterprise Edition, support configuring asynchronous replication
    Resolves: rhbz#2151282
  - Support configuring a read-scale SQL server availability group (without pacemaker
    Resolves: rhbz#2151283
  - Use the certificate role to create the cert and the key
    Resolves: rhbz#2151284
  - Support SQL Server version 2022
    Resolves: rhbz#2153428
  - Support integrating with AD Server for authentication
    Resolves: rhbz#2163709


author: Sergei Petrosian <spetrosi@redhat.com> - 1.3.0-2
changelog:
  - Replace fedora.linux_system_roles/redhat.rhel_system_roles and
    linux-system-roles.mssql with microsoft.sql.server in the role.
    Resolves: rhbz#2151281
  - Use latest 1.3.0 to fix ad_Integration issues
    Resolves: rhbz#2163709


author: Sergei Petrosian <spetrosi@redhat.com> - 1.3.0-3
changelog:
  - Spec: add functionality to build from a commit hash
  - Use latest 1.3.0 to add flexibility to AD integration functionality
    Resolves: rhbz#2163709


author: Sergei Petrosian <spetrosi@redhat.com> - 1.4.1-1
changelog:
  - Update BuiildRequires to use ansible-core on RHEL > 8.8
  - Move RHEL related code into an include for spec readability
  - Update role to version 1.4.1 to add customizable storage paths
    Resolves: RHEL-529


author: Sergei Petrosian <spetrosi@redhat.com> - 2.0.1-1
changelog:
  - Update role to version 2.0.1 to enhance AD integration
    Resolves: RHEL-877
    Resolves: RHEL-878
    Resolves: RHEL-879
    Resolves: RHEL-880


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.0-1
changelog:
  - Support installing SQL Server 2022 on RHEL 9 and running as a selinux-confined application
    Resolves: RHEL-16342
  - Remove unnecessary variable and RPM requirements for read-scale clusters
    Resolves: RHEL-3540
  - Add the mssql_ha_prep_for_pacemaker variable to configure SQL Server for Pacemaker
    Resolves: RHEL-19091
  - Deprecate `mssql_ha_cluster_run_role` for `mssql_manage_ha_cluster`
    Resolves: RHEL-19092


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-2
changelog:
  - Use latest auto-maintenance for updates in lsr_role2collection.py
  - Remove with_html, instead use built-in .README.html
    Resolves: RHEL-23455


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-3
changelog:
  - CHANGELOG.md was missing in some places
  - In legacy role, sed repalced unexpected strings at some places
    Resolves: RHEL-23455


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.3-1
changelog:
  - Add support for running SQL Server as a SELinux unconfined application with SELinux in enforcing mode on RHEL 9
    Resolves: RHEL-16342
  - ExcludeArch: i686


author: Sergei Petrosian <spetrosi@redhat.com> - 2.5.2-1
changelog:
  - Fail on RHEL or CentOS 10 because it's not supported
    Resolves: RHEL-67804
  - Use new adutil functionality to enable AES encryption
    Resolves: RHEL-67807
  - Add mssql_tools_versions, mssql_tls_self_sign to allow installing different versions of mssql-tools
    Resolves: RHEL-68374
  - Deprecate mssql_accept_microsoft_odbc_driver_17_for_sql_server_eula
    Resolves: RHEL-69311


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.1-1
changelog:
  - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database
    Resolves: RHEL-92712
  - Add secondary_role_allow_connections and mssql_ha_read_only_routing_list
    Resolves: RHEL-92718


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.2-1
changelog:
  - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database
    Resolves: RHEL-92712


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.4-1
changelog:
  - test: use post quantum crypto for certs where available (#368)
  - fix: Fix templates/configure_ag.j2 for Ansible 2.19
    Resolves: RHEL-106149


author: Sergei Petrosian <spetrosi@redhat.com> - 0.0.1-1
changelog:
  - Initialize the package
  - Resolves: RHEL-117252 : [RFE] Add ansible-collection-redhat-leapp to RHEL9


author: Sergei Petrosian <spetrosi@redhat.com> - 1.7.0-1
changelog:
  - Replace upstream value of leapp_system_roles_collection with downstream redhat.rhel_system_roles.
  - Resolves: RHEL-117252 : [RFE] Add ansible-collection-redhat-leapp to RHEL9


author: Sergei Petrosian <spetrosi@redhat.com> - 1.7.1-1
changelog:
  - Update to latest upstream version via commit hash
  - Resolves: RHEL-117252 : [RFE] Add ansible-collection-redhat-leapp to RHEL9


author: Sergei Petrosian <spetrosi@redhat.com> - 1.7.1-2
changelog:
  - Fix spec file to require rhel-system-roles package
  - Resolves: RHEL-117252 : [RFE] Add ansible-collection-redhat-leapp to RHEL9


author: Sergei Petrosian <spetrosi@redhat.com> - 1.7.4-1
changelog:
  - Update to latest upstream version 1.7.4
  - Resolves: RHEL-153381 : Fix the role failing on steps that copy logs to the controller EL9


author: Dimitri Savineau <dsavinea@redhat.com> - 2.14.2-4
changelog:
  - rebuild with python 3.11 (rhbz#2169466)
  - remove bundled dependencies from requirements file (rhbz#2152615)
  - add bundled version of resolvelib
  - use PyPi sources
  - remove straightplugin
  - add missing obsoletes constraint


author: Dimitri Savineau <dsavinea@redhat.com> - 2.15.0-1
changelog:
  - ansible-core 2.15.0 release (rhbz#2204510)
  - update bundled markupsafe to 2.1.2.
  - update bundled packaging to 21.3.
  - update bundled pyparsing to 3.0.7.
  - update bundled resolvelib to 1.0.1.
  - remove six runtime dependency.


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.7-1
changelog:
  - ansible-core 2.14.7 release (rhbz#2221820)
  - rebuild with python 3.9 (rhbz#2221820)
  - remove bundled packaging, pyparsing and resolvelib.


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.9-1
changelog:
  - ansible-core 2.14.9 release (rhbz#2232432)
  - Use docs and examples from ansible-documentation project.
  - Build the manpages.


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.14-1
changelog:
  - ansible-core 2.14.14 release (RHEL-23783)
  - Fix CVE-2024-0690 (possible information leak in tasks that ignore
    ANSIBLE_NO_LOG configuration) (RHEL-22124)


author: Thomas Woerner <twoerner@redhat.com> - 1.12.1-1
changelog:
  - Update to version 1.12.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.1
    Resolves: RHEL-13744
  - ipauser module lacks the "rename" field.
    Resolves: RHEL-4962
  - Add missing support for rename in ipagroup module
    Resolves: RHEL-13758
  - The IDP module does not support the modification of IDP options
    Resolves: RHEL-17954
  - The IDP module does not support resetting IDP options
    Resolves: RHEL-17957
  - ipauser is not idempotent when random is defined
    Resolves: RHEL-19123
  - ipasudorule: Allow setting groups for runasuser
    Resolves: RHEL-19130
  - Idempotency fixes
    Resolves: RHEL-19132
  - ipadnszone: Add support for per-zone privilege delegation
    Resolves: RHEL-19134
  - Handle data type or empty string in module_utils
    Resolves: RHEL-19136


author: Thomas Woerner <twoerner@redhat.com> - 1.13.1-1
changelog:
  - Update to version 1.13.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.1
    Resolves: RHEL-35565
  - New inventory plugin
    Resolves: RHEL-35541
  - Enable batch command as backend
    Resolves: RHEL-38943
  - New collection sub package
    Resolves: RHEL-38931


author: Thomas Woerner <twoerner@redhat.com> - 1.13.2-1
changelog:
  - Update to version 1.13.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.2
    Resolves: RHEL-35565
  - Convert input certificates
    Resolves: RHEL-44614
  - Fix rolesdeployment with IPA 4.12
    Resolves: RHEL-40869


author: Thomas Woerner <twoerner@redhat.com> - 1.14.0-1
changelog:
  - Update to version 1.14.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.0
    Resolves: RHEL-67566
  - Multi sudorule management with the ipasudorule module
    Resolves: RHEL-61431


author: Thomas Woerner <twoerner@redhat.com> - 1.14.1-1
changelog:
  - Update to version 1.14.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.1
    Resolves: RHEL-67566
  - Fix requirements for ansible-core
    Resolves: RHEL-69146


author: Thomas Woerner <twoerner@redhat.com> - 1.14.2-1
changelog:
  - Update to version 1.14.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2
    Resolves: RHEL-67566
  - ipareplica: Pass ipareplica_ip_addresses to ipaclient
    Resolves: RHEL-40227
  - ipagroup: Correctly handle externalmember in member actions
    Resolves: RHEL-25009
  - ipasudorule: Evaluate all members related to hosts and users
    Resolves: RHEL-68439
  - ipacert: Correctly handle removFromCRL revocation
    Resolves: RHEL-70016
  - Collection: No more role module duplication
    Resolves: RHEL-71123


author: Thomas Woerner <twoerner@redhat.com> - 1.14.3-1
changelog:
  - Update to version 1.14.3
    Resolves: RHEL-67566
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-25009


author: Thomas Woerner <twoerner@redhat.com> - 1.14.4-1
changelog:
  - Update to version 1.14.4
    Resolves: RHEL-67566
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-25009


author: Thomas Woerner <twoerner@redhat.com> - 1.14.5-1
changelog:
  - Update to version 1.14.5
    Resolves: RHEL-67566
  - ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343)
    Resolves: RHEL-78230


author: Thomas Woerner <twoerner@redhat.com> - 1.15.0-1
changelog:
  - Update to version 1.15.0
    Resolves: RHEL-104652
  - ipaclient: Fix AttributeError by defaulting dns_over_tls to False
    Resolves: RHEL-92844
  - Provide compatibility for AAH naming
    Resolves: RHEL-94769
  - Ensure ipaidrange required parameters are correct on recent versions of IPA
    Resolves: RHEL-79820
  - Add support for DNS-over-TLS for ipaclient, ipareplica and ipaserver roles
    Resolves: RHEL-78636


author: Thomas Woerner <twoerner@redhat.com> - 1.15.1-1
changelog:
  - Update to version 1.15.1
    Resolves: RHEL-104652
  - ipaclient: client_dns has new statestore arg with IPA change e6445b8
    Resolves: RHEL-106558


author: Thomas Woerner <twoerner@redhat.com> - 1.16.0-1
changelog:
  - Update to version 1.16.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.16.0
    Resolves: RHEL-139144
  - Add suppport for passkey management
    Resolves: RHEL-139257
  - Add suppport for sysaccount management
    Resolves: RHEL-140601
  - ipadnsrecord: Allow to set any IP address if create_reverse is false
    Resolves: RHEL-140607


author: Nathan Scott <nathans@redhat.com> 2.0.3-1
changelog:
  - Updated for new version with changed namespace
  - Ansible collection macros now used in the spec
  - Added ansible-lint checking in %check section


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.10.9-15
changelog:
  - Implement new Java bindings and fix ant-manual license
  - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519


author: Neal Gompa <ngompa@centosproject.org> - 0.15.5-2
changelog:
  - Create symlinks manually to make it build
    (the symlinks were not created because of reverting the patch to
    upgrade to Meson 0.62)


author: Neal Gompa <ngompa@centosproject.org> - 0.16.1-1
changelog:
  - Rebase to 0.16.1
    Resolves: rhbz#2169103
  - Drop unneeded downstream hacks to build with older Meson


author: Richard Hughes <richard@hughsie.com> 1:9-20240827
changelog:
  - New metadata version
  - Do not ship fedora-specific files
  - Resolves: #RHEL-4522
  - Resolves: #RHEL-19012


author: Tom Stellard <tstellar@redhat.com> - 1.6.1-13
changelog:
  - Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Omair Majid <omajid@redhat.com> - 10.0.100~rc.2.25502.107-0.10
changelog:
  - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
  - Resolves: RHEL-121559


author: Kalev Lember <klember@redhat.com> - 2.28.1-1
changelog:
  - Update to 2.28.1
  - Switch to meson build system
  - Update source URLs
  - Tighten -devel subpackage deps
  - Tighten soname globs


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3.13
changelog:
  - Sync with rhel 8.3 + cleanup
  - Add new subpackages - z{14,15}
  - Unlike in rhel8, the base subpackage still needs to be build for z12.
  - Covscan related bugfixes
  - Spec and git cleanup (remove unused patches/sources)


author: Sergio Correia <scorreia@redhat.com> - 3.1.2-2
changelog:
  - Remove 
   
  if [ $1 -eq 0 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then 
          /usr/lib/systemd/systemd-update-helper remove-system-units from %preun scriptlet, as it was causing troubles when removing audit || : 
  fi 

    Related: RHEL-14896


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-1
changelog:
  - New upstream maintenance release, 3.1.4
  - Prevent scriplets from failing
  - When upgrading, restart the daemon if it's running
  - If uninstalling, stop the daemon
  - auditctl: use pidfd_send_signal for signaling auditd
    Resolves: RHEL-45865
  - Minor doc update
    Resolves: RHEL-5186
  - augenrules: do not exit with failure if in immutable mode
    Resolves: RHEL-40110
  - auditd.service: Disable ProtectControlGroups
    Resolves: RHEL-5197
  - auditctl: correct output when displaying rules with exe/path/dir
    Resolves: RHEL-40243


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-2
changelog:
  - Disable ProtectKernelModules=true in service file
    Resolves: RHEL-59570
  - af_unix plugin: restore original behavior in binary mode
    Resolves: RHEL-59585
  - Support image mode
    Resolves: RHEL-69033
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-11252
  - Filter syscalls to ensure architecture-specific availability
    Resolves: RHEL-70455


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-5
changelog:
  - ausearch: correct search for DAEMON related events
  - allow hex digits when interpreting tty data
    Resolves: RHEL-82279
  - Fix TTY hostname in log messages
    Resolves: RHEL-78323


author: Richard W.M. Jones <rjones@redhat.com> - 1.13.0-2
changelog:
  - Parse auto_reset_crashkernel in kdump
    resolves: rhbz#2042772
  - Add new directives and options for chrony


author: Richard W.M. Jones <rjones@redhat.com> - 1.13.0-4
changelog:
  - Fix parsing of /usr/lib/tmpfiles.d/provision.conf
  - Fix parsing of /etc/kernel/cmdline
    resolves: rhbz#2155136, rhbz#2159282


author: Pavel Březina <pbrezina@redhat.com> - 1.2.5-1
changelog:
  - Rebase to 1.2.5 (RHBZ #2080239)
  - backup-restore now works correctly (RHBZ #2070541)
  - add with-subid to sssd profile (RHBZ #2075192)
  - add with-gssapi to sssd profile (RHBZ #2077893)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-1
changelog:
  - Rebase to 1.2.6 (RHBZ #2142805)
  - update translations (RHBZ #2139642)
  - Change password hashing algorithm from yescrypt back to sha512 (RHBZ #2151145)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-2
changelog:
  - Fix Japanese translations (RHBZ #2153364)
  - Update translations (RHBZ #2189498)
  - Do not prompt for password twice when changing password of local user (RHBZ #2228098)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.7-1
changelog:
  - Rebase to authselect-1.2.7
  - Disable group merging by default, use with-group-merging to enable it (RHEL-94650)
  - Add switchable-auth (RHEL-156520)


author: Frederic Berat <fberat@redhat.com> - 2.71-4
changelog:
  - Cherry-pick: Fix typo in variable name (#2132715)
  - Backport: Fix testsuite failures with bash 5.2


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.8.1-8
changelog:
  - Resolves: rhbz#2134759 Untrusted Macros
  - Resolves: rhbz#2134757 Weak Master Keys
  - Resolves: rhbz#2134755 Static Initialization Vector
  - Resolves: rhbz#2134761 Macro URL arbitrary script execution


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Tomas Popela <tpopela@redhat.com> - 1:7.1.8.1-16
changelog:
  - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
    formula compilation
  - Resolves: RHEL-186057
  - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
    the spec has
  - Resolves: RHEL-176582
  - ExcludeArch i686 for RHEL-9.* (was part of RHEL, but not brought to CentOS Stream)


author: Michal Sekletar <msekleta@redhat.com> - 0.8-21
changelog:
  - fix file attributes on /run/avahi-daemon (RHEL-5633)
  - avahi-client: fix resource leak (RHEL-27722)
  - fix resource leak in avahi_time_event_queue_new (RHEL-27717)


author: Nils Philippsen <nils@tiptoe.de> - 0.1.72-2
changelog:
  - BR: librsvg2-tools for rsvg-convert
  - mark license files as %license
  - use %apiver macro consistently
  - don't ship .gitignore file


author: Pavel Cahyna <pcahyna@redhat.com> - 11.0.1-5
changelog:
  - Make nagios-plugin build conditional and disabled on RHEL to avoid
    generating this subpackage that has missing dependencies
  - Fix flags for annobin in Qt tools (bat & tray-monitor) build
  - Add a forgotten RHEL 8 patch to use openssl crypto (random numbers, hmac,
    hashing functions)
    Resolves: rhbz#1935458


author: Jerome Marchand <jmarchan@redhat.com> - 0.30.0-3
changelog:
  - Really prevent the loading of compromised headers (RHEL-28769, CVE-2024-2314)
  - Add python3-pyelftools dependency (RHEL-36583)


author: Jerome Marchand <jmarchan@redhat.com> - 0.34.0-1
changelog:
  - Rebase to version 0.34.0 (RHEL-78920)
  - Rebuild with LLVM 20 (RHEL-81773)
  - Fix biosnoop pattern option (RHEL-90848)
  - Fix bpf-klockstat on aarch64 and ppc64le (RHEL-78619)
  - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-78166)
  - Remove unsupported slaratetop tool (RHEL-78162)


author: Jerome Marchand <jmarchan@redhat.com> - 0.36.1-1
changelog:
  - Rebase to version 0.36.1 (RHEL-162981)
  - Rebuild with LLVM 22 (RHEL-170955)
  - Got rid of the RHEL only bio tool fix thanks to comnmit 36305815
  - Fix filegone, kvmexit, netqtop and tcpconnect on s390x (RHEL-118750)
  - Fix profile on s390x (RHEL-112865)
  - Fix bpf-cpufreq (RHEL-78168)
  - Fix bpf-syncsnoop (RHEL-78171)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-35
changelog:
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
  - Replace downstream fixes with upstream changes
  - Address various spoofing attacks (CVE-2025-40778)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-6
changelog:
  - Refuse malformed DNSKEY records (CVE-2025-8677)
  - Address various spoofing attacks (CVE-2025-40778)
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-7
changelog:
  - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
  - Add upstream created test to this regression


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-16
changelog:
  - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
    (CVE-2026-1519)
  - Correct backport issue in the patch (CVE-2026-1519)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.27-2
changelog:
  - Disable building of DLZ packages
  - Conflict explicitly with more bind subpackages
  - Merge license subpackage into libs


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-2
changelog:
  - Backport nsupdate TLS support into 9.18 (RHEL-76331)
  - Update nsupdate manual about new TLS options
  - Test nsupdate TLS support


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-3
changelog:
  - Limit additional section records CPU processing (CVE-2024-11187)
  - Read HTTPS requests in limited chunks and prevent overload (CVE-2024-12705)


author: Nick Clifton <nickc@redhat.com> - 2.35.2-61
changelog:
  - Add an option to objcopy that creates padding sections that eliminate gaps between segments.  (RHEL-60807)


author: Nick Clifton <nickc@redhat.com> - 2.35.2-67
changelog:
  - Adds tests for the linker's --error-execstack and --error-rwx-segments command line options.  (RHEL-109970)


author: Peng Wu <pwu@redhat.com> - 0.3-33
changelog:
  - Provide OpenType Bitmap fonts
  - Use bitmapfonts2otb.py to combine bitmap fonts
  - Add bitmap-*-opentype-fonts sub packages


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-18
changelog:
  - Add a basic read-only support for UDF filesystem
    Resolves: RHEL-13329
  - nvme: Skip startup/write when NVMe plugin isn't available
    Resolves: RHEL-28124


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-25
changelog:
  - Get the actual PV format size for LVMPV format
    Resolves: RHEL-74078
  - Include additional information in PartitioningError
    Resolves: RHEL-8005


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-26
changelog:
  - Make ActionDestroyFormat optional when the device is also scheduled to be removed
    Resolves: RHEL-8008
    Resolves: RHEL-8012


author: Bastien Nocera <bnocera@redhat.com> - 5.86-1
changelog:
  - Update to 5.86
  - Re-add btmgmt as it does not require bluetoothd to be running,
    unlike bluetoothctl mgmt
  - Fix audio output not working in some circumstances
    Resolves: RHEL-147734


author: Václav Doležal <vdolezal@redhat.com> - 1.8.18-18
changelog:
  - Backport patch to autoselect best cipher suite when working over lanplus backend
  - Fixed 'ipmitool pef status/info' not printing final newline
  - Expanded column for sensor name in 'ipmi sdr/sensor' output so longer names are aligned


author: Václav Doležal <vdolezal@redhat.com> - 1.8.18-19
changelog:
  - Backport fix for CVE-2020-5208 (#1798722); for details see
    https://github.com/ipmitool/ipmitool/security/advisories/GHSA-g659-9qxw-p7cp


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-26
changelog:
  - Backport upstream PR 120 to fix segfault on invalid unit types
    Resolves: rhbz#2224578
  - Add vendor ID for NVIDIA BMCs
    Resolves: rhbz#2218358
  - Update /var/run to /run in ipmievd.service that systemd warns about
    Resolves: rhbz#2100475
  - Add upstream ipmievd patch to check received msg id against expectation
    Fixes problem where SEL response is not recognized correctly
    when SEL request times out
    Resolves: rhbz#2224569


author: Adrian Reber <adrian@lisas.de> - 1.2.5-1
changelog:
  - Updated to 1.2.5
  - No longer necessary to re-package sources: All problematic files have
    been re-licensed
  - All 19 patches are part of the 1.2.5 release and have been removed


author: Bryan Gurney <bgurney@redhat.com> - 1.6.1-2
changelog:
  - Add issues resolved by release 1.6.1
  - Resolves: RHEL-36001
  - Resolves: RHEL-36664
  - Resolves: RHEL-36667
  - Resolves: RHEL-36691


author: Patrick Palka <ppalka@redhat.com> - 1.75.0-9
changelog:
  - Apply upstream Boost.Asio patch to resolve RHEL-67973
  - Fix %patch directive compatibility with RPM 4.20


author: Jonathan Wakely <jwakely@redhat.com> - 1.75.0-7
changelog:
  - Build with zstd support (#2091041)
  - Fix rpminspect CI warnings about missing versioned dependencies


author: Colin Walters <walters@verbum.org> - 1.12.1-1
changelog:
  - Update to 1.12.1
  - Fix mount point check regression breaking bootc-image-builder
  - Resolves: RHEL-142112


author: Colin Walters <walters@verbum.org> - 1.13.0-1
changelog:
  - Update to 1.13.0
  - https://github.com/bootc-dev/bootc/releases/tag/v1.13.0
  - Resolves: RHEL-151443


author: Joseph Marrero <jmarrero@fedoraproject.org> - 1.15.1-1
changelog:
  - Update to 1.15.1
  - https://github.com/bootc-dev/bootc/releases/tag/v1.15.1
  - Resolves: #RHEL-168117


author: Joseph Marrero <jmarrero@fedoraproject.org> - 1.15.2-1
changelog:
  - Update to 1.15.2
  - https://github.com/bootc-dev/bootc/releases/tag/v1.15.2
  - Resolves: #RHEL-172417


author: Joseph Marrero <jmarrero@fedoraproject.org> - 1.16.2-1
changelog:
  - Update to 1.16.2
  - https://github.com/bootc-dev/bootc/releases/tag/v1.16.2
  - Resolves: #RHEL-156438


author: Joseph Marrero <jmarrero@fedoraproject.org> - 0.2.18-1
changelog:
  - https://github.com/coreos/bootupd/releases/tag/v0.2.18
    backport patch to support GRUB console.cfg
    Resolves: RHEL-26439


author: Joseph Marrero <jmarrero@fedoraproject.org> - 0.2.32-2
changelog:
  - Backport https://github.com/coreos/bootupd/pull/1068
  - Backport https://github.com/coreos/bootupd/pull/1074
    Resolves: #RHEL-168652


author: Viktor Malik <vmalik@redhat.com> - 0.19.1-1
changelog:
  - Rebase on bpftrace 0.19.1 (RHEL-10693)
  - Rebuild for LLVM 17 (RHEL-10592)
  - Enhancements and fixes for PowerPC (RHEL-3690, RHEL-11476)


author: Viktor Malik <vmalik@redhat.com> - 0.20.3-1
changelog:
  - Rebase on bpftrace 0.20.3 (RHEL-30779)
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)
  - Fix bpftrace creating BPF programs with truncated names (RHEL-8502)


author: Viktor Malik <vmalik@redhat.com> - 0.20.4-1
changelog:
  - Rebase on bpftrace 0.20.4
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Jerry James <loganjerry@gmail.com> - 1.10.14-1
changelog:
  - Version 1.10.14
  - Remove no longer needed no-unixsocket.patch
  - Add workaround for compiling tests with JDK 11


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 4.0.11-1
changelog:
  - Upgrated to latest upstream version 4.0.11
  - Added a patch to fix rpm build issue caused due to misconfiguration in upstream
  - Added required additional plugins required for build


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-5
changelog:
  - Resolves: rhbz#2014523 - c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-6
changelog:
  - Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.19.1-1
changelog:
  - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
  - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
  - Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
  - Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
  - Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-3
changelog:
  - Switch from autotools to meson; enable the tests, since the meson build system
    permits us to use a shared boost library
  - Install examples in the -doc subpackage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-4
changelog:
  - Prepare for future upgrade to API/ABI version 1.16 by introducing virtual
    Provides for a name for API/ABI version 1.0: cairomm1.0. This will be the name
    of a future package that continues to provide API/ABI version 1.0 after the
    upgrade.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-7
changelog:
  - Working (but weak, dependent on SHA1) source signature verification
  - Added API/ABI version to descriptions


author: Jon Maloy <jmaloy@redhat.com> - 4.0.2-11
changelog:
  - Fix CVE-2025-68114 (memory corruption) and CVE-2025-67873 (heap buffer overflow)
    Resolves: RHEL-137760


author: Andreas Schneider <asn@redhat.com> - 0.3.12-1
changelog:
  - Update to version 0.3.12
  - resolves: RHEL-121734
  - Added channel binding support
  - resolves: RHEL-103417


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-4
changelog:
  - Add Pull request #18
  - Replaces kerberos with gssapi
  - Replaces requests_kerberos with requests_gssapi


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-5
changelog:
  - Add Pull request #19
  - Remove Pull request #17 as it is not accepted
  - Review comment #13, #14 addressed


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-6
changelog:
  - Review comment #16 addressed
  - It make more sense that -selinux and -certmonger depends on main package,
    Not the other round
  - Recommends: logrotate
  - Supplements: -selinux, -certmonger


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-5
changelog:
  - Certmonger SCEP renewal should not use old challenges (#1990926)
  - Certmonger certificates stuck in NEED_GUIDANCE (#2001082)
  - certmonger creates CSRs with invalid DER syntax for X509v3 extensions
    with critical=FALSE (#2012261)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-6
changelog:
  - Certificate format validation when adding the SCEP server's CA
    (#1492112)
  - Replace some SHA1 usages with SHA256 in the unit tests


author: Jerry James <loganjerry@gmail.com> - 0.15.0-1
changelog:
  - Version 0.15.0
  - Add -formatspec and -attribute-format patches
  - Build with both cmake and autotools


author: <thalman@redhat.com> - 0.6.1-16
changelog:
  - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual
    Authentication Tag provided in the JWE
    Resolves: rhbz#2223308


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Tom Stellard <tstellar@redhat.com> - 20.1.8-2
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Konrad Kleine <kkleine@redhat.com> - 19.1.5-1
changelog:
  - Update to 19.1.5
  - Enable LLVM_ENABLE_ZSTD (rhbz#2321848)
  - Remove HTML documentation
  - Add lldb man pages
  - Fix profiling after a binutils NOTE change (rhbz#2322754)
  - Install i386 config files on x86_64


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-18
changelog:
  - ci-Revert-fix-vmware-Set-IPv6-to-dhcp-when-there-is-no-.patch [RHEL-54373]
  - Resolves: RHEL-54373
    ([RHEL9]Revert "fix(vmware): Set IPv6 to dhcp when there is no IPv6 addr (#5471)")


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-19
changelog:
  - ci-fix-Add-subnet-ipv4-ipv6-to-network-schema-5191.patch [RHEL-54686]
  - Resolves: RHEL-54686
    ([RHEL-9.5] cloud-init schema validation fails.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-20
changelog:
  - ci-Fix-metric-setting-for-ifcfg-network-connections-for.patch [RHEL-61224]
  - ci-fix-python3.13-Fix-import-error-for-passlib-on-Pytho.patch [RHEL-61224]
  - Resolves: RHEL-61224
    (Configuring metric for default gateway is not working)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-21
changelog:
  - ci-fix-Render-bridges-correctly-for-v2-on-sysconfig-wit.patch [RHEL-38927]
  - ci-fix-Render-v2-bridges-correctly-on-network-manager-w.patch [RHEL-38927]
  - Resolves: RHEL-38927
    (NoCloud - network_config bridges incorrectly configured)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-22
changelog:
  - ci-Prevent-NM-from-handling-DNS-when-network-interfaces.patch [RHEL-65768]
  - Resolves: RHEL-65768
    ([RHEL-9] Prevent NM from handling DNS when network interfaces have DNS config)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-2
changelog:
  - ci-downstream-Revert-feat-Use-NetworkManager-renderer-b.patch [RHEL-74334]
  - Resolves: RHEL-74334
    ([rhel-9.6] Suggest to continue using sysconfig as the default network renderer in rhel-9.6)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-3
changelog:
  - ci-Use-log_with_downgradable_level-for-user-password-wa.patch [RHEL-71122]
  - ci-downstream-set-deprecation-boundary-version.patch [RHEL-71122]
  - Resolves: RHEL-71122
    (Suggest to change some log messages from warning to info after rebase cloud-init-24.4 [RHEL-9.6] )


author: Jon Maloy <jmaloy@redhat.com> - 24.4-4
changelog:
  - ci-net-sysconfig-do-not-remove-all-existing-settings-of.patch [RHEL-76361]
  - Resolves: RHEL-76361
    ([c9s] cloud-init remove 'NOZEROCONF=yes' from /etc/sysconfig/network)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-5
changelog:
  - ci-fix-NM-reload-and-bring-up-individual-network-conns-.patch [RHEL-81703]
  - Resolves: RHEL-81703
    (DataSourceNoCloudNet network configuration is ineffective - c9s)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-6
changelog:
  - ci-feat-aliyun-datasource-support-crawl-metadata-at-onc.patch [RHEL-88658]
  - Resolves: RHEL-88658
    (Cloud-Init Backport Optimization Features on Alibaba Cloud)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-7
changelog:
  - ci-fix-Don-t-attempt-to-identify-non-x86-OpenStack-inst.patch [RHEL-100615]
  - ci-fix-strict-disable-in-ds-identify-on-no-datasources-.patch [RHEL-100615]
  - Fix missing patch [RHEL-101692]
  - Resolves: RHEL-100615
    (CVE-2024-6174 cloud-init: From CVEorg collector [rhel-9.7])
  - Resolves: RHEL-101692
    (c9s dist-git missing patch "downstream: Retain exit code in cloud-init status for recoverable errors")


author: Jon Maloy <jmaloy@redhat.com> - 24.4-8
changelog:
  - ci-downstream-Do-not-override-changes-in-disable-sshd-k.patch [RHEL-128876]
  - Resolves: RHEL-128876
    ([rhel-9] cloud-init upgrade is overwriting modifications in disable-sshd-keygen-if-cloud-init-active.conf)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-8.el9_8.1
changelog:
  - ci-fix-Pass-interface-string-to-get_newest_lease-6648.patch [RHEL-159095]
  - ci-fix-cloudstack-Improve-domain-name-DHCP-lease-lookup.patch [RHEL-159095]
  - ci-downstream-fix-test_cloudstack.py-since-pytest-fixtu.patch [RHEL-159095]
  - Resolves: RHEL-159095
    (CLONE - [GSS][Secure Support] [RHEL-9] cloud-init requests lease before DHCP can provide one [rhel-9.8.z])


author: Bob Mader <bob@redhat.com> - 0.1.7-2
changelog:
  - Initial build for EL9
  - Applying changes for gating - adding the .fmf directory
  - Resolves: RHEL-57044


author: Packit <hello@packit.dev> - 350-1
changelog:
  - networking: fix renaming of bridges and other groups (RHEL-117883)
  - bridge: fix OpenSSH_10.2p1 host key detection


author: Packit <hello@packit.dev> - 358-1
changelog:
  - Networking: Add Wi-Fi support
  - Cockpit Client updated to GTK 4
  - Bugfixes and translation updates


author: Packit <hello@packit.dev> - 360-1
changelog:
  - ws: be more explicit when handling hostnames on cli [CVE-2026-4631]
  - ws: support loading a custom login page
  - Translation updates


author: Packit <hello@packit.dev> - 360.1-1
changelog:
  - Prevent overmounting also for btrfs subvolumes (https://bugzilla.redhat.com/show_bug.cgi?id=2455855)
  - Remove "Mount" action in Anaconda mode (https://bugzilla.redhat.com/show_bug.cgi?id=2455855)


author: Packit <hello@packit.dev> - 362-1
changelog:
  - Bug fixes and translation updates
  - Fix arbitrary code execution via specially crafted logs page link (CVE-2026-4802)


author: Packit <hello@packit.dev> - 314-1
changelog:
  - Diagnostic reports: Fix command injection vulnerability with crafted report names
  - Storage: Improvements to read-only encrypted filesystems


author: Packit <hello@packit.dev> - 318-1
changelog:
  - Storage: Extra confirmation before deleting non-empty partitions in Anaconda's Web UI
  - Discontinue Intel 32-bit support in Fedora, CentOS, and RHEL
  - cockpit.js: Get user primary group ID


author: Packit <hello@packit.dev> - 320-1
changelog:
  - pam-ssh-add: Fix insecure killing of session ssh-agent [CVE-2024-6126]
  - sosreport: Read report directory from sos config (fix page on Debian/Ubuntu)


author: Packit <hello@packit.dev> - 323-1
changelog:
  - metrics: Install valkey instead of redis on RHEL/CentOS 10
  - login: Prevent multiple logins in a single browser session
  - Update documentation links


author: Justin Stephenson <jstephen@redhat.com> - 11-1
changelog:
  - Avoid crash in unmount if journal is null
  - Sync Makefile closer to starter-kit
  - Use current babel/eslint integration
  - Use Flex layout for spacing the two config cards in the config page
  - Use Page/PageSection/Breadcrumb patternfly components
  - Move to xz dist tarballs
  - Remove unused slider.html file
  - package.json: explicitely depend on @patternfly/react-icons
  - webpack: Use relative resolve path for npm 7 compatibility
  - package.json: update patternfly packages
  - package.json: use sass instead of node-sass
  - Fetch pkg/lib automatically from cockpit instead of keeping a local copy
  - Update Docker image and TEST_OS run to Fedora 35
  - Tests: Test SSSD exclude_users and exclude_groups
  - Config: Add SSSD exclude_users and exclude_groups
  - TESTS: Fix testSessionRecordingConf cleanup issue
  - TESTS: Restart SSSD after restoring config


author: Justin Stephenson <jstephen@redhat.com> - 12-1
changelog:
  - Drop moment.js dependency
  - Tests: Assert pause state with a later command in rec1
  - CI: Update image to ubuntu 20.04


author: Justin Stephenson <jstephen@redhat.com> - 13-1
changelog:
  - Play after rewind in testFastforwardControls
  - Set TZ to avoid CI failures with testFilter* tests
  - testZoomSpeedControls incorrectly checks scale
  - Fix testSessionRecordingConf
  - Read TMT_TEST_DATA variable for LOGS in browser.sh
  - Fix node-modules in run-test.sh
  - Install sssd-proxy in test browser.sh
  - Add Files path for test recordings
  - FMF: Run tests together
  - Add executable bit to browser shell scripts
  - FMF: Fix minor typo in plans
  - Add FMF tests and test scripts
  - Read existing sssd conf domains and services
  - Makefile: Update Cockpit lib to 269bf89276c679a03befc8a04244addd
  - Remove CentOS condition in testZoomSpeedControls
  - Add accessible name label for Progress component
  - Remove 'enable_files_domain' from SSSD Config
  - SSSD config changes
  - testFastforwardControls update after player-restart
  - Switch wait_present to wait_visible
  - ESLint error and warning fixes
  - Fix stylelint errors
  - Dependency updates
  - Bring up to date with cockpit starter kit
  - Config: Switch SSSD files provider to Proxy provider
  - Update fedora license in spec file
  - Makefile: Bump test API to 267
  - Makefile: drop installing cockpit-ws/cockpit-packagekit
  - src: load translations via po.js
  - .semaphore: update TEST_OS to Fedora 36
  - webpack.config.js: update compression plugin to succeed build
  - Makefile: Adjust to changed rpmspec -q behaviour
  - Use standard "translate" marker in HTML
  - Update dependencies excluding Patternfly
  - Remove unneeded tlog UID code


author: Justin Stephenson <jstephen@redhat.com> - 16-1
changelog:
  - Rebase to upstream release 16
  - Config: Add sssd-proxy requirement
  - Commits from release 15
  - Config: Update to authselect with-tlog feature
  - stylelint: handle stylelint-scss deprecation
  - Add ruff configuration
  - package.json: drop flowtype plugin
  - package.json: drop po2json
  - package.json: document the required nodejs version
  - fmf: Plumb through $TEST_* variables for unexpected messages
  - tests: Use mc for testPlayBinary
  - package.json: drop deprecated eslint-plugin-standard
  - Revert "build: add support for /pybridge scenario"
  - Player: Stop making the Terminal object state
  - build.js: support flags
  - packaging: Update spec License: to SPDX format
  - build.js: Fix LINT env variable check
  - Tests: Allow charset journal messages
  - Update to the new root creation function
  - package.json: Bump stylelint to 15
  - test: add check for sssd config id_provider proxy
  - Tests: Allow invalid non-UTF8 journal messages
  - Add xterm-canvas-addon dependency for rendering
  - Minor Eslint fixes
  - Tests: Update data list to PF5 for testAppMenu
  - Update org.cockpit-project.session-recording.metainfo.xml
  - Makefile: bump our test/common dependency
  - patternfly-5-overrides should be auto-imported by the page.scss file
  - Drop obsolete pf-m-redhat-font class
  - Commits from release 14
  - Upgrade to PatternFly 5 Alpha
  - Makefile: Update Cockpit lib to da5abbb4245b0455cc8b610efe01e684
  - package.json: Pin down versions of @patternfly/react-{styles,icons}
  - Makefile: Update Cockpit lib to 947f1753867e3924b9617aaace936225
  - Makefile: Fix watch dependencies
  - Update release.yml
  - Automate the release process


author: Justin Stephenson <jstephen@redhat.com> - 17-1
changelog:
  - Rebase to upstream release 17
  - Config: Use authselect enable-feature when possible
  - Test: Move from CDP to BiDi
  - Replace jQuery extend() with standard JS spread
  - Convert to TypeScript
  - Convert Application to a functional component
  - package.json: Drop date-fns
  - Various test fixes and build related fixes


author: Richard Hughes <richard@hughsie.com> 1.4.5-1
changelog:
  - New upstream version
  - Add new API for gnome-settings-daemon
  - Check for errors from more sqlite calls
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-2
changelog:
  - Remove support for building FIPS mode binaries for the
    compat libraries
  - Ships openssl11.cnf as the configuration file.
  - Resolves: rhbz#1993795
  - Related: rhbz#1947584


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-4
changelog:
  - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    Resolves: rhbz#2063148
  - Disable FIPS mode; it does not work and will not be certified
    Resolves: rhbz#2013669


author: Petr Hybl <phybl@redhat.com> - 1:1.1.1k-5.2
changelog:
  - Fixes CVE-2025-69419 OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing
    Resolves: RHEL-142723


author: Pavol Žáčik <pzacik@redhat.com> - 1:1.1.1k-5.3
changelog:
  - Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
    Resolves: RHEL-165863


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20141121-15
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Jindrich Novy <jnovy@redhat.com> - 3:2.2.1-1
changelog:
  - update to https://github.com/containers/conmon/releases/tag/v2.2.1
  - enable RELRO
  - Related: RHEL-111919


author: Phil Sutter <psutter@redhat.com> - 1.4.5-15
changelog:
  - conntrack: fix compiler warnings
  - src: fix strncpy -Wstringop-truncation warnings
  - connntrack: Fix for memleak when parsing -j arg
  - Drop pointless assignments
  - Don't call exit() from signal handler
  - read_config_yy: Drop extra argument from dlog() call
  - helpers: ftp: Avoid ugly casts
  - Fix potential buffer overrun in snprintf() calls
  - cache: Fix features array allocation
  - hash: Flush tables when destroying


author: Phil Sutter <psutter@redhat.com> - 1.4.7-1
changelog:
  - config: Fix -Wimplicit-function-declaration
  - network: Fix -Wstrict-prototypes
  - build: don't suppress various warnings
  - build: conntrack-tools requires libnetfilter_conntrack >= 1.0.9
  - New version 1.4.7


author: Kelvin Fan <kfan@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Require util-linux >= 2.36-1
  - Remove files related to the issuegen and motdgen executables


author: Jindrich Novy <jnovy@redhat.com> - 3:2.234.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.234.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 3:2.235.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.235.0
  - Resolves: RHEL-80473


author: Jindrich Novy <jnovy@redhat.com> - 3:2.236.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.236.0
  - Resolves: RHEL-80473


author: Jindrich Novy <jnovy@redhat.com> - 3:2.237.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.237.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.238.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.238.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.239.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.239.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.240.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.240.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.241.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.241.0
  - Resolves: RHEL-112187


author: Jindrich Novy <jnovy@redhat.com> - 4:2.242.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.242.0
  - Related: RHEL-111919


author: Jindrich Novy <jnovy@redhat.com> - 4:2.244.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.244.0
  - Resolves: RHEL-112187


author: Jindrich Novy <jnovy@redhat.com> - 4:2.245.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.245.0
  - Related: RHEL-111919


author: Jindrich Novy <jnovy@redhat.com> - 4:2.247.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.247.0
  - Resolves: RHEL-170604


author: Jindrich Novy <jnovy@redhat.com> - 4:2.249.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.249.0
  - Resolves: RHEL-58185


author: Lokesh Mandvekar <lsm5@redhat.com> - 1-14
changelog:
  - rebuild with updated dependencies:
    [python-]podman 4.8.0, buildah 1.33.2, skopeo 1.14.0,
    aardvark-dns and netavark 1.9.0
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.4.1
  - Resolves: RHEL-28855


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.0
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.1
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.2-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.7.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.7.1
  - Resolves: RHEL-89428


author: Jindrich Novy <jnovy@redhat.com> - 1:1.8.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.8.0
  - Related: RHEL-111919


author: Jindrich Novy <jnovy@redhat.com> - 1:1.9.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.9.0
  - Related: RHEL-111919


author: Jindrich Novy <jnovy@redhat.com> - 2:1-12
changelog:
  - consume seccomp.json from the oldest vendored version of c/common,
    not main branch
  - Related: #2000051


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1-131
changelog:
  - fetch TMT podman revdep tests from podman dist-git
  - needs at least podman 5.4.0-8.el9
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:1-135
changelog:
  - Update rhel-shortnames-overrides to include complete list of UBI/RHEL images
  - Related: RHEL-111919


author: Jindrich Novy <jnovy@redhat.com> - 2:1-16
changelog:
  - do not hardcode log_driver = "journald" and events_logger = "journald"
    for RHEL9 and leave the rootful/rootless behaviour change based on
    internal logic
  - Related: #2000051


author: Aashish Radhakrishnan <aaradhak@redhat.com> - 0.24.0-2
changelog:
  - Restore single-decimal precision to stream output
    Backport https://github.com/coreos/coreos-installer/pull/1654


author: Joel Capitao <jcapitao@redhat.com> - 0.24.0-3
changelog:
  - Use the full path for the 'root=' kernel arg when rootfs on mpath
    Backport https://github.com/coreos/coreos-installer/pull/1677


author: Jan Friesse <jfriesse@redhat.com> - 3.1.10-2
changelog:
  - Resolves: RHEL-163817
  - Resolves: RHEL-163838

  - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091)
  - totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092)


author: Marek Polacek <polacek@redhat.com> 11.5.0-2
changelog:
  - fix TARGET_CPU_DEFAULT (PR target/105157, RHEL-50037)
  - libstdc++: Workaround kernel-headers on s390x-linux (RHEL-50054)
  - fix wrong code with memcpy from _Complex (PR tree-optimization/116034)


author: Florian Weimer <fweimer@redhat.com> - 11.5.0-10
changelog:
  - Exception handling performance improvements (RHEL-105072)
  - libgcc: Use _dl_find_object to find DWARF data in unwinder
  - libgcc: Use lock-free data structures for run-time unwinder registration


author: David Malcolm <dmalcolm@redhat.com> - 11.5.0-14
changelog:
  - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
    branches and calls to gcov output, but not conditions (RHEL-105416).


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Marek Polacek <polacek@redhat.com> 11.5.0-1
changelog:
  - update from releases/gcc-11 branch (RHEL-35635)
    - GCC 11.5 release
    - PRs ada/113893, ada/113979, analyzer/104042, c/113262, c/114007, c/114493,
  	c++/89224, c++/92145, c++/92407, c++/97990, c++/99710, c++/100667,
  	c++/100772, c++/101765, c++/103185, c++/104051, c++/111485,
  	c++/111529, c++/113598, c++/113674, c++/114537, c++/114561,
  	c++/114562, c++/114572, c++/114634, c++/114691, d/113125, d/113758,
  	d/114171, debug/111080, debug/112718, driver/115440, fortran/50410,
  	fortran/103715, fortran/104908, fortran/107426, fortran/114474,
  	fortran/114825, gcov-profile/114115, libfortran/110651,
  	libgomp/113192, libquadmath/114533, libstdc++/104259,
  	libstdc++/104606, libstdc++/105417, libstdc++/110054,
  	libstdc++/113250, libstdc++/114147, libstdc++/114401,
  	libstdc++/114750, libstdc++/114803, libstdc++/115269,
  	libstdc++/115454, libstdc++/115575, middle-end/90348,
  	middle-end/95351, middle-end/107385, middle-end/108789,
  	middle-end/110027, middle-end/110115, middle-end/110176,
  	middle-end/111422, middle-end/111632, middle-end/112732,
  	middle-end/113907, middle-end/113921, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/115527,
  	middle-end/115836, objc/101666, objc/101718, preprocessor/105608,
  	rtl-optimization/100303, rtl-optimization/108086,
  	rtl-optimization/110079, rtl-optimization/114768,
  	rtl-optimization/114902, rtl-optimization/115092, sanitizer/97696,
  	sanitizer/111736, sanitizer/114956, sanitizer/115172, target/88309,
  	target/101737, target/101865, target/105522, target/108120,
  	target/108743, target/110411, target/111610, target/111677,
  	target/112397, target/113122, target/113281, target/114049,
  	target/114098, target/114130, target/114184, target/114310,
  	target/114837, target/114846, target/115253, target/115297,
  	target/115360, target/115457, target/115475, target/115611,
  	target/115691, testsuite/113175, testsuite/114034, testsuite/114036,
  	tree-optimization/110386, tree-optimization/110422,
  	tree-optimization/111039, tree-optimization/111070,
  	tree-optimization/111331, tree-optimization/111407,
  	tree-optimization/111445, tree-optimization/111736,
  	tree-optimization/112495, tree-optimization/112505,
  	tree-optimization/112793, tree-optimization/113372,
  	tree-optimization/113552, tree-optimization/113603,
  	tree-optimization/114027, tree-optimization/114115,
  	tree-optimization/114566, tree-optimization/114876,
  	tree-optimization/115192, tree-optimization/115337,
  	tree-optimization/115843
  - fix FLUSH IOSTAT value (PR libfortran/101255, RHEL-32536)
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960)


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.4-2
changelog:
  - Fix the "dis -lr" not displaying the source file names
    and line numbers
  - Fix incorrect symbol translation by the 'struct blk_mq_ops'


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-2
changelog:
  - vmware_guestdump: Version 7 support
  - Fix incorrect task state during exit
  - Add multi-threads support in crash target
  - Call cmd_bt silently after "set pid"
  - x86_64: Add gdb multi-stack unwind support
  - arm64: Add gdb multi-stack unwind support
  - ppc64: Add gdb multi-stack unwind support
  - Fix the issue of "page excluded" messages flooding
  - Fix "kmem -p" option on Linux 6.16-rc1 and later kernels


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-3
changelog:
  - x86_64: filter unwanted warning message for "bt -T" cmd
  - doc: Update requirements for building on Fedora
  - gdb: Fix a regression for eppic extension on gdb-16.2
  - Fix crash initialization failure on LoongArch with recent GDB versions
  - gdb: Disable DT_DEBUG lookup by GDB inside the vmcore


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.2-1
changelog:
  - Update to 0.17.2
  - Fix Python deprecation (PY_SSIZE_T_CLEAN) (RhBug:1891785)
  - Revert back to old c API for destination file of cr_compress_file_with_stat and cr_compress_file to prevent a memory leak
  - Never leave behind .repodata lock on exit (RhBug:1906831)
  - Disable drpm for RHEL >= 9 (RhBug:1914828)
  - Setting updated/issued_date to None doesn't produce garbage values (RhBug:1921715)
  - Allow taking __repr__ (__str__) of closed xmlfile and sqlite (RhBug:1913465)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-1
changelog:
  - Update to 0.17.7
  - Remove insecure hashes SHA-1 and MD5 from the default build (RhBug:1935486)
  - Fix error when updating repo with removed modules metadata
  - Exit with status code 1 when loading of repo's metadata fails
  - Fix memory leaks (RhBug:1998426)
  - Fix valgrind warnings caused by subprocess calls


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-2
changelog:
  - Switch default of --keep-all-metadata to TRUE and add --discard-additional-metadata (RhBug:2055032)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.20.1-1
changelog:
  - Update to 0.20.1
  - createrepo_c shouldn't silently produce duplicate-NEVRA repos
  - Fix bad performance with task queue management
  - Update errno usage to fix incorrect GError messages
  - Install header for createrepo_shared module
  - Remove C API for cr_xml_parse_main_metadata_together
  - Remove python bindings for xml_parse_main_metadata_together
  - Fix '&' encoding in attributes when parsing repodata
  - Add a streaming parsing API that is user-controllable.
  - Fix a memory leak of primary pkg when parsing interrupted
  - Fix a memory leak when removing the first link in a list
  - Remove `allow_out_of_order` option for `xml_parse_main_metadata_together`
  - Make parse warnings visible through cr.Repomd(), cr.UpdateInfo()
  - Use --error-exit-val option by default
  - If new and old repomd matches during --update don't update
  - Add `cr_repomd_compare` for comparing two repomds
  - Store parsed repomd in `cr_MetadataLocation`
  - Set database version only for the database records, not everything
  - Use copy+delete fallback when moving of a dir fails
  - Fix memory leaks
  - [spec] Option for legacy hashes, enable on RHEL <= 8 (RhBug:2022271)


author: Adrian Reber <areber@redhat.com> - 3.15-11
changelog:
  - Remove unnecessary Requires: criu-libs
  - Remove wrong BR nftables-devel
  - Bump release for rebuild


author: Radostin Stoyanov <radostin@redhat.com> - 3.15-12
changelog:
  - Increase release number from 11 to 12
  - Disable podman test when crun doesn't support checkpoint/restore


author: Vladis Dronov <vdronov@redhat.com> - 15.9-10
changelog:
  - Bring in important patches from the upstream (39fb38..eaea31 in a git repo)
  - Fix the upstream tarball URL
  - Remove outdated patch files


author: Vladis Dronov <vdronov@redhat.com> - 15.9-14
changelog:
  - Add distrubution patches which were not upstreamed (bz 2072635)
  - Add self-tests
  - Add OSCI harness


author: Vladis Dronov <vdronov@redhat.com> - 15.9-26
changelog:
  - Update cscope to 15.9-26 from Fedora (RHEL-65465)
  - Fix signal handling at exit
  - Minor edits in the rpm scripts and the changelog
  - Make xemacs a bcond


author: Vladislav Dronov <vdronov@redhat.com> - 15.9-31
changelog:
  - Add two latest distribution patches (RHEL-158208)
  - Correct the erroneous brace count caused by the unbalanced { }
  - Make it possible to add the new keywords


author: Pavol Zacik <pzacik@redhat.com> - 1:2.3.3op2-28
changelog:
  - RHEL-39940 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.2.3.3op2-34
changelog:
  - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
  - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-35
changelog:
  - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-37
changelog:
  - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
  - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-14
changelog:
  - RHEL-19201 redhat-lsb unnecessary pulls in cups and avahi dependencies
  - RHEL-16026 Cups Browsed does not correctly pull printer location and description information from print server


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-18
changelog:
  - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file
  - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes
  - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source


author: Bryan Gurney <bgurney@redhat.com> - 71.1-7
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
  - Fix enable-namespace all reporting errors incorrectly
  - Add support for inject-smart on papr scm
  - Related: rhbz#2040075
  - Related: rhbz#1873851
  - Related: rhbz#1880578
  - Related: rhbz#1922538
  - Related: rhbz#2087707


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Jeff Moyer <jmoyer@redhat.com> - 78-1
changelog:
  - Rebase to v78
  - Add support for legacy monitor.conf file location
  - Fix a test failure.
  - Resolves: RHEL-10382
  - Resolves: RHEL-8204
  - Resolves: RHEL-29151


author: Martin Osvald <mosvald@redhat.com> - 3.4.1-7
changelog:
  - Resolves: #2096149 - Fatal error when running "squatter -r user"
  - Resolves: #2096885 - Enhanced TMT testing for centos-stream


author: Martin Osvald <mosvald@redhat.com> - 3.4.1-11
changelog:
  - Resolves: RHEL-20925 - Seen/Unseen Flag not working correctly
    for shared mailboxes
  - cyrus-imapd.spec: rename patches to correspond with others


author: Martin Osvald <mosvald@redhat.com> - 3.4.8-5
changelog:
  - reconstruct: Fix missing uidvalidity in mbentry
    Resolves: RHEL-76907
  - Update rpminspect.yaml to ignore /usr/lib/cyrus-imapd


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-11
changelog:
  - Set default sasldb database to GDBM instead of BerkeleyDB
  - Add the migration tool from BerkeleyDB
  - Add some PLAIN auth tests
  - Resolves rhbz#1947971


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Bryan Gurney <bgurney@redhat.com> - 1.10-8.el9
changelog:
  - Supersede uninitialized value patch with upstream version
  - Add upstream patch: common: fix mismatch between prototype and body
  - Makefile: bypass check-doc in check target
  - Related: rhbz#1985096


author: Bryan Gurney <bgurney@redhat.com> - 1.10.1-1
changelog:
  - Update to PMDK version 1.10.1
  - Related: rhbz#1874208
  - Remove BuildRequires line for libfabric-devel
  - Related: rhbz#2009502


author: Eugene Syromiatnikov <esyr@redhat.com> - 3.6-13
changelog:
  - Change "Requires: genisoimage" dependency to "Requires: /usr/bin/mkisofs"
    to enable xorriso-provided drop-in replacement implementation usage.


author: Mark Wielaard <mjw@redhat.com> - 5.0-8
changelog:
  - Add 0001-debug_str_offsets-header-version-and-padding-are-2-b.patch
  - Add 0001-debugedit-Handle-unused-.debug_str_offsets-entries.patch


author: Mark Wielaard <mjw@redhat.com> - 5.0-11
changelog:
  - Add 0001-Add-basic-find-debuginfo-script-tests.patch
  - Add debugedit-5.0-find-debuginfo-tests-fixups.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 0.1-3
changelog:
  - Fix some rpmlint issues, add comments, add license and doc,
    gpg verification, use pkgconfig BuildRequires, enable _hardened_build


author: Mark Wielaard <mjw@redhat.com> - 5.0-1
changelog:
  - Upgrade to upstream 5.0 release.
    - Removes find-debuginfo .sh suffix.
    - This release still has a find-debuginfo.sh -> find-debuginfo symlink.


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-1
changelog:
  - Rebase to 1.21.2
  - Add support for ppc64le and aarch64
  - Enable the test suite
  - Resolves: RHEL-22429


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-2
changelog:
  - Modify ports: Some CI systems complain about the usage of the 8888 port.
  - Improve the way PPC64LE support is enabled.
  - Resolves: RHEL-22429


author: Kalev Lember <klember@redhat.com> - 0.26-1
changelog:
  - Update to 0.26
  - Switch to the meson build system
  - Avoid hardcoding man page extensions
  - Drop old emacs-desktop-file-utils obsoletes/provides


author: Evan Goode <egoode@redhat.com> - 4.14.0-30
changelog:
  - Mark transient transactions in DNF history (RHEL-84512)
  - Warn/disallow changes outside /usr, /etc with --transient (RHEL-84499)


author: Evan Goode <egoode@redhat.com> - 4.14.0-31
changelog:
  - Introduce $releasever_major, $releasever_minor variables, shell-style
    variable substitution (RHEL-65817)


author: Ales Matej <amatej@redhat.com> - 4.14.0-33
changelog:
  - autoremove: when a dangling protected dependency is found produce a wanrning
    and skip it (RHEL-76112)


author: Petr Menšík <pemensik@redhat.com> - 2.85-19
changelog:
  - Prevent overflow in extract_name function (CVE-2026-2291)
  - Prevent DoS in DNSSEC validation (CVE-2026-4890)
  - Prevent out-of-bounds read in DNSSEC validation (CVE-2026-4891)
  - Prevent out-of-bounds write in DHCPv6 server (CVE-2026-4892)
  - Prevent source check avoidance by RFC 7871 client-subnet (CVE-2026-4893)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-14
changelog:
  - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
  - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-16
changelog:
  - add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098)
  - fix building with latest openssl (RHEL-140619)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-17
changelog:
  - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640)
  - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288)
  - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679)


author: Pavel Valena <pvalena@redhat.com> - 057-67.git20240812
changelog:
  - feat(systemd): install systemd-executor
  - test: use -device instead of -watchdog to remove qemu
  - fix(fips): remove /dev/{random,urandom} pre-creation
  - fix(systemd): always include sg module
  - fix(fips): do not blindly remove /boot
  - fix(github): update format of labeler
  - fix(network-manager): add "After" dependency on dbus.service
  - fix(url-lib.sh): nfs_already_mounted() with trailing slash in
  - feat(systemd-pcrphase): introducing the systemd-pcrphase
  - fix(systemd-pcrphase): only include
  - fix(nfs): include also entries from /usr/lib/{passwd,group}


author: Pavel Valena <pvalena@redhat.com> - 057-70.git20240819
changelog:
  - fix(systemd): set right permissions for the machine-id file
  - feat(lsinitrd.sh): look for initrd in /usr/lib/modules/
  - feat(dracut-init.sh): give --force-add precedence over --omit


author: Pavel Valena <pvalena@redhat.com> - 057-79.git20241127
changelog:
  - fix(35network-manager): install nftables kernel modules
  - fix(35network-manager): install nft binary during module
  - fix(dracut-install): copy xattr when use clone ioctl
  - feat(dracut.sh): add --add-confdir option
  - fix: typo in variable name
  - feat(fips): add support for UKIs
  - fix(kernel-modules): use modalias info in get_dev_module()
  - fix(dracut-functions.sh): convert mmcblk to the real kernel


author: Pavel Valena <pvalena@redhat.com> - 057-86.git20250217
changelog:
  - fix(35network-manager): remove duplicate installkernel
  - feat(fips): include fips module unconditionally
  - fix(dracut.sh): make omit-drivers option do exact match for
  - feat: add openssl module


author: Pavel Valena <pvalena@redhat.com> - 057-101.git20250808
changelog:
  - fix(systemd): add missing modprobe@.service
  - fix: let check_vol_slaves_all return 1 when checks on all
  - improvement(74nvmf): lookup required NIC kernel modules for
  - fix(74nvmf): set root=nvmf
  - chore(multipath): remove `rd_NO_MULTIPATH` kernel command
  - refactor(multipath): remove custom multipathd.service
  - fix(systemd): systemd.volatile needs overlayfs kernel module
  - refactor(dracut): introduce clamp_mtimes helper function
  - fix(dracut): ensure hardlink deduplication is reproducible


author: Pavel Valena <pvalena@redhat.com> - 057-110.git20260130
changelog:
  - fix(systemd-repart): allow partition format
  - feat(install.d):according to the changes of
  - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  - fix(pcsc): add opensc load module file
  - fix(pcsc): add --disable-polkit to pcscd.service
  - fix(pkcs11): delete trailing dot on
  - fix(multipath): disable user_friendly_names with mpathconf
    Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322


author: Pavel Valena <pvalena@redhat.com> - 057-118.git20260624
changelog:
  - feat(resume): add device used for resume
  - fix(dracut): remove trailing null characters from SBATs when
  - fix(network-legacy): replace `echo` writes with `printf` to
  - fix(iscsi): replace `echo` writes with `printf` to prevent
  - fix(network): warn on suspicious shell metacharacters in
  - fix(base): escape arguments in initqueue hook script
  - revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless


author: Pavel Valena <pvalena@redhat.com> - 057-51.git20231114
changelog:
  - fix(dracut.sh): correct wrong systemd variable paths
  - fix(hwdb): follow shfmt-recommended format
  - feat(dracut): add --sbat option to add sbat policy to UKI
  - feat(systemd): install systemd-sysroot-fstab-check
  - fix(dracut.spec): add jq dependency to network subpackage
  - fix(fcoe-uefi): exit early on empty vlan


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Jiri Olsa <jolsa@redhat.com> - 1.22-1
changelog:
  - New release: v1.22
  - Resolves: rhbz#2010414
  - Introduce -j/--jobs option to specify the number of threads to use.
  - Multithreaded DWARF loading, requires elfutils >= 0.178.
  - Preparatory work for multithreaded BTF encoding, the focus for 1.23.
  - Allow encoding BTF to a separate file.
  - Show all different types with the same name, not just the first one found.
  - Stop assuming that reading from stdin means pretty, add --prettify.
  - Improve type resolution for the --header command line option.
  - Do not consider the ftrace filter when encoding BTF for kernel functions.
  - Lock calls to non-thread safe elfutils' dwarf_decl_file() and dwarf_decl_line().
  - Change hash table size to one that performs better with current typical vmlinux files.
  - Allow tweaking the hash table size from the command line.
  - Add --kabi_prefix to avoid deduplication woes when using _RH_KABI_REPLACE().
  - Add --with_flexible_array to show just types with flexible arrays.
  - Support btfdiff with a detached BTF file.
  - Introduce sorted type output (--sort).
  - Disable incomplete CTF encoder.


author: Viktor Malik <vmalik@redhat.com> - 1.24-1
changelog:
  - Resolves: rhbz#2140020
  - New release: v1.23
  - Process DW_TAG_LLVM_annotation tags.
  - Initial support for DW_TAG_skeleton_unit.
  - Encode BTF_KIND_TYPE_TAG and BTF_KIND_DECL_TAG
  - Fix handling of percpu symbols on s390.
  - Use cacheline size to infer struct member alignment from BTF.
  - Add --skip_missing to not stop when not finding one of -C arguments.
  - Fix __attribute__((__aligned__(N)) printing alignment for struct members.
  - Fix nested __attribute__(__aligned__(N)) struct printing order.
  - New release: v1.24
  - Add support to BTF_KIND_ENUM64.
  - Support multithreaded BTF encoding.
  - Encode char type as signed in BTF.
  - Introduce --lang and --lang_exclude to pahole.
  - Introduce --compile to pahole.
  - Don't segfault when processing bogus files.


author: Viktor Malik <vmalik@redhat.com> - 1.25-1
changelog:
  - Resolves: rhbz#2190484
  - Build with system libbpf
  - New release: v1.25
  - Support for DW_TAG_unspecified_type more generally.
  - Make sure struct member offsets are in ascending order. Rust BTF needs this.
  - Support C atomic types (DW_TAG_atomic_type).
  - Initial support for DW_TAG_LLVM_annotation, used for BTF type tags, for __rcu, __user, etc
  - Exclude functions with the same name (static functions in different CUs), inconsistent prototypes or not following calling convention.
  - Allow generation of BTF for optimized functions, those that end with a .isra*, .constprop*.
  - Support 'pahole --lang=/--lang_exclude=asm'
  - Support --compile from DWARF in addition to from BTF.
  - Exclude RUST CUs in 'btfdiff', as those are not yet being BTF encoded.


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-30780
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Gregory Bell <grbell@redhat.com> - 1.30-1
changelog:
  - New release: 1.30
  - Better detection of abort during DWARF loader thread processing
  - pahole now detects presence of libbpf APIs and BTF features using weak function
    declarations when built using a shared library libbpf
  - Type tags are emitted for BPF arena pointers with new BTF "attributes" feature
  - New release: 1.29
  - Multithreading is now in the DWARF loader using a jobs queue and a pool of worker threads.
  - The BTF encoding now is always reproducible, and as fast/faster than before.
  - The memory consumption is reduced.
  - Support for multiple BTF_DECL_TAGs pointing to same tag.
  - Verify that pfunct prints btf_decl_tags read from BTF.
  - Don't print functions twice when using 'pfunct -f function_name'.
  - New release: 1.28
  - Various improvements to reduce the memory footprint of pahole, notably when doing BTF encoding.
  - Show flexible arrays statistics
  - Add '--padding N' and '--padding_ge N' to show structs with paddings
  - Introduce --running_kernel_vmlinux to find a vmlinux that matches the build-id of the running kernel.
  - Don't stop pfunct output at the first function that matches a filter, show all of them
  - Allow encoding data about all global variables, not just per CPU ones
  - Handle .BTF_ids section endianness, fully supporting cross builds
  - Generate decl tags for bpf_fastcall for eligible kfuncs
  - Add "distilled_base" BTF feature to split BTF generation.
  - Use the ELF_C_READ_MMAP mode with libelf, reducing peak memory utilization
  - Allow overriding /sys/kernel/btf/vmlinux via the PAHOLE_VMLINUX_BTF_FILENAME env var
  - Allow setting the list of compile units via PAHOLE_LANG_EXCLUDE env var
  - Serialize access to elfutils dwarf_getlocation().
  - Honour --lang_exclude when merging LTO built CUs.
  - Add the debuginfod client cache directory to the vmlinux search path.
  - Print the CU's language when a tag isn't supported.
  - Initial support for GNU_formal_parameter_pack, GNU_template_parameter_pack, template_value_param and template_type_param DWARF tags.
  - Improve the parameter parsing by checking DW_OP_[GNU_]entry_value
  - Introduce a tests/ directory with regression tests


author: Gregory Bell <grbell@redhat.com> - 1.31-1
changelog:
  - Rework the selection of functions to represent in BTF, for instance:
  - Skip functions that passes values thru the stack when those structs don't
  have expected alignment due to some attribute usage that then causes
  problems with BTF trampolines due to lack of expressiveness in BTF to
  signal such special cases.
  - Skip objects (compile units) without DWARF: don't stop a multi object
  encoding session just because one doesn't have any DWARF in it.
  - Fix BTF dedup by updating libbpf. 
  - Fix the inference of the explicit alignment attribute of zero length arrays,
  like struct skb_ext->data[] in the Linux kernel. Important as BTF has no no
  explicit alignment attribute encoding.
  - Fix the inference of alignments after bitfields, such as in struct
  nft_rule_dp->data[] after ->handle:42, also in the Linux kernel.    
  - Fix segfault with --show_reorg_steps option, e.g. pahole -R -S -C task_struct.
  - Add comparision of functions encoded in BTF between baseline 'master' branch
  and current branch, i.e. 'next'.


author: Jakub Jelinek <jakub@redhat.com> 0.13-6
changelog:
  - DW_FORM_implicit_const handling fixes (sw#27212, sw#27213)
  - temporarily build odr tests with -gdwarf-4 as they are incompatible with
    DWARF 5


author: Hui Wang <huwang@redhat.com> - 1:4.20-4
changelog:
  - Drop unnecessary javax16.api.jar
  - Add dependency on javapackages-tools since the ecj binary requires it to run


author: Felix Kolwa <fkolwa@redhat.com> - 1.35.1-7
changelog:
  - Bump revision number to 7.
  - Pull in changes from Major Hayden:
    - Skip version check test
      Opened upstream bug:
          https://github.com/aws/efs-utils/issues/194
    - Disable automatic version check


author: Mark Wielaard <mjw@redhat.com> - 0.189-3
changelog:
  - Add elfutils-0.189-elf_getdata_rawchunk.patch
  - Add elfutils-0.189-debuginfod_config_cache-double-close.patch


author: Mark Wielaard <mjw@redhat.com> - 0.190-1
changelog:
  - Upgrade to upstream elfutils 0.190
  - Add eu-srcfiles
  - Drop upstreamed patches
    elfutils-0.189-debuginfod_config_cache-double-close.patch
    elfutils-0.189-elf_getdata_rawchunk.patch
    elfutils-0.189-elfcompress.patch
  - Only package debuginfod-client-config.7 manpage for debuginfod-client


author: Aaron Merey <amerey@redhat.com> - 0.191-1
changelog:
  - Upgrade to upstream elfutils 0.191
  - Drop upstreamed patches
    elfutils-0.190-fix-core-noncontig.patch
    elfutils-0.190-gcc-14.patch
    elfutils-0.190-remove-ET_REL-unstrip-test.patch
  - Drop testcore-noncontig.bz2
  - Add elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.191-riscv-flatten.patch
  - Add feature flag for reenabling elfutils-libelf-devel-static and elfutils-devel-static


author: Aaron Merey <amerey@redhat.com> - 0.191-3
changelog:
  - eu-srcfiles directly links to libdebuginfod.so so explicitly
    Require elfutils-debuginfod-client not just Recommends.


author: Aaron Merey <amerey@redhat.com> - 0.192-1
changelog:
  - Upgrade to upstream elfutils 0.192
  - Drop upstreamed patches
    elfutils-0.190-riscv-flatten.patch
    elfutils-0.191-riscv-flatten.patch
    elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.192-libelf-static.patch


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-fix-free.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-stacktrace-lto.patch


author: Aaron Merey <amerey@redhat.com> - 0.195-1
changelog:
  - Upgrade to upstream elfutils 0.195
  - Drop upstreamed patches
    elfutils-0.194-alloc-jobs.patch
  - Add gelf.3 to %files
  - Enable eu-stacktrace on aarch64


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-9
changelog:
  - Fix etags local command injection vulnerability (#2175190)
  - Fix htmlfontify.el command injection vulnerability (#2175179)
  - Fix ruby-mode.el local command injection vulnerability (#2175142)
  - Fix ob-latex.el command injection vulnerability (#2180590)


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-10
changelog:
  - Disable xwidgets (RHEL-14551)
  - org-file-contents: Consider all remote files unsafe (CVE-2024-30205)
  - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203)
  - Add protection for LaTeX preview (CVE-2024-30204)
  - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-18
changelog:
  - Fix nsm-should-check for "google.com" failure (RHEL-94297)
  - Fix package tests for tetris no longer existing as a package (RHEL-94297)
  - Introduce untrusted-content variable (RHEL-94297)


author: Jacek Migacz <jmigacz@redhat.com> - 12.3-1
changelog:
  - Fix build failure on CentOS Stream. Related: rhbz#1951306
  - Revert patch for FSF addresses (it became obsolete with 12.2)
  - Remove Obsoletes and Provides tetex-preview


author: Jeff Law <law@redhat.com> - 1.1.2-7
changelog:
  - Force C++14 as this code is not C++17 ready
  - Fix sprintf format issue
  - Fix ordered comparison of a pointer against zero issue


author: Jeff Law <law@redhat.com> - 1.1.2-7
changelog:
  - Force C++14 as this code is not C++17 ready
  - Fix sprintf format issue
  - Fix ordered comparison of a pointer against zero issue
  -


author: Jack Magne <jmagne@redhat.com> - 1.1.2-14
changelog:
  Resolves: rhbs #2007544,2000928,2000929
  - Bugzilla Bug  2007544 - The esc provides outdated configuration for opensc
  - Bugzilla Bug  2000928 - ESC does not detect smart cards and crashes upon launch [rhel-9.0.0]
  - Bugzilla Bug  2000929 - [RHEL-9][AppStream] esc present in comps but missing from repository [rhel-9.0.0]


author: Jack Magne <jmagne@redhat.com> - 1.1.2-16
changelog:
  Resolves: rhbs #2050849
  - Bug 2050849 - Volkswagen Siemens CardOS M4.4 and 5.0 cards display incorrect status in ESC [RHEL 9.1]


author: Kalev Lember <klember@redhat.com> - 40.1-1
changelog:
  - Update to 40.1
  - Remove various minimum version requires
  - Remove old obsoletes
  - Don't use ldconfig_scriptlets
  - Filter private library provides


author: Felipe Borges <feborges@redhat.com> - 40.1-3
changelog:
  - Split evince-previewer into its own package
  - See https://github.com/fedora-silverblue/issue-tracker/issues/122


author: Marek Kasik <mkasik@redhat.com> - 40.1-5
changelog:
  - Use tmp dir as containing folder for non-native files
  - Backport fixes for issues found by Coverity Scan
  - Fix some other issues found by Coverity Scan
  - Resolves: #1975150


author: Milan Crha <mcrha@redhat.com> - 3.40.4-10
changelog:
  - Related: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add dependency on newly introduced evolution-data-server-ui


author: Milan Crha <mcrha@redhat.com> - 3.40.4-4
changelog:
  - Resolves: #2071056 (Addressbook: Switch from GData Contacts API to CardDAV API for Google books)
  - Resolves: #2071742 (Add patch to use correct colors in mail preview with webkit2gtk3 2.36.x)


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: #2129703 (EShellWindow: The 'New' menu is not filled after start)
  - Correct Requires for the 'devel' subpackage to enchant-2


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add requirement on ui subpackage into ui-devel subpackage


author: Milan Crha <mcrha@redhat.com> - 3.40.4-2
changelog:
  - Resolves: RHEL-19371 (Backport upstream patch to workaround broken text/calendar mail attachments by the server)


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-7
changelog:
  - CVE-2021-3482: Fix heap-based buffer overflow in Jp2Image::readMetadata()
    CVE-2021-29458 exiv2: out-of-bounds read in Exiv2::Internal::CrwMap::encode
    CVE-2021-29457 exiv2: heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata
    CVE-2021-29470 exiv2: out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    CVE-2021-29473 exiv2: out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1956174


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-8
changelog:
  - CVE-2021-29623 exiv2: a read of uninitialized memory may lead to information leak
    Resolves: bz#1964183

  - CVE-2021-32617 exiv2: DoS due to quadratic complexity in ProcessUTF8Portion
    Resolves: bz#1964189


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-4
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993247

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993284


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018421

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003670


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-6
changelog:
  - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
  - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
  - CVE-2022-22825 Integer overflow in lookup in xmlparse.c
  - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
  - CVE-2022-22823 Integer overflow in build_model in xmlparse.c
  - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
  - Resolves: CVE-2022-22827
  - Resolves: CVE-2022-22826
  - Resolves: CVE-2022-22825
  - Resolves: CVE-2022-22824
  - Resolves: CVE-2022-22823
  - Resolves: CVE-2022-22822


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-8
changelog:
  - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
  - Resolves: CVE-2021-45960


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-10
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Tomas Korbar <tkorbar@redhat.com> - 2.4.7-1
changelog:
  - Rebase to version 2.4.7
  - Resolves: rhbz#2067201
  - Resolves: CVE-2022-25313
  - Resolves: CVE-2022-25314
  - Resolves: CVE-2022-25236


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-2
changelog:
  - Fix parsing of large tokens
  - Reject direct parameter entity recursion
  - Resolves: RHEL-29699
  - Resolves: RHEL-29696


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-3
changelog:
  - Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
  - Resolves: RHEL-56761
  - Resolves: RHEL-57520
  - Resolves: RHEL-57511


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4-1
changelog:
  - fapolicyd-1.4 and fapolicyd-selinux-1.0
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-1
changelog:
  - fapolicyd-1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd-selinux/releases/tag/v1.1


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-2
changelog:
  - Fix binary path of rpm-loader
  - Map file with MAP_SHARED instead of MAP_PRIVATE
  - Fix segfault when interrupting fapolicyd startup


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.5-2
changelog:
  - fagenrules: Validate new compiled rules
  - Add fapolicyd-cli --check-rules option
  - Bump maximum length of a configuration file line


author: Radovan Sroka <rsroka@redhat.com> - 1.0-3
changelog:
  - backported few cosmetic small patches from upstream master
  - rebase selinux tarbal to v0.3
  - file context pattern for /run/fapolicyd.pid is missing
  Resolves: rhbz#1834674


author: Radovan Sroka <rsroka@redhat.com> - 1.0.1-1
changelog:
  - rebase to 1.0.1
  - introduced uthash dependency
  - SELinux prevents the fapolicyd process from writing to /run/dbus/system_bus_socket
  Resolves: rhbz#1874491
  - SELinux prevents the fapolicyd process from writing to /var/lib/rpm directory
  Resolves: rhbz#1876538


author: Radovan Sroka <rsroka@redhat.com> - 1.0.3-3
changelog:
  RHEL 9 BETA
  - SELinux prevents fapolicyd from watch_mount/watch_with_perm on /dev/shm
  Resolves: rhbz#1932225
  Resolves: rhbz#1977731


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.4-101
changelog:
  RHEL 9.0.0 ERRATUM
  - rebase to 1.0.4
  - added rpm_sha256_only option
  - added trust.d directory
  - allow file names with whitespaces in trust files
  - use full paths in trust files
  Resolves: rhbz#2032408
  - fix libc.so getting identified as application/x-executable
  Resolves: rhbz#2015307
  - fix selinux DSP module definition in spec file
  Resolves: rhbz#2014449


author: Radovan Sroka <rsroka@redhat.com> - 1.1-100
changelog:
  RHEL 9.0.0 ERRATUM
  - rebase to 1.1
  Resolves: rhbz#2032408
  - introduce rules.d
  Resolves: rhbz#2054740
  - remove pretrans scriptlet
  Resolve: rhbz#2051481


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-100
changelog:
  - fence_ibm_powervs: update description of api-type parameter to show
    correct default value
    Resolves: RHEL-114753


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-105
changelog:
  - bundled urllib3: fix CVE-2025-66471
  - bundled urllib3: fix CVE-2026-21441
    Resolves: RHEL-139799, RHEL-140796


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-110
changelog:
  - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
    CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
    Resolves: RHEL-146344


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-111
changelog:
  - bundled cryptography: replace with dependency to fix CVE-2026-26007
  - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
    Resolves: RHEL-148437, RHEL-155677


author: Arslan Ahmad <arahmad@redhat.com> - 4.10.0-116
changelog:
  - fence_openstack: fix list-action to avoid timeout when
    there are 100+ VMs on the hypervisor
    Resolves: RHEL-154985


author: W. Michael Petullo <mike@flyn.org> - 2.5.0-8
changelog:
  - Remove empty lib subpackage
  - Fix make command line (add missing '\')
  - Use -p with install
  - Do not create /etc/festival
  - Do not create /usr/share/info
  - Simplify %files
  - Note BSD license for hts_engine module
  - Split data into noarch package
  - The festival-devel package now provides festival-static
  - Markup additional files as licenses


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #2005307, #1999276


author: Richard W.M. Jones <rjones@redhat.com> 3.23-5
changelog:
  - Disable automatic provides for fio engines (RHBZ#1884954).
  - Apply patch to change SONAME of fio engines (see comment 8 of above bug).


author: Eric Sandeen <sandeen@redhat.com> 3.25-3
changelog:
  - Fix segfault with external IO engines and multiple threads
  - Enable dev-dax, pmemblk, libpmem engines for ppc64le


author: Pavel Reichl <preichl@redhat.com> - 3.35-1
changelog:
  - Rebase to new upstream release
  - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc
  - Add signature check
  - Related: rhbz#2188805


author: Eric Garver <egarver@redhat.com> - 1.3.4-6
changelog:
  - feat(IPv6_rpfilter): support loose rpfilter
  - feat(IPv6_rpfilter): support loose-forward rpfilter
  - feat(IPv6_rpfilter): support strict-forward rpfilter


author: Eric Garver <egarver@redhat.com> - 1.3.4-17
changelog:
  - fix(server): load firewall rules before claiming dbus
  - fix(nftables): ipset: add entries from GLib loop when idle
  - fix(systemd): Requires dbus


author: Richard Hughes <richard@hughsie.com> 1.2-7
changelog:
  - Disable JLink support to remove one extra dep we are not going to support
  - Resolves: rhbz#1948597


author: Debarshi Ray <rishi@fedoraproject.org> - 1.12.4-2
changelog:
  - Don't try to add Fedora's OCI Flatpak repository on RHEL
  - Remove an obsolete Fedora-specific update path
  Resolves: #2051697


author: Kalev Lember <klember@redhat.com> - 1.12.9-2
changelog:
  - Backport upstream patches for CVE-2024-42472
  - Require bubblewrap version that has new --bind-fd option backported for
    addressing CVE-2024-42472


author: Jan Grulich <jgrulich@redhat.com> - 1.12.9-5
changelog:
  - Fix arbitrary code execution via crafted symlinks in sandbox-expose options
    Resolves: RHEL-165644
  - Fix arbitrary file deletion on host via improper cache file path validation
    Resolves: RHEL-170172


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Lukáš Zaoral <lzaoral@redhat.com>- 3.0.4-9
changelog:
  - backport the following fixes from Fedora:
    - fix header conflicts in multilib installs (RHEL-134741)
    - fix rpmlint warnings


author: Adam Jackson <ajax@redhat.com> - 1.3.5-9
changelog:
  - Remove BuildRequires xprop entirely. If present, the configure script will call
    it looking for a property on the root window that Fedora's X server does not
    set, and which would not work anyway since there is no X server running in the
    buildroot, so we can just remove the dependency.


author: Fabio Alessandro Locati <fale@fedoraproject.org> - 5.13.1-2
changelog:
  - Provide the right font configuration
  - Drop ttf format since upstream affirms that otf is to be preferred


author: Akira TAGOH <tagoh@redhat.com> - 2.13.93-3
changelog:
  - Add back fullname property at the scan matching phase for the backward compatibility.
    Resolves: rhbz#1902881


author: Akira TAGOH <tagoh@redhat.com> - 2.13.93-4
changelog:
  - cherry pick some upstream patches
    - Skip leading white space in style.
    - Remove abort from FcCompareSize.
    - Fix memory leaks
    - Check qual and compare for family tests.
  -


author: Akira TAGOH <tagoh@redhat.com> - 2.13.94-2
changelog:
  - Fix the score calculation on matching for multiple values.
  - Enable 11-lcdfilter-default.conf.
    Resolves: rhbz#1965684
  - Rebase to the latest release.
    Resolves: rhbz#2023161


author: Akira TAGOH <tagoh@redhat.com> - 2.13.95-1
changelog:
  - New upstream release.
  - Update deps to font(notosans)
    https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts


author: Akira TAGOH <tagoh@redhat.com> - 2.14.0-1
changelog:
  - New upstream release.
  - Rebase to 2.14 and revert Noto Default change happened in f36.
    Resolves: rhbz#2075393


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Benjamin Berg <bberg@redhat.com> - 1.94.0-3
changelog:
  - Use GFDL abbreviation as GFDLv1.1+ is not listed
  - Install PAM module into /usr
  - Pull in further test fixes


author: José Expósito <jexposit@redhat.com> - 3.2.1-10
changelog:
  - Fix CVE-2024-24258 and CVE-2024-24259
    Resolves: https://issues.redhat.com/browse/RHEL-25176
    Resolves: https://issues.redhat.com/browse/RHEL-25178


author: Pavel Cahyna <pcahyna@redhat.com> - 1.6.14-2
changelog:
  - Apply upstream patch 41d0d70f
    ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
    CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,
    CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-3
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363
    Resolves: RHEL-142348, RHEL-142332


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-6
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081
    Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032
    Resolves: RHEL-149043, RHEL-149066, RHEL-155994


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-8
changelog:
  - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
  - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
    Resolves: RHEL-162960, RHEL-162986


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-9
changelog:
  - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
  - Fix growth of preallocated buffers (CVE-2026-27951)
  - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
  - Add DSP format checks (CVE-2026-31884)
  - Fix DSP array bounds checks (CVE-2026-31883)
  - Fix DSP array bounds checks (CVE-2026-31885)
  - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
    Resolves: RHEL-168466, RHEL-169222, RHEL-161048, RHEL-161483
    Resolves: RHEL-161520, RHEL-161086, RHEL-167804


author: Michel Lind <salimma@centosproject.org> - 2.10.4-10
changelog:
  - Fix for CVE-2025-27363 out-of-bound write vulnerability
  - Patch initially by Marc Deslauriers of Canonical
  - https://www.openwall.com/lists/oss-security/2025/03/14/3
  - Adjusted for EL9 by Jonathan Wright of AlmaLinux
  - and a member of the Meta security team
  - Resolves: RHEL-83109


author: Marek Kasik <mkasik@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Test bitmap size earlier for PNGs
  - Fix memory leak in pngshim.c
  - Enable man pages for demos
  - Resolves: #1887084, #1890211


author: Akira TAGOH <tagoh@redhat.com> - 2.10.4-3
changelog:
  - Enable HarfBuzz support
  - Add bootstrap without HarfBuzz
  - Resolves: #1853937
  - Resolves: #1906714


author: Akira TAGOH <tagoh@redhat.com> - 1.0.10-6.el9.2
changelog:
  - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310
    Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063


author: Akira TAGOH <tagoh@redhat.com> - 1.0.8-2
changelog:
  - Restore the deprecated API that was accidentally removed in the previous release.
    Resolves: rhbz#1787293


author: Michal Ruprich <mruprich@redhat.com> - 8.5.3-2
changelog:
  - Resolves: RHEL-15915 - crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message
  - Resolves: RHEL-15918 - crash from malformed EOR-containing BGP UPDATE message


author: Michal Ruprich <mruprich@redhat.com> - 8.5.3-9
changelog:
  - Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions
  - Resolves: RHEL-87731 - FRR bgp session not recovered due to incorect error no AF activated for peer


author: Michal Ruprich <mruprich@redhat.com> - 0.17-85
changelog:
  - Use make_build macro and remove hard-coded gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Hughes <rhughes@redhat.com> 1.7.9-2
changelog:
  - Include the new dbx updates on the filesystem; clients typically do not have LVFS enabled.
  - Resolves: rhbz#2120708


author: Richard Hughes <richard@hughsie.com> 1.8.10-1
changelog:
  - Rebase to latest upstream release to fix multiple ESP detection problems
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.8.10-2
changelog:
  - Rebuild because distrobaker did entirely the wrong thing.
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.9.26-1
changelog:
  - Rebase to get hardware support for CERTPX-13842
  - Resolves: #RHEL-16637
  - Resolves: #RHEL-35373
  - Resolves: #RHEL-61930


author: Michal Schorm <mschorm@redhat.com> - 26.4.8-2
changelog:
  - Switch from SCONS build tooling to CMAKE build tooling
  - Use upstream variants of Systemd service file and Systemd service file wrapper srcipt


author: Lukas Javorsky <ljavorsk@redhat.com> - 26.4.9-2
changelog:
  - Explicitly require the 'procps-ng' package
  - Otherwise it will not require it in the lightweight systems (e.g. containers)
  - and Galera won't work properly


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-12-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Nick Clifton <nickc@redhat.com> - 10.69-1
changelog:
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries if compiled using LTO.  (#2082146)


author: Nick Clifton <nickc@redhat.com> - 10.73-2
changelog:
  - Annocheck: Fix handling of command line options that take arguments.  (#2086850)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries.  (#2078909)


author: Nick Clifton <nickc@redhat.com> - 10.75-1
changelog:
  - Annocheck: Fix covscan detected race condition between stat() and open().
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)


author: Nick Clifton <nickc@redhat.com> - 10.76-1
changelog:
  - Spec file: Correct the Provides for the annobin-doc subpackage.  (#2097065)
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.
  - Annocheck: Fix covscan detected race condition between stat() and open().


author: Nick Clifton <nickc@redhat.com> - 11.08-4
changelog:
  - Fix building with Clang-16.  (#2216918)
  - Re-enable building with LTO.  (#2166579)
  - Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
  - Spec file: Enable annotated building.
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158386)
  - Annocheck: Add more special glibc filenames.  (#2158100)
  - Annocheck: Improve handling of tool versions.
  - GCC Plugin: Fix building with gcc-13.
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)
  - Annocheck: Use real filename rather than debuginfo filename.  (#2152280)
  - Rename gcc plugin to gts-annobin.  (#2111977)
  - Rebase to 10.94, brining in support for LLVM 15.  (#2118992)
  - Annocheck: Better detection of binaries which do not contain code.  (#2144533)
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.
  - Annocheck: Try harder not to run mutually exclusive tests.
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.
  - Libannocheck: Actually set result fields after tests are run.
  - Libannocheck: Replace libannocheck_version variable with LIBANNOCHECK_VERSION define.
  - Libannocheck: Remove 'Requires binutils-devel' from libannocheck.pc.
  - Libannocheck: Move into separate sub-package.
  - Libannocheck: Add libannocheck.pc pkgconfig file.
  - Libannocheck: Add libannocheck_reinit().
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Clang Plugin: Fix for building with Clang-15.  (#2125875)
  - Annocheck: Add a test for the inconsistent use of -Ofast.  (#1248744)
  - Plugin: Fix top level configuration support for RiscV.
  - Annocheck: Improvements to the size tool.
  - Annocheck: Fixes for libannocheck.h.
  - Annocheck: Add automatic profile selection.
  - Annocheck: Improve gap detection and reporting.
  - Spec File: Use the %dir directive in the %files section to ensure that
  -  plugin directories are useable.  (#2080454)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17
changelog:
  - NVR Bump: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216446)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17.1
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2220917)


author: Nick Clifton <nickc@redhat.comn> - 2.38-18
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216456)


author: Marek Polacek <polacek@redhat.com> 12.1.1-3
changelog:
  - update from releases/gcc-12 branch
    - PRs c++/49387, c++/102307, c++/102651, c++/104470, c++/105491, c++/105589,
  	c++/105623, c++/105652, c++/105655, c++/105725, c++/105734,
  	c++/105756, c++/105761, c++/105779, c++/105795, c++/105852,
  	c++/105871, c++/105885, c++/105908, c++/105925, c++/105931,
  	c++/105964, c++/106001, c/105635, d/105544, fortran/105230,
  	gcov-profile/105535, ipa/100413, ipa/105600, ipa/105639, ipa/105739,
  	libgomp/105745, libgomp/106045, libstdc++/104731, libstdc++/105284,
  	libstdc++/105671, libstdc++/105681, middle-end/105537,
  	middle-end/105604, middle-end/105711, middle-end/105951,
  	middle-end/105998, middle-end/106030, other/105527,
  	preprocessor/105732, rtl-optimization/105455, rtl-optimization/105559,
  	rtl-optimization/105577, sanitizer/105714, sanitizer/105729,
  	target/101891, target/104871, target/105162, target/105209,
  	target/105292, target/105472, target/105556, target/105599,
  	target/105854, target/105879, target/105953, target/105960,
  	target/105970, target/105981, target/106096, tree-optimization/103116,
  	tree-optimization/105431, tree-optimization/105458,
  	tree-optimization/105528, tree-optimization/105562,
  	tree-optimization/105618, tree-optimization/105726,
  	tree-optimization/105736, tree-optimization/105786,
  	tree-optimization/105940
  - enable tsan and lsan on s390x (#2101610)
  - fix up libtsan on s390x
  - fix nvptx build (PRs bootstrap/105551, target/105938)


author: Marek Polacek <polacek@redhat.com> 12.2.1-4
changelog:
  - update from releases/gcc-12 branch (#2110583)
  - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST
    (PR libstdc++/107468)


author: Marek Polacek <polacek@redhat.com> 12.2.1-7.5
changelog:
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832)


author: Kevin Buettner - 11.2-2
changelog:
  - On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. 
    (This is a workaround for the bogus warning/error that we now see
    on i686 regarding a "may write a terminating nul past the end of
    the destination" message for the sprintf() call in
    global_symbol_searcher::search() in gdb/symtab.c.)


author: Kevin Buettner - 11.2-3
changelog:
  - Backport upstream patch which removes sizes from debuginfod download
    messages when the size is not available (RHBZ 2068280, Aaron Merey).


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-13-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Nick Clifton <nickc@redhat.com> - 12.14-1
changelog:
  - Annocheck: Do not ignore separate debuginfo files that do not contain any DWARF.  (#2144553)
  - Annocheck: Ignore /dev/null filename in string notes.
  - Annocheck: More tweaks to glibc detection heuristics.  (#2215968)


author: Nick Clifton <nickc@redhat.com> - 12.16-1
changelog:
  - Spec File: Rebuild with annobin annotation.  (#2217814)
  - Annocheck: Ignore weak/undef function symbols when checking to see if a binary contains code.  (#2217840)
  - Annocheck: Add --suppress-version-warnings option.


author: Nick Clifton <nickc@redhat.com> - 12.20-1
changelog:
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.


author: Nick Clifton <nickc@redhat.com> - 12.32-1
changelog:
  - LLVM Plugin: Fix building with LLVM version 17.  (RHEL-17311)
  - GCC Plugin: Add support for -fhardended.
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
  - Fix another atexit test failure.  (#2247481)
  - Fix atexit test failure.
  - Notes: Add support for string format notes.
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
  - GCC Plugin: Enable string note format by default.
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
  - Annocheck: Add test for FIPS compliant GO binaries.
  - Annocheck: Fix double free.  (#2226749)


author: Nick Clifton <nickc@redhat.com> - 12.32-2
changelog:
  - GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505)


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Rebase to 12.65.  (RHEL-51018)
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53574)


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Rebase to bring in improvements for locating string notes.  (RHEL-79807)
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.
  - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string.  (RHEL-77328)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Nick Clifton <nickc@redhat.com> - 2.40-1
changelog:
  - Rebase to 2.40.
  - Retire: binutils-package-metadata.patch
  - Retire: binutils-gas-dwarf-skip-empty-functions.patch
  - Retire: binutils-CVE-38128-dwarf-abbrev-parsing.patch
  - Retire: binutils-readelf-no-sections.patch
  - Retire: binutils-libiberty-configure-compile-warnings.patch
  - Retire: binutils-CVE-2022-4285.patch


author: Nick Clifton <nickc@redhat.com> - 2.40-2
changelog:
  - Spec file: Remove duplicate gprofng debug file entries.
  - Spec file: Fix testsuite failures for RiscV64.


author: Nick Clifton <nickc@redhat.com> - 2.40-7
changelog:
  - Spec File: Fix typo.  (#2186396)
  - BFD library: Fix illegal memory access when loading corrupt symbol version info.  (#2186579)


author: Nick Clifton <nickc@redhat.com> - 2.40-12
changelog:
  - Spec File: Enable building with GTS-13 gcc.  (#2217819)
  - Spec File: Sync version number with c8s.


author: Nick Clifton <nickc@redhat.com> - 2.40-17
changelog:
  - Spec File: Do not use of the system zlib by default.  (RHEL-19373)
  - Spec File: Do not check the mtime of ld.bfd. (RHEL-21303)


author: Nick Clifton <nickc@redhat.com> - 2.40-19
changelog:
  - Spec File: Restore the SElinux context to %{_libdir}.  (RHEL-22818)
  - [2.40-18: was a failed attempt to fix RHEL-22818]


author: Marek Polacek <polacek@redhat.com> 13.1.1-4
changelog:
  - update from releases/gcc-13 branch (#2188499)
    - PRs bootstrap/110085, c++/109871, fortran/100607, libgcc/109670,
  	libgcc/109685, libstdc++/108178, libstdc++/109261, libstdc++/109758,
  	libstdc++/109822, libstdc++/109949, libstdc++/110139,
  	middle-end/110200, target/82931, target/92729, target/104327,
  	target/105753, target/106907, target/109547, target/109650,
  	target/109800, target/109939, target/109954, target/110036,
  	target/110044, target/110088, target/110108, target/110227,
  	tree-optimization/109505, tree-optimization/110165,
  	tree-optimization/110166


author: Marek Polacek <polacek@redhat.com> 13.2.1-4
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/110488, ada/111434, c++/99631, c++/111471, c++/111485, c++/111493,
  	c++/111512, fortran/68155, fortran/92586, fortran/111674,
  	libstdc++/108046, libstdc++/111050, libstdc++/111102,
  	libstdc++/111511, middle-end/111699, modula2/111510, target/111121,
  	target/111411, tree-optimization/110315, tree-optimization/110386,
  	tree-optimization/111331, tree-optimization/111519


author: Marek Polacek <polacek@redhat.com> 13.2.1-5
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245,
  	fortran/111837, fortran/112316, libbacktrace/111315,
  	libbacktrace/112263, libstdc++/110944, libstdc++/111172,
  	libstdc++/111936, libstdc++/112089, libstdc++/112314,
  	middle-end/111253, middle-end/111818, modula2/111756, modula2/112110,
  	target/101177, target/110170, target/111001, target/111366,
  	target/111367, target/111380, target/111935, target/112443,
  	tree-optimization/111397, tree-optimization/111445,
  	tree-optimization/111489, tree-optimization/111583,
  	tree-optimization/111614, tree-optimization/111622,
  	tree-optimization/111694, tree-optimization/111764,
  	tree-optimization/111820, tree-optimization/111833,
  	tree-optimization/111917
    - fix aarch64 RA ICE (#2241139, PR target/111528)
  - fix ia32 doubleword rotates (#2238781, PR target/110792)


author: Marek Polacek <polacek@redhat.com> 13.2.1-6
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633,
  	c/112339, fortran/111880, fortran/112764, libgomp/111413,
  	libstdc++/112348, libstdc++/112491, libstdc++/112607,
  	middle-end/111497, target/53372, target/110411, target/111408,
  	target/111815, target/111828, target/112672, tree-optimization/111137,
  	tree-optimization/111465, tree-optimization/111967,
  	tree-optimization/112496
  - add -fno-stack-protector to aarch64 tests (RHEL-17684)


author: Marek Polacek <polacek@redhat.com> 13.3.1-1
changelog:
  - update from releases/gcc-13 branch
    - GCC 13.3 release
    - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577,
  	analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882,
  	analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969,
  	analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473,
  	bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224,
  	c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769,
  	c++/113141, c++/113966, c++/114303, c++/114377, c++/114537,
  	c++/114561, c++/114562, c++/114572, c++/114580, c++/114634,
  	c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337,
  	fortran/50410, fortran/55978, fortran/89462, fortran/93678,
  	fortran/95374, fortran/101135, fortran/102003, fortran/103707,
  	fortran/103715, fortran/103716, fortran/104352, fortran/106987,
  	fortran/106999, fortran/107426, fortran/110987, fortran/112407,
  	fortran/113799, fortran/113866, fortran/113885, fortran/113956,
  	fortran/114001, fortran/114474, fortran/114535, fortran/114739,
  	fortran/114825, fortran/115039, gcov-profile/114115,
  	gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616,
  	ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731,
  	libquadmath/114533, libstdc++/66146, libstdc++/93672,
  	libstdc++/104606, libstdc++/107800, libstdc++/108976,
  	libstdc++/110050, libstdc++/110054, libstdc++/113841,
  	libstdc++/114147, libstdc++/114316, libstdc++/114359,
  	libstdc++/114367, libstdc++/114401, libstdc++/114750,
  	libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655,
  	middle-end/110027, middle-end/111151, middle-end/111632,
  	middle-end/111683, middle-end/112684, middle-end/112732,
  	middle-end/113396, middle-end/113622, middle-end/114070,
  	middle-end/114348, middle-end/114552, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/114907,
  	rtl-optimization/54052, rtl-optimization/114415,
  	rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696,
  	sanitizer/114687, sanitizer/114743, sanitizer/114956,
  	sanitizer/115172, target/88309, target/101865, target/105522,
  	target/110621, target/111234, target/111600, target/111610,
  	target/111822, target/112397, target/113095, target/113233,
  	target/113950, target/114049, target/114130, target/114160,
  	target/114172, target/114175, target/114272, target/114747,
  	target/114752, target/114794, target/114837, target/114848,
  	target/114981, testsuite/111066, testsuite/112297, testsuite/114034,
  	testsuite/114036, testsuite/114662, tree-optimization/91838,
  	tree-optimization/109925, tree-optimization/110838,
  	tree-optimization/111009, tree-optimization/111268,
  	tree-optimization/111407, tree-optimization/111736,
  	tree-optimization/111882, tree-optimization/112281,
  	tree-optimization/112303, tree-optimization/112793,
  	tree-optimization/112961, tree-optimization/112991,
  	tree-optimization/113552, tree-optimization/113630,
  	tree-optimization/113670, tree-optimization/113831,
  	tree-optimization/113910, tree-optimization/114027,
  	tree-optimization/114115, tree-optimization/114121,
  	tree-optimization/114203, tree-optimization/114231,
  	tree-optimization/114246, tree-optimization/114375,
  	tree-optimization/114396, tree-optimization/114485,
  	tree-optimization/114566, tree-optimization/114672,
  	tree-optimization/114733, tree-optimization/114736,
  	tree-optimization/114749, tree-optimization/114787,
  	tree-optimization/114799, tree-optimization/114876,
  	tree-optimization/114965, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154
  - add --without-clang-plugin --without-llvm-plugin to annobin configure
    options


author: Marek Polacek <polacek@redhat.com> 13.3.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598,
  	fortran/110415, fortran/114827, fortran/115150, libstdc++/114940,
  	libstdc++/115269, middle-end/108789, rtl-optimization/114902,
  	rtl-optimization/115092, target/113281, target/113719, target/115297,
  	target/115317, target/115324, tree-optimization/115192,
  	tree-optimization/115307, tree-optimization/115337
  - fix a shell condition (RHEL-40722)
  - backport a fix for modes_1.f90 (RHEL-40234)
  - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244)


author: Kevin Buettner <kevinb@redhat.com> - 12.1-13
changelog:
  - Backport fix for problems associated with GCC 13's self-move warning.
    (Jan-Benedict Glaw)
  - Tweak gdb-6.6-buildid-locate-rpm.patch so that running GDB's configure
    script will not error out due to GCC 13's warnings.


author: Keith Seitz <keiths@redhat.com> - 12.1-14
changelog:
  From Sergey Mende:
  - Backport upstream patch "gdb: call check_typedef at beginning of
    dwarf_expr_context::fetch_result". (Simon Marchi)


author: Kevin Buettner <kevinb@redhat.com> - 12.1-16
changelog:
  - Tweak gdb-6.3-rh-testversion-20041202.patch so that $_gdb_major
    and $_gdb_minor will be obtained correctly.


author: Keith Seitz <keiths@redhat.com> - 12.1-2.el9
changelog:
  - Backport binutls/29699 "Fix an illegal memory access when parsing..."
    (Nick Clifton, RHBZ 2153228)


author: Guinevere Larsen <blarsen@redhat.com> - 12.1-4.el9
changelog:
  - Backport "Fix typo in recent code to add stack recursion limit to the Rust demangler."
    (Nick Clifton)
  - Backport "Add a recursion limit to the demangle_const function in the Rust demangler."
    (Nick Clifton, RHEL-4234)


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-14-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Rebase to 12.65.  (RHEL-51056)
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)


author: Nick Clifton <nickc@redhat.com> - 12.67-1
changelog:
  - Annocheck: Stop spurious assembler warnings.  (RHEL-53213)
  - Annocheck: Stop warnings about known gaps.    (RHEL-53218)
  - Annocheck: Fix stack realign test.  (#2302427)


author: Nick Clifton <nickc@redhat.com> - 12.67-2
changelog:
  - Spec File: Use correct directory for plugin installation.  (RHEL-53209)
  - Spec File: Disable plugin when running on wrong major version of the compiler.


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53209)


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Rebase for GTS 14.1 release.  (RHEL-76932)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Marek Polacek <polacek@redhat.com> 14.2.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.2 release
    - PRs analyzer/114899, c++/99241, c++/99242, c++/104981, c++/106760,
  	c++/111890, c++/115165, c++/115476, c++/115550, c++/115561,
  	c++/115583, c++/115623, c++/115754, c++/115783, c++/115865,
  	c++/115897, c++/115900, c++/115986, fortran/59104, fortran/84006,
  	fortran/93635, fortran/98534, fortran/99798, fortran/100027,
  	fortran/103115, fortran/103312, fortran/113363, fortran/115700,
  	ipa/111613, ipa/113291, ipa/113787, ipa/114207, ipa/115033,
  	ipa/115277, ipa/116055, libstdc++/113376, libstdc++/114387,
  	libstdc++/115399, libstdc++/115482, libstdc++/115522,
  	libstdc++/115585, libstdc++/115807, libstdc++/115854,
  	libstdc++/116070, middle-end/115527, middle-end/115836,
  	middle-end/115887, pch/115312, rtl-optimization/115049,
  	rtl-optimization/115565, target/87376, target/88236, target/97367,
  	target/98762, target/105090, target/113715, target/114759,
  	target/114890, target/114936, target/114988, target/115068,
  	target/115153, target/115188, target/115351, target/115389,
  	target/115456, target/115457, target/115459, target/115475,
  	target/115526, target/115554, target/115562, target/115591,
  	target/115611, target/115691, target/115725, target/115726,
  	target/115752, target/115763, target/115840, target/115872,
  	target/115978, target/115981, target/115988, target/116035,
  	testsuite/115826, testsuite/116061, tree-optimization/113673,
  	tree-optimization/115382, tree-optimization/115646,
  	tree-optimization/115669, tree-optimization/115694,
  	tree-optimization/115701, tree-optimization/115723,
  	tree-optimization/115841, tree-optimization/115843,
  	tree-optimization/115867, tree-optimization/115868,
  	tree-optimization/116034, tree-optimization/116057


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-74061)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-70192)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-74059)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)
  - have gfortran require install-info (RHEL-62417)


author: Marek Polacek <polacek@redhat.com> 13.3.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598,
  	fortran/110415, fortran/114827, fortran/115150, libstdc++/114940,
  	libstdc++/115269, middle-end/108789, rtl-optimization/114902,
  	rtl-optimization/115092, target/113281, target/113719, target/115297,
  	target/115317, target/115324, tree-optimization/115192,
  	tree-optimization/115307, tree-optimization/115337
  - fix a shell condition (RHEL-40722)
  - backport a fix for modes_1.f90 (RHEL-40234)
  - fix up pointer types to may_alias structures (PR c/114493, RHEL-39736)


author: Marek Polacek <polacek@redhat.com> 15.1.1-1
changelog:
  - update from releases/gcc-15 branch
    - GCC 15.1 release
    - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407


author: Marek Polacek <polacek@redhat.com> 15.1.1-2
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
     c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
     c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
     fortran/102900, fortran/119928, fortran/119986, fortran/120049,
     fortran/120107, fortran/120139, fortran/120163, fortran/120179,
     fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
     libfortran/120152, libfortran/120153, libfortran/120158,
     libfortran/120196, libstdc++/118260, libstdc++/119427,
     libstdc++/119714, libstdc++/120029, libstdc++/120114,
     libstdc++/120159, libstdc++/120187, libstdc++/120190,
     libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
     modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
     preprocessor/120061, target/119610, testsuite/119909,
     tree-optimization/111873, tree-optimization/119712,
     tree-optimization/120043, tree-optimization/120048,
     tree-optimization/120074, tree-optimization/120089,
     tree-optimization/120143, tree-optimization/120211


author: Siddhesh Poyarekar <siddhesh@redhat.com> 15.2.1-7
changelog:
  - update from releases/gcc-15 branch (RHEL-116513)
    - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
  	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
  	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
  	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
  	c++/122070, c++/122550, c++/122668, c++/122752, c++/122772,
  	c++/122834, c++/122922, c++/123331, c++/123597, debug/121964,
  	diagnostics/120063, fortran/107406, libfortran/122936,
  	libstdc++/120446, libstdc++/122812, libstdc++/122907,
  	libstdc++/123147, middle-end/111817, middle-end/123107,
  	middle-end/123392, middle-end/123703, rtl-optimization/121773,
  	rtl-optimization/122215, rtl-optimization/123121,
  	rtl-optimization/123523, target/117575, target/119130,
  	target/120250, target/121192, target/121485, target/123022,
  	target/123092, target/123155, target/123217, target/123460,
  	target/123484, target/123489, target/123521, target/123607,
  	target/123742, testsuite/123353, tree-optimization/122793,
  	tree-optimization/122868, tree-optimization/123040,
  	tree-optimization/123300, tree-optimization/123351,
  	tree-optimization/123372, tree-optimization/123431,
  	tree-optimization/123513, tree-optimization/123602,
  	tree-optimization/123736, tree-optimization/123741


author: Marek Polacek <polacek@redhat.com> 16.1.1-4
changelog:
  - update from releases/gcc-16 branch
    - PRs ada/18205, ada/125695, c/124303, c/124532, c/124985, c/125252,
  	c++/65271, c++/113563, c++/115314, c++/117259, c++/121094, c++/123536,
  	c++/124584, c++/124978, c++/125007, c++/125123, c++/125135,
  	c++/125284, c++/125333, c++/125334, c++/125376, c++/125378,
  	c++/125384, c++/125408, c++/125412, c++/125423, c++/125454,
  	c++/125490, c++/125498, c++/125745, c++/125759, c++/125764,
  	c++/125768, c++/125770, c++/125889, c++/125900, c++/125939,
  	fortran/60576, fortran/105582, fortran/106546, fortran/115260,
  	fortran/125021, fortran/125051, fortran/125391, fortran/125393,
  	fortran/125416, fortran/125430, fortran/125481, fortran/125527,
  	fortran/125528, fortran/125529, fortran/125530, fortran/125531,
  	fortran/125534, fortran/125535, fortran/125606, fortran/125650,
  	fortran/125669, fortran/125902, fortran/126018, ipa/125699,
  	libstdc++/71301, libstdc++/78302, libstdc++/118158, libstdc++/125228,
  	libstdc++/125312, libstdc++/125369, libstdc++/125374,
  	libstdc++/125450, libstdc++/125890, libstdc++/125956,
  	middle-end/125156, middle-end/125621, middle-end/125977, other/125348,
  	rtl-optimization/125173, rtl-optimization/125375, target/106895,
  	target/120144, target/120870, target/122665, target/122827,
  	target/124870, target/124895, target/124908, target/125148,
  	target/125215, target/125320, target/125351, target/125355,
  	target/125362, target/125373, target/125409, target/125448,
  	target/125469, target/125478, target/125611, target/125628,
  	target/125670, target/125751, target/125752, target/125795,
  	target/125818, target/125838, target/125883, target/125949,
  	target/125972, target/125992, tree-optimization/124151,
  	tree-optimization/125250, tree-optimization/125291,
  	tree-optimization/125419, tree-optimization/125431,
  	tree-optimization/125477, tree-optimization/125501,
  	tree-optimization/125502, tree-optimization/125545,
  	tree-optimization/125553, tree-optimization/125646,
  	tree-optimization/125652, tree-optimization/125686,
  	tree-optimization/125774, tree-optimization/125776
  - don't remove openacc tests for s390x and ppc64le (RHEL-183931)


author: Filip Januš <fjanus@redhat.com> - 2.2.5-12
changelog:
  - Add patch(gd-2.2.5-null-pointer.patch) - fix Null pointer reference in gdImageClone (gdImagePtr src)
  - Resolves: #1599032


author: Filip Januš <fjanus@redhat.com> - 2.3.1-1
changelog:
  - Upstream released new version 2.3.1
  - patch bug615 is no more needed - fixed by upstream in release
  - gdimagestring16/gdimagestring16 gdimagestringup16/gdimagestringup16 passed on
    x390s - XFAIL_TEST definition for x390s is no more necessary


author: Filip Januš <fjanus@redhat.com> - 2.3.2-1
changelog:
  - Add condition if fedora for packages not available in RHEL
  - enable avif support
  - use bcond
  - rebase to version 2.3.2


author: Guinevere Larsen <blarsen@redhat.com>
changelog:
  - Remove gdb-6.5-BEA-testsuite.patch, as it was upstreamed and
    will make its way back with the next rebase.


author: Kevin Buettner <kevinb@redhat.com> - 14.1-8
changelog:
  - Backport upstream workaround for GCC 14 problem which is causing
    GDB internal errors (RHBZ 261580, Tom de Vries).


author: Keith Seitz <keiths@redhat.com>
changelog:
  - Backport "gdb: s390: Add arch14 record/replay support"
    (Andreas Arnez, RHEL-36225)
  - Backport "Add support for Power11 options"
    (Peter Bergner, RHEL-36518)
  - Backport "Sync x86 disassembler with (proposed) gdb-15.1 release."
    (many authors, RHEL-36527)


author: Guinevere Larsen <blarsen@redhat.com>
changelog:
  - Backport series Infcalls from B/P conditions in multi-threaded inferiors
    (Andrew Burgess, RHEL-13298)


author: Guinevere Larsen <blarsen@redhat.com> - 14.2-1.el9
changelog:
  - Rebase to gdb-14.2 and update all bug references
    (Resolves: RHEL-39554)
    (Resolves: RHEL-39553)
    (Resolves: RHEL-10550)
    (Resolves: RHEL-39555)
    (Resolves: RHEL-39585)
    (Resolves: RHEL-36211)


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Remove gdb-rhbz1261564-aarch64-hw-watchpoint-test.patch.  This test
    should be covered by gdb.base/watchpoint-unaligned.exp which was
    added upstream in commit a3b60e4588606354b93508a0008a5.


author: Guinevere Larsen <guinevere@redhat.com>
changelog:
  - remove gdb-test-bt-cfi-without-die.patch.  This test has been
    accepted upstream and will make its way back to testing with
    the GDB 17 release.


author: Alexandra Hájková <ahajkova@redhat.com> - 16.2-1
changelog:
  - Rebase to FSF GDB 16.2.
    Dropped:  gdb-backport-buildid-related-changes.patch
              gdb-catchpoint-re-set.patch
              gdb-remove-qnx-neutrino-support.patch
    Modified: gdb-add-rpm-suggestion-script.patch


author: Tomas Popela <tpopela@redhat.com> - 2.42.6-3
changelog:
  - Backport fixes for CVE-2021-46829 and CVE-2021-44648
  - Resolves: rhbz#2115213
  - Resolves: rhbz#2044346


author: Joan Torres <joantolo@redhat.com> - 40.1-31
changelog:
  - Fix legacy-xorg session switching
    The fix that intended to fix the issue wasn't complete and also,
    introduced a bug on user switching for non legacy-xorg servers.
    This fix addresses both issues.
  - Avoid waiting 10s when starting GDM in legacy-xorg mode
    Resolves: RHEL-72694


author: Joan Torres <joantolo@redhat.com> - 40.1-32
changelog:
  - Leave session-opened signature the same as before and use a new
    session-opened-with-session-id signal to keep ABI compatibility
    Related: RHEL-46383


author: Joan Torres <joantolo@redhat.com> - 40.1-35
changelog:
  - Instead of allowing adding custom parameters to Xorg,
    only allow adding -nocursor. Allowing adding custom parameters
    is a potential security issue.
    Related: RHEL-81194


author: Joan Torres Lopez <joantolo@redhat.com> - 40.1-43
changelog:
  - Backport passwordless feature to RHEL 9
    Resolves: https://redhat.atlassian.net/browse/RHEL-139178


author: Joan Torres Lopez <joantolo@redhat.com> - 40.1-44
changelog:
  - Add pam-extension helpers in pam-extensions-devel
    Related: https://redhat.atlassian.net/browse/RHEL-139178


author: Joan Torres Lopez <joantolo@redhat.com> - 40.1-45
changelog:
  - Update how GDM handles Registering session/display
    to properly terminate plymouth
    Resolves: https://redhat.atlassian.net/browse/RHEL-178686


author: Joan Torres Lopez <joantolo@redhat.com> - 40.1-46
changelog:
  - Fix last change when setting xsession program
    Related: https://redhat.atlassian.net/browse/RHEL-178686


author: Joan Torres Lopez <joantolo@redhat.com> - 40.1-47
changelog:
  - Create display in "legacy-xorg" mode checking displays in tty
    Resolves: https://redhat.atlassian.net/browse/RHEL-180822


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-16
changelog:
  - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-17
changelog:
  - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
  - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction
  - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-18
changelog:
  - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable()
  - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Josef Ridky <jridky@redhat.com> - 2:3.0.4-2
changelog:
  - fix CVE-2025-10920
  - fix CVE-2025-10921
  - fix CVE-2025-10922
  - fix CVE-2025-10923
  - fix CVE-2025-10924
  - fix CVE-2025-10925
  - fix CVE-2025-10934


author: Josef Ridky <jridky@redhat.com> - 2:3.0.4-6
changelog:
  - fix CVE-2026-4150
  - fix CVE-2026-4151
  - fix CVE-2026-4152
  - fix CVE-2026-4153
  - fix CVE-2026-4154
  - fix CVE-2026-4887


author: Ondřej Pohořelský <opohorel@redhat.com> - 3.7.1-5
changelog:
  - Rebuild with new Golang
  - Resolves: RHEL-156656, RHEL-166700, RHEL-167695, RHEL-167389, RHEL-166345, RHEL-177321


author: Tomas Pelka <tpelka@redhat.com> - 1.68.6-5
changelog:
  - Disable meson test suite at build time (enable_tests=0); covered by QE gating
    Resolves: RHEL-183553


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-8
changelog:
  - Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-9
changelog:
  - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-11
changelog:
  - Really fix authentication failures when sd-bus clients connect to GDBus servers
  - Resolves: #2217771


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-17
changelog:
  - Add patches for CVE-2024-52533 and CVE-2025-4373
  - Update GDateTime test for new tzdata
  - Resolves: RHEL-94483
  - Resolves: RHEL-102844


author: Frédéric Bérat <fberat@redhat.com> - 2.34-265
changelog:
  - Fix null pointer dereference and assertion failures in __nss_database_get
    (bug 28940) (RHEL-150269)


author: Tamar Shacked <tshacked@redhat.com> - 6.0-56.3
changelog:
  - Rebase with latest RHGS-3.5.4
  - Fix changlog chronological order by removing unneeded changelogs
  - fixes bug bz#1939340


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-13
changelog:
  - Fix: previous commit removed one function from the library and thus broke the ABI
  - function gmpn_preinv_divrem_1 should now not be removed
  Related: rhbz#2044216


author: Kalev Lember <klember@redhat.com> - 40~rc-1
changelog:
  - Update to 40.rc
  - Make -extras subpackage require the main package
  - Drop move-adwaita-backgrounds.patch
  - Remove old obsoletes


author: Bastien Nocera <bnocera@redhat.com> - 3.34.3-4
changelog:
  + gnome-bluetooth-3.34.3-4
  - Revert “Require PulseAudio _or_ Pipewire for Bluetooth audio”
  - Closes: #1928166


author: Kalev Lember <klember@redhat.com> - 40.0-1
changelog:
  - Update to 40.0
  - Require hicolor-icon-theme for icon directories rather than adwaita
  - Use https source URL
  - Validate appdata file
  - Filter private libraries
  - Don't install various development files


author: Felipe Borges <feborges@redhat.com> - 40.0-38
changelog:
  - Scale up monitors drawing in display arrangment settings when multiple monitors
    Related: RHEL-4196


author: Ray Strode <rstrode@redhat.com> - 40.0-6
changelog:
  - Copy and run the script from XDG_RUNTIME_DIR
    Resolves: https://issues.redhat.com/browse/RHEL-25536


author: Olivier Fourdan <ofourdan@redhat.com> - 40.0-8
changelog:
  - Add Xwayland and dbus-daemon as weak dependencies
    Resolves: https://issues.redhat.com/browse/RHEL-66572


author: Milan Crha <mcrha@redhat.com> - 3.40.0-4
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)


author: Milan Crha <mcrha@redhat.com> - 3.40.0-5
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)
  - backport upstream fix to use external browser for OAuth2


author: Joan Torres <joantolo@redhat.com> - 40.1.1-11
changelog:
  - Add race fixes needed when terminating a conflicting session
    on GDM greeter.
    Resolves: RHEL-92341


author: Felipe Borges <feborges@redhat.com> - 40.0.1-10
changelog:
  - Default power-button-action to poweroff on servers
    (except when power-button-action=nothing)
    Resolves: #1885639


author: Ray Strode <rstrode@redhat.com> - 40.0.1-13
changelog:
  - Revert hard dependency on subscription-manager since we're going to put it in gnome-session instead
    Related: #2175675


author: Ray Strode <rstrode@redhat.com> - 40.0.1-15
changelog:
  - Fix crashers in g-s-d and control-center related to
    making subscription-manager a soft dep
    Related: RHEL-20449


author: Felipe Borges <feborges@redhat.com> - 40.0.1-22
changelog:
  - Use mount path in "Low disk" notification when multiple mount points have same name
    Related: RHEL-11910


author: Joan Torres <joantolo@redhat.com> - 40.10-27
changelog:
  - session-opened signature is reverted to keep ABI compatibility,
    use session-opened-with-session-id instead
    Related: RHEL-92307


author: Joan Torres <joantolo@redhat.com> - 40.10-30
changelog:
  - Fix regression on multiple remote sessions and same user
    Also, add missing fix to keep API/ABI compatibility on GDM greeter proxy.
    Resolves: RHEL-109190


author: Milan Crha <mcrha@redhat.com> - 41.0-2
changelog:
  - Resolves: #2012699 (Backport changes from Fedora 35)
  - Add patch to mark compulsory only repos, not apps from it
  - Resolves: #2011176 (flathub repo can't be added through gnome-software)
  - Resolves: #2010660 (gs-repos-dialog: Can show also desktop applications)
  - Resolves: #2010353 (Optional repos cannot be disabled)
  - Resolves: #2010740 (Refresh on repository setup change)
  - Resolves: #2009063 (Correct update notifications)


author: Milan Crha <mcrha@redhat.com> - 41.5-2
changelog:
  - Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file)
  - Resolves: #2129021 (Hide some errors in non-debug builds)


author: Debarshi Ray <rishi@fedoraproject.org> - 3.40.1-1
changelog:
  - Update to 3.40.1
  - Rebase the patches
  - Backport yet-to-be-released patches from upstream to avoid translation
    conflicts
  Resolves: #1959384


author: Jakub Jelen <jjelen@redhat.com> - 2.3.3-3
changelog:
  - Mark SHA-1 digest as weak to follow SHA-1 disablement in RHEL9 (#2070722)
  - Fix interaction with SSH by not requiring the MD5 digest (#2073567)
  - Fix creation of AEAD packets (#2128058)


author: Alexander Sosedkin <asosedkin@redhat.com> - 3.8.10-1
changelog:
  - Rebase to 3.8.10
  - Revert defaulting to PBMAC1 in FIPS mode
  - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification


author: Alexander Sosedkin <asosedkin@redhat.com> - 3.8.10-3
changelog:
  - Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
  - Fix name constraint processing performance issue (CVE-2025-14831)


author: Alexander Sosedkin <asosedkin@redhat.com> - 3.8.10-4
changelog:
  - Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite)
  - Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour)
  - Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread)
  - Fix CVE-2026-42010 (PSK authentication, High, authentication bypass)
  - Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass)
  - Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass)
  - Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse)
  - Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse)
  - Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free)
  - Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread)
  - Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite)
  - Fix CVE-2026-3832 (OCSP, Low, revocation bypass)
  - Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel)
  - Fix upstream security issue #1808 (PSK rehandshake)
  - Fix upstream security issue #1810 (EKU OID prefix match)
  - Fix upstream security issue #1813 (pkcs11-provider persistent keys)
  - Fix upstream security issue #1818 (RSA correctness, OpenSSL format import)
  - Fix upstream security issue #1819 (PKCS#11 trust removal error path)
  - Fix upstream security issue #1822 (SCT extension parser OOB read)
  - Fix upstream security issue #1841 (key zeroization in hybrid kex)
  - Fix upstream security issue #1823 (malformed certtool template)
  - Fix upstream security issue #1817 (session parameter loading robustness)
  - Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving)
  - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in


author: David Benoit <dbenoit@redhat.com> 3.0.9-9
changelog:
  - Delete remove-fedora-dependency-automation.patch
  - Bundle golist in /usr/libexec
  - Related: rhbz#2043107


author: Alejandro Sáez <asm@redhat.com> - 1.25.0-1
changelog:
  - Update to Go 1.25.0
  - Set GOAMD64 to v2 to align with new architecture baselines
  - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2
  - Resolves: RHEL-109557


author: Parag Nemade <pnemade AT redhat DOT com> - 1:1.002-0.15.20130214
changelog:
  - Un-retire this package in F38+ (#2162532)
  - Update as per suggestions given in rename package review (#2166813)


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20200215-5
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Peng Wu <pwu@redhat.com> - 20230817-1
changelog:
  - Update Noto CJK to Sans 2.004 and Serif 2.002
  - Drop some Noto CJK Language Specific OTFs sub packages
  - Resolves: RHEL-13738


author: Mike FABIAN <mfabian@redhat.com> - 20200402-1
changelog:
  - Update to upstream snapshot tarball (fixes U+1F9D1 U+200D U+1F3A8 "artist"
    and many other sequences)


author: Akira TAGOH <tagoh@redhat.com> - 20201206-1
changelog:
  - Updates to 20201206.
    Resolves: rhbz#1899847
  - Refactoring spec file.
  - Fix invalid metainfo files.
    Resolves: rhbz#1830709


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.20.7-20
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Add upstream commits for git master which contains patches 9, 10 and 11
  - Add GCC10 fix
  - Cleanups


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.26.1-2
changelog:
  - fix buffer overflow in NMEA2000 driver (CVE-2025-67268)
  - fix integer underflow in handling of Navcom packets (CVE-2025-67269)


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-15
changelog:
  - Resolves RHEL-97518: Rework grafana-selinux spec file sections
  - Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-18
changelog:
  - Resolves RHEL-125696: CVE-2025-58183
  - Resolves RHEL-132757: Grafana-selinux prevents plugins from searching cgroups


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-20
changelog:
  - Resolves RHEL-144960: CVE-2026-21721
  - Resolves RHEL-145419: CVE-2025-61728
  - Resolves RHEL-146103: CVE-2025-61726
  - Resolves RHEL-149639: CVE-2025-68121


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-22
changelog:
  - Resolves RHEL-161804: CVE-2026-27877
  - Resolves RHEL-166346: CVE-2026-33810
  - Resolves RHEL-166703: CVE-2026-32282
  - Resolves RHEL-167390: CVE-2026-32280
  - Resolves RHEL-167696: CVE-2026-32283


author: Sam Feifer <sfeifer@redhat.com> - 5.1.1-15
changelog:
  - Resolves RHEL-166347: CVE-2026-33810
  - Resolves RHEL-166704: CVE-2026-32282
  - Resolves RHEL-167391: CVE-2026-32280
  - Resolves RHEL-167697: CVE-2026-32283


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.44.0-19
changelog:
  - Conditionalized guile support
    Resolves: rhbz#1953974
  - Updated RHEL macros
    Resolves: rhbz#1957653


author: saypaul <paul.sayan@gmail.com> - 0.15.5-1
changelog:
  - The 0.15.5 release
  - Auto-detect image type and use correct rollback
  - Support for read only /boot mount
  - Warn users of missing disabled healthchecks
  - Add feature to disable healthchecks


author: Paul Whalen <pwhalen@fedoraproject.org> - 0.15.5-3
changelog:
  - Moved greenboot config to /etc/grub.d.
  - %post symlink greenboot.cfg to bootupd if present
  - %postun remove symlink from bootupd if present


author: Sayan Paul <paul.sayan@gmail.com> - 0.15.7-1
changelog:
  - Update to 0.15.7
  - Reword warning message for disabled checks
  - Fixed the issue that boot_counter cannot be unset and some scripts do not have executable permissions
  - Packit: only use IoT relevant branches


author: Antonio Murdaca <antoniomurdaca@gmail.com> - 0.15.8-1
changelog:
  * ci: add ci test for pull request by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/164
   * ci: add more wait time for fallback by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/167
   * ci: fix ansible check failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/169
   * ci: add test case of bootc anaconda iso by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/171
   * test github token by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/174
   * update github action by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/177
   * Update greenboot-ci.yaml by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/179
   * ci: fix iso case failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/173
   * ci: add support for fedora rawhide by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/181
   * ci: fix rahide failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/183
   * ci: fix podman retry issue by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/185
   * ci: add centos-stream-9 support by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/187
   * ci: add rhel 9.6 support by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/190
   * ci: fix rhel 9.6 anaconda case failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/193
   * ci: fix secret error by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/195
   * specfile: Stop building on ix86 by @travier in https://github.com/fedora-iot/greenboot/pull/197
   * rollback: if no bootc, fallback to rpm-ostree by @runcom in https://github.com/fedora-iot/greenboot/pull/199
   * fix:fail early for any required script failure by @say-paul in https://github.com/fedora-iot/greenboot/pull/198
   * Release 0.15.8 by @runcom in https://github.com/fedora-iot/greenboot/pull/202

   * @travier made their first contribution in https://github.com/fedora-iot/greenboot/pull/197

   **Full Changelog**: https://github.com/fedora-iot/greenboot/compare/v0.15.7...v0.15.8
  - Resolves: RHEL-78244


author: Paul Whalen <pwhalen@fedoraproject.org> - 0.16.0-2
changelog:
  - Update src to greenboot-rs, binaries remain greenboot
  - Obsoletes/Conflicts for bash greenboot, Provides greenboot


author: Sayan Paul <saypaul@redhat.com> - 0.16.1
changelog:
  - Ensure rollback trigger runs before systemd-update-done and only on updates
  - Log the correct system type when reporting rollback decisions
  - Fix CI/tests (Ansible callback config, GI deps) to keep gating green
  - Refresh Packit release config for Fedora delivery


author: Sayan Paul <saypaul@redhat.com> - 0.16.2
changelog:
  - restrict manual restart of healthcheck service
  - fixed error while running healtcheck inside container
  - removed bootupd dependency
  - fixed CI tests


author: Tomas Popela <tpopela@redhat.com> - 40.0-6
changelog:
  - Require the Source Code Pro font instead of only recommending it to not break
    systems updated from 9.0.0.
    Resolves: rhbz#2093975


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-2
changelog:
  - Patch CVE-2023-44429: AV1 codec parser heap-based buffer overflow
  - Patch CVE-2023-44446: MXF demuxer use-after-free
  - Resolves: RHEL-17030, RHEL-17039


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-4
changelog:
  - CVE-2023-40474: Integer overflow leading to heap overwrite in MXF
  - CVE-2023-40475: Integer overflow leading to heap overwrite in MXF
  - CVE-2023-40476: Integer overflow in H.265 video parser
  - ZDI-CAN-22300: buffer overflow vulnerability
  - Resolves: RHEL-19501, RHEL-19505, RHEL-19506, RHEL-20201


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Bump version
  - Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542,
    CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835
    Resolves: RHEL-70983, RHEL-71035, RHEL-70932, RHEL-71037
    Resolves: RHEL-71019, RHEL-70995, RHEL-71163


author: Wim Taymans <wtaymans@redhat.com> - 1.18.4-6
changelog:
  - Fixes for CVE-2022-1920, CVE-2022-1921, CVE-2022-1922, CVE-2022-1923,
    CVE-2022-1924, CVE-2022-1925, CVE-2022-2122
    Resolves: rhbz#2131034, rhbz#2131039, rhbz#2131045, rhbz#2131049,
              rhbz#2131054, rhbz#2131060, rhbz#2131064


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-2
changelog:
  - CVE-2023-37327: integer overflow leading to heap overwrite in FLAC
    image tag handling
  - Resolves: RHEL-19471


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
    CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
    CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
    CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
    CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
    CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
  - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
  - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
  - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
  - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
  - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
  - Resolves: RHEL-71189


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.22.8-2
changelog:
  - Enable asfdemux, dvdlpcmdec, dvdsub, and realmedia plugins
  - Disable AMR plugins in RHEL builds
  - Resolves: rhbz#2236889


author: Daniel P. Berrangé <berrange@redhat.com> - 1.2.0-1
changelog:
  - Update to 1.2.0 release
  - Drop outdated conditionals
  - Drop outdated ldconfig script
  - Use versioned obsoletes tags
  - Resolves: rhbz#1949474


author: Kalev Lember <klember@redhat.com> - 2.24.33-3
changelog:
  - Drop imsettings dependency on Fedora as well
  - Recommend libcanberra-gtk2 for sound theme events in gtk2 apps


author: Kalev Lember <klember@redhat.com> - 4.1.2-1
changelog:
  - Update to 4.1.2
  - Disable gtk-doc support as we don't have gi-docgen in Fedora yet
  - Remove old obsoletes


author: Kalev Lember <klember@redhat.com> - 3.24.3-1
changelog:
  - Update to 3.24.3
  - Use https source URLs
  - Re-enable LTO now that we have upstream fix in place (#1898054)
  - Switch to meson build system
  - Tighten soname globs


author: Tom Stellard <tstellar@redhat.com> - 5.3.3-3
changelog:
  - Fix warning building with clang
  - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type]


author: Jindrich Novy <jnovy@redhat.com> - 6:0.7.4-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.7.4
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 6:0.7.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.7.5
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.0-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.1-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1
  - Resolves: RHEL-69761


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.2-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.3-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.4-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4
  - Resolves: RHEL-83036


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.6-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.6
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.7-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.7
  - Resolves: RHEL-112184


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-16
changelog:
  - fence_openstack: add support for reading config from clouds.yaml
    and openrc
    Resolves: rhbz#2041933, rhbz#2041935


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-22
changelog:
  - all agents: unify ssl parameters to avoid having to use --ssl when
    using --ssl-secure/--ssl-insecure for some agents
    Resolves: rhbz#2072420
  - fence_gce: update fence agent
    Resolves: rhbz#2079889


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-23
changelog:
  - fence_ibm_vpc: remove unused instance parameter and make limit
    optional
    Resolves: rhbz#2081235


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-25
changelog:
  - all agents: unify ssl parameters to avoid having to use --ssl when
    using --ssl-secure/--ssl-insecure for some agents
    Resolves: rhbz#2072420


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-27
changelog:
  - fence_ibm_powervs: add support for proxy, private API servers and
    get token via API key
    Resolves: rhbz#2093216


author: Ryan O'Hara <rohara@redhat.com> - 2.4.7-1
changelog:
  - Update to 2.4.7 (#1966688)
  - Fix domain parts in :scheme and :path fields (CVE-2021-39240, #1998196)
  - Fix spaces in the :method field (CVE-2021-39241, #1998198)
  - Fix mismatch between :authority and Host fields (CVE-2021-39242, #1998200)
  - Fix request smuggling attack or response splitting (CVE-2021-40346, #2000621)


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 2.4.22-4
changelog:
  - Always clear retry flags in read/write functions to avoid CPU
    usage spikes
  - Fix "unable to load certificate chain from file" issue
    Resolves: RHEL-71925, RHEL-68780


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 2.8.14-2
changelog:
  - Add tmpfiles.d file to make systemd-tmpfiles create/set correct
    ownership/permissions of /var/lib/haproxy
    Resolves: RHEL-120178


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Filip Januš <fjanus@redhat.com> - 1.5-1
changelog:
  - Nwe upstream version 1.5
  - Add patch to solve inconsistency between configure.ac and filename
  - Add Build requirement autoconf


author: Davide Caratti <dcaratti@redhat.com> - 2.9-15
changelog:
  - Disable 'badfuncs' in rpminspect tests
  - Build with -fPIE, and enable verbose build log
  - enable CONFIG_SUITEB192


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-4
changelog:
  - 1912147 - Enable matching for '<model>_series' drivers in PPD search algorithm
  - rework optional gui messages


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-5
changelog:
  - 1925259 - %pre scriptlet enables and starts cups.service, which is unnecessary
  - 1919556 - hp-fab crashed: QFileDialog.getOpenFileName is not used correctly


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.21.2-7
changelog:
  - CVE-2026-8632 hplip: HPLIP: Privilege escalation and arbitrary code execution
    via operating system command injection [rhel-9.9]


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.21.2-8
changelog:
  - CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-3
changelog:
  - Resolves: RHEL-68660 - RewriteRule proxying to UDS (unix domain socket)
    configured in .htaccess doesn't work on httpd-2.4.62-1


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-4
changelog:
  - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode
    characters in the name


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-7
changelog:
  - Resolves: RHEL-99815 - stickysession field does not work when specifying
    it in the query parameter after upgrade to 9.5
  - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS
    upgrade (CVE-2025-49812)
  - Resolves: RHEL-99968 - httpd: access control bypass by trusted
    clients is possible using TLS 1.3 session resumption (CVE-2025-23048)
  - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied
    data in mod_ssl (CVE-2024-47252)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-8
changelog:
  - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when
    updating system in image mode


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-9
changelog:
  - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child
    process is reclaimed


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-10
changelog:
  - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check
    to avoid unnecessary 421 errors after CVE-2025-23048 fix
  - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-12
changelog:
  - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
    via AllowOverride FileInfo (CVE-2025-66200)
  - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable
    override (CVE-2025-65082)
  - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds
    query string to #exec cmd=... (CVE-2025-58098)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-14
changelog:
  - Resolves: RHEL-173563 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
    code execution via heap-based buffer overflow (CVE-2026-28780)
  - Resolves: RHEL-175078 - httpd: NULL pointer dereference can cause a child
    process crash (CVE-2026-33007)
  - Resolves: RHEL-175099 - httpd: off-by-one out-of-bounds reads in AJP getter
    functions (CVE-2026-33857)
  - Resolves: RHEL-175035 - httpd: heap-based buffer over-read due to missing
    null-termination check (CVE-2026-34032)
  - Resolves: RHEL-175063 - httpd: heap-based buffer over-read and memory
    disclosure in ajp_parse_data() (CVE-2026-34059)


author: Parag Nemade <pnemade AT redhat DOT com> - 5.1-3
changelog:
  - Resolves:rhbz#1967646 - Correct the License: tag to LGPLv3+ based on LICENSE.txt file
  - Added gating tests


author: Parag Nemade <pnemade AT redhat DOT com> - 1.0.3-21
changelog:
  - Remove the duplicate source file committed to this package git repository
  - Update URL tag and files section to be more verbose


author: Peter Robinson <pbrobinson@fedoraproject.org> - 4.2-2
changelog:
  - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package)
  - Drop/obsolete eepromer subpackage, deprecated for 6 years
  - Drop python2 conditionals
  - Minor cleanups


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.24-5
changelog:
  - Fix covscan reviews. Related: rhbz#1963071

  - Implement ibus_im_context_set_surrounding_with_selection()


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.11-10
changelog:
  - Replace kasumi with kausmi-unicode
  - Delete to require intltool
  - Delete to call gettext.bind_textdomain_codeset()


author: Mike FABIAN <mfabian@redhat.com> - 1.4.2-1
changelog:
  - Update to  1.4.2
  - New translations: tr (Turkish) 100%, uk (Ukrainian) 100%,
    id (Indonesian) 100%, ja_JP (Japanese) 100%.
  - Translation updates: zh_CN, pt_BR


author: Mike FABIAN <mfabian@redhat.com> - 1.12.4-1
changelog:
  - Update to 1.12.4
  - Update translations from Weblate (updated es, cs, fa, pt_BR, zh_CN).
    zh_CN is 100% complete now.


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-1
changelog:
  - Update to 1.12.5
  - Return False in _execute_command_commit_candidate_number(self, number)
    if number out of range
  - Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/21
  - remove Use-from-unittest-import-mock-instead-of-just-import.patch
    (included upstream)
  - Update translations from Weblate (New translation for Sinhala (si) started)


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-3
changelog:
  - Resolves: rhbz#1974631 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE
    Resolves: https://github.com/definite/ibus-table-chinese/pull/14
  - Add SUGGESTION_MODE = TRUE to the wubi tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/15
  - Support pinyin mode also for stroke5 table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/12
  - Use nicer values for symbol and status prompt
    Resolves: https://github.com/definite/ibus-table-chinese/pull/8
  - update jyutping table; add cantonyale table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/11
  - Update jyutping and cantonese tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/9


author: Mike FABIAN <mfabian@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Use “from unittest import mock” instead of just “import mock”.
  - Update emoji annotations from CLDR
  - Translation update from Weblate for zh_CN (still 100% complete)


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-1
changelog:
  - Update to 2.10.5
  - Run the voikko tests only for libvoikko version >= 4.3
  - Adapt voikko test cases to the newest voikko version
    libvoikko-4.3-3, python3-libvoikko-4.3-3, voikko-fi-2.4-3
  - Log a warning when language is “fi” and “import libvoikko” failed
  - Return an empty list [] in spellcheck_suggest_voikko() when libvoikko was not imported
  - Update emoji annotations from CLDR, switching “no” and “nb”
    See: https://unicode-org.atlassian.net/browse/CLDR-2698
  - Remove icon in emoji-picker.appdata.xml (to avoid warnings
    from appstream-util and appstreamcli).


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-2
changelog:
  - Use the voikko build requires only for Fedora. They are only
    needed to run the voikko test cases during build.


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-3
changelog:
  - Remove gnome-desktop-testing and ibus-desktop-testing from the requires
    of the ibus-typing-booster-tests subpackage


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-1
changelog:
  - Update to 2.11.0
  - Use sensitivity feature of buttons in the setup tool tab where shortcuts are defined
  - Don’t let dialog action area of setup tool expand.
  - Improve the setup tool to make it possible to enter multi-line expansions of shortcuts
  - Resolves https://github.com/mike-fabian/ibus-typing-booster/issues/158
  - Elide extremely long candidates in the lookup table in the middle.
  - If a candidate contains newlines, replace the newlines with arrows in the lookup table.
  - If a commit string contains new-lines, commit it in several chunks
    and forward Return between the chunks.
  - Update emoji annotations from CLDR
  - Put the remote icon back in emoji-picker.appdata.xml, it was a
    false positive by appstreamcli
  - Translation update from Weblate (pt_PT updated, 100% complete now)
  - Skip the inscript2 test cases if these transliterations are not available.


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-3
changelog:
  - Resolves: rhbz#1974636 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.2.1-1
changelog:
  - Rebase to JSS 5.2.1
  - Bug 2100807 - pki-tomcat/kra unable to decrypt when using RSA-OAEP padding in RHEL9 with FIPS enabled


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.3.0-0.3.beta2
changelog:
  - Rebase to JSS 5.3.0-beta2
  - Bug 2017098 - pki pkcs12-cert-add command failing with 'Unable to validate PKCS #12 file: Digests do not match' exception


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.3.0-1
changelog:
  - Rebase to PKI 11.3.0
  - Bug #2091993 - IdM Install fails on RHEL 8.5 Beta when DISA STIG is applied
  - Bug #2122409 - pki-tomcat/kra unable to decrypt when using RSA-OAEP padding in RHEL9 with FIPS enabled


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.0.3-1
changelog:
  - Bug #2033109 Invalid certificates with creation of subCA (pkispawn single step)[rhel-9.0.0]
  - Bug #2013141 kra-key-retrieve failed to accept xml input format to generate .p12 key through cli
  - Bug #2029838 SHA1withRSA being listed in signing certificates while approving certificate via Agent page in browser


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.0-0.4.beta3
changelog:
  - Rebase to PKI 11.2.0-beta3
  - Bug #2062808 Drop SHA-1 use from authentication challenges [rhel-9.1.0]


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.0-1
changelog:
  - Rebase to PKI 11.2.0
  - Bug #2084639 ipa cert-request ssl error
  - Bug #2099312 SKI field is not reflected back in generated CSR
  - Bug #2095197 PKI cert-fix operation failing


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.1-1
changelog:
  - Rebase to PKI 11.2.1
  - Bug #2107336 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [rhel-9.1.0]


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.3.0-0.2.beta1
changelog:
  - Rebase to PKI 11.3.0-beta1
  - Bug #1849834 - [RFE] Provide EST Responder (RFC 7030)
  - Bug #1883477 - [RFE] Automatic expired certificate purging
  - Bug #2091999 - Error displayed should be user friendly in case RSNv3 certificate serial number collision
  - Bug #2106452 - softhsm2: Unable to create cert: Private key not found
  - Bug #2106459 - CVE-2022-2393 pki-core: Improper authentication/authorization with caServerKeygen_DirUserCert profile


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Miguel Martín <mmartinv@redhat.com> - 2.19.0-3
changelog:
  - Update ignition-edge commit to support FIPS
      - https://github.com/fedora-iot/ignition-edge/pull/2


author: Yasmin Valim <ydesouza@redhat.com> - 2.21.0-1
changelog:
  - Re-sync with upstream changes adding ignition-grub subpackage
    and a few minor changes
  - New release


author: Kamal Heib <kheib@redhat.com> - 46.0-1
changelog:
  - Rebase to upstream release v46.0
  - Resolves: rhbz#2159650, rhbz#2167513, rhbz#2170367, rhbz#2189721 rhbz#2209688


author: Kamal Heib <kheib@redhat.com> - 57.0-1
changelog:
  - Rebase to upstream release v57.0
  - Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449


author: Kamal Heib <kheib@redhat.com> - 60.0-1
changelog:
  - Rebase to upstream release v60.0
  - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331


author: Kamal Heib <kheib@redhat.com> - 60.0-2
changelog:
  - bump release to rebuild in sidetag
  - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331


author: Kamal Heib <kheib@redhat.com> - 60.0-3
changelog:
  - bump release to rebuild in sidetag
  - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331


author: Kamal Heib <kheib@redhat.com> - 61.0-1
changelog:
  - Rebase to upstream release v61.0
  - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331


author: Martin Kolman <mkolman@redhat.com> - 0.3.84-1
changelog:
  - Adjust to logging command changes in Anaconda (#1891621) (mkolman)
  - Make sure the output from custom_getpass() is serialized after stdout (lkundrak)


author: Martin Kolman <mkolman@redhat.com> - 0.3.86-1
changelog:
  - Drop python-nose from the dependencies (#1916799) (vponcova)
  - Add the makeupdates script (vponcova)
  - Remove deprecated support for add-ons (vponcova)
  - Don't run installation tasks of add-ons in a meta task (vponcova)
  - Migrate COPR builds from Jenkins to Packit (jkonecny)
  - Add documentation for the new test solution (jkonecny)
  - Add support for custom Anaconda COPR repository (jkonecny)
  - Use `make test` to run TMT tests locally (jkonecny)
  - Add TMT configuration to get Anaconda COPR build (jkonecny)
  - Add Packit support for initial-setup (jkonecny)
  - Update and use setup.py for archive creation (jkonecny)
  - Fix ChangeLog generation in Makefile (jkonecny)


author: Martin Kolman <mkolman@redhat.com> - 0.3.89-1
changelog:
  - Include scripts in the updates image (vponcova)
  - Drop build time dependency on the anaconda package (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.1-1
changelog:
  - Add gnome-kiosk to window managers usable by initial-setup (#1962198) (vponcova)
    Resolves: rhbz#1962198


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.2-1
changelog:
  - Disable multi TTY handler when running in SSH session (#1951577) (mkolman)
    Resolves: rhbz#1951577


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.8.1-1
changelog:
  - chore(spec): Add back spec vmware_tools_conf (#4595) (jiazhang@redhat.com)
  - fix: use try_auto_configuration method for compliance (#4591)
    (xiangceliu@redhat.com)
  - fix(client): do not retry upload on successful upload (#4586)
    (pschrimp@redhat.com)
  - chore(script): update the file name typo in last operation (#4588)
    (xiangceliu@redhat.com)
  - chore: place the build target in spec instead of passing macro (#4587)
    (xiangceliu@redhat.com)
  - chore: refine the pull request template (#4585) (xiangceliu@redhat.com)
  - fix: Enhance spec 'filefrag' to check initramfs/vmlinuz files (#4574)
    (39508521+shlao@users.noreply.github.com)
  - fix: add dep ds containers_with_shell for container specs (#4581)
    (xiaoxwan@redhat.com)
  - chore: remove the unused build scripts (#4577) (xiangceliu@redhat.com)
  - fix: do not collect egg_release file in RPM delivery (#4573)
    (xiangceliu@redhat.com)
  - chore(ci/cd): do not build Egg for PRs to matser (#4578)
    (xiangceliu@redhat.com)
  - New parser for sos_commands/crio/crictl_ps (#4497) (aghodake@redhat.com)
  - fix(test): regression issue of yaml.SafeLoader in testing (#4557)
    (xiangceliu@redhat.com)
  - fix: no valid conf found issue in combiner GrubConf (#4437)
    (xiaoxwan@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.9.1-1
changelog:
  - chore(spec): change ip_route_show_table_all to filterable=True (#4597)
    (xiangceliu@redhat.com)
  - Alter malware code to use locally stored yara rules for the 3rd party feature
    (#4571) (63891960+mtclinton@users.noreply.github.com)
  - fix: collect yum_updates on all supported RHEL (#4607)
    (xiangceliu@redhat.com)
  - fix(MANIFEST): add the 'public.gpg' required by playbook_verifier (#4602)
    (xiangceliu@redhat.com)
  - chore(spec): do not collect ansible_telemetry before it's GA (#4601)
    (xiangceliu@redhat.com)
  - fix: remove the deps from insights_ausearch spec (#4603)
    (xiangceliu@redhat.com)
  - fix(doc): fix homepage example in README (#4599) (xiangceliu@redhat.com)
  - fix(rpm-spec): fix "Requires:" of selinux-policy (#4580)
    (xiangceliu@redhat.com)
  - feat: add parser for spec.nvidia_smi_query_gpu (#4600) (xiaoxwan@redhat.com)
  - feat(spec/parser): new spec and parser for AnsibleTelemetry (#4589)
    (xiangceliu@redhat.com)
  - fix: FileProvider.validate() leaked files outside root (#4474)
    (71874510+jholecek-rh@users.noreply.github.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.9.3-1
changelog:
  - spec: new spec and parser for krb5_localauth_plugin (#4632)
    (xiangceliu@redhat.com)
  - chore(uname): Support RHEL 9.7 in Uname (#4631) (jiazhang@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.10.1-1
changelog:
  - fix(spec): ignore errors when collecting bootloader data (#4636)
    (xiangceliu@redhat.com)
  - fix(spec): keyctl_show should be a simple_command (#4635)
    (xiangceliu@redhat.com)
  - Add new parser & datasource for ls -ldZ (#4622) (986222045@qq.com)
  - fix: enhance IlabModuleList parser on content change (#4624)
    (xiaoxwan@redhat.com)
  - chore(spec): don't need strictly version match (#4634)
    (xiangceliu@redhat.com)
  - chore: Update the base of SsTUPNA (#4619) (xiangceliu@redhat.com)
  - Add spec rear_default_conf (#4625) (jiazhang@redhat.com)
  - chore: Uname supports RHEL 10.1 (#4643) (xiangceliu@redhat.com)
  - spec: new datasource & parser for ls -ldH (#4620) (986222045@qq.com)
  - fix(script): revert to update setup.py (#4623) (xiangceliu@redhat.com)
  - fix(script): tarbal cannot be found when building for testing (#4621)
    (xiangceliu@redhat.com)
  - chore(script): change release to 'dev' for PR testing builds (#4618)
    (xiangceliu@redhat.com)
  - chore(spec): add new spec bootctl_status for analytics (#4613)
    (xiangceliu@redhat.com)
  - chore(spec): add new spec mokutil_list_enrolled for analytics (#4612)
    (xiangceliu@redhat.com)
  - chore(spec): add new spec keyctl_show for analytics (#4611)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.11.1-1
changelog:
  - chore: print version.release in 'insights.version' module (#4670)
    (xiangceliu@redhat.com)
  - fix(test): filters.yaml for building RPM in packit for test (#4665)
    (xiangceliu@redhat.com)
  - chore(rpmbuild): refine the RPM spec file (#4669) (xiangceliu@redhat.com)
  - fix(parser): Deprecate the SsTUPLN parser (#4662) (xiangceliu@redhat.com)
  - feat: add filter "Name:" to InstalledProductIDs spec (#4660)
    (xiaoxwan@redhat.com)
  - chore(test): replace mock with unittest.mock (#4659) (xiangceliu@redhat.com)
  - spec: do hostname obfuscation for bootctl_status (#4657)
    (xiangceliu@redhat.com)
  - spec: remove localectl_status from RPM collection (#4655)
    (xiangceliu@redhat.com)
  - chore: print current version for tmt testing convenience (#4650)
    (xiangceliu@redhat.com)
  - fix: don't import FileListing in insights (#4647) (xiangceliu@redhat.com)
  - chore(ci/cd): remove py27 pipeline tests for master  (#4654)
    (xiangceliu@redhat.com)
  - feat(test): unit test for successful upload (#4641) (pschrimp@redhat.com)
  - fix(test): update the check of obfuscation warnings (#4648)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.1.1-1
changelog:
  - fix(datasource cleanning): clean datasource based on spec entry (#4692)
    (xiangceliu@redhat.com)
  - fix: handle no account_number in response data (#4687) (lichen@redhat.com)
  - chore(build): remove python2 requires from setup/pyproject (#4686)
    (xiangceliu@redhat.com)
  - fix: apply redacting and obfuscating for datasource specs (#4681)
    (xiangceliu@redhat.com)
  - fix: remove six from the core part code (#4671) (xiangceliu@redhat.com)
  - fix(malware-detection): malware scan yara error handling (#4678)
    (63891960+mtclinton@users.noreply.github.com)
  - Add new spec sys_block_queue_max_segment_size (#4645) (986222045@qq.com)
  - Add new spec ossl_files (#4668) (986222045@qq.com)
  - Add new spec ethtool_priv_flags (#4666) (986222045@qq.com)
  - chore(build): update packit to build with specific release (#4685)
    (xiangceliu@redhat.com)
  - fix(test): modify filter for spec sshd_test_mode (#4683)
    (zhangqianqian@users.noreply.github.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.1.2-1
changelog:
  - fix: traceback info in metadata JSON of filterable specs (#4694)
    (xiangceliu@redhat.com)
  - fix(spec): stop collecting sealert on RHEL 9 and older (#4698)
    (xiangceliu@redhat.com)
  - fix(doc): avoid too extensive cross-ref check (#4695) (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.2.1-1
changelog:
  - spec: stop collecting tuned_adm on RHEL 9 when SELinux enabled (#4711)
    (xiangceliu@redhat.com)
  - chore(spec): remove cmd path added to support old RHEL (#4718)
    (xiangceliu@redhat.com)
  - spec: don't collect ansible_telemetry when SELinux is enabled (#4712)
    (xiangceliu@redhat.com)
  - fix(manifest): add SELinuxDisable to configs of default manifest (#4713)
    (xiangceliu@redhat.com)
  - chore(component): update and add new selinux components (#4709)
    (xiangceliu@redhat.com)
  - chore(parser): refine the SEStatus parser (#4706) (xiangceliu@redhat.com)
  - spec: add ansible_telemetry to collection (#4700) (xiangceliu@redhat.com)
  - fix: update the help message to -S/--show-rules option (#4702)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.2.2-1
changelog:
  - chore(setup): remove six from the dependencies (#4719)
    (xiangceliu@redhat.com)
  - fix(test): add filter for spec strings_shimx64_efi (#4721)
    (zhangqianqian@users.noreply.github.com)
  - chore: drop python2 support from insights-client (#4707)
    (pschrimp@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.3-1
changelog:
  - fix: don't collect teamd specs when SELinux is enabled (#4734)
    (xiangceliu@redhat.com)
  - chore(build): add build_client_egg script back to master (#4722)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.5-1
changelog:
  - Fix: Update ls to handle special lines (#4750) (986222045@qq.com)
  - feat: Malware Detection wildcards support and fix concurrent scan false
    positives (#4746) (63891960+mtclinton@users.noreply.github.com)
  - chore(pre-commit): update and add new hook conventional-pre-commit
    (xiangceliu@redhat.com)
  - chore(build): enable packit building for release branch
    (xiangceliu@redhat.com)
  - feat: add all rules scanned to malware detection upload (#4735)
    (63891960+mtclinton@users.noreply.github.com)
  - fix(data-processing): fix unpredictable behavior of --context (#4740)
    (71874510+jholecek-rh@users.noreply.github.com)
  - chore: remove planned deprecations for v3.7.0 (xiangceliu@redhat.com)
  - fix(rpm-build): add 'BuildRequires: pkgconfig(systemd)' back for insights-
    core-selinux (xiangceliu@redhat.com)
  - feat: New spec "/etc/modules-load.d/*.conf" and its parser (shlao@redhat.com)
  - chore(spec): New spec "podman system info --json" for data analysis
    (huali@redhat.com)
  - chore(manifests): remove/merge remained useless components (#4747)
    (xiangceliu@redhat.com)
  - chore(manifests): use the base module instead of component (#4730)
    (xiangceliu@redhat.com)
  - chore: add egg_release back to collection with a condition (#4729)
    (xiangceliu@redhat.com)
  - fix(build): prepare the filters.yaml before setting up  (#4745)
    (xiangceliu@redhat.com)
  - chore(spec): update SELinux relevant specs (#4728) (xiangceliu@redhat.com)
  - chore(spec): remove SELinuxDisable depdencies from ansible_telemetry (#4731)
    (xiangceliu@redhat.com)
  - chore: remove unused lines from PR template (#4725) (xiangceliu@redhat.com)
  - chore(test): don't pass context when root is passed to initialize_broker
    (#4720) (xiangceliu@redhat.com)
  - chore: update PR template and remove RPM/Egg delivery guide (#4723)
    (xiangceliu@redhat.com)
  - feat: New spec "strings /boot/efi/EFI/redhat/shimx64.efi" and its parser
    (#4705) (44796653+huali027@users.noreply.github.com)
  - feat: New spec "/bin/mokutil --db --short" and the parser (#4704)
    (44796653+huali027@users.noreply.github.com)
  - fix(ci/cd): enable CI/CD for release branch (xiangceliu@redhat.com)
  - feat: add CoreEgg/CoreRpm to identify current collector (#4724)
    (xiangceliu@redhat.com)


author: Jaylin Zhou <zzhou@redhat.com> 3.7.6-1
changelog:
  - fix: add retry for fetching tailoring file (#4768)
    (33912805+LightOfHeaven1994@users.noreply.github.com)
  - Add new spec sys_block_queue_discard_max_bytes (#4766) (986222045@qq.com)


author: Ping Qin <piqin@redhat.com> 3.7.7-1
changelog:
  - feat: Add new datasource spec azure_instance_compute_metadata (#4772)
    (30404410+qinpingli@users.noreply.github.com)


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-19
changelog:
  - Resolves: RHEL-100450 eDNS: multiple issues during encrypted DNS setup
  - Resolves: RHEL-89907 Privilege escalation from host to domain admin in FreeIPA
  - Resolves: RHEL-99315 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-98565 ipa-idrange-fix: 'Env' object has no attribute 'basedn'
  - Resolves: RHEL-96920 Nightly test failure (rawhide) in test_trust.py::TestTrust::test_server_option_with_unreachable_ad
  - Resolves: RHEL-31907 kdb: support storing and retrieving multiple master keys


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-20
changelog:
  - Resolves: RHEL-106285 Incorrect use of external IdP GitHub trademark
  - Resolves: RHEL-106026 Include fixes in python3-ipatests package
  - Resolves: RHEL-105512 kdb: prevent double crash in RBCD ACL free
  - Resolves: RHEL-101707 ipatests: use "sos report" instead of "sosreport" command
  - Resolves: RHEL-101544 ipa-client-encrypted-dns does not ensure bind-utils >= 9.18 for DoT-compatible nsupdate
  - Resolves: RHEL-100450 eDNS: multiple issues during encrypted DNS setup


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-22
changelog:
  - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-24
changelog:
  - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-25
changelog:
  - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9]
  - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9]
  - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
  - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9]
  - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9]
  - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package 
  - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8]
  - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.0-1
changelog:
  - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache 
  - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls
  - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service 
  - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix
  - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py
  - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-1
changelog:
  - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates
  - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS
  - Resolves: RHEL-141297 Memory leaks in IPA plugins
  - Resolves: RHEL-141054 IPA fails to sign zone
  - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
  - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-2
changelog:
  - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
  - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive
  - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system)
  - RHEL-145854 Include latest fixes in python3-ipatests package
  - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
  - RHEL-141500 ipa use systemd-sysusers


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-3
changelog:
  - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured"
  - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8


author: David Hanina <dhanina@redhat.com> - 4.13.1-3.1
changelog:
  - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z]
  - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z]
  - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z]
  - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version


author: Rob Crittenden <rcritten@redhat.com> - 0.9-7
changelog:
  - debug='True' in ipahealthcheck.conf doesn't enable debug output (#2079861)
  - Validate value formats in the ipahealthcheck.conf file (#2079739)
  - Validate output_type options from ipahealthcheck.conf file (#2079698)


author: Rob Crittenden <rcritten@redhat.com> - 0.16-2
changelog:
  - Don't fail if a service name cannot be looked up in LDAP
  - Disable the ipa-ods-exporter service check


author: Rob Crittenden <rcritten@redhat.com> - 0.19-1
changelog:
  - Update to 0.19 release
    - Add a message if not a trust agent/controller (RHEL-116896)
    - Check that expected NSS token matches the current FIPS state (RHEL-116897)
    - Add /etc/pki/tls/certs/ directory to file checker (RHEL-116898)
    - Check that allowed_uids in the SSSD config is valid (RHEL-79092)


author: Phil Sutter <psutter@redhat.com> - 7.11-8
changelog:
  - Ship iptables-translate utility with ipset package
  - Add missing function to libipset.map and bump library version
  - Fix all debug mode warnings
  - ipset-translate: allow invoking with a path name
  - Fix IPv6 sets nftables translation
  - Fix typo in ipset-translate man page
  - tests: add tests ipset to nftables
  - add ipset to nftables translation infrastructure
  - lib: Detach restore routine from parser
  - lib: split parser from command execution


author: Phil Sutter <psutter@redhat.com> [1.8.10-3.el9]
changelog:
  - extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
  - spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
  - nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
  - spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]


author: Phil Sutter <psutter@redhat.com> [1.8.10-5.el9]
changelog:
  - xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
  - tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
  - nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
  - nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
  - nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]


author: Phil Sutter <psutter@redhat.com> - 1.8.8-5
changelog:
  - nft: un-break among match with concatenation
  - nft: fix ebtables among match when mac+ip addresses are used


author: Phil Sutter <psutter@redhat.com> [1.8.10-1.el9]
changelog:
  - spec: Support for _excludedocs macro in alternatives installation (Phil Sutter) [RHEL-5810]
  - Rebase onto version 1.8.10 (Phil Sutter) [RHEL-14147]


author: Jan Macku <jamacku@redhat.com> - 20210202-10
changelog:
  - arping: Fix 1s delay on exit for unsolicited arpings (RHEL-34110)
  - arping: exit 0 if running in deadline mode and we see replies (RHEL-27718)
  - ping: Print reply with wrong source with warning & some follow-up fixes (RHEL-12789, RHEL-13480)
  - ping: Fix socket error reporting (RHEL-4608)


author: Jan Macku <jamacku@redhat.com> - 20210202-12
changelog:
  - Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (RHEL-94334)


author: Cole Robinson <aintdiscole@gmail.com> - 20200823-1.git4bd064de.git
changelog:
  - Update to newer git snapshot, synced with qemu.git
  - Re-enable HTTPS support, with edk2 fix included (bz 1820836)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-4.git4bd064de
changelog:
  - ipxe-Skip-some-QEMU-ROMs-when-building-for-RHEL.patch [bz#1956931]
  - ipxe-spec-combine-BIOS-and-EFI-roms-using-util-catrom.pl.patch [bz#1957246]
  - Resolves: bz#1956931
    (ipxe-roms-qemu list: Clean out old ROMs)
  - Resolves: bz#1957246
    (boot vm from pxe failed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-5.git4bd064de
changelog:
  - ipxe-Disable-SHA-1.patch [bz#1935932]
  - ipxe-Replace-genisoimage-with-xorriso.patch [bz#1971981]
  - ipxe-spec-Drop-disabled-efi-ia32-build-infrastructure.patch [bz#1980138]
  - ipxe-spec-Generate-qemu-compatible-rom-filenames.patch [bz#1980138]
  - Resolves: bz#1935932
    (ipxe implements and/or uses the deprecated SHA-1 algorithm by default ()
  - Resolves: bz#1971981
    (Please replace genisoimage with xorriso)
  - Resolves: bz#1980138
    (install qemu rom symlinks so qemu doesn't have to)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-6.git4bd064de
changelog:
  - ipxe-Add-ping-command-support.patch [bz#1985658]
  - ipxe-Add-VLAN-tagging-support.patch [bz#1985658]
  - ipxe-netdevice-Strip-802.Q-VLAN-0-priority-tags.patch [bz#1985658]
  - ipxe-Provide-snponly.efi-rom.patch [bz#1985658]
  - ipxe-Build-hwcert-subpackage.patch [bz#1985658]
  - Resolves: bz#1985658
    (carry forward rhel8 ipxe packaging changes)


author: Fabio Valentini <decathorpe@gmail.com> - 1.2.2-1
changelog:
  - Update to version 1.2.2.
  - Drop custom maven-compiler-plugin overrides in favor of upstream settings.


author: Marian Koncek <mkoncek@redhat.com> - 2.3.3-4
changelog:
  - Avoid possible NullPointerException
  - Resolves: rhbz#1993889
  - Load native library from the correct location
  - Resolves: rhbz#1994935


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-2
changelog:
  - Update to shenandoah-jdk8u345-b01 (GA)
  - Update release notes for 8u345-b01.
  - Resolves: rhbz#2112405


author: Stephan Bergmann <sbergman@redhat.com> - 1:1.8.0.345.b01-3
changelog:
  - Disable copy-jdk-configs for Flatpak builds
  - Fix flatpak builds by exempting them from bootstrap
  - Resolves: rhbz#2102727


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-4
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2121273


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-5
changelog:
  - Allow the default keystore to be configured using security.systemCACerts
  - Use of the property can now be disabled using -Dsecurity.systemCACerts=
  - Move cacerts replacement to install section and retain original of this and tzdb.dat
  - Resolves: rhbz#2077006


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b07-0.2.ea
changelog:
  - Update to shenandoah-jdk8u352-b07 (EA)
  - Update release notes for shenandoah-8u352-b07.
  - Switch to EA mode for 8u352 pre-release builds.
  - Rebase FIPS patch against 8u352-b07
  - Resolves: rhbz#2130623


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Switch to GA mode for final release.
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b01-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b01 (EA)
  - Update release notes for shenandoah-8u362-b01.
  - Switch to EA mode for 8u362 pre-release builds.
  - Drop JDK-8195607/PR3776/RH1760437 now this is upstream
  - Related: rhbz#2150196


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b07 (EA)
  - Update release notes for shenandoah-8u362-b07.
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150196


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-3
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Fix broken links and missing release notes in older releases.
  - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
    - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
    - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
    - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-3
changelog:
  - Update cacerts patch to fix OPENJDK-1433 SecurityManager issue
  - Update to shenandoah-jdk8u352-b09 (GA)
  - Update release notes for shenandoah-8u352-b09.
  - Resolves: rhbz#2162714


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Resolves: rhbz#2150202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - Drop use of portable build on s390x due to libffi compatibility issue (needs libffi.so.6)
  - Related: rhbz#2150202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b05-0.2.ea
changelog:
  - Update to 8u442-b05 (EA).
  - Update release notes for 8u442-b05.
  - Switch to EA mode for pre-release.
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-73990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b05-0.3.ea
changelog:
  - Add zero_arches to the portable_build_arches now that the portable build bundles libffi
  - Temporarily workaround libffi.so not being in lib/%{archinstall} by copying it
  - Exclude libffi.so from the debugedit run
  - Add a simple -version check on both the JDK and JRE bin/java
  - Add libffi.so to the filelist, including expanding the lib/%{archinstall} contents as with jre/lib
  - Sync the copy of the portable specfile and new patches with the latest update
  - Resolves: RHEL-74302


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b06-2
changelog:
  - Update to 8u442-b06 (GA)
  - Update release notes for 8u442-b06.
  - Switch to GA mode for final release
  - Revise JDK-8141590 backport to install libffi.so* in lib as well as jre/lib
  - Sync the copy of the portable specfile with the latest update
  - Remove libffi.so copying workaround now the portable build installs it in lib
  - Add bundled libffi.so to _privatelibs
  - Remove libffi.so copy if we are building on the same platform as the portable
  - Resolves: RHEL-73554
  - Related: RHEL-74302


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b06-3
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-73554
  - Related: RHEL-74302
  - Related: RHEL-73990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.452.b09-2
changelog:
  - Update to 8u452-b09 (GA)
  - Update release notes for 8u452-b09.
  - Remove long option documentation from JDK-8335912/JDK-8337499 as not present in 8u
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86967
  - Resolves: RHEL-86620


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-3
changelog:
  - Update to 8u462-b08 (GA)
  - Update release notes for 8u462-b08.
  - Require tzdata 2025b due to upstream inclusion of JDK-8352716
  - Add early backport of JDK-8339414
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-101648
  - Resolves: RHEL-102312
  - Resolves: RHEL-97496


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-4
changelog:
  - Bump rpmrelease for CentOS build
  - Remove obsolete hack to hardcode newer portable version on RHEL
  - Related: RHEL-101648
  - Related: RHEL-102312
  - Related: RHEL-97496


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-5
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-119329


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.472.b08-1
changelog:
  - Update to 8u472-b08 (GA).
  - Update release notes for 8u472-b08.
  - Drop local JDK-8339414 fix as this is now included upstream
  - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118767
  - Resolves: RHEL-119455


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.472.b08-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118767
  - Related: RHEL-119455
  - Related: RHEL-118775


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.482.b08-1
changelog:
  - Update to 8u482-b08 (GA).
  - Update release notes for 8u482-b08.
  - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this
  - Turn on system FreeType as on later JDK versions and add to _privatelibs
  - Set bundled FreeType version to 2.13.2 following JDK-8316028
  - Bump LCMS 2 version to 2.14.0 following JDK-8297088
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
  - Resolves: RHEL-142687
  - Resolves: RHEL-139534
  - Resolves: RHEL-131588
  - Resolves: RHEL-131600
  - Resolves: RHEL-142875
  - Resolves: RHEL-142697


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.482.b08-2
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-142687
  - Related: RHEL-139534
  - Related: RHEL-131588
  - Related: RHEL-131600
  - Related: RHEL-142875
  - Related: RHEL-142697


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.482.b08-3
changelog:
  - Update tagging scripts to include signature checks and correctly handle gating
  - Add gating scripts to simplify obtaining results and waiving issues
  - Resolves: RHEL-147634
  - Resolves: RHEL-151197


author: Francisco Ferrari Bihurriet <fferrari@redhat.com> - 1:11.0.15.0.10-3
changelog:
  - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
  - Resolves: rhbz#2102434


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.10-4
changelog:
  - Rebase FIPS patches from fips branch and simplify by using a single patch from that repository
  - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
  - * RH2090378: Revert to disabling system security properties and FIPS mode support together
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Enable system security properties in the RPM (now disabled by default in the FIPS repo)
  - Improve security properties test to check both enabled and disabled behaviour
  - Run security properties test with property debugging on
  - Resolves: rhbz#2099839
  - Resolves: rhbz#2100676


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.7-0.1.ea
changelog:
  - Add additional patch during tarball generation to align tests with ECC changes
  - Related: rhbz#2083325


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.7-0.1.ea
changelog:
  - Update to jdk-11.0.16+7
  - Update release notes to 11.0.16+7
  - Switch to EA mode for 11.0.16 pre-release builds.
  - Use same tarball naming style as java-17-openjdk and java-latest-openjdk
  - Drop JDK-8257794 patch now upstreamed
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Make use of the vendor version string to store our version & release rather than an upstream release date
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Resolves: rhbz#2083325


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-2
changelog:
  - Update to jdk-11.0.16+8
  - Update release notes to 11.0.16+8
  - Switch to GA mode for release
  - Resolves: rhbz#2106517


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-2
changelog:
  - Update to jdk-11.0.16.1+1
  - Update release notes to 11.0.16.1+1
  - Add patch to provide translations for Europe/Kyiv added in tzdata2022b
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2119528


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-3
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2121275


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.2.ea
changelog:
  - Update to jdk-11.0.17+1
  - Update release notes to 11.0.17+1
  - Switch to EA mode for 11.0.17 pre-release builds.
  - Bump HarfBuzz bundled version to 4.4.1 following JDK-8289853
  - Bump FreeType bundled version to 2.12.1 following JDK-8290334
  - Related: rhbz#2130619


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2
changelog:
  - Update to jdk-11.0.17+8 (GA)
  - Update release notes to 11.0.17+8
  - Switch to GA mode for release
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - The stdc++lib, zlib & freetype options should always be set from the global, so they are not altered for staticlibs builds
  - Remove freetype sources along with zlib sources
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.3.ea
changelog:
  - Update to jdk-11.0.18+1
  - Update release notes to 11.0.18+1
  - Switch to EA mode for 11.0.18 pre-release builds.
  - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
  - Drop local copy of JDK-8275535 which is finally upstream
  - Related: rhbz#2150197


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.3.ea
changelog:
  - Update to jdk-11.0.18+9
  - Update release notes to 11.0.18+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150197


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-3
changelog:
  - Update to jdk-11.0.18+10 (GA)
  - Update release notes to 11.0.18+10
  - Switch to GA mode for release
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Backport SHA-3 support for PKCS11 provider
  - Sync patch set with portable build we are using by removing rh1648644-java_access_bridge_privileged_security.patch
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-2
changelog:
  - Update to jdk-11.0.19.0+7
  - Update release notes to 11.0.19.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Rebase FIPS support against 11.0.19+6
  - Rebase RH1750419 alt-java patch against 11.0.19+6
  - Replace local copies of JDK portable binaries with build dependencies
  - Use portable build on x86_32 now one is available
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-3
changelog:
  - Revert "Restore native build for x86 as there is no portable build"
  - Reintroduce useful cleanups from x86 reversion
  - Adjust oj_vendor_version & oj_vendor_bug_url to match the portable so test passes
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-4
changelog:
  - Include the java-11-openjdk-portable.spec file with instructions on how to rebuild.
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1
changelog:
  - Update to jdk-11.0.20.0+8 (GA)
  - Update release notes to 11.0.20.0+8
  - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
  - Bump tzdata requirement to 2023c now it is available in the buildroot
  - Bump bundled LCMS version to 2.15 as in jdk-11.0.20+1.
  - Bump bundled HarfBuzz version to 7.0.1 as in jdk-11.0.20+7
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2217715
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-3
changelog:
  - Fix tzdata requirement copy-and-paste error that led to two BuildRequires and no Requires
  - Resolves: rhbz#2224420


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1
changelog:
  - Update to jdk-11.0.20.1+1 (GA)
  - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
  - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Resolves: rhbz#2236590


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.9-0.1.ea
changelog:
  - Update to jdk-17.0.13+9 (EA)
  - Update .gitignore to ignore openjdk-17.0.13+9-ea.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9
  - Set buildver to 9
  - Set rpmrelease to 1
  - Set portablerelease to 1
  - Update sources to openjdk-17.0.13+9-ea.tar.xz
  - Related: RHEL-58785


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.10-0.1.ea
changelog:
  - Update to jdk-17.0.13+10 (EA)
  - Update .gitignore to ignore openjdk-17.0.13+10-ea.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9
  - Set buildver to 10
  - Update sources to openjdk-17.0.13+10-ea.tar.xz
  - Related: RHEL-58785


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.13.0.10-0.2.ea
changelog:
  - Vary portablesuffix depending on whether we are on RHEL ('el8') or CentOS ('el9')
  - Set rpmrelease to 2
  - Related: RHEL-58785


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.11-2
changelog:
  - Update to jdk-17.0.13+11 (GA)
  - Update .gitignore to ignore openjdk-17.0.13+11.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set buildver to 11
  - Set is_ga to 1
  - Update sources to openjdk-17.0.13+11.tar.xz
  - Resolves: RHEL-58785
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.13.0.11-4
changelog:
  - Set this to be the default/system JDK providing 'java', 'jre', 'java-devel', etc.
  - Set rpmrelease to 4
  - Resolves: RHEL-63034


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.1-0.2.ea
changelog:
  - Update to jdk-17.0.14+1 (EA)
  - Add to .gitignore openjdk-17.0.14+1-ea.tar.xz
  - Set updatever to 14
  - Set buildver to 1
  - Set rpmrelease to 2
  - Set is_ga to 0
  - Update sources to openjdk-17.0.14+1-ea.tar.xz
  - Double percent signs consistently throughout comments
  - Set bundled giflib provide version to 5.2.2
  - Set bundled libpng provide version to 1.6.43
  - Warn about bundled provide version bumps and backouts in openjdk_news.sh
  - Remove 0001-8332174-Remove-2-unpaired-RLO-Unicode-characters-in-.patch file
  - Revert: Use component in EPEL and Fedora bug URLs


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.7-2
changelog:
  - Update to jdk-17.0.14+7 (GA)
  - Add to .gitignore openjdk-17.0.14+7.tar.xz
  - Set buildver to 7
  - Set is_ga to 1
  - Update sources to openjdk-17.0.14+7.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Resolves: RHEL-73981
  - Resolves: RHEL-73559
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.15.0.6-2
changelog:
  - Update to jdk-17.0.15+6 (GA)
  - Add to .gitignore openjdk-17.0.15+6.tar.xz
  - Set updatever to 15
  - Set buildver to 6
  - Update sources to openjdk-17.0.15+6.tar.xz
  - Set bundled freetype provide version to 2.13.2
  - Set bundled harfbuzz provide version to 8.2.2
  - Require tzdata-java 2025a at runtime and for build
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Update FIPS patch
  - Resolves: RHEL-86627
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.16.0.8-2
changelog:
  - Update to jdk-17.0.16+8
  - Add to .gitignore openjdk-17.0.16+8.tar.xz
  - Set updatever to 16
  - Set buildver to 8
  - Set rpmrelease to 2
  - Update sources to openjdk-17.0.16+8.tar.xz
  - Resolves: RHEL-101788
  - Resolves: RHEL-101795
  - Resolves: RHEL-101796
  - Resolves: RHEL-101797
  - Resolves: RHEL-102283
  - Resolves: RHEL-102286
  - Resolves: RHEL-102285
  - Resolves: RHEL-102284
  - Require tzdata-java 2025b at runtime and for build
  - Set bundled freetype provide version to 2.13.3
  - Set bundled harfbuzz provide version to 10.4.0
  - Set bundled lcms2 provide version to 2.17.0
  - Set bundled libpng provide version to 1.6.47
  - Recommend pipewire
  - Related: RHEL-102667
  - Resolves: RHEL-102669
  - Resolves: RHEL-102670
  - Resolves: RHEL-102672
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.17.0.10-1
changelog:
  - Update to jdk-17.0.17+10 (GA)
  - Add to .gitignore openjdk-17.0.17+10.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set updatever to 17
  - Set buildver to 10
  - Set rpmrelease to 1, remove 'must start at 2' comment
  - Set bundled harfbuzz version to 11.2.0
  - Update sources to openjdk-17.0.17+10.tar.xz
  - Resolves: RHEL-119458
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.18.0.7-0.1.ea
changelog:
  - Update to jdk-17.0.18+7 (EA)
  - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz
  - Set updatever to 18
  - Set buildver to 7
  - Set is_ga to 0
  - Update sources to openjdk-17.0.18+7-ea.tar.xz
  - Set bundled libpng version to 1.6.51
  - Resolves: RHEL-131590
  - Resolves: RHEL-131601
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.18.0.8-1
changelog:
  - Update to jdk-17.0.18+8 (GA)
  - Add to .gitignore openjdk-17.0.18+8.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set buildver to 8
  - Set is_ga to 1
  - Update sources to openjdk-17.0.18+8.tar.xz
  - Resolves: RHEL-139552
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.18.0.8-2
changelog:
  - Set rpmrelease to 2
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9
  - Set fipsver to e1780dd5d39
  - Resolves: RHEL-122136


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.18.0.8-2
changelog:
  - Add test to ensure blocked.certs is valid (OPENJDK-4362)
  - Restore NEWS file so portable can be rebuilt
  - Resolves: RHEL-149327


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.18.0.8-2
changelog:
  - Set portablerelease to 2
  - Remove test to ensure blocked.certs is valid, done in portable
  - Related: RHEL-122136
  - Related: RHEL-131590
  - Related: RHEL-131601
  - Related: RHEL-139552
  - Related: RHEL-149327


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Related: RHEL-103209


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.2-0.1.ea
changelog:
  - Update to jdk-21.0.8+2 (EA)
  - Update release notes to 21.0.8+2
  - Sync the copy of the portable specfile with the latest update
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Related: RHEL-101798
  - Resolves: RHEL-103209


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.8-0.1.ea
changelog:
  - Update to jdk-21.0.8+8 (EA)
  - Update release notes to 21.0.8+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-101798


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland
  - Resolves: RHEL-102677


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Update to jdk-21.0.8+9 (GA)
  - Update release notes to 21.0.8+9
  - Switch to GA mode
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-102289


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-1
changelog:
  - Update to jdk-21.0.9+10 (GA)
  - Update release notes to 21.0.9+10
  - Bump harfbuzz version to 11.2.0 following JDK-8355528
  - Add NEWS corrections from Thomas
  - Use double spacing consistently in notes for this release
  - Correct 11u release reference to corresponding 21u release as pointed out by Kieran
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118774
  - Resolves: RHEL-119466


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118774
  - Related: RHEL-119466


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.10.0.7-1
changelog:
  - Update to jdk-21.0.10+7 (GA)
  - Update release notes to 21.0.10+7
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-142859
  - Resolves: RHEL-139560
  - Resolves: RHEL-131592
  - Resolves: RHEL-131602
  - Resolves: RHEL-122121
  - Resolves: RHEL-142820
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.10.0.7-2
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-142859
  - Related: RHEL-139560
  - Related: RHEL-131592
  - Related: RHEL-131602
  - Related: RHEL-122121
  - Related: RHEL-142820


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.11.0.10-1
changelog:
  - Update to jdk-21.0.11+10 (GA)
  - Update release notes to 21.0.11+10
  - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
  - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158
  - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078
  - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047
  - Bump zlib version to 1.3.2 following JDK-8378631
  - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
  - Resolves: RHEL-169609
  - Resolves: RHEL-133293
  - Resolves: RHEL-147352
  - Resolves: RHEL-148409
  - Resolves: RHEL-148992
  - Resolves: RHEL-157141
  - Resolves: RHEL-161305
  - Resolves: RHEL-161454
  - Resolves: RHEL-169616


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-1
changelog:
  - Update to jdk-21.0.4+7 (GA)
  - Update release notes to 21.0.4+7
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - Add missing section headers in NEWS
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **
  - Resolves: RHEL-47023


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-2
changelog:
  - Vary portablesuffix depending on whether we are on RHEL ('el8') or CentOS ('el9')
  - Handle debugedit being a separate package installed in /usr on RHEL/CentOS 10
  - Add build scripts to repository to ease remembering all CentOS & RHEL targets and options
  - Related: RHEL-58797


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.9-0.2.ea
changelog:
  - Update to jdk-21.0.5+9 (EA)
  - Update release notes to 21.0.5+9
  - Switch to EA mode
  - Bump giflib version to 5.2.2 following JDK-8328999
  - Bump libpng version to 1.6.43 following JDK-8329004
  - Sync with RHEL 7 portable build:
    - Use ExclusiveArch over ExcludeArch
    - pkgos definition needs to be early enough to be used in portablesuffix
  - Make build scripts executable
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-58797
  - Resolves: RHEL-17191


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-2
changelog:
  - Update to jdk-21.0.5+10 (GA)
  - Update release notes to 21.0.5+10
  - Switch to GA mode.
  - Revert JDK-8327501 & JDK-8328366 backport until more mature.
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
  - Resolves: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-3
changelog:
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
  - Related: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-2
changelog:
  - Update to jdk-21.0.5+11 (GA)
  - Update release notes to 21.0.5+11
  - Remove local JDK-8327501 & JDK-8328366 backport as this is now upstream.
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-3
changelog:
  - Transition to the devkit build by not defining pkgos
  - Exempt x86_64 from the static libs debuginfo test until portable uses an older DWARF version
  - Sync the copy of the portable specfile with the devkit version
  - Include the devkit specfile and patches
  - Document the devkit in README.md
  - Resolves: RHEL-74403


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-1
changelog:
  - Update to jdk-21.0.6+7 (GA)
  - Update release notes to 21.0.6+7
  - Sync the copy of the portable & devkit specfiles with the latest update
  - Include the latest devkit patches
  - Update README.md to list an easier way of disabling the devkit
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **
  - Resolves: RHEL-73562


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-1
changelog:
  - Update to jdk-21.0.7+6 (GA)
  - Update release notes to 21.0.7+6
  - Rebase FIPS support against 21.0.7+5
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86984
  - Resolves: RHEL-86635


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-2
changelog:
  - Add local version of JDK-8351500 for early interim release before 21.0.8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-90309


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.8+1 (EA)
  - Update release notes to 21.0.8+1
  - Bump freetype version to 2.13.3 following JDK-8348596
  - Bump harfbuzz version to 10.4.0 following JDK-8348597
  - Bump lcms2 version to 2.17.0 following JDK-8348110
  - Bump libpng version to 1.6.47 following JDK-8348598
  - Switch to EA mode
  - Drop JDK-8351500 local patch which is now available in 21.0.8+1 upstream
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-101798


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Create java-25-openjdk package based on java-21-openjdk
  - Update to jdk-25.0.1+8 (GA)
  - Update release notes with features of JDK 22, 23, 24 & 25
  - Mention finalisation JEP for features finalised in JDK 22, 23 & 24
  - Update release notes to 25.0.1+8
  - Update README file for java-25-openjdk
  - Make sure this is not the default/system JDK providing 'java', 'jre', 'java-devel' ,etc.
  - Remove 21u FIPS patch and disable use until we are ready for the 25 version
  - Adjust CLDR expectations in TestTranslations.java after JDK-8317979 started using tzdata values
  - Adjust TestTranslations.java to expect the same short name throughout for fr_FR and de_DE (bug?)
  - Remove references to libsystemconf.so and nss.fips.cfg from the 21u FIPS patch
  - Include static libraries in the vm_variant subdirectory after JDK-8307858 (libjvm.a)
  - Flip equals test in TestSecurityProperties.java to handle null values from Security.getProperty
  - Introduce crypto_policy_active to designate whether we should expect policy adherence in testing
  - Flip crypto_policy_active to false while the crypto policy & FIPS patch is not present
  - Handle new libsimdsort.so introduced on x86_64 only by JDK-8309130
  - Remove lible.so handling following its removal in JDK-8327476: "Upgrade JLine to 3.26.1"
  - Install jaxp-strict.properties.template added by JDK-8330542: "Template for Creating Strict JAXP Configuration File"
  - alt-java man page installation is now handled by the OpenJDK build
  - Adjust TestTranslations.java with updated German translations from CLDR 46 (JDK-8333582) (Mountain->Mountains)
  - Run javap with the disassembled code (-c) option now required for -l by JDK-8345145
  - Remove default.policy and java.policy following JDK-8338411: "Permanently Disable the Security Manager"
  - Make man page handling dependent on pandoc being available during the portable build
  - Handle new CDS archive variants (*_coh*) added by Compact Object Headers (JDK-8305895)
  - Add missing man page alternatives for jdeprscan, jfr, jhsdb, jimage, jlink & jmod and fix alphabetical ordering
  - Support jnativescan added by JDK-8317611: "Add a tool like jdeprscan to find usage of restricted methods"
  - Add recent native libraries to _privatelibs (libjsvml.so, libsimdsort.so, libsyslookup.so)
  - Support libsleef on AArch64 & RISC-V added by JDK-8329816, JDK-8320500 (RISC-V) & JDK-8312425 (AArch64)
  - Remove superfluous backslashes that cause two alternative commands to be combined
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-126022


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Add libnssadapter.so
  - Add FIPS crypto-policies configuration
  - Remove obsolete security.useSystemPropertiesFile setup
  - Update TestSecurityProperties.java test and calling convention
  - Resolves: RHEL-128414
  - Resolves: RHEL-128412


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS
  - Patch the nssadapter build to recognise LDFLAGS
  - Resolves: RHEL-131898


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-2
changelog:
  - Add java-25-openjdk-crypto-adapter subpackage
  - Update library setting in create-redhat-properties-files.bash
  - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties
  - Resolves: RHEL-132520
  - Resolves: RHEL-132523


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-2
changelog:
  - Incorporate new FIPS patch for 25u
  - Drop static libjvm.a following adjusted build target for portable build
  - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image
  - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-133743
  - Resolves: RHEL-133737
  - Related: RHEL-131898


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-1
changelog:
  - Update to jdk-25.0.2+10 (GA)
  - Update release notes to 25.0.2+10
  - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
  - Test for java.security's existence in create-redhat-properties-files.bash
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
  - Resolves: RHEL-139577
  - Resolves: RHEL-143373
  - Resolves: RHEL-143368
  - Resolves: RHEL-142856
  - Resolves: RHEL-142808


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-139577
  - Related: RHEL-142856
  - Related: RHEL-142808


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-3
changelog:
  - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
  - Fix FIPS issue list to represent the new 25u version
  - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
  - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
  - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
  - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526
  - Bump harfbuzz version to 12.3.2 following JDK-8375057
  - Bump nssadapter version to bring in shared PKCS11 session fix
  - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
  - Add tagging scripts with signature checks and gating handling
  - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3.
  - Add gating scripts to simplify obtaining results and waiving issues
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-155001
  - Resolves: RHEL-147354
  - Resolves: RHEL-148410
  - Resolves: RHEL-148997
  - Resolves: RHEL-155047
  - Resolves: RHEL-155330
  - Resolves: RHEL-156036
  - Resolves: RHEL-156040


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.2.0.10-3
changelog:
  - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
  - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
  - Resolves: RHEL-149786


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.3.0.9-1
changelog:
  - Update to jdk-25.0.3+9 (GA)
  - Update release notes to 25.0.3+9
  - Update FIPS patch to 57722aab802 version synced with 25.0.3+8
  - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream
  - Drop local HarfBuzz patch now JDK-8375057 is included upstream
  - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158
  - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078
  - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047
  - Bump zlib version to 1.3.2 following JDK-8378631
  - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
  - Resolves: RHEL-169619
  - Resolves: RHEL-157142
  - Resolves: RHEL-157154
  - Resolves: RHEL-161306
  - Resolves: RHEL-161455
  - Resolves: RHEL-169615


author: Orion Poplawski <orion@nwra.com> - 0.19-3
changelog:
  - Use autoreconf -f to remove rpath
  - Use --disable-static to disable static builds
  - Use current make macros


author: Jiri Vanek <jvanek@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - criu-devel moved to BR
  - now requires criu-libs
  - enabled debuginfo generation
  - excluded i686 build as criu is 64b only
  - .so file moved out of jar. Required teo patches:
  - added and applied patch0 output_loc.patch
  - added and applied patch1 load_library.patch
  - on aarch64 workarounded missing lib64 on /usr/LD_LIBRARY_PATH


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.3.20210802a3007aa
changelog:
  - Rewrite to use autotools build system, avoiding need for Maven dependencies missing in RHEL 9.
  - This also ensures use of the standard build flags and installs the jar in the expected location.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.4.20210807b2d3751
changelog:
  - Update to latest upstream version with renamed package and consistent use of "jigawatts"
  - Drop library patch which is no longer needed.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.0~SNAPSHOT^20210827.a5f8e31-1
changelog:
  - Store the upstream version (currently "1.0-SNAPSHOT") and snapshot info completely in the Version field rather than using Release.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.21.0.0.0-4
changelog:
  - Bump release number to make RHEL 9.1 build later than RHEL 9 Beta & RHEL 9 GA builds
  - Resolves: rhbz#2071920


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.2-1
changelog:
  - Rebase to JSS 5.0.2
  - Bug 2029838 - SHA1withRSA being listed in signing certificates while approving certificate via Agent page in browser


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.3-1
changelog:
  - Rebase to JSS 5.0.3
  - Bug 2046023 - CVE-2021-4213 jss: memory leak in TLS connection leads to OOM [rhel-9.0]


author: Zamir SUN <zsun@fedoraproject.org> - 0-0.17.20191127gitbd56a60
changelog:
  - Workaround "multiple definition of `yyin'"
  - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=1799559


author: Cestmir Kalina <ckalina@redhat.com> - 0.24
changelog:
  - Fix annocheck failures
  - Fix osci tier0 test reference
  - Fix ET_DYN vmlinux namespace support
  - Resolves: rhbz#2038913
  - Resolves: rhbz#2045976
  - Resolves: rhbz#2038892


author: Akira TAGOH <tagoh@redhat.com> - 2.5-35
changelog:
  - Drop gtk2 dependency completely.
  - Make anthy build conditionally for Fedora release only.
    Resolves: rhbz#1939777
  - Fix build fail without anthy-devel.


author: Kairui Song <kasong@redhat.com> - 006-4.20210721gitd046d22
changelog:
  - Update to latest git snapshot (20210721). Resolves: bz1937035, bz1959203
  - Apply RHEL only patch to enable kdump by default


author: Kairui Song <kasong@redhat.com> - 006-5.20210805gitce26db0
changelog:
  - Update to latest git snapshot, automated installation won't be blocked. Resolves: bz1986969
  - Update RHEL only patch, fix inst.kdump_addon=0 not working issue. Resolves: bz1986942


author: Kairui Song <kasong@redhat.com> - 006-7.20210812git5b74c1d
changelog:
  - Update to latest git snapshot, fix kdump spoke is incomplete after luks device is deleted. Resolves: bz1937035


author: Kairui Song <kasong@redhat.com> - 006-8.20210818git400359b
changelog:
  - Update to latest git snapshot, fix installation failure when reuse old partition. Resolves: bz1937035


author: Kairui Song <kasong@redhat.com> - 006-9.20210819git2026d20
changelog:
  - Update to latest git snapshot, fix encryption warning still present after disabling encryption. Resolves: bz1937035


author: Christine Caulfield <ccaulfie@redhat.com> - 2.2.8-6
changelog:
  - fix "Keepalived claims that blackhole route doesn't have interface and can't be tracked"
    Resolves: RHEL-40520


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-699.el9]
changelog:
  - redhat/configs: Enable MPAM options (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Make resctrl_mon_ctx_waiters static (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Fix the check for no monitor components found (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Fix MBA CDP alloc_capable handling on unmount (Gavin Shan) [RHEL-164227]
  - arm64: mpam: Add initial MPAM documentation (Gavin Shan) [RHEL-164227]
  - arm_mpam: Quirk CMN-650's CSU NRDY behaviour (Gavin Shan) [RHEL-164227]
  - arm_mpam: Add workaround for T241-MPAM-6 (Gavin Shan) [RHEL-164227]
  - arm_mpam: Add workaround for T241-MPAM-4 (Gavin Shan) [RHEL-164227]
  - arm_mpam: Add workaround for T241-MPAM-1 (Gavin Shan) [RHEL-164227]
  - arm_mpam: Add quirk framework (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Call resctrl_init() on platforms that can support resctrl (Gavin Shan) [RHEL-164227]
  - arm64: mpam: Select ARCH_HAS_CPU_RESCTRL (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Add empty definitions for assorted resctrl functions (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Update the rmid reallocation limit (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Add resctrl_arch_rmid_read() (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Allow resctrl to allocate monitors (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Add support for csu counters (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Add monitor initialisation and domain boilerplate (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Add kunit test for control format conversions (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Add support for 'MB' resource (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Wait for cacheinfo to be ready (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Add rmid index helpers (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Convert to/from MPAMs fixed-point formats (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Hide CDP emulation behind CONFIG_EXPERT (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Add CDP emulation (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Add plumbing against arm64 task and cpu hooks (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Implement helpers to update configuration (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Add resctrl_arch_get_config() (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Implement resctrl_arch_reset_all_ctrls() (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Pick the caches we will use as resctrl resources (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Add boilerplate cpuhp and domain allocation (Gavin Shan) [RHEL-164227]
  - KVM: arm64: Force guest EL1 to use user-space's partid configuration (Gavin Shan) [RHEL-164227]
  - arm64: mpam: Add helpers to change a task or cpu's MPAM PARTID/PMG values (Gavin Shan) [RHEL-164227]
  - arm64: mpam: Initialise and context switch the MPAMSM_EL1 register (Gavin Shan) [RHEL-164227]
  - arm64: mpam: Add cpu_pm notifier to restore MPAM sysregs (Gavin Shan) [RHEL-164227]
  - arm64: mpam: Advertise the CPUs MPAM limits to the driver (Gavin Shan) [RHEL-164227]
  - arm64: mpam: Drop the CONFIG_EXPERT restriction (Gavin Shan) [RHEL-164227]
  - arm64: mpam: Re-initialise MPAM regs when CPU comes online (Gavin Shan) [RHEL-164227]
  - arm64: mpam: Context switch the MPAM registers (Gavin Shan) [RHEL-164227]
  - KVM: arm64: Make MPAMSM_EL1 accesses UNDEF (Gavin Shan) [RHEL-164227]
  - KVM: arm64: Preserve host MPAM configuration when changing traps (Gavin Shan) [RHEL-164227]
  - arm64/sysreg: Add MPAMSM_EL1 register (Gavin Shan) [RHEL-164227]
  - arm_mpam: Reset when feature configuration bit unset (Gavin Shan) [RHEL-164227]
  - arm_mpam: Ensure in_reset_state is false after applying configuration (Gavin Shan) [RHEL-164227]
  - arm_mpam: Force __iomem casts (Gavin Shan) [RHEL-100931]
  - arm_mpam: Disable preemption when making accesses to fake MSC in kunit test (Gavin Shan) [RHEL-100931]
  - arm_mpam: Fix null pointer dereference when restoring bandwidth counters (Gavin Shan) [RHEL-100931]
  - arm_mpam: Use non-atomic bitops when modifying feature bitmap (Gavin Shan) [RHEL-100931]
  - arm_mpam: Remove duplicate linux/srcu.h header (Gavin Shan) [RHEL-100931]
  - arm_mpam: Stop using uninitialized variables in __ris_msmon_read() (Gavin Shan) [RHEL-100931]
  - MAINTAINERS: new entry for MPAM Driver (Gavin Shan) [RHEL-100931]
  - arm_mpam: Add kunit tests for props_mismatch() (Gavin Shan) [RHEL-100931]
  - arm_mpam: Add kunit test for bitmap reset (Gavin Shan) [RHEL-100931]
  - arm_mpam: Add helper to reset saved mbwu state (Gavin Shan) [RHEL-100931]
  - arm_mpam: Use long MBWU counters if supported (Gavin Shan) [RHEL-100931]
  - arm_mpam: Probe for long/lwd mbwu counters (Gavin Shan) [RHEL-100931]
  - arm_mpam: Consider overflow in bandwidth counter state (Gavin Shan) [RHEL-100931]
  - arm_mpam: Track bandwidth counter state for power management (Gavin Shan) [RHEL-100931]
  - arm_mpam: Add mpam_msmon_read() to read monitor value (Gavin Shan) [RHEL-100931]
  - arm_mpam: Add helpers to allocate monitors (Gavin Shan) [RHEL-100931]
  - arm_mpam: Probe and reset the rest of the features (Gavin Shan) [RHEL-100931]
  - arm_mpam: Allow configuration to be applied and restored during cpu online (Gavin Shan) [RHEL-100931]
  - arm_mpam: Use a static key to indicate when mpam is enabled (Gavin Shan) [RHEL-100931]
  - arm_mpam: Register and enable IRQs (Gavin Shan) [RHEL-100931]
  - arm_mpam: Extend reset logic to allow devices to be reset any time (Gavin Shan) [RHEL-100931]
  - arm_mpam: Add a helper to touch an MSC from any CPU (Gavin Shan) [RHEL-100931]
  - arm_mpam: Reset MSC controls from cpuhp callbacks (Gavin Shan) [RHEL-100931]
  - arm_mpam: Merge supported features during mpam_enable() into mpam_class (Gavin Shan) [RHEL-100931]
  - arm_mpam: Probe the hardware features resctrl supports (Gavin Shan) [RHEL-100931]
  - arm_mpam: Add helpers for managing the locking around the mon_sel registers (Gavin Shan) [RHEL-100931]
  - arm_mpam: Probe hardware to find the supported partid/pmg values (Gavin Shan) [RHEL-100931]
  - arm_mpam: Add cpuhp callbacks to probe MSC hardware (Gavin Shan) [RHEL-100931]
  - arm_mpam: Add MPAM MSC register layout definitions (Gavin Shan) [RHEL-100931]
  - arm_mpam: Add the class and component structures for firmware described ris (Gavin Shan) [RHEL-100931]
  - arm_mpam: Add probe/remove for mpam msc driver and kbuild boiler plate (Gavin Shan) [RHEL-100931]
  - ACPI / MPAM: Parse the MPAM table (Gavin Shan) [RHEL-100931]
  - ACPI: Define acpi_put_table cleanup handler and acpi_get_table_pointer() helper (Gavin Shan) [RHEL-100931]
  - platform: Define platform_device_put cleanup handler (Gavin Shan) [RHEL-100931]
  - arm64: kconfig: Add Kconfig entry for MPAM (Gavin Shan) [RHEL-100931]
  - ACPI / PPTT: Add a helper to fill a cpumask from a cache_id (Gavin Shan) [RHEL-100931]
  - ACPI / PPTT: Find cache level by cache-id (Gavin Shan) [RHEL-100931]
  - ACPI / PPTT: Add acpi_pptt_cache_v1_full to use pptt cache as one structure (Gavin Shan) [RHEL-100931]
  - ACPI / PPTT: Stop acpi_count_levels() expecting callers to clear levels (Gavin Shan) [RHEL-100931]
  - ACPI / PPTT: Add a helper to fill a cpumask from a processor container (Gavin Shan) [RHEL-100931]
  - cpumask: Add initialiser to use cleanup helpers (Gavin Shan) [RHEL-100931]
  - ACPICA: MPAM: Correct the typo in struct acpi_mpam_msc_node member (Gavin Shan) [RHEL-100931]
  - ACPICA: Add support for Arm's MPAM ACPI table version 2 (Gavin Shan) [RHEL-100931]
  - platform/x86/amd/pmf: Added a module parameter to disable the Smart PC function (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Introduce new interface to export NPU metrics (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Prevent TEE errors after hibernate (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Use ring buffer to store custom BIOS input values (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Use devm_mutex_init() for mutex initialization (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Add BIOS_INPUTS_MAX macro to replace hardcoded array size (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Refactor repetitive BIOS output handling (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Replace magic table id with METRICS_TABLE_ID (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Use explicit SET_CMD/GET_CMD flags in amd_pmf_send_cmd() (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Rename IPU metrics fields to NPU for consistency (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Support new ACPI ID AMDI0108 (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Add debug logs for pending requests and custom BIOS inputs (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Call enact function sooner to process early pending requests (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Preserve custom BIOS inputs for evaluating the policies (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Add custom BIOS input support for AMD_CPU_ID_PS (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Add helper to verify BIOS input notifications are enable/disable (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Update ta_pmf_action structure member (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Extend custom BIOS inputs for more policies (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Fix the custom bios input handling mechanism (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Add support for adjusting PMF PPT and PPT APU thresholds (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Remove redundant ternary operators (David Arcari) [RHEL-128575]
  - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164439]
  - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164439]
  - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164439]
  - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164439]
  - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164439]
  - ipv4: ip_gre: make ipgre_header() robust (Guillaume Nault) [RHEL-152693]
  - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (Guillaume Nault) [RHEL-152693]
  - erspan: Initialize options_len before referencing options. (Guillaume Nault) [RHEL-152693]
  - arp: do not assume dev_hard_header() does not change skb->head (Guillaume Nault) [RHEL-152693]
  - ip6_gre: make ip6gre_header() robust (Guillaume Nault) [RHEL-152693]
  - net/ip6_tunnel: Prevent perpetual tunnel growth (Guillaume Nault) [RHEL-152693]
  - vxlan: Handle error of rtnl_register_module(). (Guillaume Nault) [RHEL-152693]
  - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Herton R. Krzesinski) [RHEL-157267]
  - iommu/amd: Fix potential out-of-bounds read in iommu_mmio_show (Jerry Snitselaar) [RHEL-140473]
  - redhat/configs: Enable AMD IOMMU DebugFS support (Jerry Snitselaar) [RHEL-140473]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-700.el9]
changelog:
  - tools/power/x86/intel-speed-select: v1.25 release (David Arcari) [RHEL-128562]
  - tools/power/x86/intel-speed-select: Fix file descriptor leak in isolate_cpus() (David Arcari) [RHEL-128562]
  - tools/power/x86/intel-speed-select: Use pkg-config for libnl-3.0 detection (David Arcari) [RHEL-128562]
  - tools/power/x86/intel-speed-select: Allow non root users (David Arcari) [RHEL-128562]
  - tools/power/x86/intel-speed-select: v1.24 release (David Arcari) [RHEL-128562]
  - tools/power/x86/intel-speed-select: Reset isst_turbo_freq_info for invalid buckets (David Arcari) [RHEL-128562]
  - tools/power/x86/intel-speed-select: Check feature status (David Arcari) [RHEL-128562]
  - platform/x86: ISST: Increase minor version (David Arcari) [RHEL-128562]
  - platform/x86: ISST: Reset core count to 0 (David Arcari) [RHEL-128562]
  - platform/x86: ISST: Correct locked bit width (David Arcari) [RHEL-128562]
  - platform/x86: ISST: Check HWP support before MSR access (David Arcari) [RHEL-128562]
  - platform/x86: ISST: Optimize suspend/resume callbacks (David Arcari) [RHEL-128562]
  - platform/x86: ISST: Check for admin capability for write commands (David Arcari) [RHEL-128562]
  - platform/x86: ISST: Store and restore all domains data (David Arcari) [RHEL-128562]
  - platform/x86: ISST: Add missing write block check (David Arcari) [RHEL-128562]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-701.el9]
changelog:
  - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172207]
  - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172207]
  - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172207]
  - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172207]
  - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172207] {CVE-2026-31431}
  - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172207] {CVE-2026-23060}
  - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172207]
  - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172207] {CVE-2026-31677}
  - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172207] {CVE-2026-31431}
  - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172207]
  - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171433] {CVE-2026-31607}
  - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-171326] {CVE-2026-31408}
  - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-169810]
  - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-159283]
  - s390/mm: Add missing secure storage access fixups for donated memory (Mete Durlu) [RHEL-168793]
  - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-144961]
  - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-145408]
  - audit: Use kzalloc() instead of kmalloc()/memset() in audit_krule_to_data() (Ricardo Robaina) [RHEL-145408]
  - audit: fix comment misindentation in audit.h (Ricardo Robaina) [RHEL-145408]
  - audit: add a missing tab (Ricardo Robaina) [RHEL-145408]
  - audit: fix typo in auditfilter.c comment (Ricardo Robaina) [RHEL-145408]
  - audit: Replace deprecated strcpy() with strscpy() (Ricardo Robaina) [RHEL-145408]
  - audit: fix indentation in audit_log_exit() (Ricardo Robaina) [RHEL-145408]
  - audit: mark audit_log_vformat() with __printf() attribute (Ricardo Robaina) [RHEL-145408]
  - auditsc: replace memcpy() with strscpy() (Ricardo Robaina) [RHEL-145408]
  - audit: use fsnotify group lock helpers (Ricardo Robaina) [RHEL-145408]
  - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers (Ricardo Robaina) [RHEL-144439]
  - kaslr: rename physmem_end and PHYSMEM_END to direct_map_physmem_end (Ricardo Robaina) [RHEL-144439]
  - arm64: Expose the end of the linear map in PHYSMEM_END (Ricardo Robaina) [RHEL-144439]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-702.el9]
changelog:
  - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-170673]
  - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-167866] {CVE-2025-22075}
  - pcpcntrs: fix dying cpu summation race (Ravi Singh) [RHEL-154600]
  - sched/rt: Skip currently executing CPU in rto_next_cpu() (Herton R. Krzesinski) [RHEL-147187]
  - sched/clock: Avoid false sharing for sched_clock_irqtime (Herton R. Krzesinski) [RHEL-147187]
  - sched: Update rq->avg_idle when a task is moved to an idle CPU (Herton R. Krzesinski) [RHEL-147187]
  - sched/debug: Convert copy_from_user() + kstrtouint() to kstrtouint_from_user() (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Fix pelt clock sync when entering idle (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Remove nohz.nr_cpus and use weight of cpumask instead (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Change likelyhood of nohz.nr_cpus (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Move checking for nohz cpus after time check (Herton R. Krzesinski) [RHEL-147187]
  - sched: Deadline has dynamic priority (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Use cpumask_weight_and() in sched_balance_find_dst_group() (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Simplify task_numa_find_cpu() (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Drop useless cpumask_empty() in find_energy_efficient_cpu() (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Fix sched_avg fold (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Sort out 'blocked_load*' namespace noise (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Avoid rq->lock bouncing in sched_balance_newidle() (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Fold the sched_avg update (Herton R. Krzesinski) [RHEL-147187]
  - <linux/compiler_types.h>: Add the __signed_scalar_typeof() helper (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Fix unfairness caused by stalled tg_load_avg_contrib when the last task migrates out (Herton R. Krzesinski) [RHEL-147187]
  - sched/headers: Remove whitespace noise from kernel/sched/sched.h (Herton R. Krzesinski) [RHEL-147187]
  - sched/isolation: Force housekeeping if isolcpus and nohz_full don't leave any (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Proportional newidle balance (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Small cleanup to update_newidle_cost() (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Small cleanup to sched_balance_newidle() (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Revert max_newidle_lb_cost bump (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Have SD_SERIALIZE affect newidle balancing (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (Herton R. Krzesinski) [RHEL-147187]
  - sched/deadline: Minor cleanup in select_task_rq_dl() (Herton R. Krzesinski) [RHEL-147187]
  - sched/deadline: Use cpumask_weight_and() in dl_bw_cpus (Herton R. Krzesinski) [RHEL-147187]
  - sched/core: Optimize core cookie matching check (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Only update stats for allowed CPUs when looking for dst group (Herton R. Krzesinski) [RHEL-147187]
  - sched/deadline: only set free_cpus for online runqueues (Herton R. Krzesinski) [RHEL-147187]
  - sched/core: Avoid direct access to hrtimer clockbase (Herton R. Krzesinski) [RHEL-147187]
  - sched/deadline: Fix race in push_dl_task() (Herton R. Krzesinski) [RHEL-147187]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-703.el9]
changelog:
  - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-164873]
  - redhat/configs: Enable FFA for TPM on AArch64 (Marcin Juszkiewicz) [RHEL-168115]
  - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169055]
  - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169055]
  - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169055]
  - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169055]
  - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169055]
  - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169055]
  - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169055]
  - RDMA/core: RDMA/mlx5: replace use of system_unbound_wq with system_dfl_wq (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169055]
  - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169055]
  - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169055]
  - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169055]
  - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169055]
  - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169055]
  - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169055]
  - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169055]
  - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169055]
  - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169055]
  - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169055]
  - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169055]
  - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169055]
  - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169055]
  - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169055]
  - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169055]
  - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169055]
  - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169055]
  - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169055]
  - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169055]
  - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169055]
  - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169055]
  - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169055]
  - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169055]
  - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169055]
  - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169055]
  - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169055]
  - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169055]
  - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169055]
  - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169055]
  - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169055]
  - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169055]
  - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169055]
  - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169055]
  - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169055]
  - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169055]
  - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169055]
  - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169055]
  - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169055]
  - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169055]
  - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169055]
  - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169055]
  - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169055]
  - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169055]
  - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169055]
  - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169055]
  - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169055]
  - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169055]
  - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169055]
  - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169055]
  - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169055]
  - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169055]
  - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169055]
  - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169055]
  - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169055]
  - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169055]
  - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169055]
  - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169055]
  - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169055]
  - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169055]
  - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169055]
  - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169055]
  - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169055]
  - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169055]
  - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169055]
  - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169055]
  - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169055]
  - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169055]
  - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169055]
  - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169055]
  - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169055]
  - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169055]
  - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169055]
  - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169055]
  - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169055]
  - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169055]
  - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169055]
  - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169055]
  - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169055]
  - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169055]
  - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169055]
  - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169055]
  - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169055]
  - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169055]
  - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169055]
  - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169055]
  - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169055]
  - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169055]
  - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169055]
  - net: Fix typos (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169055]
  - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169055]
  - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169055]
  - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169055]
  - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169055]
  - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169055]
  - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169055]
  - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169055]
  - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169055]
  - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169055]
  - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169055]
  - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169055]
  - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169055]
  - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169055]
  - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169055]
  - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169055]
  - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169055]
  - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169055]
  - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169055]
  - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169055]
  - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169055]
  - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169055]
  - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169055]
  - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169055]
  - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169055]
  - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169055]
  - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169055]
  - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169055]
  - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169055]
  - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169055]
  - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169055]
  - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169055]
  - redhat/configs: enable ARCH_TEGRA_241_SOC (Marcin Juszkiewicz) [RHEL-166729]
  - soc/tegra: fuse: Define tegra194_soc_attr_group for Tegra241 (Marcin Juszkiewicz) [RHEL-166729]
  - soc/tegra: fuse: Add support for Tegra241 (Marcin Juszkiewicz) [RHEL-166729]
  - drivers/base/node: fix double free in register_one_node() (Mark Langsdorf) [RHEL-156429]
  - PM: domains: Detach on device_unbind_cleanup() (Mark Langsdorf) [RHEL-156429]
  - driver core: get_dev_from_fwnode(): document potential race (Mark Langsdorf) [RHEL-156429]
  - driver core/PM: Set power.no_callbacks along with power.no_pm (Mark Langsdorf) [RHEL-156429]
  - arm64: topology: Do not warn on missing AMU in cpuhp_topology_online() (Mark Langsdorf) [RHEL-156429]
  - genirq: Fix percpu_devid irq affinity documentation (Mark Langsdorf) [RHEL-156429]
  - software node: Also support referencing non-constant software nodes (Mark Langsdorf) [RHEL-156429]
  - platform/x86: intel: chtwc_int33fe: don't dereference swnode args (Mark Langsdorf) [RHEL-156429]
  - usb: hcd: queue wakeup_work to system_freezable_wq workqueue (Mark Langsdorf) [RHEL-156429]
  - device property: Allow secondary lookup in fwnode_get_next_child_node() (Mark Langsdorf) [RHEL-156429]
  - PM: sleep: wakeirq: Update outdated documentation comments (Mark Langsdorf) [RHEL-156429]
  - driver core: remove device_change_owner() export (Mark Langsdorf) [RHEL-156429]
  - PM: sleep: wakeirq: harden dev_pm_clear_wake_irq() against races (Mark Langsdorf) [RHEL-156429]
  - PM: wakeup: Handle empty list in wakeup_sources_walk_start() (Mark Langsdorf) [RHEL-156429]
  - regcache: Demote defaults readback from HW to debug print (Mark Langsdorf) [RHEL-156429]
  - regmap: add KUnit coverage for reg_default_cb callback (Mark Langsdorf) [RHEL-156429]
  - regmap: Add reg_default_cb callback for flat cache defaults (Mark Langsdorf) [RHEL-156429]
  - driver-core: move devres_for_each_res() to base.h (Mark Langsdorf) [RHEL-156429]
  - driver core: faux: stop using static struct device (Mark Langsdorf) [RHEL-156429]
  - driver core: make pinctrl_bind_pins() private (Mark Langsdorf) [RHEL-156429]
  - driver core: attribute_container: change return type to void (Mark Langsdorf) [RHEL-156429]
  - devtmpfs: Replace simple_strtoul with kstrtoint in mount_param (Mark Langsdorf) [RHEL-156429]
  - devtmpfs: make 'devtmpfs_context_ops' static (Mark Langsdorf) [RHEL-156429]
  - regmap: Enable REGMAP when REGMAP_SLIMBUS is enabled (Mark Langsdorf) [RHEL-156429]
  - regmap: Fix race condition in hwspinlock irqsave routine (Mark Langsdorf) [RHEL-156429]
  - driver core: make bus_find_device_by_acpi_dev() stub prototype aligned (Mark Langsdorf) [RHEL-156429]
  - arm64: topology: Handle AMU FIE setup on CPU hotplug (Mark Langsdorf) [RHEL-156429]
  - PM: runtime: Do not clear needs_force_resume with enabled runtime PM (Mark Langsdorf) [RHEL-156429]
  - PM: sleep: Do not flag runtime PM workqueue as freezable (Mark Langsdorf) [RHEL-156429]
  - PM: runtime: Make pm_runtime_barrier() return void (Mark Langsdorf) [RHEL-156429]
  - PM: WQ_UNBOUND added to pm_wq workqueue (Mark Langsdorf) [RHEL-156429]
  - regmap: i3c: switch to use i3c_xfer from i3c_priv_xfer (Mark Langsdorf) [RHEL-156429]
  - driver core: Check drivers_autoprobe for all added devices (Mark Langsdorf) [RHEL-156429]
  - driver core: WQ_PERCPU added to alloc_workqueue users (Mark Langsdorf) [RHEL-156429]
  - driver core: replace use of system_unbound_wq with system_dfl_wq (Mark Langsdorf) [RHEL-156429]
  - tick/nohz: avoid showing '(null)' if nohz_full= not set (Mark Langsdorf) [RHEL-156429]
  - sysfs/cpu: Use DEVICE_ATTR_RO for nohz_full attribute (Mark Langsdorf) [RHEL-156429]
  - software node: allow referencing firmware nodes (Mark Langsdorf) [RHEL-156429]
  - software node: increase the reference of the swnode by its fwnode (Mark Langsdorf) [RHEL-156429]
  - software node: read the reference args via the fwnode API (Mark Langsdorf) [RHEL-156429]
  - PM: wakeup: Add out-of-band system wakeup support for devices (Mark Langsdorf) [RHEL-156429]
  - devres: Move devm_alloc_percpu() and related to devres.h (Mark Langsdorf) [RHEL-156429]
  - devres: Remove unused devm_free_percpu() (Mark Langsdorf) [RHEL-156429]
  - PM: Introduce new PMSG_POWEROFF event (Mark Langsdorf) [RHEL-156429]
  - PM: wakeup: Update after recent wakeup source removal ordering change (Mark Langsdorf) [RHEL-156429]
  - PM: wakeup: Delete timer before removing wakeup source from list (Mark Langsdorf) [RHEL-156429]
  - regmap: i3c: Use ARRAY_SIZE() (Mark Langsdorf) [RHEL-156429]
  - regcache: flat: Split ->populate() from ->init() (Mark Langsdorf) [RHEL-156429]
  - regcache: flat: Remove unneeded check and error message for -ENOMEM (Mark Langsdorf) [RHEL-156429]
  - regcache: rbtree: Split ->populate() from ->init() (Mark Langsdorf) [RHEL-156429]
  - PM: runtime: fix typos in runtime.c comments (Mark Langsdorf) [RHEL-156429]
  - regmap: add flat cache with sparse validity (Mark Langsdorf) [RHEL-156429]
  - of/irq: Add interrupt affinity reporting interface (Mark Langsdorf) [RHEL-156429]
  - ACPI: irq: Add interrupt affinity reporting interface (Mark Langsdorf) [RHEL-156429]
  - irqdomain: Add firmware info reporting interface (Mark Langsdorf) [RHEL-156429]
  - platform: Add firmware-agnostic irq and affinity retrieval interface (Mark Langsdorf) [RHEL-156429]
  - PM: runtime: docs: Update pm_runtime_allow/forbid() documentation (Mark Langsdorf) [RHEL-156429]
  - arch_topology: move parse_acpi_topology() to common code (Mark Langsdorf) [RHEL-156429]
  - PM: sleep: Do not wait on SYNC_STATE_ONLY device links (Mark Langsdorf) [RHEL-156429]
  - drivers/base/node: handle error properly in register_one_node() (Mark Langsdorf) [RHEL-156429]
  - devres: provide devm_kmemdup_const() (Mark Langsdorf) [RHEL-156429]
  - driver core: auxiliary bus: Optimize logic of auxiliary_match_id() (Mark Langsdorf) [RHEL-156429]
  - driver core: auxiliary bus: Drop dev_pm_domain_detach() call (Mark Langsdorf) [RHEL-156429]
  - PM: domains: Add flags to specify power on attach/detach (Mark Langsdorf) [RHEL-156429]
  - driver core: Fix order of the kernel-doc parameters (Mark Langsdorf) [RHEL-156429]
  - driver core: Export get_dev_from_fwnode() (Mark Langsdorf) [RHEL-156429]
  - drivers: base: fix "publically"->"publicly" (Mark Langsdorf) [RHEL-156429]
  - PM: core: Add two macros for walking device links (Mark Langsdorf) [RHEL-156429]
  - PM: core: Annotate loops walking device links as _srcu (Mark Langsdorf) [RHEL-156429]
  - driver core: faux: Set power.no_pm for faux devices (Mark Langsdorf) [RHEL-156429]
  - PM: sleep: core: Clear power.must_resume in noirq suspend error path (Mark Langsdorf) [RHEL-156429]
  - regmap: use int type to store negative error codes (Mark Langsdorf) [RHEL-156429]
  - software node: Constify node_group in registration functions (Mark Langsdorf) [RHEL-156429]
  - irqdomain: Make of_phandle_args_to_fwspec() generally available (Mark Langsdorf) [RHEL-156429]
  - cpufreq: Add new helper function returning cpufreq policy (Mark Langsdorf) [RHEL-156429]
  - regmap: Remove superfluous check for !config in __regmap_init() (Mark Langsdorf) [RHEL-156429]
  - regmap: mmio: Add missing MODULE_DESCRIPTION() (Mark Langsdorf) [RHEL-156429]
  - x86/mm: Add missing saved dirty bit to page protection change mask (Thomas Lopatic) [RHEL-151306]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-704.el9]
changelog:
  - powercap: intel_rapl_tpmi: Remove FW_BUG from invalid version check (David Arcari) [RHEL-128568]
  - powercap: intel_rapl: Expose all package CPUs in PMU cpumask (David Arcari) [RHEL-128568]
  - powercap: intel_rapl: Remove incorrect CPU check in PMU context (David Arcari) [RHEL-128568]
  - powercap: intel_rapl: Add PL4 support for Ice Lake (David Arcari) [RHEL-128568]
  - powercap: Replace sprintf() with sysfs_emit() in sysfs show functions (David Arcari) [RHEL-128568]
  - powercap: intel_rapl: Fix possible recursive lock warning (David Arcari) [RHEL-128568]
  - powercap: fix sscanf() error return value handling (David Arcari) [RHEL-128568]
  - powercap: fix race condition in register_control_type() (David Arcari) [RHEL-128568]
  - powercap: intel_rapl: Enable MSR-based RAPL PMU support (David Arcari) [RHEL-128568]
  - x86/msr: Rename 'rdmsrl_safe_on_cpu()' to 'rdmsrq_safe_on_cpu()' [partial] (David Arcari) [RHEL-128568]
  - x86/msr: Rename 'wrmsrl_safe()' to 'wrmsrq_safe()' [partial] (David Arcari) [RHEL-128568]
  - x86/msr: Rename 'rdmsrl_safe()' to 'rdmsrq_safe()' [partial] (David Arcari) [RHEL-128568]
  - powercap: intel_rapl: Add support for Nova Lake processors (David Arcari) [RHEL-128568]
  - powercap: idle_inject: use us_to_ktime() where appropriate (David Arcari) [RHEL-128568]
  - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172741] {CVE-2026-43051}
  - RDMA/rw: Fall back to direct SGE on MR pool exhaustion (Kamal Heib) [RHEL-163491]
  - RDMA/umem: Fix double dma_buf_unpin in failure path (Kamal Heib) [RHEL-163491]
  - RDMA/core: Fix stale RoCE GIDs during netdev events at registration (Kamal Heib) [RHEL-163491]
  - RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc (Kamal Heib) [RHEL-163491]
  - RDMA/core: add rdma_rw_max_sge() helper for SQ sizing (Kamal Heib) [RHEL-163491]
  - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (Kamal Heib) [RHEL-163491]
  - RDMA/iwcm: Fix workqueue list corruption by removing work_list (Kamal Heib) [RHEL-163491]
  - IB/cache: update gid cache on client reregister event (Kamal Heib) [RHEL-163491]
  - RDMA/core: always drop device refcount in ib_del_sub_device_and_put() (Kamal Heib) [RHEL-163491]
  - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() (Kamal Heib) [RHEL-163491]
  - RDMA/cm: Fix leaking the multicast GID table reference (Kamal Heib) [RHEL-163491]
  - RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly (Kamal Heib) [RHEL-163491]
  - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-99101]
  - md/raid5: Fix UAF on IO across the reshape position (Nigel Croxon) [RHEL-129338]
  - md/md-llbitmap: raise barrier before state machine transition (Nigel Croxon) [RHEL-129338]
  - md/md-llbitmap: skip reading rdevs that are not in_sync (Nigel Croxon) [RHEL-129338]
  - md: suppress spurious superblock update error message for dm-raid (Nigel Croxon) [RHEL-129338]
  - md/dm-raid: check before referencing mddev->bitmap_ops (Nigel Croxon) [RHEL-129338]
  - block: introduce max_{hw|user}_wzeroes_unmap_sectors to queue limits (Nigel Croxon) [RHEL-129338]
  - md: ignore discard return value (Nigel Croxon) [RHEL-129338]
  - dm: clear unmap write zeroes limits when disabling write zeroes (Nigel Croxon) [RHEL-129338]
  - md: adding a CONFIG_MD_LLBITMAP file to build (Nigel Croxon) [RHEL-129338]
  - md: fix return value of mddev_trylock (Nigel Croxon) [RHEL-129338]
  - md/raid1: fix memory leak in raid1_run() (Nigel Croxon) [RHEL-129338]
  - md raid: fix hang when stopping arrays with metadata through dm-raid (Nigel Croxon) [RHEL-129338]
  - md-cluster: fix NULL pointer dereference in process_metadata_update (Nigel Croxon) [RHEL-129338]
  - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-129338]
  - md/md-llbitmap: fix percpu_ref not resurrected on suspend timeout (Nigel Croxon) [RHEL-129338]
  - md/raid5: fix IO hang with degraded array with llbitmap (Nigel Croxon) [RHEL-129338]
  - md: remove recovery_disabled (Nigel Croxon) [RHEL-129338]
  - md/raid10: cleanup skip handling in raid10_sync_request (Nigel Croxon) [RHEL-129338]
  - md/raid10: fix any_working flag handling in raid10_sync_request (Nigel Croxon) [RHEL-129338]
  - md: move finish_reshape to md_finish_sync() (Nigel Croxon) [RHEL-129338]
  - md: factor out sync completion update into helper (Nigel Croxon) [RHEL-129338]
  - md: remove MD_RECOVERY_ERROR handling and simplify resync_offset update (Nigel Croxon) [RHEL-129338]
  - md: update curr_resync_completed even when MD_RECOVERY_INTR is set (Nigel Croxon) [RHEL-129338]
  - md: factor error handling out of md_done_sync into helper (Nigel Croxon) [RHEL-129338]
  - md/raid1: simplify uptodate handling in end_sync_write (Nigel Croxon) [RHEL-129338]
  - md/raid5: make sure max_sectors is not less than io_opt (Nigel Croxon) [RHEL-129338]
  - md/raid5: use mempool to allocate stripe_request_ctx (Nigel Croxon) [RHEL-129338]
  - md: merge mddev serialize_policy into mddev_flags (Nigel Croxon) [RHEL-129338]
  - md: merge mddev faillast_dev into mddev_flags (Nigel Croxon) [RHEL-129338]
  - md: merge mddev has_superblock into mddev_flags (Nigel Croxon) [RHEL-129338]
  - md/raid5: fix raid5_run() to return error when log_init() fails (Nigel Croxon) [RHEL-129338]
  - md: fix missing integer (Nigel Croxon) [RHEL-129338]
  - md: Fix forward incompatibility from configurable logical block size (Nigel Croxon) [RHEL-129338]
  - md: Fix logical_block_size configuration being overwritten (Nigel Croxon) [RHEL-129338]
  - md: suspend array while updating raid_disks via sysfs (Nigel Croxon) [RHEL-129338] {CVE-2025-71225}
  - md/raid5: fix possible null-pointer dereferences in raid5_store_group_thread_cnt() (Nigel Croxon) [RHEL-129338] {CVE-2025-71135}
  - md: Fix static checker warning in analyze_sbs (Nigel Croxon) [RHEL-129338]
  - md: remove legacy 1s delay in md_notify_reboot (Nigel Croxon) [RHEL-129338]
  - md/raid5: fix IO hang when array is broken with IO inflight (Nigel Croxon) [RHEL-129338]
  - md: warn about updating super block failure (Nigel Croxon) [RHEL-129338]
  - md/raid0: fix NULL pointer dereference in create_strip_zones() for dm-raid (Nigel Croxon) [RHEL-129338]
  - md: allow configuring logical block size (Nigel Croxon) [RHEL-129338]
  - md: add check_new_feature module parameter (Nigel Croxon) [RHEL-129338]
  - md: fix how device node is created and removed (Nigel Croxon) [RHEL-129338]
  - md/raid0: Move queue limit setup before r0conf initialization (Nigel Croxon) [RHEL-129338]
  - md: init bioset in mddev_init (Nigel Croxon) [RHEL-129338] {CVE-2025-68368}
  - md: delete md_redundancy_group when array is becoming inactive (Nigel Croxon) [RHEL-129338]
  - md: prevent adding disks with larger logical_block_size to active arrays (Nigel Croxon) [RHEL-129338]
  - md/raid5: remove redundant __GFP_NOWARN (Nigel Croxon) [RHEL-129338]
  - md: avoid repeated calls to del_gendisk (Nigel Croxon) [RHEL-129338] {CVE-2025-68373}
  - md/md-llbitmap: Remove unneeded semicolon (Nigel Croxon) [RHEL-129338]
  - md/md-linear: Enable atomic writes (Nigel Croxon) [RHEL-129338]
  - Factor out code into md_should_do_recovery() (Nigel Croxon) [RHEL-129338]
  - md: fix rcu protection in md_wakeup_thread (Nigel Croxon) [RHEL-129338] {CVE-2025-68374}
  - md: init queue_limits->max_hw_wzeroes_unmap_sectors parameter (Nigel Croxon) [RHEL-129338]
  - md/md-llbitmap: Use DIV_ROUND_UP_SECTOR_T (Nigel Croxon) [RHEL-129338]
  - md/md-llbitmap: introduce new lockless bitmap (Nigel Croxon) [RHEL-129338]
  - md/md-bitmap: make method bitmap_ops->daemon_work optional (Nigel Croxon) [RHEL-129338]
  - md: add a new recovery_flag MD_RECOVERY_LAZY_RECOVER (Nigel Croxon) [RHEL-129338]
  - md/md-bitmap: add a new method blocks_synced() in bitmap_operations (Nigel Croxon) [RHEL-129338]
  - md/md-bitmap: add a new method skip_sync_blocks() in bitmap_operations (Nigel Croxon) [RHEL-129338]
  - md/md-bitmap: delay registration of bitmap_ops until creating bitmap (Nigel Croxon) [RHEL-129338]
  - md/md-bitmap: add a new sysfs api bitmap_type (Nigel Croxon) [RHEL-129338]
  - md: add a new mddev field 'bitmap_id' (Nigel Croxon) [RHEL-129338]
  - md/md-bitmap: support discard for bitmap ops (Nigel Croxon) [RHEL-129338]
  - md: factor out a helper raid_is_456() (Nigel Croxon) [RHEL-129338]
  - md: add a new parameter 'offset' to md_super_write() (Nigel Croxon) [RHEL-129338]
  - md/md-bitmap: introduce CONFIG_MD_BITMAP (Nigel Croxon) [RHEL-129338]
  - md: check before referencing mddev->bitmap_ops (Nigel Croxon) [RHEL-129338]
  - md/raid5: check before referencing mddev->bitmap_ops (Nigel Croxon) [RHEL-129338]
  - md/raid10: check before referencing mddev->bitmap_ops (Nigel Croxon) [RHEL-129338]
  - md/raid1: check before referencing mddev->bitmap_ops (Nigel Croxon) [RHEL-129338]
  - md/md-bitmap: remove the parameter 'init' for bitmap_ops->resize() (Nigel Croxon) [RHEL-129338]
  - md/raid1: check bitmap before behind write (Nigel Croxon) [RHEL-129338]
  - md/md-bitmap: handle the case bitmap is not enabled before end_sync() (Nigel Croxon) [RHEL-129338]
  - md/md-bitmap: handle the case bitmap is not enabled before start_sync() (Nigel Croxon) [RHEL-129338]
  - md/md-bitmap: add md_bitmap_registered/enabled() helper (Nigel Croxon) [RHEL-129338]
  - md/md-bitmap: add a new parameter 'flush' to bitmap_ops->enabled (Nigel Croxon) [RHEL-129338]
  - md/md-bitmap: merge md_bitmap_group into bitmap_operations (Nigel Croxon) [RHEL-129338]
  - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-148781] {CVE-2025-71089}
  - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-148781] {CVE-2025-71089}
  - ext4: fix dirtyclusters double decrement on fs shutdown (Brian Foster) [RHEL-145583]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-705.el9]
changelog:
  - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172621] {CVE-2026-43027}
  - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171156] {CVE-2026-31685}
  - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170915]
  - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169624]
  - dm cache: fix missing return in invalidate_committed's error path (Benjamin Marzinski) [RHEL-169976]
  - dm cache metadata: fix memory leak on metadata abort retry (Benjamin Marzinski) [RHEL-169975]
  - dm cache: prevent entering passthrough mode after unclean shutdown (Benjamin Marzinski) [RHEL-169976]
  - dm cache: fix dirty mapping checking in passthrough mode switching (Benjamin Marzinski) [RHEL-169976]
  - dm cache: fix concurrent write failure in passthrough mode (Benjamin Marzinski) [RHEL-169976]
  - dm cache policy smq: fix missing locks in invalidating cache blocks (Benjamin Marzinski) [RHEL-169976]
  - dm cache: fix write hang in passthrough mode (Benjamin Marzinski) [RHEL-169976]
  - dm cache: fix write path cache coherency in passthrough mode (Benjamin Marzinski) [RHEL-169976]
  - dm cache: fix null-deref with concurrent writes in passthrough mode (Benjamin Marzinski) [RHEL-169976]
  - x86/platform/uv: Handle deconfigured sockets (Krzysztof Pawlinski) [RHEL-158968]
  - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-161149] {CVE-2025-68741}
  - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-152685]
  - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp (Florian Westphal) [RHEL-152685]
  - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-152685]
  - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-152685]
  - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-152685]
  - netfilter: bpf: defer hook memory release until rcu readers are done (Florian Westphal) [RHEL-152685]
  - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (Florian Westphal) [RHEL-152685]
  - netfilter: xt_CT: drop pending enqueued packets on template removal (Florian Westphal) [RHEL-152685]
  - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-152685]
  - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-152685]
  - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-152685]
  - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-152685]
  - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-152685]
  - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-152685]
  - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (Florian Westphal) [RHEL-152685]
  - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (Florian Westphal) [RHEL-152685]
  - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-152685]
  - netfilter: x_tables: guard option walkers against 1-byte tail reads (Florian Westphal) [RHEL-152685]
  - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-152685]
  - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-152685]
  - netfilter: nf_tables: fix set size with rbtree backend (Florian Westphal) [RHEL-152685]
  - netfilter: nf_tables: always increment set element count (Florian Westphal) [RHEL-152685]
  - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-152685]
  - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-152685]
  - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-152685]
  - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-152685]
  - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-152685]
  - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-152685]
  - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-152685]
  - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-152685]
  - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-152685]
  - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-152685]
  - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-152685]
  - netfilter: xt_tcpmss: check remaining length before reading optlen (Florian Westphal) [RHEL-152685]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-706.el9]
changelog:
  - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-142433]
  - io_uring/kbuf: check if target buffer list is still legacy on recycle (Jeff Moyer) [RHEL-161185]
  - sctp: discard stale INIT after handshake completion (Xin Long) [RHEL-158357]
  - netfilter: skip recording stale or retransmitted INIT (Xin Long) [RHEL-158357]
  - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CKI Backport Bot) [RHEL-169733] {CVE-2025-68183}
  - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-166730] {CVE-2025-39766}
  - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-166730] {CVE-2025-39766}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-707.el9]
changelog:
  - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176447] {CVE-2026-46333}
  - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174754] {CVE-2026-43303}
  - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172822]
  - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172822]
  - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172822]
  - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172822]
  - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172822] {CVE-2026-31709}
  - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167274]
  - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167274]
  - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167274]
  - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167274]
  - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167834]
  - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167834]
  - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167834]
  - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172939]
  - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172939]
  - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172939]
  - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172939]
  - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172939]
  - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172939]
  - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172939]
  - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172939]
  - blk-cgroup: wait for blkcg cleanup before initializing new disk (Ming Lei) [RHEL-105810]
  - scsi: ses: Fix devices attaching to different hosts (Tomas Henzl) [RHEL-68372]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-708.el9]
changelog:
  - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176922] {CVE-2026-43329}
  - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174565] {CVE-2026-43284}
  - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171139] {CVE-2026-31684}
  - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-159632]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-709.el9]
changelog:
  - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173885] {CVE-2026-43116}
  - xfs: fix remote xattr valuelblk check (CKI Backport Bot) [RHEL-174056] {CVE-2026-43158}
  - xfs: fix the xattr scrub to detect freemap/entries array collisions (CKI Backport Bot) [RHEL-174056] {CVE-2026-43158}
  - xfs: strengthen attr leaf block freemap checking (CKI Backport Bot) [RHEL-174056] {CVE-2026-43158}
  - xfs: refactor attr3 leaf table size computation (CKI Backport Bot) [RHEL-174056] {CVE-2026-43158}
  - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174056] {CVE-2026-43158}
  - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174056] {CVE-2026-43158}
  - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172859] {CVE-2026-31772}
  - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172600] {CVE-2026-43023}
  - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172573] {CVE-2026-43020}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-710.el9]
changelog:
  - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-171801] {CVE-2025-38653}
  - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-171801] {CVE-2025-38653}
  - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (Abhi Das) [RHEL-171801] {CVE-2025-38653}
  - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172166]
  - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172166]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-711.el9]
changelog:
  - s390/tape: Add support for bigger block sizes (Ramesh Chhetri) [RHEL-136092]
  - s390/tape: Introduce idal buffer array (Ramesh Chhetri) [RHEL-136092]
  - s390/tape: Move idal allocation to core functions (Ramesh Chhetri) [RHEL-136092]
  - s390/tape: Fix return value of ccw helper functions (Ramesh Chhetri) [RHEL-136092]
  - s390/tape: Remove extra CCW allocation for error recovery (Ramesh Chhetri) [RHEL-136092]
  - s390/tape: Remove 3590 Read Opposite error recovery (Ramesh Chhetri) [RHEL-136092]
  - s390/tape: Remove 34xx Read Opposite error recovery (Ramesh Chhetri) [RHEL-136092]
  - s390/tape: Remove count parameter from read/write_block functions (Ramesh Chhetri) [RHEL-136092]
  - efi/capsule-loader: fix incorrect sizeof in phys array reallocation (Thomas Huth) [RHEL-168822]
  - arm64: efi: Fix NULL pointer dereference by initializing user_ns (Thomas Huth) [RHEL-168822]
  - arm64/efi: Drop efi_rt_lock spinlock from EFI arch wrapper (Thomas Huth) [RHEL-168822]
  - efi/runtime-wrappers: Keep track of the efi_runtime_lock owner (Thomas Huth) [RHEL-168822]
  - arm64: fix unnecessary rebuilding when CONFIG_DEBUG_EFI=y (Thomas Huth) [RHEL-168822]
  - efi/libstub: use 'targets' instead of extra-y in Makefile (Thomas Huth) [RHEL-168822]
  - arm64/fpsimd: Avoid unnecessary per-CPU buffers for EFI runtime calls (Thomas Huth) [RHEL-168822]
  - efi/cper, cxl: Remove cper_cxl.h (Thomas Huth) [RHEL-168822]
  - efi/cper, cxl: Make definitions and structures global (Thomas Huth) [RHEL-168822]
  - efi/cper, cxl: Prefix protocol error struct and function names with cxl_ (Thomas Huth) [RHEL-168822]
  - x86/efistub: Merge PE and handover entrypoints (Thomas Huth) [RHEL-168822]
  - x86/efistub: Call mixed mode boot services on the firmware's stack (Thomas Huth) [RHEL-168822]
  - efi: Use BIT_ULL() constants for memory attributes (Thomas Huth) [RHEL-168822]
  - efi: Avoid cold plugged memory for placing the kernel (Thomas Huth) [RHEL-168822]
  - efi/zboot: Limit compression options to GZIP and ZSTD (Thomas Huth) [RHEL-168822]
  - efi/libstub: Take command line overrides into account for loaded files (Thomas Huth) [RHEL-168822]
  - efi/libstub: Fix command line fallback handling when loading files (Thomas Huth) [RHEL-168822]
  - efi/libstub: Parse builtin command line after bootloader provided one (Thomas Huth) [RHEL-168822]
  - x86/efi: Apply EFI Memory Attributes after kexec (Thomas Huth) [RHEL-168822]
  - x86/efi: Drop support for the EFI_PROPERTIES_TABLE (Thomas Huth) [RHEL-168822]
  - efi/zboot: Fix outdated comment about using LoadImage/StartImage (Thomas Huth) [RHEL-168822]
  - efi/libstub: remove unnecessary cmd_line_len from efi_convert_cmdline() (Thomas Huth) [RHEL-168822]
  - efi: Remove redundant null pointer checks in efi_debugfs_init() (Thomas Huth) [RHEL-168822]
  - efi: Replace efi_memory_attributes_table_t 0-sized array with flexible array (Thomas Huth) [RHEL-168822]
  - efi: Rename efi_early_memdesc_ptr() to efi_memdesc_ptr() (Thomas Huth) [RHEL-168822]
  - x86/efi: Drop support for fake EFI memory maps (Thomas Huth) [RHEL-168822]
  - efi: Add missing __nocfi annotations to runtime wrappers (Thomas Huth) [RHEL-168822]
  - x86/boot: Move mem_encrypt= parsing to the decompressor (Thomas Huth) [RHEL-168822]
  - efi/libstub: Add generic support for parsing mem_encrypt= (Thomas Huth) [RHEL-168822]
  - x86/efi: Implement arch_ima_efi_boot_mode() in source file (Thomas Huth) [RHEL-168822]
  - efi: Don't add memblocks for soft-reserved memory (Thomas Huth) [RHEL-168822]
  - efi: expose efivar generic ops register function (Thomas Huth) [RHEL-168822]
  - efi: dev-path-parser: use acpi_dev_uid_match() for matching _UID (Thomas Huth) [RHEL-168822]
  - efi/libstub: zboot: do not use $(shell ...) in cmd_copy_and_pad (Thomas Huth) [RHEL-168822]
  - efi/esrt: Allow ESRT access without CAP_SYS_ADMIN (Thomas Huth) [RHEL-168822]
  - efi/libstub: zboot: Avoid eager evaluation of objcopy flags (Thomas Huth) [RHEL-168822]
  - efi/zboot: arm64: Grab code size from ELF symbol in payload (Thomas Huth) [RHEL-168822]
  - efi/zboot: arm64: Inject kernel code size symbol into the zboot payload (Thomas Huth) [RHEL-168822]
  - efi/zboot: Set forward edge CFI compat header flag if supported (Thomas Huth) [RHEL-168822]
  - efi/zboot: Add BSS padding before compression (Thomas Huth) [RHEL-168822]
  - efi: arm64: Wire up BTI annotation in memory attributes table (Thomas Huth) [RHEL-168822]
  - efi/cper: Export several helpers for ghes_edac to use (Thomas Huth) [RHEL-168822]
  - firmware: dmi: Fortify entry point length checks (Thomas Huth) [RHEL-168822]
  - efi/dev-path-parser: Refactor _UID handling to use acpi_dev_uid_to_integer() (Thomas Huth) [RHEL-168822]
  - firmware: dmi: Use the proper accessor for the version field (Thomas Huth) [RHEL-168822]
  - efi: vars: Drop __efivar_entry_iter() helper which is no longer used (Thomas Huth) [RHEL-168822]
  - firmware: arm_scmi: Relax base protocol sanity checks on the protocol list (Thomas Huth) [RHEL-168822]
  - efi: Wipe INITRD config table from memory after consumption (Thomas Huth) [RHEL-168822]
  - efi/cper: Fix cper_bits_to_str buffer handling and return value (Thomas Huth) [RHEL-168822]
  - docs: efi: add CPER functions to driver-api (Thomas Huth) [RHEL-168822]
  - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs (Thomas Huth) [RHEL-168822]
  - efi/cper: Add a new helper function to print bitmasks (Thomas Huth) [RHEL-168822]
  - efi/cper: Adjust infopfx size to accept an extra space (Thomas Huth) [RHEL-168822]
  - efi: Fix trailing whitespace in header file (Thomas Huth) [RHEL-168822]
  - efi/memattr: Convert efi_memattr_init() return type to void (Thomas Huth) [RHEL-168822]
  - efi/libstub: Fix page table access in 5-level to 4-level paging transition (Thomas Huth) [RHEL-168822]
  - PCI: rcar-host: Add OF Kconfig dependency to avoid objtool no-cfi warning (Thomas Huth) [RHEL-168822]
  - objtool: Validate kCFI calls (Thomas Huth) [RHEL-168822]
  - efistub: Lower default log level (Thomas Huth) [RHEL-168822]
  - arm64: efi: Fix KASAN false positive for EFI runtime stack (Thomas Huth) [RHEL-168822]
  - efi/efi_test: Fix missing pending status update in getwakeuptime (Thomas Huth) [RHEL-168822]
  - efi/libstub: Describe missing 'out' parameter in efi_load_initrd (Thomas Huth) [RHEL-168822]
  - efi: Improve logging around memmap init (Thomas Huth) [RHEL-168822]
  - efi/libstub: Avoid CopyMem/SetMem EFI services after ExitBootServices (Thomas Huth) [RHEL-168822]
  - efi: efibc: change kmalloc(size * count, ...) to kmalloc_array() (Thomas Huth) [RHEL-168822]
  - efi/libstub: Avoid physical address 0x0 when doing random allocation (Thomas Huth) [RHEL-168822]
  - efi/mokvar-table: Avoid repeated map/unmap of the same page (Thomas Huth) [RHEL-168822]
  - efi: Don't map the entire mokvar table to determine its size (Thomas Huth) [RHEL-168822]
  - efi/cper: Fix cper_arm_ctx_info alignment (Thomas Huth) [RHEL-168822]
  - efi/cper: Fix cper_ia_proc_ctx alignment (Thomas Huth) [RHEL-168822]
  - x86/efi: skip memattr table on kexec boot (Thomas Huth) [RHEL-168822]
  - efi: libstub: Use '-std=gnu11' to fix build with GCC 15 (Thomas Huth) [RHEL-168822]
  - efi: sysfb_efi: fix W=1 warnings when EFI is not set (Thomas Huth) [RHEL-168822]
  - efi/esrt: remove esre_attribute::store() (Thomas Huth) [RHEL-168822]
  - efi: Fix memory leak in efivar_ssdt_load (Thomas Huth) [RHEL-168822]
  - efi: ssdt: Don't free memory if ACPI table was loaded successfully (Thomas Huth) [RHEL-168822]
  - efi: fix memory leak in krealloc failure handling (Thomas Huth) [RHEL-168822]
  - efi: avoid efivars layer when loading SSDTs from variables (Thomas Huth) [RHEL-168822]
  - efi/memattr: Ignore table if the size is clearly bogus (Thomas Huth) [RHEL-168822]
  - efi/libstub: Free correct pointer on failure (Thomas Huth) [RHEL-168822]
  - efi/libstub: measure initrd to PCR9 independent of source (Thomas Huth) [RHEL-168822]
  - efi/libstub: fix efi_parse_options() ignoring the default command line (Thomas Huth) [RHEL-168822]
  - x86/efistub: Revert to heap allocated boot_params for PE entrypoint (Thomas Huth) [RHEL-168822]
  - efi/libstub: Zero initialize heap allocated struct screen_info (Thomas Huth) [RHEL-168822]
  - x86/efistub: Avoid returning EFI_SUCCESS on error (Thomas Huth) [RHEL-168822]
  - efi/libstub: zboot.lds: Discard .discard sections (Thomas Huth) [RHEL-168822]
  - efi: libstub: only free priv.runtime_map when allocated (Thomas Huth) [RHEL-168822]
  - x86/efistub: Reinstate soft limit for initrd loading (Thomas Huth) [RHEL-168822]
  - efi/libstub: Add one kernel-doc comment (Thomas Huth) [RHEL-168822]
  - efi: Remove unused extern declaration efi_lookup_mapped_addr() (Thomas Huth) [RHEL-168822]
  - efi/libstub: Disable PCI DMA before grabbing the EFI memory map (Thomas Huth) [RHEL-168822]
  - efi: make kobj_type structure constant (Thomas Huth) [RHEL-168822]
  - efi/capsule-loader: fix incorrect allocation size (Thomas Huth) [RHEL-168822]
  - efi: memmap: fix kernel-doc warnings (Thomas Huth) [RHEL-168822]
  - x86/efistub: Fix PCI ROM preservation in mixed mode (Thomas Huth) [RHEL-168822]
  - efi/cper, cxl: Remove cxl_err.h (Thomas Huth) [RHEL-168822]
  - efi/earlycon: Speed up scrolling by disregarding empty space (Thomas Huth) [RHEL-168822]
  - x86/pvh: Make PVH entrypoint PIC for x86-64 (Thomas Huth) [RHEL-168822]
  - efi: sysfb_efi: remove unnecessary <asm/efi.h> include (Thomas Huth) [RHEL-168822]
  - efifb: Remove redundant efifb_setup_from_dmi stub (Thomas Huth) [RHEL-168822]
  - efi: Add missing prototype for efi_capsule_setup_info (Thomas Huth) [RHEL-168822]
  - include/linux/efi.h: Remove unneeded whitespaces before tabs (Thomas Huth) [RHEL-168822]
  - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle (Thomas Huth) [RHEL-168822]
  - efi/earlycon: Replace open coded strnchrnul() (Thomas Huth) [RHEL-168822]
  - efi: efibc: Guard against allocation failure (Thomas Huth) [RHEL-168822]
  - efi: efibc: avoid efivar API for setting variables (Thomas Huth) [RHEL-168822]
  - efi: vars: Use locking version to iterate over efivars linked lists (Thomas Huth) [RHEL-168822]
  - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171725]
  - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171725]
  - redhat: added INTEL_MEI_LB config (Krzysztof Pawlinski) [RHEL-117354]
  - mei: me: add nova lake point H DID (Krzysztof Pawlinski) [RHEL-117354]
  - mei: late_bind: fix struct intel_lb_component_ops kernel-doc (Krzysztof Pawlinski) [RHEL-117354]
  - mei: me: use PCI_DEVICE_DATA macro (Krzysztof Pawlinski) [RHEL-117354]
  - mei: me: reduce the scope on unexpected reset (Krzysztof Pawlinski) [RHEL-117354]
  - mei: trace: treat reg parameter as string (Krzysztof Pawlinski) [RHEL-117354]
  - misc/mei: gsc_proxy: add dependency on Xe driver (Krzysztof Pawlinski) [RHEL-117354]
  - misc/mei: Allow building standalone for compile testing (Krzysztof Pawlinski) [RHEL-117354]
  - misc/mei: Decouple ME interfaces from GPU drivers (Krzysztof Pawlinski) [RHEL-117354]
  - mei: vsc: Drop unused vsc_tp_request_irq() and vsc_tp_free_irq() (Krzysztof Pawlinski) [RHEL-117354]
  - mei: me: add nova lake point S DID (Krzysztof Pawlinski) [RHEL-117354]
  - mei: Fix error handling in mei_register (Krzysztof Pawlinski) [RHEL-117354]
  - mei: gsc: add dependency on Xe driver (Krzysztof Pawlinski) [RHEL-117354]
  - mei: Remove redundant pm_runtime_mark_last_busy() calls (Krzysztof Pawlinski) [RHEL-117354]
  - mei: fix error flow in probe (Krzysztof Pawlinski) [RHEL-117354]
  - mei: txe: fix initialization order (Krzysztof Pawlinski) [RHEL-117354]
  - mei: late_bind: Fix -Wincompatible-function-pointer-types-strict (Krzysztof Pawlinski) [RHEL-117354]
  - mei: late_bind: add late binding component driver (Krzysztof Pawlinski) [RHEL-117354]
  - mei: bus: add mei_cldev_mtu interface (Krzysztof Pawlinski) [RHEL-117354]
  - mei: gsc: demote unexpected reset print (Krzysztof Pawlinski) [RHEL-117354]
  - mei: bus: demote error on connect (Krzysztof Pawlinski) [RHEL-117354]
  - mei: retry connect if interrupted by link reset (Krzysztof Pawlinski) [RHEL-117354]
  - mei: make a local copy of client uuid in connect (Krzysztof Pawlinski) [RHEL-117354]
  - mei: me: trigger link reset if hw ready is unexpected (Krzysztof Pawlinski) [RHEL-117354]
  - mei: gsc: fix remove operations order (Krzysztof Pawlinski) [RHEL-117354]
  - mei: hook mei_device on class device (Krzysztof Pawlinski) [RHEL-117354]
  - mei: more prints with client prefix (Krzysztof Pawlinski) [RHEL-117354]
  - mei: bus: use cldev in prints (Krzysztof Pawlinski) [RHEL-117354]
  - mei: bus: Check for still connected devices in mei_cl_bus_dev_release() (Krzysztof Pawlinski) [RHEL-117354]
  - mei: vsc: Fix "BUG: Invalid wait context" lockdep error (Krzysztof Pawlinski) [RHEL-117354]
  - mei: vsc: Run event callback from a workqueue (Krzysztof Pawlinski) [RHEL-117354]
  - mei: vsc: Unset the event callback on remove and probe errors (Krzysztof Pawlinski) [RHEL-117354]
  - mei: vsc: Event notifier fixes (Krzysztof Pawlinski) [RHEL-117354]
  - mei: vsc: Destroy mutex after freeing the IRQ (Krzysztof Pawlinski) [RHEL-117354]
  - mei: vsc: Use vsc_tp_remove() as shutdown handler (Krzysztof Pawlinski) [RHEL-117354]
  - mei: vsc: Don't call vsc_tp_reset() a second time on shutdown (Krzysztof Pawlinski) [RHEL-117354]
  - mei: vsc: Don't re-init VSC from mei_vsc_hw_reset() on stop (Krzysztof Pawlinski) [RHEL-117354]
  - mei: bus: replace sprintf/scnprintf with sysfs_emit in show functions (Krzysztof Pawlinski) [RHEL-117354]
  - mei: vsc: Cast tx_buf to (__be32 *) when passed to cpu_to_be32_array() (Krzysztof Pawlinski) [RHEL-117354]
  - mei: Cast the cb->ext_hdr allocation type (Krzysztof Pawlinski) [RHEL-117354]
  - mei: vsc: Use struct vsc_tp_packet as vsc-tp tx_buf and rx_buf type (Krzysztof Pawlinski) [RHEL-117354]
  - mei: vsc: Fix fortify-panic caused by invalid counted_by() use (Krzysztof Pawlinski) [RHEL-117354]
  - mei: me: add panther lake H DID (Krzysztof Pawlinski) [RHEL-117354]
  - mei: Remove unused functions (Krzysztof Pawlinski) [RHEL-117354]
  - mei: vsc: Use "wakeuphostint" when getting the host wakeup GPIO (Krzysztof Pawlinski) [RHEL-117354]
  - scsi: smartpqi: Silence a recursive lock warning (Tomas Henzl) [RHEL-141518]
  - drivers/video/logo: new kconfig (Mika Penttilä) [RHEL-135262]
  - drivers/video/logo: compile fix (Mika Penttilä) [RHEL-135262]
  - video/logo: don't select LOGO_LINUX_MONO and LOGO_LINUX_VGA16 by default (Mika Penttilä) [RHEL-135262]
  - video/logo: move logo selection logic to Kconfig (Mika Penttilä) [RHEL-135262]
  - video/logo: remove logo_mac_clut224 (Mika Penttilä) [RHEL-135262]
  - newport_con: depend on LOGO_LINUX_CLUT224 instead of LOGO_SGI_CLUT224 (Mika Penttilä) [RHEL-135262]
  - video/logo: allow custom logo (Mika Penttilä) [RHEL-135262]
  - video/logo: add a type parameter to the logo makefile function (Mika Penttilä) [RHEL-135262]
  - fbdev: au1100fb: Replace license boilerplate by SPDX header (Mika Penttilä) [RHEL-135262]
  - fbdev: au1100fb: Fold au1100fb.h into its only user (Mika Penttilä) [RHEL-135262]
  - fbdev: au1100fb: Replace custom printk wrappers by pr_* (Mika Penttilä) [RHEL-135262]
  - fbdev: au1100fb: Make driver compilable on non-mips platforms (Mika Penttilä) [RHEL-135262]
  - fbdev: au1100fb: Use proper conversion specifiers in printk formats (Mika Penttilä) [RHEL-135262]
  - fbdev: au1100fb: Don't store device specific data in global variables (Mika Penttilä) [RHEL-135262]
  - fbcon: Remove struct fbcon_display.inverse (Mika Penttilä) [RHEL-135262]
  - fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe() (Mika Penttilä) [RHEL-135262]
  - fbdev: ffb: fix corrupted video output on Sun FFB1 (Mika Penttilä) [RHEL-135262]
  - fbdev: of_display_timing: Fix device node reference leak in of_get_display_timings() (Mika Penttilä) [RHEL-135262]
  - fbdev: au1100fb: Check return value of clk_enable() in .resume() (Mika Penttilä) [RHEL-135262]
  - fbdev: fix fb_pad_unaligned_buffer mask (Mika Penttilä) [RHEL-135262]
  - fbdev: of: display_timing: fix refcount leak in of_get_display_timings() (Mika Penttilä) [RHEL-135262]
  - fbdev: vt8500lcdfb: fix missing dma_free_coherent() (Mika Penttilä) [RHEL-135262]
  - video/logo: remove orphan .pgm Makefile rule (Mika Penttilä) [RHEL-135262]
  - fbdev: omapfb: remove duplicate check in omapfb_setup_mem() (Mika Penttilä) [RHEL-135262]
  - fbdev: sh_mobile_lcdc: Make FB_DEVICE dependency optional (Mika Penttilä) [RHEL-135262]
  - fbdev: omapfb: Make FB_DEVICE dependency optional (Mika Penttilä) [RHEL-135262]
  - fbcon: check return value of con2fb_acquire_newinfo() (Mika Penttilä) [RHEL-135262]
  - fbdev: Use device_create_with_groups() to fix sysfs groups registration race (Mika Penttilä) [RHEL-135262]
  - fbdev: smscufx: properly copy ioctl memory to kernelspace (Mika Penttilä) [RHEL-135262]
  - fbdev: rivafb: fix divide error in nv3_arb() (Mika Penttilä) [RHEL-135262]
  - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() (Mika Penttilä) [RHEL-135262]
  - fbdev: i810: use appopriate log interface dev_info (Mika Penttilä) [RHEL-135262]
  - fbdev: tridentfb: replace printk() with dev_*() in probe (Mika Penttilä) [RHEL-135262]
  - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing (Mika Penttilä) [RHEL-135262]
  - fbdev: tcx.c fix mem_map to correct smem_start offset (Mika Penttilä) [RHEL-135262]
  - drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (Mika Penttilä) [RHEL-135262]
  - fbdev: gxt4500fb: Use dev_err instead of printk (Mika Penttilä) [RHEL-135262]
  - fbdev: gbefb: fix to use physical address instead of dma address (Mika Penttilä) [RHEL-135262]
  - fbdev: vesafb: Use dev_* fn's instead printk (Mika Penttilä) [RHEL-135262]
  - fbdev: vga16fb: Request memory region (Mika Penttilä) [RHEL-135262]
  - fbdev: vga16fb: replace printk() with dev_*() in probe (Mika Penttilä) [RHEL-135262]
  - fbdev: atyfb: Check if pll_ops->init_pll failed (Mika Penttilä) [RHEL-135262]
  - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-135262]
  - fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS (Mika Penttilä) [RHEL-135262]
  - fbdev: valkyriefb: Fix reference count leak in valkyriefb_init (Mika Penttilä) [RHEL-135262]
  - fbdev: Fix logic error in "offb" name match (Mika Penttilä) [RHEL-135262]
  - fbdev: Make drivers depend on LCD_CLASS_DEVICE (Mika Penttilä) [RHEL-135262]
  - fbdev: radeonfb: Remove stale product link in Kconfig (Mika Penttilä) [RHEL-135262]
  - fbdev: simplefb: Fix use after free in simplefb_detach_genpds() (Mika Penttilä) [RHEL-135262]
  - fbdev: s3fb: Revert mclk stop in suspend (Mika Penttilä) [RHEL-135262]
  - fbdev: mb862xxfb: Use int type to store negative error codes (Mika Penttilä) [RHEL-135262]
  - fbdev: Use string choices helpers (Mika Penttilä) [RHEL-135262]
  - fbdev: core: Fix ubsan warning in pixel_to_pat (Mika Penttilä) [RHEL-135262]
  - fbdev: s3fb: Implement 1 and 2 BPP modes, improve 4 BPP (Mika Penttilä) [RHEL-135262]
  - fbdev: s3fb: Implement powersave for S3 FB (Mika Penttilä) [RHEL-135262]
  - fbdev: xenfb: Use vmalloc_array to simplify code (Mika Penttilä) [RHEL-135262]
  - fbdev/simplefb: Sort headers correctly (Mika Penttilä) [RHEL-135262]
  - fbdev: Turn FB_MODE_HELPERS into an internal config option (Mika Penttilä) [RHEL-135262]
  - fbdev: Make drivers depend on FB_TILEBLITTING (Mika Penttilä) [RHEL-135262]
  - fbcon: Streamline setting rotated/unrotated bitops (Mika Penttilä) [RHEL-135262]
  - fbcon: Move fbcon callbacks into struct fbcon_bitops (Mika Penttilä) [RHEL-135262]
  - fbcon: Set rotate_font callback with related callbacks (Mika Penttilä) [RHEL-135262]
  - fbcon: Rename struct fbcon_ops to struct fbcon_par (Mika Penttilä) [RHEL-135262]
  - fbcon: Fix empty lines in fbcon.h (Mika Penttilä) [RHEL-135262]
  - drm/vesadrm: Support DRM_FORMAT_C8 (Mika Penttilä) [RHEL-135262]
  - video: pixel_format: Add compare helpers (Mika Penttilä) [RHEL-135262]
  - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171472] {CVE-2026-31613}
  - ipmi:si: Fix check for a misbehaving BMC (Tony Camuso) [RHEL-158957]
  - ipmi:msghandler: Handle error returns from the SMI sender (Tony Camuso) [RHEL-158957]
  - ipmi:si: Don't block module unload if the BMC is messed up (Tony Camuso) [RHEL-158957]
  - ipmi:si: Use a long timeout when the BMC is misbehaving (Tony Camuso) [RHEL-158957]
  - ipmi:si: Handle waiting messages when BMC failure detected (Tony Camuso) [RHEL-158957]
  - ipmi:ls2k: Make ipmi_ls2k_platform_driver static (Tony Camuso) [RHEL-158957]
  - ipmi: ipmb: initialise event handler read bytes (Tony Camuso) [RHEL-158957]
  - ipmi: Consolidate the run to completion checking for xmit msgs lock (Tony Camuso) [RHEL-158957]
  - ipmi: Fix use-after-free and list corruption on sender error (Tony Camuso) [RHEL-158957]
  - ipmi: Switch to use %ptSp (Tony Camuso) [RHEL-158957]
  - ipmi: Skip channel scan if channels are already marked ready (Tony Camuso) [RHEL-158957]
  - ipmi: Fix __scan_channels() failing to rescan channels (Tony Camuso) [RHEL-158957]
  - ipmi: Fix the race between __scan_channels() and deliver_response() (Tony Camuso) [RHEL-158957]
  - ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-158957]
  - ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-158957]
  - ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-158957]
  - ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-158957]
  - ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-158957]
  - ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-158957]
  - ipmi:si: Merge some if statements (Tony Camuso) [RHEL-158957]
  - ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-158957]
  - ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-158957]
  - ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-158957]
  - ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-158957]
  - ipmi: Rework user message limit handling (Tony Camuso) [RHEL-158957]
  - Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-158957]
  - ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-158957]
  - ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-158957]
  - char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-158957]
  - ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-158957]
  - ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-158957]
  - ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-158957]
  - ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-158957]
  - ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-158957]
  - ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-158957]
  - ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-158957]
  - ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-158957]
  - ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-158957]
  - ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-158957]
  - ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-158957]
  - ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-158957]
  - ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-158957]
  - ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-158957]
  - ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-158957]
  - ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-158957]
  - ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-158957]
  - ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-158957]
  - ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-158957]
  - ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-158957]
  - ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-158957]
  - ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-158957]
  - ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-158957]
  - ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-158957]
  - ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-158957]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-712.el9]
changelog:
  - selftests/x86: fix Makefile dependencies to work with clang (David Arcari) [RHEL-115163]
  - selftests/x86/apx: Add APX test (David Arcari) [RHEL-115163]
  - selftests/x86/xstate: Fix spelling mistake "hader" -> "header" (David Arcari) [RHEL-115163]
  - selftests/x86/avx: Add AVX tests (David Arcari) [RHEL-115163]
  - selftests/x86/xstate: Clarify supported xstates (David Arcari) [RHEL-115163]
  - selftests/x86/xstate: Consolidate test invocations into a single entry (David Arcari) [RHEL-115163]
  - selftests/x86/xstate: Introduce signal ABI test (David Arcari) [RHEL-115163]
  - selftests/x86/xstate: Refactor ptrace ABI test (David Arcari) [RHEL-115163]
  - selftests/x86/xstate: Refactor context switching test (David Arcari) [RHEL-115163]
  - selftests/x86/xstate: Enumerate and name xstate components (David Arcari) [RHEL-115163]
  - selftests/x86/xstate: Refactor XSAVE helpers for general use (David Arcari) [RHEL-115163]
  - selftests/x86: Consolidate redundant signal helper functions (David Arcari) [RHEL-115163]
  - selftests/x86: Fix error: variably modified 'altstack_data' at file scope (David Arcari) [RHEL-115163]
  - selftests/x86: remove (or use) unused variables and functions (David Arcari) [RHEL-115163]
  - x86/selftests: Skip the tests if prerequisites aren't fulfilled (David Arcari) [RHEL-115163]
  - selftests/x86/amx: Add a ptrace test (David Arcari) [RHEL-115163]
  - selftests/x86/amx: Update the ARCH_REQ_XCOMP_PERM test (David Arcari) [RHEL-115163]
  - x86/fpu: Rename fpu_reset_fpregs() to fpu_reset_fpstate_regs() (David Arcari) [RHEL-115163]
  - x86/fpu: Remove export of mxcsr_feature_mask (David Arcari) [RHEL-115163]
  - x86/pkeys: Simplify PKRU update in signal frame (David Arcari) [RHEL-115163]
  - x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE (David Arcari) [RHEL-115163]
  - x86/fpu: Log XSAVE disablement consistently (David Arcari) [RHEL-115163]
  - x86/fpu/apx: Enable APX state support (David Arcari) [RHEL-115163]
  - x86/fpu/apx: Disallow conflicting MPX presence (David Arcari) [RHEL-115163]
  - x86/fpu/apx: Define APX state component (David Arcari) [RHEL-115163]
  - x86/cpufeatures: Add X86_FEATURE_APX (David Arcari) [RHEL-115163]
  - x86/fpu/xstate: Adjust xstate copying logic for user ABI (David Arcari) [RHEL-115163]
  - x86/fpu/xstate: Adjust XSAVE buffer size calculation (David Arcari) [RHEL-115163]
  - x86/fpu/xstate: Introduce xfeature order table and accessor macro (David Arcari) [RHEL-115163]
  - x86/fpu/xstate: Remove xstate offset check (David Arcari) [RHEL-115163]
  - x86/fpu/xstate: Simplify print_xstate_features() (David Arcari) [RHEL-115163]
  - x86/pkeys: Ensure updated PKRU value is XRSTOR'd (David Arcari) [RHEL-115163]
  - x86/pkeys: Change caller of update_pkru_in_sigframe() (David Arcari) [RHEL-115163]
  - x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported (David Arcari) [RHEL-115163]
  - x86/pkeys: Update PKRU to enable all pkeys before XSAVE (David Arcari) [RHEL-115163]
  - x86/pkeys: Add helper functions to update PKRU on the sigframe (David Arcari) [RHEL-115163]
  - x86/pkeys: Add PKRU as a parameter in signal handling functions (David Arcari) [RHEL-115163]
  - Subject: net/iucv: Add missing kernel-doc return value descriptions (Ramesh Chhetri) [RHEL-136141]
  - s390/qeth: Handle ambiguous OSA RCs in s390dbf (Ramesh Chhetri) [RHEL-136141]
  - s390/qeth: Move all OSA RCs to single enum (Ramesh Chhetri) [RHEL-136141]
  - s390/ctcm: Fix double-kfree (Ramesh Chhetri) [RHEL-136141]
  - s390/ctcm: Use info level for handshake UC_RCRESET (Ramesh Chhetri) [RHEL-136141]
  - s390/iucv: Convert sprintf/snprintf to scnprintf (Ramesh Chhetri) [RHEL-136141]
  - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-113460]
  - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-113460]
  - Subject: s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-113460]
  - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-113460]
  - ALSA: update RHEL kconfigs for 7.0 upstream code (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp: Fix Kconfig dependencies for SND_SOC_ACPI_AMD_SDCA_QUIRKS (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: NVL-S: add platform name (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: NVL: add platform name (Jaroslav Kysela) [RHEL-168091]
  - ASoC: rt1320: fix the warning 'rae_fw' from request_firmware() not released (Jaroslav Kysela) [RHEL-168091]
  - ASoC: cs35l56: do not use 'acquire' PM API (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tas2781: update i2c ops to match older API (Jaroslav Kysela) [RHEL-168091]
  - ASoC: soc-dapm: additional fixes for move struct snd_soc_dapm_context (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/tas2781: Fix sound abnormal issue on some SPI device (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Exclude Scarlett 18i20 1st Gen from SKIP_IFACE_SETUP (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Evaluate packsize caps at the right place (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Correct kernel doc for sdca_irq_cleanup() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp: update DMI quirk and add ACP DMIC for Lenovo platforms (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Unregister IRQ handlers on module remove (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: mask Function_Status value (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Fix overwritten var within for loop (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: hda: modify period size constraints for ACE4 (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/intel: enforce stricter period-size alignment for Intel NVL (Jaroslav Kysela) [RHEL-168091]
  - ASoC: nau8325: Add software reset during probe (Jaroslav Kysela) [RHEL-168091]
  - Revert "ALSA: hda/realtek: Add quirk for Gigabyte Technology to fix headphone" (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: avs: Fix memory leak in avs_register_i2s_test_boards() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: fix iteration in is_endpoint_present() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: Fix endpoint index if endpoints are missing (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Fix errors in IRQ cleanup (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp: add Lenovo P16s G5 AMD quirk for legacy SDW machine (Jaroslav Kysela) [RHEL-168091]
  - ASoC: qcom: audioreach: explicitly enable speaker protection modules (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IAH10 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: ps: Fix missing leading zeros in subsystem_device SSID log (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen (8016) from SKIP_IFACE_SETUP (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: add quirk for Acer Swift SFG14-73 (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IMH9 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: boards: fix unmet dependency on PINCTRL (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: ehl_rt5660: Use the correct rtd->dev device in hw_params (Jaroslav Kysela) [RHEL-168091]
  - ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Add quirk for Lenovo Yoga Slim 7 14AKP10 (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: add quirk for HP Laptop 15-fc0xxx (Jaroslav Kysela) [RHEL-168091]
  - ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure (Jaroslav Kysela) [RHEL-168091]
  - ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Add quirk for Samsung Book2 Pro 360 (NP950QED) (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: yc: Add DMI entry for HP Laptop 15-fc0xxx (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 16X OLED M7601RM (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Add quirk for ASUS ROG Strix SCAR 15 (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Exclude Scarlett Solo 1st Gen from SKIP_IFACE_SETUP (Jaroslav Kysela) [RHEL-168091]
  - ALSA: caiaq: fix stack out-of-bounds read in init_card (Jaroslav Kysela) [RHEL-168091]
  - ALSA: ctxfi: Check the error for index mapping (Jaroslav Kysela) [RHEL-168091]
  - ALSA: ctxfi: Fix missing SPDIFI1 index handling (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: add quirk for HP Victus 15-fb0xxx (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/intel: Add MSI X870E Tomahawk to denylist by DMI ID (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: add quirk for Framework F111:000F (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: change quirk for HP OmniBook 7 Laptop 16-bh0xxx (Jaroslav Kysela) [RHEL-168091]
  - Revert "ALSA: hda/intel: Add MSI X870E Tomahawk to denylist" (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Add iface reset and delay quirk for AB17X USB Audio (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: add HP Laptop 15-fd0xxx mute LED quirk (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Exclude Scarlett 2i4 1st Gen from SKIP_IFACE_SETUP (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek - Fixed Speaker Mute LED for HP EliteBoard G1a platform (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc4-topology: Allow bytes controls without initial payload (Jaroslav Kysela) [RHEL-168091]
  - ASoC: adau1372: Fix clock leak on PLL lock failure (Jaroslav Kysela) [RHEL-168091]
  - ASoC: adau1372: Fix unchecked clk_prepare_enable() return value (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: fix finding wrong entity (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: remove the max count of initialization table (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: wcd934x: fix typo in dt parsing (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: catpt: Fix the device initialization (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp: add ASUS HN7306EA quirk for legacy SDW machine (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: topology: reject invalid vendor array size in token parser (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tas2781: Add null check for calibration data (Jaroslav Kysela) [RHEL-168091]
  - ALSA: asihpi: avoid write overflow check warning (Jaroslav Kysela) [RHEL-168091]
  - ASoC: fsl: imx-card: initialize playback_only and capture_only (Jaroslav Kysela) [RHEL-168091]
  - ASoC: simple-card-utils: Check value of is_playback_only and is_capture_only (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: qcom: Fix the license marking (Jaroslav Kysela) [RHEL-168091]
  - ALSA:usb:qcom: add AUXILIARY_BUS to Kconfig dependencies (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen from SKIP_IFACE_SETUP (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: yc: Add DMI quirk for Thin A15 B7VF (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK BM1403CDA (Jaroslav Kysela) [RHEL-168091]
  - ALSA: firewire-lib: fix uninitialized local variable (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: add quirk for ASUS Strix G16 G615JMR (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Sequence GPIO2 on Star Labs StarFighter (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp: add PX13 SoundWire machine link for rt721+tas2783x2 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp: add DMI override for ACP70 flag (Jaroslav Kysela) [RHEL-168091]
  - ASoC: sma1307: fix double free of devm_kzalloc() memory (Jaroslav Kysela) [RHEL-168091] {CVE-2026-31475}
  - ALSA: hda/realtek: Add HP ENVY Laptop 13-ba0xxx quirk (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Add quirk for ASUS ROG Flow Z13-KJP GZ302EAC (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: add quirk for Lenovo Yoga 7 2-in-1 16AKP10 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp-mach-common: Add missing error check for clock acquisition (Jaroslav Kysela) [RHEL-168091]
  - ASoC: detect empty DMI strings (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Add iface reset and delay quirk for SPACETOUCH USB Audio (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces (Jaroslav Kysela) [RHEL-168091]
  - ASoC: simple-card-utils: fix graph_util_is_ports0() for DT overlays (Jaroslav Kysela) [RHEL-168091]
  - ASoC: soc-core: flush delayed work before removing DAIs and widgets (Jaroslav Kysela) [RHEL-168091]
  - ASoC: soc-core: drop delayed_work_pending() check before flush (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tegra: Add support for Tegra238 soundcard (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390 (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: add quirk for ASUS UM6702RC (Jaroslav Kysela) [RHEL-168091]
  - ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Add quirk for Gigabyte Technology to fix headphone (Jaroslav Kysela) [RHEL-168091]
  - ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start (Jaroslav Kysela) [RHEL-168091]
  - ALSA: us122l: drop redundant interface references (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/senary: Ensure EAPD is enabled during init (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/senary: Use codec->core.afg for GPIO access (Jaroslav Kysela) [RHEL-168091]
  - ALSA: doc: usb-audio: Add doc for QUIRK_FLAG_SKIP_IFACE_SETUP (Jaroslav Kysela) [RHEL-168091]
  - ASoC: dt-bindings: tegra: Add compatible for Tegra238 sound card (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/hdmi: Add Tegra238 HDA codec device ID (Jaroslav Kysela) [RHEL-168091]
  - ASoC: cs35l56: Suppress pointless warning about number of GPIO pulls (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp: Add ACP6.3 match entries for Cirrus Logic parts (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: sof_sdw: Add quirk for Alienware Area 51 (2025) 0CCD SKU (Jaroslav Kysela) [RHEL-168091]
  - ASoC: rt1321: fix DMIC ch2/3 mask issue (Jaroslav Kysela) [RHEL-168091]
  - ASoC: cs35l56: Only patch ASP registers if the DAI is part of a DAIlink (Jaroslav Kysela) [RHEL-168091]
  - ALSA: firewire: dice: Fix printf warning with W=1 (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/tas2781: A workaround solution to lower-vol issue among lower calibrated-impedance micro-speaker on TAS2781 (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Add quirk for HP Pavilion 15-eh1xxx to enable mute LED (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/ca0132: Set HP/Speaker auto-detect default from headphone pin verb (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Fix comments for sdca_irq_request() (Jaroslav Kysela) [RHEL-168091]
  - ALSA: us144mkii: Drop kernel-doc markers (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Drop superfluous kernel-doc markers (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb: qcom: Correct parameter comment for uaudio_transfer_buffer_setup() (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda: cs35l56: Fix signedness error in cs35l56_hda_posture_put() (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Use correct version for UAC3 header validation (Jaroslav Kysela) [RHEL-168091] {CVE-2026-23318}
  - ALSA: hda/realtek: add quirk for Acer Nitro ANV15-51 (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/intel: increase default bdl_pos_adj for Nvidia controllers (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Check max frame size for implicit feedback mode, too (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Use inclusive terms (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Cap the packet size pre-calculations (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table (Jaroslav Kysela) [RHEL-168091]
  - ASoC: cs42l43: Report insert for exotic peripherals (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Skip clock selector for Focusrite devices (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Add QUIRK_FLAG_SKIP_IFACE_SETUP (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Improve Focusrite sample rate filtering (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: add quirk for Samsung Galaxy Book Flex (NT950QCT-A38A) (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: fix model name typo for Samsung Galaxy Book Flex (NT950QCG-X716) (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Add quirk for Acer Aspire V3-572G (Jaroslav Kysela) [RHEL-168091]
  - ALSA: scarlett2: Fix DSP filter control array handling (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Fix speaker pop on Star Labs StarFighter (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/hdmi: Add quirk for TUXEDO IBS14G6 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: amd_sdw: add machine driver quirk for Lenovo models (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp: Add ACP7.0 match entries for Realtek parts (Jaroslav Kysela) [RHEL-168091]
  - ALSA: echoaudio: Add SPDX ids to some files (Jaroslav Kysela) [RHEL-168091]
  - ALSA: isa: Add SPDX id lines to some files (Jaroslav Kysela) [RHEL-168091]
  - ALSA: core: Add SPDX license id to files (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tas2783A: add explicit port prepare handling (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Fix headset mic on ASUS Zenbook 14 UX3405MA (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: qcom: sm8250: Add quinary MI2S support (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Avoid potentially repeated XRUN error messages (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Add sanity check for OOB writes at silencing (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Update the number of packets properly at receiving (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: aw88261: Fix erroneous bitmask logic in Awinic init (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Add iface reset and delay quirk for GHW-123P (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/tas2781: Ignore reset check for SPI device (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Add quirk for Samsung Galaxy Book3 Pro 360 (NP965QFG) (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Add quirk for Gigabyte G5 KF5 (2023) (Jaroslav Kysela) [RHEL-168091]
  - ASoC: rt721-sdca: Fix issue of fail to detect OMTP jack type (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Add DSD support for iBasso DC04U (Jaroslav Kysela) [RHEL-168091]
  - ALSA: mixer: oss: Add card disconnect checkpoints (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc4-control: Set correct error code in refresh_bytes_control (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: select CONFIG_SND_HDA_EXT_CORE from SND_SOC_SOF_HDA_COMMON (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio (Jaroslav Kysela) [RHEL-168091]
  - ALSA: ctxfi: Add quirk for SE-300PCIE variant (160b:0102) (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/generic: fix typos in comments (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek - Enable mute LEDs on HP ENVY x360 15-es0xxx (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 (Jaroslav Kysela) [RHEL-168091]
  - ALSA: oss: delete self assignment (Jaroslav Kysela) [RHEL-168091]
  - ASoC: cs35l56-test: Fix missing module namespace import (Jaroslav Kysela) [RHEL-168091]
  - ASoC: cs35l56-shared: KUnit tests for onchip speaker ID gpios (Jaroslav Kysela) [RHEL-168091]
  - ASoC: cs35l56: Support for reading speaker ID from on-chip GPIOs (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Limit values user can write to Selected Mode (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Add regmap defaults for specification defined values (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Rearrange FDL file messages (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Still process most of the jack detect if control is missing (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Handle volatile controls correctly (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Remove outdated todo comment (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tas2781: Put three different calibrated data solution into the same data structure (Jaroslav Kysela) [RHEL-168091]
  - ASoC: dt-bindings: fsl_rpmsg: Add compatible string for i.MX952 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: dt-bindings: fsl_rpmsg: Add compatible string for i.MX94 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: hda: Add a virtual CPU DAI (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: hda: Fix NULL pointer dereference (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: sof-audio: Add support for loopback capture (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: sof-audio: Traverse paths with aggregated DAI widgets (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc4-topology: Add support for process modules with no input pins (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc4-topology: Add new tokens for pipeline direction (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: sof_sdw: Add a DAI link for loopback capture (Jaroslav Kysela) [RHEL-168091]
  - uapi: sound: sof: tokens: Add missing token for KCPS (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: pcm: Split up widget prepare and setup (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: sof-audio: Add a new op in struct sof_ipc_tplg_ops (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Add quirk for Minisforum V3 SE (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: hda: add SDCA property check (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: allow module parameter override BT link to 0 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: soc-acpi-intel-ptl-match: drop rt721 related match tables (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: hda-sdw-bpt: support simultaneous audio and BPT streams (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: add hda_dma_prepare/cleanup helpers (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: add hda_dsp_stream_pair_get/put helpers (Jaroslav Kysela) [RHEL-168091]
  - ASoC: wcd-mbhc-v2: remove unnecessary module_init/exit functions (Jaroslav Kysela) [RHEL-168091]
  - docs: fix 're-use' -> 'reuse' in documentation (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp: Add ACP7.0 match entries for Cirrus Logic parts (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp: Sort Cirrus Logic match entries (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp: Rename Cirrus Logic component match entries to include link and uid (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp: Sort match table into most specific first (Jaroslav Kysela) [RHEL-168091]
  - ASoC: es8328: Add error unwind in resume (Jaroslav Kysela) [RHEL-168091]
  - ASoC: es8328: Use cached regmap on resume (Jaroslav Kysela) [RHEL-168091]
  - ASoC: es8328: Check errors in set_dai_fmt() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: es8328: Propagate errors in set_bias_level() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: es8328: Fix DAC deemphasis control handling (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: aw87390: Add Anbernic RG-DS amp driver (Jaroslav Kysela) [RHEL-168091]
  - ASoC: dt-bindings: aw87390: Add Anbernic RG-DS Amplifier (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: max98390: Check return value of devm_gpiod_get_optional() in max98390_i2c_probe() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: sdca: Fix missing regmap dependencies in Kconfig (Jaroslav Kysela) [RHEL-168091]
  - ASoC: soc-core: add lockdep_assert_held() at snd_soc_unregister_dai() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tegra: set reg_default_cb callback (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tegra: Add AHUB writeable_reg for RX holes (Jaroslav Kysela) [RHEL-168091]
  - ASoC: wm8962: add .set_tdm_slot callback function (Jaroslav Kysela) [RHEL-168091]
  - ASoC: sun4i-spdif: Add missing check for devm_regmap_init_mmio (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: add mixer support for Focusrite Forte (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: fix LG Gram Style 14 speakers (Jaroslav Kysela) [RHEL-168091]
  - ALSA: jack: Improve string handling in jack_kctl_name_gen (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/tas2781: Add tas2781_hda::catlog_id init (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/conexant: Add headset mic fix for MECHREVO Wujie 15X Pro (Jaroslav Kysela) [RHEL-168091]
  - ASoC: dt-bindings: fsl,mqs: make gpr optional for SM-based SoCs (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: wm8731: Remove unnecessary NULL check before clk_prepare_enable/clk_disable_unprepare (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: rt1320-sdw: Refactor to reduce stack frames (Jaroslav Kysela) [RHEL-168091]
  - ASoC: sdw_utils: Add quirk to ignore RT722 DMIC DAI (Jaroslav Kysela) [RHEL-168091]
  - ASoC: soc-dapm: tidyup function naming (Jaroslav Kysela) [RHEL-168091]
  - ASoC: soc-dapm: move struct snd_soc_dapm_context (Jaroslav Kysela) [RHEL-168091]
  - ASoC: soc-dapm: add snd_soc_dapm_alloc() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: soc-dapm: remove dev from snd_soc_dapm_context() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: soc-dapm: remove compatibility definition for dapm (Jaroslav Kysela) [RHEL-168091]
  - ASoC: soc-component: remove compatibility definition for component (Jaroslav Kysela) [RHEL-168091]
  - ASoC: soc-component: remove snd_soc_component_xxx() wrapper (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tlv320adcx140: don't use snd_soc_component_get_bias_level() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: rt56*: Remove IRQF_ONESHOT (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/tas2781: Drop the unused macro definition (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Add NO_DIRECT_COMPLETE flag to class driver (Jaroslav Kysela) [RHEL-168091]
  - ASoC: cs35l56: Add KUnit testing of cs35l56_set_fw_suffix() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: cs-amp-lib: Add a Kconfig symbol for enabling test hooks (Jaroslav Kysela) [RHEL-168091]
  - ASoC: cs-amp-lib-test: Tests for reading SSIDExV2 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: cs35l56: Use vendor-specific qualifier in firmware file search (Jaroslav Kysela) [RHEL-168091]
  - ASoC: cs-amp-lib: Support Dell SSIDExV2 UEFI variable (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda: controllers: intel: add support for Nova Lake (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda: core: intel-dsp-config: Add support for NVL (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: add support for Nova Lake NVL (Jaroslav Kysela) [RHEL-168091]
  - PCI: Add Intel Nova Lake audio Device ID (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: hda: Remove MODULE_SOFTDEP for snd-hda-codec-hdmi (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tas2783A: fw loading for devices without pci bus (Jaroslav Kysela) [RHEL-168091]
  - ASoC: sdw_utils: remove dai registered check (Jaroslav Kysela) [RHEL-168091]
  - ASoC: realtek: fix misspelling of "minimum" in comments (Jaroslav Kysela) [RHEL-168091]
  - ASoC: soc-acpi-intel-ptl-match: use aggregated endpoint in ptl_rt722_l0_rt1320_l23 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: soc-acpi-intel-arl-match: change rt722 amp endpoint to aggregated (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/cirrus_scodec_test: Use faux_device instead of platform_device (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-168091]
  - ASoC: es8328: Propagate error codes from regmap updates (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-168091]
  - dt-bindings: sound: google,goldfish-audio: Convert to DT schema (Jaroslav Kysela) [RHEL-168091]
  - ASoC: intel: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Add lock to serialise the Function initialisation (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Device boot into the system suspend process (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Add basic system suspend support (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Add SDCA IRQ enable/disable helpers (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: aw88261: use dvdd-supply regulator (Jaroslav Kysela) [RHEL-168091]
  - ASoC: dt-bindings: document dvdd-supply property for awinic,aw88261 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tlv320adcx140: add channel sum control (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tlv320adcx140: add kcontrol for num biquads (Jaroslav Kysela) [RHEL-168091]
  - ASoC: dt-bindings: add avdd and iovdd supply (Jaroslav Kysela) [RHEL-168091]
  - ASoC: dt-bindings: clarify areg-supply documentation (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tlv320adcx140: add avdd and iovdd supply (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tlv320adcx140: power on/off the device on demand (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: clean up presonus s1810 consts (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: presonus s18xx uses little-endian (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: add HP Victus 16-e0xxx mute LED quirk (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/cs8409: Add quirk for CDB35L56-FOUR-HD (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp: soc-acpi: add is_device_rt712_vb() helper (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: drop unused Kconfig symbols (Jaroslav Kysela) [RHEL-168091]
  - ASoC: pxa: drop unused Kconfig symbol (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: rtq9128: Add compatible changes for rtq9154 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: dt-bindings: rtq9128: Add rtq9154 backward compatible (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: rtq9128: Modify the chip initial setting (Jaroslav Kysela) [RHEL-168091]
  - ASoC: wm8962: Don't report a microphone if it's shorted to ground on plug (Jaroslav Kysela) [RHEL-168091]
  - ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask (Jaroslav Kysela) [RHEL-168091]
  - ASoC: sof ipc4: Add sof_ipc4_widget_setup_msg_payload() and call it (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc4: sof_ipc4_module_init_ext_init structs and macros (Jaroslav Kysela) [RHEL-168091]
  - ASoC: sof: ipc4-topology: Add topology tokens domain_in stack & heap_bytes (Jaroslav Kysela) [RHEL-168091]
  - ASoC: sof: Add domain_id, heap_bytes and stack_bytes to snd_sof_widget (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc/ops: Use guard() for spinlocks (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: Use guard() for spinlocks where it makes sense (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: imx: imx-common: Use guard() for spinlock_irqsafe() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: amd: acp-ipc: Use guard() for spinlock_irq() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Use guard()/scoped_guard() for mutex locks where it makes sense (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: Use guard()/scoped_guard() for mutex locks where it makes sense (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: rt1320-sdw: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: dt-bindings: Convert realtek,rt5651 to DT schema (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: aw88261: Add devicetree support (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: aw88261: Remove AW88261_I2C_NAME macro (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: da7213: Move comma operator at the end of the line (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda - fix function names & missing function parameter (Jaroslav Kysela) [RHEL-168091]
  - ALSA: pcm: Revert bufs move in snd_pcm_xfern_frames_ioctl() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Replace use of system_wq with system_dfl_wq (Jaroslav Kysela) [RHEL-168091]
  - ASoC: nau8821: Sort #include directives (Jaroslav Kysela) [RHEL-168091]
  - ASoC: nau8821: Drop unneeded braces in nau8821_hw_params() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: nau8821: Simplify conditional in nau8821_get_osr() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: nau8821: Drop superfluous return statement (Jaroslav Kysela) [RHEL-168091]
  - ASoC: nau8821: Cancel delayed work on component remove (Jaroslav Kysela) [RHEL-168091]
  - ASoC: nau8821: Cancel pending work before suspend (Jaroslav Kysela) [RHEL-168091]
  - ASoC: nau8821: Fixup nau8821_enable_jack_detect() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: es8328: Remove duplicate DAPM routes (Jaroslav Kysela) [RHEL-168091]
  - firmware: cs_dsp: Handle long-offset data blocks (Jaroslav Kysela) [RHEL-168091]
  - ALSA: echoaudio: adjust function name (Jaroslav Kysela) [RHEL-168091]
  - ALSA: ice1724: adjust function name reference (Jaroslav Kysela) [RHEL-168091]
  - ALSA: mixart: adjust field name reference (Jaroslav Kysela) [RHEL-168091]
  - soundwire: intel_ace2x: add SND_HDA_CORE dependency (Jaroslav Kysela) [RHEL-168091]
  - ASoC: rt1320: fix the remainder calculation of r0 value (Jaroslav Kysela) [RHEL-168091]
  - ASoC: alc5623: tidyup clock inversion in alc5623_set_dai_fmt() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: rt1320: fix size_t format string (Jaroslav Kysela) [RHEL-168091]
  - ASoC: rt1320: fix 32-bit link failure (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: avs: replace strcmp with sysfs_streq (Jaroslav Kysela) [RHEL-168091]
  - soundwire: Use bus methods for .probe(), .remove() and .shutdown() (Jaroslav Kysela) [RHEL-168091]
  - soundwire: Make remove function return no value (Jaroslav Kysela) [RHEL-168091]
  - ASoC: rt1320: fix the warning the string may be truncated (Jaroslav Kysela) [RHEL-168091]
  - ASoC: rt1320: Fix retry checking in rt1320_rae_load() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: rt1320: Change return type of rt1320_t0_load() to void (Jaroslav Kysela) [RHEL-168091]
  - ASoC: qcom: audioreach: Constify function arguments (Jaroslav Kysela) [RHEL-168091]
  - ASoC: qcom: topology: Constify pointed snd_soc_tplg_dapm_widget (Jaroslav Kysela) [RHEL-168091]
  - ASoC: qcom: topology: Constify pointed DAPM widget structs (Jaroslav Kysela) [RHEL-168091]
  - ASoC: qcom: topology: Constify pointed ar control structs (Jaroslav Kysela) [RHEL-168091]
  - ASoC: qcom: topology: Constify pointed topology and vendor structs (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Add ASoC jack hookup in class driver (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Add ability to connect SDCA jacks to ASoC jacks (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Factor out jack handling into new c file (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/cm9825: Add GENE_TWL7 support for AAEON (Jaroslav Kysela) [RHEL-168091]
  - soc: qcom: apr: Use typedef for GPR callback member (Jaroslav Kysela) [RHEL-168091]
  - ASoC: qcom: Constify APR/GPR result structs (Jaroslav Kysela) [RHEL-168091]
  - ASoC: qcom: Constify GPR callback response data (Jaroslav Kysela) [RHEL-168091]
  - ASoC: qcom: Constify APR callback response data (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: wcd939x-sdw: use devres for regmap allocation (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codec: rt286: Use devm_request_threaded_irq to manage IRQ lifetime and fix smatch warning (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tas2783A: read slave properties from acpi table (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tas2783A: use acpi initialisation table (Jaroslav Kysela) [RHEL-168091]
  - ASoc: tas2783A: acpi match for 4 channel for mtl (Jaroslav Kysela) [RHEL-168091]
  - ASoc: tas2783A: fw name based on system details (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tas2783A: fix error log for calibration data (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tas2783A: update default init writes (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tas2783A: use custom firmware (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tas2783A: sdw_utils: support ch 3 & 4 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc4-control: Add support for generic bytes control (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc4: Add definition for generic bytes control (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc4: Support for sending payload along with LARGE_CONFIG_GET (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc4-topology: Set initial param_id for bytes control type (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc4-control: Keep the payload size up to date (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc4-control: Use the correct size for scontrol->ipc_control_data (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc4-control: If there is no data do not send bytes update (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: tas2780: tidyup format check in tas2780_set_fmt() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: qcom: audioreach: Add support for VI Sense module (Jaroslav Kysela) [RHEL-168091]
  - ASoC: cs-amp-lib: Replace __free(kfree) with normal kfree() cleanup (Jaroslav Kysela) [RHEL-168091]
  - ASoC: qcom: audioreach: Add support for Speaker Protection module (Jaroslav Kysela) [RHEL-168091]
  - ASoC: rt1320: support RAE parameters loading (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Allow sample width wild cards in set_usage() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: rt1320: support calibration and temperature/r0 loading (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codec: rt298: Use devm_request_threaded_irq to manage IRQ lifetime and fix smatch warning (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: ti-common: support tas2563 amplifier (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: sof_rt5682: add tas2563 speaker amp support (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: ES8326: Add kcontrol for DRE (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: ES8326: Add a kcontrol for PGAGAIN (Jaroslav Kysela) [RHEL-168091]
  - ALSA: oss: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168091]
  - ALSA: seq: oss: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168091]
  - ALSA: seq: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168091]
  - ALSA: timer: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168091]
  - ALSA: vmaster: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usx2y: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168091]
  - ALSA: compress_offload: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168091]
  - ALSA: control: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168091]
  - ALSA: pcm: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168091]
  - soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded of NUC15) (Jaroslav Kysela) [RHEL-168091]
  - soundwire: qcom: Use guard to avoid mixing cleanup and goto (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: hda: Only check SSP MCLK mask in case of IPC3 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Fix acronym for Intel Gemini Lake (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: pci-nvl: Set on_demand_dsp_boot for NVL-S (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: pci-ptl: Set on_demand_dsp_boot for PTL and WCL (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: pci-lnl: Set on_demand_dsp_boot for LNL (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: hda-sdw-bpt: Add support for on-demand DSP boot (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: sof-client: Add support for on-demand DSP boot (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Add support for on-demand DSP boot (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: control: skip rpm calls in ext_volatile_get if not implemented (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc4-loader: Remove redundant rpm resume_and_get from load_library (Jaroslav Kysela) [RHEL-168091]
  - ASoC: sdw-mockup: Drop dummy remove function (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: wm0010: Replace cpu_to_be64 + le64_to_cpu with swab64 (Jaroslav Kysela) [RHEL-168091]
  - ASoc: qcom: q6afe: use guards consistently (Jaroslav Kysela) [RHEL-168091]
  - ASoC: davinci-mcasp: remove unneeded #ifdef (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codec: rt274: Use devm_request_threaded_irq to manage IRQ lifetime and fix smatch warning (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: catpt: Specify image names in the device descriptor (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: catpt: Drop superfluous space in PCM code (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: catpt: Simplify catpt_stream_read_position() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: catpt: Update CATPT_IPC_ERROR macro (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: catpt: Move IPC error messages one level down (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: functions: Fix confusing cleanup.h syntax (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp-sdw-sof: Fix confusing cleanup.h syntax (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp-sdw-legacy: Fix confusing cleanup.h syntax (Jaroslav Kysela) [RHEL-168091]
  - ASoC: qcom: Minor readability improve with new lines (Jaroslav Kysela) [RHEL-168091]
  - ALSA: seq: Refuse to probe seq drivers with non-bus probe or remove (Jaroslav Kysela) [RHEL-168091]
  - ALSA: seq: Use bus specific probe and remove (Jaroslav Kysela) [RHEL-168091]
  - ALSA: seq: midi: Convert to snd_seq bus probe mechanism (Jaroslav Kysela) [RHEL-168091]
  - ALSA: seq: ump: Convert to snd_seq bus probe mechanism (Jaroslav Kysela) [RHEL-168091]
  - ALSA: opl3: Convert to snd_seq bus probe mechanism (Jaroslav Kysela) [RHEL-168091]
  - ALSA: opl4: Convert to snd_seq bus probe mechanism (Jaroslav Kysela) [RHEL-168091]
  - ALSA: sb: Convert to snd_seq bus probe mechanism (Jaroslav Kysela) [RHEL-168091]
  - ALSA: emu10k1: Convert to snd_seq bus probe mechanism (Jaroslav Kysela) [RHEL-168091]
  - ALSA: seq: oss: Convert to snd_seq bus probe mechanism (Jaroslav Kysela) [RHEL-168091]
  - ASoC: asoc.h: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: audio_topology: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: audio_codec: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: arizona-micsupp: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: arizona-haptics: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value (Jaroslav Kysela) [RHEL-168091]
  - scsi: qla2xxx: Add support to report MPI FW state (Nilesh Javali) [RHEL-157284]


