# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-717.el9]
changelog:
  - s390/entry: Scrub r12 register on kernel entry (Jan Polensky) [RHEL-174818]
  - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185118]
  - platform/x86/intel-uncore-freq: Increase minor version (David Arcari) [RHEL-184964]
  - platform/x86/intel-uncore-freq: Handle autonomous UFS status bit (David Arcari) [RHEL-184964]
  - s390: Revert support for DCACHE_WORD_ACCESS (Charles Haithcock) [RHEL-184094]
  - nvme: make nvme_add_ns{_head}_cdev return void (Maurizio Lombardi) [RHEL-154109]
  - nvme: fix crash and memory leak during invalid cdev teardown (Maurizio Lombardi) [RHEL-154109]
  - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179756] {CVE-2026-43414}
  - watchdog: only run driver set_pretimeout op if device supports it (David Arcari) [RHEL-182246]
  - watchdog: Switch to use hrtimer_setup() (David Arcari) [RHEL-182246]
  - redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182246]
  - watchdog: iTCO_wdt: Convert comma to semicolon (David Arcari) [RHEL-182246]
  - watchdog: iTCO_wdt: Report firmware_version (David Arcari) [RHEL-182246]
  - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (David Arcari) [RHEL-182246]
  - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (David Arcari) [RHEL-182246]
  - watchdog: iTCO_wdt: No need to stop the timer in probe (David Arcari) [RHEL-182246]
  - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (David Arcari) [RHEL-182246]
  - watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182246]
  - watchdog: wdat_wdt: Add timeout value as a param in ping method (David Arcari) [RHEL-182246]
  - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179986] {CVE-2026-46181}
  - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180105] {CVE-2026-46135}
  - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179997] {CVE-2026-46176}
  - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179312] {CVE-2026-46090}
  - Revert "media: cx231xx: add USB ID 2040:8360 for Hauppauge WinTV-HVR-935" (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Fix bug in error path of uvc_alloc_urb_buffers (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Add support for P010 pixel format (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Add D436 and D555 cameras metadata support (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Change comment to 'Intel RealSense' (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Add a stream backpointer in uvc_video_queue (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Allow userspace to increase the meta buffersize (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: uvc_queue_to_stream(): Support meta queues (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Enable VB2_DMABUF for metadata stream (Kate Hsuan) [RHEL-162130]
  - media: subdev: Split v4l2_subdev_get_frame_desc_passthrough() into locked and unlocked (Kate Hsuan) [RHEL-162130]
  - media: subdev: Improve v4l2_subdev_get_frame_desc_passthrough() kdoc (Kate Hsuan) [RHEL-162130]
  - media: subdev: Minor v4l2_subdev_get_frame_desc_passthrough() cleanups (Kate Hsuan) [RHEL-162130]
  - media: v4l2-subdev: Fix error check in v4l2_subdev_get_frame_desc_passthrough() (Kate Hsuan) [RHEL-162130]
  - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (Kate Hsuan) [RHEL-162130] {CVE-2026-31473}
  - media: cx231xx: Fix AGC levels for NTSC-M (Kate Hsuan) [RHEL-162130]
  - media: cx25840: Fix NTSC-J, PAL-N, and SECAM standards (Kate Hsuan) [RHEL-162130]
  - media: cx231xx: add USB ID 2040:8360 for Hauppauge WinTV-HVR-935 (Kate Hsuan) [RHEL-162130]
  - media: pulse8-cec: Handle partial deinit (Kate Hsuan) [RHEL-162130]
  - media: cx231xx: drop redundant device reference (Kate Hsuan) [RHEL-162130]
  - media: remove unnecessary module_init/exit functions (Kate Hsuan) [RHEL-162130]
  - media: subdev: Add v4l2_subdev_get_frame_desc_passthrough helper (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Pass allocation size directly to uvc_alloc_urb_buffer (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Fix allocation for small frame sizes (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Return queued buffers on start_streaming() failure (Kate Hsuan) [RHEL-162130] {CVE-2026-43290}
  - media: uvcvideo: Create an ID namespace for streaming output terminals (Kate Hsuan) [RHEL-162130]
  - media: v4l: ctrls: add a control for enabling strobe output (Kate Hsuan) [RHEL-162130]
  - media: v4l: ctrls: add a control for flash/strobe duration (Kate Hsuan) [RHEL-162130]
  - media: v4l2-subdev: Extend VIDIOC_SUBDEV_S_ROUTING error codes (Kate Hsuan) [RHEL-162130]
  - media: v4l2-ctrls: Set error v4l2_ctrl_new_fwnode_properties consistently (Kate Hsuan) [RHEL-162130]
  - Revert "media: uvcvideo: Remove nodrop parameter" (Kate Hsuan) [RHEL-162130]
  - media: mc: add debugfs node to keep track of requests (Kate Hsuan) [RHEL-162130]
  - media: mc: add manual request completion (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Document how to format GUIDs (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Remove nodrop parameter (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: UVC minimum relative pan/tilt/zoom speed fix. (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Fix support for V4L2_CTRL_FLAG_HAS_WHICH_MIN_MAX (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Replace dev_dbg() with uvc_dbg() (Kate Hsuan) [RHEL-162130]
  - media: vb2: drop wait_prepare/finish callbacks (Kate Hsuan) [RHEL-162130]
  - media: vb2: remove vb2_ops_wait_prepare/finish helpers (Kate Hsuan) [RHEL-162130]
  - media: v4l: Add helper to get number of active lanes via a pad (Kate Hsuan) [RHEL-162130]
  - media: videobuf2: forbid remove_bufs when legacy fileio is active (Kate Hsuan) [RHEL-162130] {CVE-2025-40302}
  - media: uvcvideo: Use heuristic to find stream entity (Kate Hsuan) [RHEL-162130]
  - media: cec: Fix debugfs leak on bus_register() failure (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID (Kate Hsuan) [RHEL-162130] {CVE-2025-40016}
  - media: uvcvideo: Support UVC_CROSXU_CONTROL_IQ_PROFILE (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Run uvc_ctrl_init_ctrl for all controls (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Shorten the transfer size non compliance message (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Do not re-reference dev->udev (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Use intf instead of udev for printks (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Move video_device under video_queue (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Drop stream->mutex (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Move MSXU_CONTROL_METADATA definition to header (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Add missing curly braces (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Drop unneeded memset() in meta device ioctl handlers (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Fix assignment in if condition (Kate Hsuan) [RHEL-162130]
  - media: mc: Clear minor number before put device (Kate Hsuan) [RHEL-162130] {CVE-2025-40197}
  - media: v4l2-common: Add legacy camera sensor clock helper (Kate Hsuan) [RHEL-162130]
  - media: mc: Clear minor number reservation at unregistration time (Kate Hsuan) [RHEL-162130]
  - media: v4l2-core: v4l2-dv-timings: support DRM IFs (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: eUSB2 double isochronous bandwidth support (Kate Hsuan) [RHEL-162130]
  - media: uapi: v4l2-controls: Cleanup codec definitions (Kate Hsuan) [RHEL-162130]
  - media: v4l2-common: Constify media_pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-162130]
  - media: uapi: Cleanup tab after define in headers (Kate Hsuan) [RHEL-162130]
  - media: uapi: Move colorimetry controls at the end of the file (Kate Hsuan) [RHEL-162130]
  - media: mc: Improve unconnected pads debugging message in link exploration (Kate Hsuan) [RHEL-162130]
  - media: mc: Fix MUST_CONNECT handling for pads with no links (Kate Hsuan) [RHEL-162130]
  - media: v4l2-common: Drop the workaround from v4l2_get_link_freq() (Kate Hsuan) [RHEL-162130]
  - media: v4l2-subdev: Make struct v4l2_subdev_stream_config private (Kate Hsuan) [RHEL-162130]
  - media: v4l2-common: Add a helper for obtaining the clock producer (Kate Hsuan) [RHEL-162130]
  - media: v4l2: Rename second ioctl handlers argument to 'void *priv' (Kate Hsuan) [RHEL-162130]
  - media: v4l2-core: Rename second ioctl handlers argument to 'void *priv' (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Rename second ioctl handlers argument to 'void *priv' (Kate Hsuan) [RHEL-162130]
  - media: v4l2-ioctl: Push NULL fh argument down to ioctl wrappers (Kate Hsuan) [RHEL-162130]
  - media: v4l2-ioctl: Stop passing fh pointer to ioctl handlers (Kate Hsuan) [RHEL-162130]
  - media: usb: uvc: Access v4l2_fh from file (Kate Hsuan) [RHEL-162130]
  - media: v4l2-ioctl: Access v4l2_fh from private_data (Kate Hsuan) [RHEL-162130]
  - media: Drop V4L2_FL_USES_V4L2_FH checks (Kate Hsuan) [RHEL-162130]
  - media: v4l2-dev: Make open and release file operations mandatory (Kate Hsuan) [RHEL-162130]
  - media: v4l2-ctrls: Move v4l2_fh retrieval after V4L2_FL_USES_V4L2_FH check (Kate Hsuan) [RHEL-162130]
  - media: Reset file->private_data to NULL in v4l2_fh_del() (Kate Hsuan) [RHEL-162130]
  - media: Set file->private_data in v4l2_fh_add() (Kate Hsuan) [RHEL-162130]
  - media: Replace file->private_data access with file_to_v4l2_fh() (Kate Hsuan) [RHEL-162130]
  - media: Wrap file->private_data access with a helper function (Kate Hsuan) [RHEL-162130]
  - media: v4l2: Add mem2mem helpers for REMOVE_BUFS ioctl (Kate Hsuan) [RHEL-162130]
  - media: usb: uvcvideo: Store v4l2_fh pointer in file->private_data (Kate Hsuan) [RHEL-162130]
  - media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Introduce dev->meta_formats (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-162130]
  - media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Remove stream->is_streaming field (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-162130]
  - media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-162130]
  - media: uapi: videodev2: Fix comment for 12-bit packed Bayer formats (Kate Hsuan) [RHEL-162130]
  - media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-162130]
  - media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-162130]
  - media: cec: core: add rx-no-low-drive setting (Kate Hsuan) [RHEL-162130]
  - media: cec: core: add glitch error injection (Kate Hsuan) [RHEL-162130]
  - media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-162130]
  - media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-162130]
  - media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-162130]
  - media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-162130]
  - media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-162130]
  - media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-162130]
  - media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() (Kate Hsuan) [RHEL-162130] {CVE-2025-39713}
  - media: gspca: Add bounds checking to firmware parser (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-162130] {CVE-2025-38680}
  - media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-162130]
  - media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-162130]
  - media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-162130]
  - media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-162130]
  - media: gspca: Add error handling for stv06xx_read_sensor() (Kate Hsuan) [RHEL-162130]
  - media: videobuf2: check constants during build time (Kate Hsuan) [RHEL-162130]
  - media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-162130]
  - media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-162130]
  - media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-162130]
  - media: uapi: v4l: Fix V4L2_TYPE_IS_OUTPUT condition (Kate Hsuan) [RHEL-162130]
  - media: uapi: v4l: Change V4L2_TYPE_IS_CAPTURE condition (Kate Hsuan) [RHEL-162130]
  - media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-162130]
  - media: cec: use us_to_ktime() where appropriate (Kate Hsuan) [RHEL-162130]
  - media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-162130]
  - media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-162130]
  - media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-162130]
  - media: cx231xx: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-162130]
  - media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-162130]
  - media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Remove vidioc_queryctrl (Kate Hsuan) [RHEL-162130]
  - media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-162130]
  - media: cx231xx: set device_caps for 417 (Kate Hsuan) [RHEL-162130] {CVE-2025-38044}
  - media: cec: core: allow raw msg transmit while configuring (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Drop the uvc_driver structure (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Add quirk for Actions UVC05 (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: implement UVC v1.5 ROI (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Introduce uvc_mapping_v4l2_size (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: let v4l2_query_v4l2_ctrl() work with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: support V4L2_CTRL_WHICH_MIN/MAX_VAL (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Factor out query_boundaries from query_ctrl (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: add support for compound controls (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Factor out clamping from uvc_ctrl_set (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Support any size for mapping get/set (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: uvc_ioctl_(g|s)_ext_ctrls: handle NoP case (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: refactor uvc_ioctl_g_ext_ctrls (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Handle uvc menu translation inside uvc_set_le_value (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Handle uvc menu translation inside uvc_get_le_value (Kate Hsuan) [RHEL-162130]
  - media: v4l2-ctrls: add support for V4L2_CTRL_WHICH_MIN/MAX_VAL (Kate Hsuan) [RHEL-162130]
  - media: v4l2_ctrl: Add V4L2_CTRL_TYPE_RECT (Kate Hsuan) [RHEL-162130]
  - media: pwc: remove useless header files (Kate Hsuan) [RHEL-162130]
  - media: Switch to use hrtimer_setup() (Kate Hsuan) [RHEL-162130]
  - media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-162130]
  - media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-162130]
  - media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-162130]
  - media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-162130]
  - media: cx231xx: remove redundant assignment to variable value (Kate Hsuan) [RHEL-162130]
  - media: mc: Rename pad as origin in __media_pipeline_start() (Kate Hsuan) [RHEL-162130]
  - media: v4l2-subdev: Refactor events (Kate Hsuan) [RHEL-162130]
  - media: vb2: fix confusing log message (Kate Hsuan) [RHEL-162130]
  - media: vb2: Fix comment (Kate Hsuan) [RHEL-162130]
  - media: v4l2-core: constify the class struct (Kate Hsuan) [RHEL-162130]
  - media: v4l2-core: v4l2-dv-timings: check cvt/gtf result (Kate Hsuan) [RHEL-162130]
  - media: video-i2c: drop vb2_ops_wait_prepare/finish (Kate Hsuan) [RHEL-162130]
  - media: videobuf2-core: update vb2_thread if wait_finish/prepare are NULL (Kate Hsuan) [RHEL-162130]
  - v4l2-subdev: Return -EOPNOTSUPP for unsupported pad type in call_get_frame_desc() (Kate Hsuan) [RHEL-162130]
  - media: videodev2: Add flag to unconditionally enumerate pixel formats (Kate Hsuan) [RHEL-162130]
  - media: vb2: use lock if wait_prepare/finish are NULL (Kate Hsuan) [RHEL-162130]
  - media: vb2: vb2_core_queue_init(): sanity check lock and wait_prepare/finish (Kate Hsuan) [RHEL-162130]
  - media: v4l2-core: add v4l2_debugfs_if_alloc/free() (Kate Hsuan) [RHEL-162130]
  - media: v4l2-core: add v4l2_debugfs_root() (Kate Hsuan) [RHEL-162130]
  - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175528] {CVE-2026-31474}
  - serial: ce4100: fix build after serial_in/out() changes (Mark Salter) [RHEL-111649]
  - serial: port: Always update ->iotype in __uart_read_properties() (Mark Salter) [RHEL-111649]
  - serial: port: Assign ->iotype correctly when ->iobase is set (Mark Salter) [RHEL-111649]
  - device property: Implement device_is_big_endian() (Mark Salter) [RHEL-111649]
  - serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Rework IIR_NO_INT handling to stop interrupt storm (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Rework dw8250_handle_irq() locking and IIR handling (Mark Salter) [RHEL-111649]
  - serial: 8250: Add serial8250_handle_irq_locked() (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Avoid unnecessary LCR writes (Mark Salter) [RHEL-111649]
  - serial: 8250: Protect LCR write in shutdown (Mark Salter) [RHEL-111649]
  - serial: 8250_pci: add support for the AX99100 (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Drop unneeded NULL checks in dw8250_quirks() (Mark Salter) [RHEL-111649]
  - serial: 8250: Fix TX deadlock when using DMA (Mark Salter) [RHEL-111649]
  - serial: 8250: sanitize uart_port::serial_{in,out}() types (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Comment possible corner cases in serial_out() implementation (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Call dw8250_quirks() conditionally (Mark Salter) [RHEL-111649]
  - serial: 8250: use serial_port_in/out() helpers (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Use reset array API to get resets (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Revert "Move definitions to the shared header" (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Don't use struct dw8250_data outside of 8250_dw (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Hide a cast in dw8250_serial_inq() (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Deduplicate LCR checks (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Replace ACPI device check by a quirk (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Switch to use uart_read_port_properties() (Mark Salter) [RHEL-111649]
  - serial: port: Introduce a common helper to read properties (Mark Salter) [RHEL-111649]
  - serial: core: Add UPIO_UNKNOWN constant for unknown port type (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Emit an error message if getting the baudclk failed (Mark Salter) [RHEL-111649]
  - serial: 8250: Use serial8250_do_set_termios for uartclk updating (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Do not bailout on UCV read returning zero (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Decouple DLF register check from UCV (Mark Salter) [RHEL-111649]
  - ice: use ice_update_eth_stats() for representor stats (CKI Backport Bot) [RHEL-73628]
  - ice: fix inverted ready check for VF representors (CKI Backport Bot) [RHEL-73628]
  - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (CKI Backport Bot) [RHEL-170799] {CVE-2026-23401}
  - dm-verity-fec: fix corrected block count stat (Benjamin Marzinski) [RHEL-154976]
  - dm-mpath: don't stop probing paths at presuspend (Benjamin Marzinski) [RHEL-138608]
  - dm mpath: make pg_init_delay_msecs settable (Benjamin Marzinski) [RHEL-154976]
  - dm: use bio_clone_blkg_association (Benjamin Marzinski) [RHEL-154976]
  - dm-unstripe: fix mapping bug when there are multiple targets in a table (Benjamin Marzinski) [RHEL-154976]
  - dm-integrity: fix recalculation in bitmap mode (Benjamin Marzinski) [RHEL-144459]
  - dm: clear cloned request bio pointer when last clone bio completes (Benjamin Marzinski) [RHEL-154976]
  - dm-integrity: fix a typo in the code for write/discard race (Benjamin Marzinski) [RHEL-154976]
  - dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-154976]
  - dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-154976]
  - dm: replace -EEXIST with -EBUSY (Benjamin Marzinski) [RHEL-154976]
  - dm: remove fake timeout to avoid leak request (Benjamin Marzinski) [RHEL-154976]
  - dm pcache: fix segment info indexing (Benjamin Marzinski) [RHEL-154976]
  - dm pcache: fix cache info indexing (Benjamin Marzinski) [RHEL-154976]
  - dm-pcache: advance slot index before writing slot (Benjamin Marzinski) [RHEL-154976]
  - dm raid: add documentation for takeover/reshape raid1 -> raid5 table line examples (Benjamin Marzinski) [RHEL-154976]
  - dm: ignore discard return value (Benjamin Marzinski) [RHEL-154976]
  - MAINTAINERS: add Benjamin Marzinski as a device mapper maintainer (Benjamin Marzinski) [RHEL-154976]
  - dm-mpath: Simplify the setup_scsi_dh code (Benjamin Marzinski) [RHEL-154976]
  - dm-bufio: align write boundary on physical block size (Benjamin Marzinski) [RHEL-154976]
  - dm-crypt: enable DM_TARGET_ATOMIC_WRITES (Benjamin Marzinski) [RHEL-136803]
  - dm: test for REQ_ATOMIC in dm_accept_partial_bio() (Benjamin Marzinski) [RHEL-154976]
  - dm-verity: remove useless mempool (Benjamin Marzinski) [RHEL-154976]
  - dm-verity: disable recursive forward error correction (Benjamin Marzinski) [RHEL-154976] {CVE-2025-71161}
  - dm-ebs: Mark full buffer dirty even on partial write (Benjamin Marzinski) [RHEL-154976]
  - dm mpath: enable DM_TARGET_ATOMIC_WRITES (Benjamin Marzinski) [RHEL-154976]
  - dm verity fec: Expose corrected block count via status (Benjamin Marzinski) [RHEL-154976]
  - dm: Don't warn if IMA_DISABLE_HTABLE is not enabled (Benjamin Marzinski) [RHEL-154976]
  - dm-verity: remove log message with shash driver name (Benjamin Marzinski) [RHEL-154976]
  - dm: sysfs: use sysfs_emit() in dm-sysfs.c (Benjamin Marzinski) [RHEL-154976]
  - dm: remove useless md->nr_zones variable (Benjamin Marzinski) [RHEL-154976]
  - dm-crypt: use folio_nr_pages() instead of shift operation (Benjamin Marzinski) [RHEL-136803]
  - dm: fix failure when empty flush's bi_sector points beyond the device end (Benjamin Marzinski) [RHEL-154976]
  - dm-pcache: zero cache_info before default init (Benjamin Marzinski) [RHEL-154976]
  - dm-pcache: reuse meta_addr in pcache_meta_find_latest (Benjamin Marzinski) [RHEL-154976]
  - dm-pcache: allow built-in build and rename flush helper (Benjamin Marzinski) [RHEL-154976]
  - dm raid: use proper md_ro_state enumerators (Benjamin Marzinski) [RHEL-154976]
  - dm-integrity: prefer synchronous hash interface (Benjamin Marzinski) [RHEL-136803]
  - dm-integrity: enable asynchronous hash interface (Benjamin Marzinski) [RHEL-136803]
  - dm-integrity: rename internal_hash (Benjamin Marzinski) [RHEL-136803]
  - dm-integrity: add the "offset" argument (Benjamin Marzinski) [RHEL-136803]
  - dm-integrity: allocate the recalculate buffer with kmalloc (Benjamin Marzinski) [RHEL-136803]
  - dm-integrity: introduce integrity_kmap and integrity_kunmap (Benjamin Marzinski) [RHEL-136803]
  - dm-integrity: replace bvec_kmap_local with kmap_local_page (Benjamin Marzinski) [RHEL-136803]
  - dm-integrity: use internal variable for digestsize (Benjamin Marzinski) [RHEL-136803]
  - dm: optimize REQ_PREFLUSH with data when using the linear target (Benjamin Marzinski) [RHEL-154976]
  - dm-pcache: use int type to store negative error codes (Benjamin Marzinski) [RHEL-154976]
  - dm: fix "writen"->"written" (Benjamin Marzinski) [RHEL-154976]
  - dm-pcache: cleanup: fix coding style report by checkpatch.pl (Benjamin Marzinski) [RHEL-154976]
  - dm-pcache: remove ctrl_lock for pcache_cache_segment (Benjamin Marzinski) [RHEL-154976]
  - redhat/configs: Add CONFIG_DM_PCACHE (Benjamin Marzinski) [RHEL-154976]
  - dm-pcache: add persistent cache target in device-mapper (Benjamin Marzinski) [RHEL-154976]
  - dm error: mark as DM_TARGET_PASSES_INTEGRITY (Benjamin Marzinski) [RHEL-154976]
  - docs: device-mapper: fixed spelling mistakes in documentation (Benjamin Marzinski) [RHEL-154976]
  - dm bufio: remove redundant __GFP_NOWARN (Benjamin Marzinski) [RHEL-154976]
  - dm-ima: drop a useless argument (Benjamin Marzinski) [RHEL-154976]
  - dm: use vmalloc_array() to simplify code (Benjamin Marzinski) [RHEL-154976]
  - dm-ima: more strlen() drops (Benjamin Marzinski) [RHEL-154976]
  - cgroup/cpuset: Fix incorrect use of cpuset_update_tasks_cpumask() in update_cpumasks_hier() (Waiman Long) [RHEL-154974]
  - cgroup/cpuset: Consistently compute effective_xcpus in update_cpumasks_hier() (Waiman Long) [RHEL-154974]
  - cpuset: Treat cpusets in attaching as populated (Waiman Long) [RHEL-154974]
  - cgroup/cpuset: Don't track # of local child partitions (Waiman Long) [RHEL-154974]
  - cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-154974]
  - cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-154974]
  - cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-154974]
  - cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-154974]
  - cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-154974]
  - cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-154974]
  - cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-154974]
  - cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-154974]
  - cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-154974]
  - cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-154974]
  - cpuset: refactor out validate_partition (Waiman Long) [RHEL-154974]
  - cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-154974]
  - cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-154974]
  - cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-154974]
  - cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-154974]
  - cpuset: remove unused assignment to trialcs->partition_root_state (Waiman Long) [RHEL-154974]
  - cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-154974]
  - cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-154974]
  - cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-154974]
  - cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-154974]
  - cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-154974]
  - cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-154974]
  - cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-154974]
  - cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-154974]
  - cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-154974]
  - cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-154974] {CVE-2025-39953}
  - cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-154974]
  - memcg: always call cond_resched() after fn() (Waiman Long) [RHEL-154974]
  - cgroup: fix race between fork and cgroup.kill (Waiman Long) [RHEL-154974]
  - memcg: fix soft lockup in the OOM process (Waiman Long) [RHEL-154974] {CVE-2024-57977}
  - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142099] {CVE-2025-71116}
  - Disable TPM as hwrng source on aarch64 (Štěpán Horáček) [RHEL-66934]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-718.el9]
changelog:
  - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179583] {CVE-2026-45991}
  - KVM: s390: Increase permitted SE header size to 1 MiB (Ramesh Chhetri) [RHEL-185660]
  - ice: fix PTP timestamping broken by SyncE code on E825C (CKI Backport Bot) [RHEL-152500]
  - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170635]
  - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170635]
  - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170635]
  - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170635]
  - tcp: secure_seq: add back ports to TS offset (Paolo Abeni) [RHEL-152683]
  - net/tcp-md5: Fix MAC comparison to be constant-time (Paolo Abeni) [RHEL-152683]
  - tcp: tcp_tx_timestamp() must look at the rtx queue (Paolo Abeni) [RHEL-152683]
  - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-161661]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-719.el9]
changelog:
  - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-186905]
  - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182565]
  - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182565]
  - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182565]
  - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182565] {CVE-2026-31739}
  - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182565]
  - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182565]
  - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182565]
  - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180692] {CVE-2026-31530}
  - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181904] {CVE-2026-46259}
  - dm-raid: only requeue bios when dm is suspending (Nigel Croxon) [RHEL-179131]
  - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172671] {CVE-2026-43038}
  - iommu/vt-d: Remove LPIG from page group response descriptor (CKI Backport Bot) [RHEL-169025]
  - rtla: Fix parsing of multi-character short options (Tomas Glozar) [RHEL-151361]
  - tracing: Fix potential deadlock in cpu hotplug with osnoise (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Convert links to RST format (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Document SIGINT behavior (Tomas Glozar) [RHEL-151361]
  - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-151361 RHEL-169238]
  - rtla/utils: Fix loop condition in PID validation (Tomas Glozar) [RHEL-151361]
  - rtla/utils: Fix resource leak in set_comm_sched_attr() (Tomas Glozar) [RHEL-151361]
  - rtla/trace: Fix I/O handling in save_trace_to_file() (Tomas Glozar) [RHEL-151361]
  - rtla/trace: Fix write loop in trace_event_save_hist() (Tomas Glozar) [RHEL-151361]
  - rtla/timerlat: Simplify RTLA_NO_BPF environment variable check (Tomas Glozar) [RHEL-151361]
  - rtla: Use str_has_prefix() for option prefix check (Tomas Glozar) [RHEL-151361]
  - rtla: Enforce exact match for time unit suffixes (Tomas Glozar) [RHEL-151361]
  - rtla: Use str_has_prefix() for prefix checks (Tomas Glozar) [RHEL-151361]
  - rtla: Add str_has_prefix() helper function (Tomas Glozar) [RHEL-151361]
  - rtla: Handle pthread_create() failure properly (Tomas Glozar) [RHEL-151361]
  - rtla/timerlat: Add bounds check for softirq vector (Tomas Glozar) [RHEL-151361]
  - rtla: Simplify code by caching string lengths (Tomas Glozar) [RHEL-151361]
  - rtla: Replace magic number with MAX_PATH (Tomas Glozar) [RHEL-151361]
  - rtla: Introduce common_threshold_handler() helper (Tomas Glozar) [RHEL-151361]
  - rtla/actions: Simplify argument parsing (Tomas Glozar) [RHEL-151361]
  - rtla: Use strdup() to simplify code (Tomas Glozar) [RHEL-151361]
  - rtla: Exit on memory allocation failures during initialization (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Remove unneeded nr_cpus from for_each_monitored_cpu (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Remove unneeded nr_cpus members (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Remove unneeded nr_cpus arguments (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Consolidate nr_cpus usage across all tools (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Document --stack-format option (Tomas Glozar) [RHEL-151361 RHEL-155232]
  - rtla/timerlat: Add --stack-format option (Tomas Glozar) [RHEL-151361 RHEL-155232]
  - tools/rtla: Add unit tests for utils.c (Tomas Glozar) [RHEL-151361]
  - tools/build: Add feature test for libcheck (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Generate optstring from long options (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Add hwnoise to main page (Tomas Glozar) [RHEL-151361]
  - rtla: Fix build without libbpf header (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Include defaults for tracer options (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Mention default cgroup state (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Mention default priority (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Correct tracer name for common options (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Fix typo in common_timerlat_options.txt (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Fix typo in rtla-timerlat-top.rst (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Fix typo in common_timerlat_options.txt (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Fix typo in common_options.txt (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: rename common_xxx.rst files to common_xxx.txt (Tomas Glozar) [RHEL-151361]
  - Documentation/osnoise: Add osnoise/options documentation (Tomas Glozar) [RHEL-151361]
  - Documentation/osnoise: Escape underscore of NO_ prefix (Tomas Glozar) [RHEL-151361]
  - Documentation/osnoise: Add osnoise/options documentation (Tomas Glozar) [RHEL-151361]
  - rtla: Fix parse_cpu_set() bug introduced by strtoi() (Tomas Glozar) [RHEL-151361]
  - rtla: Make stop_tracing variable volatile (Tomas Glozar) [RHEL-151361]
  - rtla: Add generated output files to gitignore (Tomas Glozar) [RHEL-151361]
  - rtla: Fix NULL pointer dereference in actions_parse (Tomas Glozar) [RHEL-151361]
  - rtla: Remove unused headers (Tomas Glozar) [RHEL-151361]
  - rtla: Remove redundant memset after calloc (Tomas Glozar) [RHEL-151361]
  - rtla: Use standard exit codes for result enum (Tomas Glozar) [RHEL-151361]
  - rtla: Replace atoi() with a robust strtoi() (Tomas Glozar) [RHEL-151361]
  - rtla: Introduce for_each_action() helper (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Deduplicate cgroup path opening code (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Consolidate -H/--house-keeping option parsing (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Consolidate -P/--priority option parsing (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Consolidate -e/--event option parsing (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Consolidate -d/--duration option parsing (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Consolidate -D/--debug option parsing (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Consolidate -C/--cgroup option parsing (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Consolidate -c/--cpus option parsing (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Add common_parse_options() (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Add common_usage() (Tomas Glozar) [RHEL-151361]
  - rtla: Set stop threshold after all instances are enabled (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Remove unused function declarations (Tomas Glozar) [RHEL-151361]
  - tracing: Fix multiple typos in trace_osnoise.c (Tomas Glozar) [RHEL-151361]
  - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-151361 RHEL-155124]
  - rtla/tests: Don't rely on matching ^1ALL (Tomas Glozar) [RHEL-151361]
  - rtla: Fix -a overriding -t argument (Tomas Glozar) [RHEL-151361]
  - rtla: Fix -C/--cgroup interface (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Replace osnoise_hist_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Replace osnoise_top_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Replace timerlat_hist_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Replace timerlat_top_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Add fatal() and replace error handling pattern (Tomas Glozar) [RHEL-151361]
  - rtla/tests: Fix osnoise test calling timerlat (Tomas Glozar) [RHEL-151361]
  - rtla/tests: Extend action tests to 5s (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Fix --on-threshold always triggering (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Fix unassigned nr_cpus (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Remove unused optional option_index (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Add for_each_monitored_cpu() helper (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Add remaining support for osnoise actions (Tomas Glozar) [RHEL-116574 RHEL-151361]
  - tools/rtla: Add test engine support for unexpected output (Tomas Glozar) [RHEL-116574 RHEL-151361]
  - tools/rtla: Fix -A option name in test comment (Tomas Glozar) [RHEL-116574 RHEL-151361]
  - tools/rtla: Consolidate code between osnoise/timerlat and hist/top (Tomas Glozar) [RHEL-116574 RHEL-151361]
  - tools/rtla: Create common_apply_config() (Tomas Glozar) [RHEL-116574 RHEL-151361]
  - tools/rtla: Move top/hist params into common struct (Tomas Glozar) [RHEL-116574 RHEL-151361]
  - tools/rtla: Consolidate common parameters into shared structure (Tomas Glozar) [RHEL-116574 RHEL-151361]
  - rtla: Ensure null termination after read operations in utils.c (Tomas Glozar) [RHEL-151361]
  - rtla: Fix parse_cpu_set() return value documentation (Tomas Glozar) [RHEL-151361]
  - tracing: Fix false sharing in hwlat get_sample() (Tomas Glozar) [RHEL-151361]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-720.el9]
changelog:
  - KVM: s390: Add capability that forwards operation exceptions (Christoph Schlameuss) [RHEL-136478]
  - KVM: s390: Add KVM capability for ESA mode guests (Mircea Dragan) [RHEL-136478]
  - KVM: s390: vsie: Allow non-zarch guests (Mircea Dragan) [RHEL-136478]
  - KVM: s390: vsie: Accommodate ESA prefix pages (Mircea Dragan) [RHEL-136478]
  - KVM: s390: vsie: Disable some bits when in ESA mode (Mircea Dragan) [RHEL-136478]
  - KVM: s390: only deliver service interrupt with payload (Mircea Dragan) [RHEL-136478]
  - KVM: s390: vsie: retry SIE when unable to get vsie_page (Mircea Dragan) [RHEL-136478]
  - KVM: s390: vsie: Check alignment of BSCA header (Mircea Dragan) [RHEL-136478]
  - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177395] {CVE-2026-46331}
  - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183964] {CVE-2026-46316}
  - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179859] {CVE-2026-46227}
  - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-164306]
  - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-164306]
  - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167748] {CVE-2026-31411}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-721.el9]
changelog:
  - watchdog: Fix NULL pointer dereference when releasing cdev (David Arcari) [RHEL-189449]
  - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189496] {CVE-2026-43112}
  - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Mark Salter) [RHEL-143322]
  - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Mark Salter) [RHEL-143322]
  - perf: arm_pmu: Move PMUv3-specific data (Mark Salter) [RHEL-143322]
  - perf: arm_pmuv3: Factor out PMCCNTR_EL0 use conditions (Mark Salter) [RHEL-143322]
  - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-118669]
  - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172647] {CVE-2026-43037}
  - blk-mq: fix stale tag depth for shared sched tags in blk_mq_update_nr_requests() (Ming Lei) [RHEL-165529]
  - block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-165529]
  - block: define alloc_sched_data and free_sched_data methods for kyber (Ming Lei) [RHEL-165529]
  - block: use {alloc|free}_sched data methods (Ming Lei) [RHEL-165529]
  - block: introduce alloc_sched_data and free_sched_data elevator methods (Ming Lei) [RHEL-165529]
  - block: move elevator tags into struct elevator_resources (Ming Lei) [RHEL-165529]
  - block: unify elevator tags and type xarrays into struct elv_change_ctx (Ming Lei) [RHEL-165529]
  - blk-mq: remove blk_mq_tag_update_depth() (Ming Lei) [RHEL-165529]
  - blk-mq: fix potential deadlock while nr_requests grown (Ming Lei) [RHEL-165529]
  - blk-mq-sched: add new parameter nr_requests in blk_mq_alloc_sched_tags() (Ming Lei) [RHEL-165529]
  - blk-mq: split bitmap grow and resize case in blk_mq_update_nr_requests() (Ming Lei) [RHEL-165529]
  - blk-mq: cleanup shared tags case in blk_mq_update_nr_requests() (Ming Lei) [RHEL-165529]
  - blk-mq: convert to serialize updating nr_requests with update_nr_hwq_lock (Ming Lei) [RHEL-165529]
  - blk-mq: check invalid nr_requests in queue_requests_store() (Ming Lei) [RHEL-165529]
  - blk-mq: remove useless checkings in blk_mq_update_nr_requests() (Ming Lei) [RHEL-165529]
  - blk-mq: remove useless checking in queue_requests_store() (Ming Lei) [RHEL-165529]
  - tick/nohz: Expose housekeeping CPUs in sysfs (Waiman Long) [RHEL-143910]
  - kernel/rcu/tree_stall: add /sys/kernel/rcu_stall_count (Waiman Long) [RHEL-143910]
  - kernel/watchdog: add /sys/kernel/{hard,soft}lockup_count (Waiman Long) [RHEL-143910]
  - watchdog: move softlockup_panic back to early_param (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: avoid large stack frames in watchdog_hardlockup_check() (Waiman Long) [RHEL-143910]
  - nmi_backtrace: allow excluding an arbitrary CPU (Waiman Long) [RHEL-143910]
  - powerpc: move arch_trigger_cpumask_backtrace from nmi.h to irq.h (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: in watchdog_hardlockup_check() use cpumask_copy() (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: keep kernel.nmi_watchdog sysctl as 0444 if probe fails (Waiman Long) [RHEL-143910]
  - watchdog/perf: adapt the watchdog_perf interface for async model (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: have the perf hardlockup use __weak functions more cleanly (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: rename some "NMI watchdog" constants/function (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: move perf hardlockup watchdog petting to watchdog.c (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: add a "cpu" param to watchdog_hardlockup_check() (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: style changes to watchdog_hardlockup_check() / is_hardlockup() (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: move perf hardlockup checking/panic to common watchdog.c (Waiman Long) [RHEL-143910]
  - watchdog/perf: rename watchdog_hld.c to watchdog_perf.c (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: add comments to touch_nmi_watchdog() (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: change watchdog_nmi_enable() to void (Waiman Long) [RHEL-143910]
  - watchdog: remove WATCHDOG_DEFAULT (Waiman Long) [RHEL-143910]
  - watchdog/perf: more properly prevent false positives with turbo modes (Waiman Long) [RHEL-143910]
  - lib/Kconfig.debug: remove more CONFIG_..._VALUE indirections (Waiman Long) [RHEL-143910]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-722.el9]
changelog:
  - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180044] {CVE-2026-46155}
  - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180044]
  - thermal: intel: int340x: Read DDR data rate for Nova Lake (David Arcari) [RHEL-117278]
  - enable CONFIG_GPIO_NOVALAKE for RHEL (David Arcari) [RHEL-117350]
  - gpio: Add Intel Nova Lake ACPI GPIO events driver (David Arcari) [RHEL-117350]
  - platform/x86: intel-hid: Check ACPI_HANDLE() against NULL (David Arcari) [RHEL-184322]
  - sched: idle: Make skipping governor callbacks more consistent (Mark Langsdorf) [RHEL-176384]
  - cpuidle: menu: Remove single state handling (Mark Langsdorf) [RHEL-176384]
  - cpuidle: haltpoll: Remove single state handling (Mark Langsdorf) [RHEL-176384]
  - cpuidle: Skip governor when only one idle state is available (Mark Langsdorf) [RHEL-176384]
  - cpuidle: governors: menu: Always check timers with tick stopped (Mark Langsdorf) [RHEL-176384]
  - cpuidle: menu: Remove incorrect unlikely() annotation (Mark Langsdorf) [RHEL-176384]
  - cpuidle: big_little: Simplify with of_machine_device_match() (Mark Langsdorf) [RHEL-176384]
  - cpuidle: Warn instead of bailing out if target residency check fails (Mark Langsdorf) [RHEL-176384]
  - cpuidle: Update header inclusion (Mark Langsdorf) [RHEL-176384]
  - cpuidle: Respect the CPU system wakeup QoS limit for cpuidle (Mark Langsdorf) [RHEL-176384]
  - sched: idle: Respect the CPU system wakeup QoS limit for s2idle (Mark Langsdorf) [RHEL-176384]
  - PM: QoS: Introduce a CPU system wakeup QoS limit (Mark Langsdorf) [RHEL-176384]
  - redhat/configs: enable CONFIG_PM_QOS_CPU_SYSTEM_WAKEUP (Mark Langsdorf) [RHEL-176384]
  - cpuidle: psci: Replace deprecated strcpy in psci_idle_init_cpu (Mark Langsdorf) [RHEL-176384]
  - cpuidle: Add sanity check for exit latency and target residency (Mark Langsdorf) [RHEL-176384]
  - cpuidle: Fail cpuidle device registration if there is one already (Mark Langsdorf) [RHEL-176384]
  - cpuidle: sysfs: Use sysfs_emit()/sysfs_emit_at() instead of sprintf()/scnprintf() (Mark Langsdorf) [RHEL-176384]
  - cpuidle: qcom-spm: drop unnecessary initialisations (Mark Langsdorf) [RHEL-176384]
  - cpuidle: qcom-spm: fix device and OF node leaks at probe (Mark Langsdorf) [RHEL-176384]
  - cpuidle: dt: fix opencoded for_each_cpu() in idle_state_valid() (Mark Langsdorf) [RHEL-176384]
  - arm64: topology: Fix false warning in counters_read_on_cpu() for same-CPU reads (Mark Langsdorf) [RHEL-176382]
  - cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path (Mark Langsdorf) [RHEL-176382]
  - cpufreq: conservative: Reset requested_freq on limits change (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Don't skip cpufreq_frequency_table_cpuinfo() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: s5pv210: Simplify with scoped for each OF child loop (Mark Langsdorf) [RHEL-176382]
  - cpufreq: ondemand: Simplify idle cputime granularity test (Mark Langsdorf) [RHEL-176382]
  - cpufreq: CPPC: Add generic helpers for sysfs show/store (Mark Langsdorf) [RHEL-176382]
  - cpufreq: dt-platdev: Add ti,am62l3 to blocklist (Mark Langsdorf) [RHEL-176382]
  - cpufreq: scmi: Fix device_node reference leak in scmi_cpu_domain_id() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: scmi: correct SCMI explanation (Mark Langsdorf) [RHEL-176382]
  - cpufreq: dt-platdev: Block the driver from probing on more QC platforms (Mark Langsdorf) [RHEL-176382]
  - cpufreq: CPPC: Update FIE arch_freq_scale in ticks for non-PCC regs (Mark Langsdorf) [RHEL-176382]
  - cpufreq: CPPC: Factor out cppc_fie_kworker_init() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: qcom-nvmem: add sentinel to qcom_cpufreq_ipq806x_match_list (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Add Tegra186 and Tegra194 to cpufreq-dt-platdev blocklist (Mark Langsdorf) [RHEL-176382]
  - cpufreq: dt-platdev: Fix creating device on OPPv1 platforms (Mark Langsdorf) [RHEL-176382]
  - cpufreq: cpufreq_boost_trigger_state() optimization (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Return -EOPNOTSUPP if no policy supports boost (Mark Langsdorf) [RHEL-176382]
  - cpufreq: dt-platdev: Simplify with of_machine_get_match_data() (Mark Langsdorf) [RHEL-176382]
  - of: Add of_machine_get_match() helper (Mark Langsdorf) [RHEL-176382]
  - of: Add wrappers to match root node with OF device ID tables (Mark Langsdorf) [RHEL-176382]
  - of: Add of_machine_compatible_match() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: qcom-nvmem: fix compilation warning for qcom_cpufreq_ipq806x_match_list (Mark Langsdorf) [RHEL-176382]
  - cpufreq: ACPI: Replace udelay() with usleep_range() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: tegra194: add WQ_PERCPU to alloc_workqueue users (Mark Langsdorf) [RHEL-176382]
  - cpufreq: qcom-nvmem: add compatible fallback for ipq806x for no SMEM (Mark Langsdorf) [RHEL-176382]
  - cpufreq: CPPC: Don't warn if FIE init fails to read counters (Mark Langsdorf) [RHEL-176382]
  - cpufreq: nforce2: fix reference count leak in nforce2 (Mark Langsdorf) [RHEL-176382]
  - cpufreq: tegra186: add OPP support and set bandwidth (Mark Langsdorf) [RHEL-176382]
  - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist (Mark Langsdorf) [RHEL-176382]
  - cpufreq: s5pv210: fix refcount leak (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Replace deprecated strcpy() in cpufreq_unregister_governor() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: preserve freq_table_sorted across suspend/hibernate (Mark Langsdorf) [RHEL-176382]
  - cpufreq: tegra186: Initialize all cores to max frequencies (Mark Langsdorf) [RHEL-176382]
  - cpufreq: tegra186: Set target frequency for all cpus in policy (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Replace pointer subtraction with iteration macro (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Add defensive check during driver registration (Mark Langsdorf) [RHEL-176382]
  - cpufreq: ACPI: Use on_each_cpu_mask() in drv_write() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: conservative: Replace sscanf() with kstrtouint() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: core: Rearrange variable declarations involving __free() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Use int type to store negative error codes (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Drop redundant freq_table parameter (Mark Langsdorf) [RHEL-176382]
  - cpufreq: tegra186: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176382]
  - cpufreq: s5pv210: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176382]
  - cpufreq: CPPC: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176382]
  - cpufreq: brcmstb-avs: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176382]
  - cpufreq: use strlen() for governor name comparison (Mark Langsdorf) [RHEL-176382]
  - cpufreq: simplify setpolicy/target check in driver verification (Mark Langsdorf) [RHEL-176382]
  - cpufreq: dt-platdev: Blacklist ti,am62d2 SoC (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Avoid calling get_governor() for first policy (Mark Langsdorf) [RHEL-176382]
  - cpufreq: qcom-nvmem: Enable cpufreq for ipq5424 (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Remove unused parameter in cppc_perf_from_fbctrs() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: armada-37xx: use max() to calculate target_vm (Mark Langsdorf) [RHEL-176382]
  - bus: mhi: ep: Use bus callbacks for .probe() and .remove() (Jose Ignacio Tornos Martinez) [RHEL-171418]
  - bus: mhi: host: Use bus callbacks for .probe() and .remove() (Jose Ignacio Tornos Martinez) [RHEL-171418]
  - mhi: host: Add support for loading dual ELF image format (Jose Ignacio Tornos Martinez) [RHEL-171418]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-723.el9]
changelog:
  - Reapply "Bluetooth: revert TX timestamping" for kernel v6.18.y update (David Marlin) [RHEL-176415]
  - Bluetooth: btmtk: accept too short WMT FUNC_CTRL events (David Marlin) [RHEL-176415]
  - Bluetooth: virtio_bt: validate rx pkt_type header length (David Marlin) [RHEL-176415]
  - Bluetooth: virtio_bt: clamp rx length before skb_put (David Marlin) [RHEL-176415]
  - Bluetooth: btmtk: validate WMT event SKB length before struct access (David Marlin) [RHEL-176415]
  - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (David Marlin) [RHEL-176415]
  - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (David Marlin) [RHEL-176415]
  - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() (David Marlin) [RHEL-176415]
  - Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt (David Marlin) [RHEL-176415]
  - Bluetooth: hci_conn: fix potential UAF in create_big_sync (David Marlin) [RHEL-176415]
  - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (David Marlin) [RHEL-176415]
  - Bluetooth: SCO: check for codecs->num_codecs == 1 before assigning to sco_pi(sk)->codec (David Marlin) [RHEL-176415]
  - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (David Marlin) [RHEL-176415]
  - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (David Marlin) [RHEL-176415]
  - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (David Marlin) [RHEL-176415]
  - Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTU (David Marlin) [RHEL-176415]
  - Bluetooth: SMP: derive legacy responder STK authentication from MITM state (David Marlin) [RHEL-176415]
  - Bluetooth: SMP: force responder MITM requirements before building the pairing response (David Marlin) [RHEL-176415]
  - Bluetooth: MGMT: validate mesh send advertising payload length (David Marlin) [RHEL-176415]
  - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt (David Marlin) [RHEL-176415]
  - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync (David Marlin) [RHEL-176415]
  - Bluetooth: hci_h4: Fix race during initialization (David Marlin) [RHEL-176415]
  - Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate (David Marlin) [RHEL-176415]
  - Bluetooth: btusb: clamp SCO altsetting table indices (David Marlin) [RHEL-176415]
  - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop (David Marlin) [RHEL-176415]
  - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (David Marlin) [RHEL-176415]
  - Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (David Marlin) [RHEL-176415]
  - Bluetooth: L2CAP: Fix send LE flow credits in ACL link (David Marlin) [RHEL-176415]
  - Bluetooth: L2CAP: Fix regressions caused by reusing ident (David Marlin) [RHEL-176415]
  - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb (David Marlin) [RHEL-176415]
  - Bluetooth: hci_ll: Fix firmware leak on error path (David Marlin) [RHEL-176415]
  - Bluetooth: hci_sync: annotate data-races around hdev->req_status (David Marlin) [RHEL-176415]
  - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-176415]
  - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() (David Marlin) [RHEL-176415]
  - Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req (David Marlin) [RHEL-176415]
  - Bluetooth: qca: fix ROM version reading on WCN3998 chips (David Marlin) [RHEL-176415]
  - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access (David Marlin) [RHEL-176415]
  - Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() (David Marlin) [RHEL-176415]
  - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ (David Marlin) [RHEL-176415]
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (David Marlin) [RHEL-176415]
  - Bluetooth: HIDP: Fix possible UAF (David Marlin) [RHEL-176415]
  - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-176415]
  - Bluetooth: hci_sync: Fix hci_le_create_conn_sync (David Marlin) [RHEL-176415]
  - Bluetooth: ISO: Fix defer tests being unstable (David Marlin) [RHEL-176415]
  - Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy (David Marlin) [RHEL-176415]
  - Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU (David Marlin) [RHEL-176415]
  - Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU (David Marlin) [RHEL-176415]
  - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ (David Marlin) [RHEL-176415]
  - Bluetooth: L2CAP: Fix not checking output MTU is acceptable on L2CAP_ECRED_CONN_REQ (David Marlin) [RHEL-176415]
  - Bluetooth: Fix CIS host feature condition (David Marlin) [RHEL-176415]
  - Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ (David Marlin) [RHEL-176415]
  - Bluetooth: hci_qca: Cleanup on all setup failures (David Marlin) [RHEL-176415]
  - Bluetooth: purge error queues in socket destructors (David Marlin) [RHEL-176415]
  - Bluetooth: L2CAP: Fix result of L2CAP_ECRED_CONN_RSP when MTU is too short (David Marlin) [RHEL-176415]
  - Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ (David Marlin) [RHEL-176415]
  - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB (David Marlin) [RHEL-176415]
  - Bluetooth: L2CAP: Fix not tracking outstanding TX ident (David Marlin) [RHEL-176415]
  - Bluetooth: btusb: Add device ID for Realtek RTL8761BU (David Marlin) [RHEL-176415]
  - Bluetooth: btusb: Add new VID/PID for RTL8852CE (David Marlin) [RHEL-176415]
  - Bluetooth: btusb: Add USB ID 0489:e112 for Realtek 8851BE (David Marlin) [RHEL-176415]
  - Bluetooth: hci_conn: Set link_policy on incoming ACL connections (David Marlin) [RHEL-176415]
  - Bluetooth: hci_conn: use mod_delayed_work for active mode timeout (David Marlin) [RHEL-176415]
  - Bluetooth: btusb: Add support for MediaTek7920 0489:e158 (David Marlin) [RHEL-176415]
  - Bluetooth: hci_qca: Fix SSR (SubSystem Restart) fail when BT_EN is pulled up by hw (David Marlin) [RHEL-176415]
  - Bluetooth: btintel_pcie: Use IRQF_ONESHOT and default primary handler (David Marlin) [RHEL-176415]
  - Bluetooth: MGMT: report BIS capability flags in supported settings (David Marlin) [RHEL-176415]
  - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE (David Marlin) [RHEL-176415]
  - Bluetooth: btusb: add new custom firmwares (David Marlin) [RHEL-176415]
  - Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT (David Marlin) [RHEL-176415]
  - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV (David Marlin) [RHEL-176415]
  - Bluetooth: btintel_pcie: Support for S4 (Hibernate) (David Marlin) [RHEL-176415]
  - Bluetooth: btusb: MT7922: Add VID/PID 0489/e170 (David Marlin) [RHEL-176415]
  - Bluetooth: btusb: MT7920: Add VID/PID 0489/e135 (David Marlin) [RHEL-176415]
  - Revert "Reapply "Bluetooth: revert TX timestamping" for kernel v6.18 rebase." (David Marlin) [RHEL-176415]
  - tg3: Fix race for querying speed/duplex (Thomas Walsh) [RHEL-182531]
  - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180774]
  - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180774]
  - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180774]
  - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180774]
  - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180774]
  - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180774]
  - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180774] {CVE-2026-46242}
  - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180774]
  - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180774]
  - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180774]
  - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180774]
  - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180774]
  - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180774]
  - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173835] {CVE-2026-43074}
  - epoll: annotate racy check (Ian Kent) [RHEL-180774]
  - tools/power turbostat: v2026.04.21 (David Arcari) [RHEL-171741]
  - tools/power turbostat: Process HT siblings in CPU order (David Arcari) [RHEL-171741]
  - tools/power turbostat: Show module_id column (David Arcari) [RHEL-171741]
  - tools/power turbostat: Print core_id and apic_id in hex (David Arcari) [RHEL-171741]
  - tools/power turbostat: Cleanup print helper functions (David Arcari) [RHEL-171741]
  - tools/power turbostat: Fix --cpu-set 1 regression on HT systems (David Arcari) [RHEL-171741]
  - tools/power turbostat: Fix --cpu-set 0 regression on HT systems (David Arcari) [RHEL-171741]
  - tools/power turbostat: Fix AMD RAPL regression on big systems (David Arcari) [RHEL-171741]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-724.el9]
changelog:
  - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Waiman Long) [RHEL-193243] {CVE-2026-53166}
  - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Waiman Long) [RHEL-193243] {CVE-2026-53166}
  - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Waiman Long) [RHEL-193243] {CVE-2026-53166}
  - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179335] {CVE-2026-46086}
  - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189944] {CVE-2025-71113}
  - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189944]
  - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189977] {CVE-2026-23110}
  - KVM: arm64: Roll back partial shares on kvm_share_hyp() failure (Eric Auger) [RHEL-180319]
  - KVM: arm64: Avoid host/hyp share desync on unshare hypercall failure (Eric Auger) [RHEL-180319]
  - KVM: arm64: Free hyp-share tracking node when share hypercall fails (Eric Auger) [RHEL-180319]
  - KVM: arm64: Remove extra argument for __pvkm_host_{share,unshare}_hyp() (Eric Auger) [RHEL-180319]
  - KVM: arm64: Flush HCR_EL2.VSE to deliver SErrors to pKVM guests (Eric Auger) [RHEL-180319]
  - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU Conflicts: contextual in (Eric Auger) [RHEL-180319]
  - KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU (Eric Auger) [RHEL-180319]
  - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Eric Auger) [RHEL-180319]
  - KVM: arm64: PMU: Preserve AArch32 counter low bits (Eric Auger) [RHEL-180319]
  - KVM: arm64: vgic: Free private_irqs when init fails after allocation (Eric Auger) [RHEL-180319]
  - KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (Eric Auger) [RHEL-180319]
  - KVM: arm64: Fix __deactivate_fgt macro parameter typo (Eric Auger) [RHEL-180319]
  - KVM: arm64: Guard against NULL vcpu on VHE hyp panic path (Eric Auger) [RHEL-180319]
  - KVM: arm64: Wake-up from WFI when iqrchip is in userspace (Eric Auger) [RHEL-180319]
  - KVM: arm64: Fix initialisation order in __pkvm_init_finalise() (Eric Auger) [RHEL-180319]
  - KVM: arm64: Fix kvm_vcpu_initialized() macro parameter (Eric Auger) [RHEL-180319]
  - KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value (Eric Auger) [RHEL-180319]
  - KVM: selftests: Rename vm_vaddr_populate_bitmap() => vm_populate_gva_bitmap() (Eric Auger) [RHEL-180319]
  - KVM: arm64: Disable SPE Profiling Buffer when running in guest context (Eric Auger) [RHEL-180319]
  - KVM: arm64: Disable TRBE Trace Buffer Unit when running in guest context (Eric Auger) [RHEL-180319]
  - KVM: arm64: selftests: Fix incorrect rounding in page_align() (Eric Auger) [RHEL-180319]
  - HID: intel-ish-hid: ipc: Add Nova Lake-H/S PCI device IDs (Dennis Chen) [RHEL-183866]
  - HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (Dennis Chen) [RHEL-183866]
  - HID: intel-ish-hid: loader: Add PRODUCT_FAMILY-based firmware matching (Dennis Chen) [RHEL-183866]
  - HID: intel-ish-hid: Reset enum_devices_done before enumeration (Dennis Chen) [RHEL-183866]
  - HID: intel-ish-hid: Update ishtp bus match to support device ID table (Dennis Chen) [RHEL-183866]
  - EDAC/amd64: Add support for AMD family 1Ah-based newer models (Joel Savitz) [RHEL-100948]
  - EDAC/mc_sysfs: Increase legacy channel support to 16 (Joel Savitz) [RHEL-100948]
  - scsi: remove broken module pointer and refcount manipulation (David Jeffery) [RHEL-102922]
  - crypto: rng - Add per-cpu RNGs (Herbert Xu) [RHEL-92680]
  - crypto: rng - Free default RNG on module exit (Herbert Xu) [RHEL-92680]
  - wifi: ath11k: fix warning when unbinding (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-171417 RHEL-180122] {CVE-2026-46125}
  - wifi: mac80211: drop stray 'static' from fast-RX rx_result (Jose Ignacio Tornos Martinez) [RHEL-171417 RHEL-180053] {CVE-2026-46152}
  - wifi: mac80211: use safe list iteration in radar detect work (Jose Ignacio Tornos Martinez) [RHEL-171417 RHEL-180027] {CVE-2026-46166}
  - wifi: ath12k: prepare REO update element only for primary link (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rt2x00: allocate anchor with rt2x00dev (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: fix error unwind on arch_init() failure in PCI probe (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: fix peer_id usage in normal RX path (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: cfg80211: restrict LMR feedback check to TB and non-TB ranging (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath10k: snoc: select POWER_SEQUENCING (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: nl80211: fix UHR capability validation (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - net: rfkill: prevent unlimited numbers of rfkill events from being created (Jose Ignacio Tornos Martinez) [RHEL-171417] {CVE-2026-31670}
  - wifi: rt2x00usb: fix devres lifetime (Jose Ignacio Tornos Martinez) [RHEL-171417] {CVE-2026-31672}
  - wifi: brcmfmac: validate bsscfg indices in IF events (Jose Ignacio Tornos Martinez) [RHEL-171417 RHEL-173861] {CVE-2026-43110}
  - wifi: brcmsmac: Fix dma_free_coherent() size (Jose Ignacio Tornos Martinez) [RHEL-171417] {CVE-2026-31661}
  - wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free (Jose Ignacio Tornos Martinez) [RHEL-171417] {CVE-2026-31695}
  - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() (Jose Ignacio Tornos Martinez) [RHEL-171417] {CVE-2026-31779}
  - wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation (Jose Ignacio Tornos Martinez) [RHEL-171417] {CVE-2026-31780}
  - wifi: ath12k: Pass the correct value of each TID during a stop AMPDU session (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: mld: correctly set wifi generation data (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: mvm: don't send a 6E related command when not supported (Jose Ignacio Tornos Martinez) [RHEL-171417] {CVE-2026-43325}
  - wifi: iwlwifi: mld: Fix MLO scan timing (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (Jose Ignacio Tornos Martinez) [RHEL-171417] {CVE-2026-23444}
  - wifi: mac80211: fix NULL deref in mesh_matches_local() (Jose Ignacio Tornos Martinez) [RHEL-171417] {CVE-2026-23396}
  - wifi: mac80211: check tdls flag in ieee80211_tdls_oper (Jose Ignacio Tornos Martinez) [RHEL-171417] {CVE-2026-43052}
  - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-171417] {CVE-2026-31548}
  - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. (Jose Ignacio Tornos Martinez) [RHEL-171417] {CVE-2026-31551}
  - mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations (Jose Ignacio Tornos Martinez) [RHEL-171417] {CVE-2026-31394}
  - wifi: mac80211: use jiffies_delta_to_msecs() for sta_info inactive times (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: mac80211: remove keys after disabling beaconing (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: mac80211_hwsim: fully initialise PMSR capabilities (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() (Jose Ignacio Tornos Martinez) [RHEL-171417] {CVE-2026-23315}
  - wifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211() (Jose Ignacio Tornos Martinez) [RHEL-171417] {CVE-2026-23363}
  - wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211() (Jose Ignacio Tornos Martinez) [RHEL-171417] {CVE-2026-23325}
  - wifi: mac80211: fix missing ieee80211_eml_params member initialization (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: fix station lookup failure when disconnecting from AP (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: use correct pdev id when requesting firmware stats (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() (Jose Ignacio Tornos Martinez) [RHEL-171417] {CVE-2026-23279}
  - wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration (Jose Ignacio Tornos Martinez) [RHEL-171417] {CVE-2026-23246}
  - wifi: mac80211: set default WMM parameters on all links (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: mwifiex: Fix dev_alloc_name() return value check (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: brcmfmac: Fix potential kernel oops when probe fails (Jose Ignacio Tornos Martinez) [RHEL-171417] {CVE-2026-43144}
  - wifi: radiotap: reject radiotap with unknown bits (Jose Ignacio Tornos Martinez) [RHEL-171417] {CVE-2026-23367}
  - wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() (Jose Ignacio Tornos Martinez) [RHEL-171417] {CVE-2026-23336}
  - wifi: cfg80211: wext: fix IGTK key ID off-by-one (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: brcmsmac: phy: Remove unreachable error handling code (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: mac80211: Add eMLSR/eMLMR action frame parsing support (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: mac80211: add initial UHR support (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: cfg80211: add initial UHR support (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ieee80211: add some initial UHR definitions (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: mac80211: use wiphy_hrtimer_work for CAC timeout (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: mac80211: correct ieee80211-{s1g/eht}.h include guard comments (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: clear stale link mapping of ahvif->links_map (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Add support TX hardware queue stats (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Add support RX PDEV stats (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Fix index decrement when array_len is zero (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: support OBSS PD configuration for AP mode (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: add WMI support for spatial reuse parameter configuration (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - dt-bindings: net: wireless: ath11k-pci: deprecate 'firmware-name' property (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath11k: add usecase firmware handling based on device compatible (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath10k: sdio: add missing lock protection in ath10k_sdio_fw_crashed_dump() (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath10k: fix lock protection in ath10k_wmi_event_peer_sta_ps_state_chg() (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath10k: snoc: support powering on the device via pwrseq (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: pci: warn if SPS OCP happens for RTL8922DE (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: pci: restore LDO setting after device resume (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: mac: set MU group membership and position to registers (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: wow: disable interrupt before swapping FW for 8922D (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: debug: tweak Wi-Fi 7 SER L0/L1 simulation methods (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: debug: rename mac/ctrl error to L0/L1 error (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: regd: update regulatory map to R73-R54 (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: pci: validate release report content before using for RTL8922DE (Jose Ignacio Tornos Martinez) [RHEL-171417] {CVE-2026-43176}
  - wifi: rtw89: get designated link to replace link instance 0 (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: 8922a: configure FW version for SIM_SER_L0L1_BY_HALT_H2C (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: phy: add PHY C2H event dummy handler for func 1-7 and 2-10 (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: fw: correct content of DACK H2C command (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: rfk: update RFK report format of IQK, DACK and TXGAPK (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: rfk: add to print debug log of CIM3K (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: rfk: add firmware command to do CIM3K (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: rfk: add to print debug log of TX IQK (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: rfk: add firmware command to do TX IQK (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: mac80211: use u64_stats_t with u64_stats_sync properly (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: cfg80211: treat deprecated INDOOR_SP_AP_OLD control value as LPI mode (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: nl80211/cfg80211: support operating as RSTA in PMSR FTM request (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: nl80211/cfg80211: add negotiated burst period to FTM result (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: nl80211/cfg80211: clarify periodic FTM parameters for non-EDCA based ranging (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: nl80211/cfg80211: add new FTM capabilities (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: 8922a: add digital compensation for 2GHz (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: mac: set force MBA duration to 0 (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: mac: clear DTOP disable excluding CID7090 variant for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: phy: update TSSI flow for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: phy: add firmware element of digital TX power compensation (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: phy: update edcca log parsing for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: phy: add H2C command to send detail RX gain and link parameters for PS mode (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: phy: handle C2H event for PS mode report (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: phy: add chip_ops to calculate RX gain from efuse to support PS mode (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: debug: Fix memory leak in __print_txpwr_map() (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: Add default ID 28de:2432 for RTL8832CU (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: fix unable to receive probe responses under MLO connection (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: phy: fix incorrect power limit by mac_id (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: phy: refine initial flow of BB wrapper (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: phy: write BB wrapper registers with flush (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: phy: update BB wrapper RFSI (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: phy: update bb wrapper TPU init (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: phy: abstract BB wrap registers to share initial flow (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: phy: extend register to read history 2 of PHY env_monitor (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: phy: abstract start address and EHT of PHY status bitmap (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: phy: add ops rtw89_phy_gen_be_v1 for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: phy: add {read,write}_rf_v3 for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: mac: clear global interrupt right after power-on (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw88: add WQ_PERCPU to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: rename struct iwl_mcc_allowed_ap_type_cmd::offset_map (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: mvm: Remove link_id from time_events (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: mld: change cluster_id type to u8 array (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: support V13 of iwl_lari_config_change_cmd (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: split bios_value_u32 to separate the header (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: uefi: cache the DSM functions (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: acpi: cache the DSM functions (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: mvm: Cleanup MLO code (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: move iwl_get_lari_config_bitmap to the op_mode (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: move lari helper functions to the op_mode (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: mld: prevent EMLSR when NAN is active (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: mld: add an helper to update an EMLSR blocker (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: mld: Fix primary link selection logic (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: cfg: remove iwl_be221_name (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: mld: fix chandef start calculation (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: mld: remove unused variable in d3.c (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: fw: api: add HE type for UHR ELR (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: cfg: move the MODULE_FIRMWARE to the per-rf file (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: mld: fix HE SIG-B MCS/DCM/compression (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: fw: api: add UHR data definitions (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: add UHR TLC mode (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: adjust LINK context NPCA API (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: mld: refactor AP power type setting (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: fix 22000 series SMEM parsing (Jose Ignacio Tornos Martinez) [RHEL-171417] {CVE-2026-43172}
  - wifi: iwlwifi: mld: support TLC command version 6 (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: mld: trigger a dump upon notification if needed (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: fw: fix documentation reference for ap_type field (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: mvm: check the validity of noa_len (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: mvm: Remove few redundant 6 GHz scan chan params (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: mld: Remove wrong channel flags in scan cmd (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: mld: decode VHT information for sniffer (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: mld: Advertise support for multicast RX registration (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: mld: Support changing NAN configuration (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: mld: Extend the NAN configuration (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: mld: Declare support for NAN capabilities (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: mld: Handle rate selection for NAN interface (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: iwlwifi: mld: Add support for NAN (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: mac80211: mark iface work SKBs as consumed (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: mac80211: remove RX_DROP (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: nl80211: ignore cluster id after NAN started (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: cfg80211: cleanup cluster_id when stopping NAN (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: cfg80211: limit NAN func management APIs to offloaded DE (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: cfg80211: stop NAN and P2P in cfg80211_leave (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: cfg80211: allow only one NAN interface, also in multi radio (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: enable QCC2072 support (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: fix PCIE_LOCAL_REG_QRTR_NODE_ID definition for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: send peer meta data version to firmware (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: limit number of channels per WMI command (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: handle REO status ring for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: handle REO CMD ring for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: add hardware ops support for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: add HAL descriptor and ops for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: support downloading auxiliary ucode image for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: support LPASS_SHARED target memory type (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: add hardware parameters for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: add hardware registers for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: fix mac phy capability parsing (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: refactor 320 MHz bandwidth support parsing (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: fix preferred hardware mode calculation (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: refactor REO status ring handling (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: refactor REO CMD ring handling (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: refactor PCI window register access (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath11k: move .max_tx_ring to struct ath11k_hw_hal_params (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath11k: Register handler for CFR capture event (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath11k: Register DBR event handler for CFR data (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - MAINTAINERS: add RELAY entry (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath11k: Register relayfs entries for CFR dump (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath11k: Add support unassociated client CFR (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath11k: Register debugfs for CFR configuration (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath11k: Add initialization and deinitialization sequence for CFR module (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: do WoW offloads only on primary link (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: clean up on error in ath12k_dp_setup() (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: remove redundant pci_set_drvdata() call (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath11k: fix comment typo in monitor mode handling (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath11k: Fix failure to connect to a 6 GHz AP (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1 (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath9k: add OF dependency to AHB (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath9k: fix kernel-doc warnings in common-debug.h (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath9k: debug.h: fix kernel-doc bad lines and struct ath_tx_stats (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: pci: consider RTL8922D in PCI common flow (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: mac: consider RTL8922D in MAC common flow (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: mac: correct page number for CSI response (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: align CUSTID defined by firmware (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: disable EHT protocol by chip capabilities (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: support EHT GI/LTF setting (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: wow: add reason codes for disassociation in WoWLAN mode (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: pci: validate sequence number of TX release report (Jose Ignacio Tornos Martinez) [RHEL-171417] {CVE-2026-43213}
  - wifi: mac80211: add support for encryption/decryption of (Re)Association frames (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: mac80211: add support for EPPKE authentication protocol in non-AP STA mode (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: mac80211: Check for MLE before appending in Authentication frame (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: mac80211: allow key installation before association (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: nl80211: Add support for EPP peer indication (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: cfg80211: add support for key configuration before association (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: cfg80211: add feature flag for (re)association frame encryption (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: cfg80211: add support for EPPKE Authentication Protocol (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: cfg80211: don't apply HT flags to S1G channels (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: Add support for D-Link VR Air Bridge (DWA-F18) (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: Add support for MSI AX1800 Nano (GUAX18N) (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: mac: set EDCCA configurations for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: mac: add an entry to enable MAC function in preinit (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: mac: separate functions of CMAC power and function enable (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: mac: configure DMA_STOP1 by predefined mask (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: mac: define preload_init for generations (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: mac: update WP quota for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: mac: update MPDU quota according to chip DLE definition (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: mac: set quota 13 for PLE SNRPT (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: mac: add dle_mem and ple_{min,max}_qt quota for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: mac: remove unnecessary return from rtw89_fwdl_secure_idmem_share_mode() (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: coex: update coex software control for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: coex: update scoreboard value according to power state for two BT (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: coex: make coex scoreboard as chip info (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: mac80211: remove width argument from ieee80211_parse_bitrates (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: mac80211_hwsim: remove NAN by default (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: mac80211: improve station iteration ergonomics (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: mac80211: improve interface iteration ergonomics (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: cfg80211: include S1G_NO_PRIMARY flag when sending channel (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: mac80211: unexport ieee80211_get_bssid() (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: mac80211: don't send an unused argument to ieee80211_check_combinations (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: fw: set RACK bit every 4 H2C command for WiFi 6 chips only (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: fw: consider hardware AID for firmware elements (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: fw: add CMAC H2C command for punctured for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: fw: add CMAC H2C command for TX time for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: fw: add CMAC H2C command for TX AMPDU for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: fw: add CMAC H2C command for association for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: fw: add CMAC H2C command to initialize default value for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: fw: add DMAC v3 H2C command for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: update query RXDESC v3 for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: update TXWD v3 for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: mwifiex: Allocate dev name earlier for interface workqueue name (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: cfg80211: Fix use_for flag update on BSS refresh (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: brcmfmac: rename function that frees vif (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: brcmfmac: fix/add kernel-doc comments (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: mac80211: Update csa_finalize to use link_id (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: cfg80211: add cfg80211_stop_link() for per-link teardown (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: 8852b: refine hardware parameters for RFE type 5 (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: fix potential zero beacon interval in beacon tracking (Jose Ignacio Tornos Martinez) [RHEL-171417] {CVE-2026-43267}
  - wifi: rtw89: rfk: update rtw89_fw_h2c_rf_pre_ntfy_mcc format (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: fw: change WITH_RFK_PRE_NOTIFY to be a FW feature group (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: refine mis-ordered entries in FW feature table (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: 8922a: tweak RFK_PRE_NOTIFY FW feature configuration to align handling (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: fw: introduce helper for disabling FW feature configuration (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: fw: change FW feature map to a BITMAP (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: pre-handle RF calibration on link when needed (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: rfk: add rtw89_fw_h2c_rf_pre_ntfy_mcc for new WiFi 7 firmware (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: rfk: update RFK pre info V2 for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: enhance connection stability when triggering beacon loss (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: regd: 6 GHz power type marks default when inactive (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: 8922a: configure FW version for SCAN_OFFLOAD_EXTRA_OP feature (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: refine TX nulldata judgement when scan with 2 OP channels (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: add default quirks as features to chip_info (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: read chip ID for RTL8922D variants (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: efuse: read hardware version from efuse for WiFi 7 chips (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: define TX/RX aggregation and MPDU capability per chip (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: wow: abstract DMA check register for RTL8922DE (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: wow: add WOW_CAM update function for 8922D (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: wow: change type of WoWLAN pattern mask to __le32 (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: wow: use struct style to fill WOW CAM H2C command (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add (Jose Ignacio Tornos Martinez) [RHEL-171417] {CVE-2025-71234}
  - wifi: rtw88: Fix inadvertent sharing of struct ieee80211_supported_band data (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band() (Jose Ignacio Tornos Martinez) [RHEL-171417] {CVE-2025-71273}
  - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() (Jose Ignacio Tornos Martinez) [RHEL-171417] {CVE-2025-71229}
  - wifi: rtw88: Increase the RX gain before scanning (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: mcc: reset probe counter when receiving beacon (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: setting TBTT AGG number when mac port initialization (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: warn unexpected polling value of XTAL SI (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: refine C2H reg event polling timeout for LPS (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: debug: support SER L0/L1 simulation via halt H2C (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: debug: add ser_counters dbgfs (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: ser: L1 skip polling status if FW runs event mode (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: ser: enable error IMR after recovering from L1 (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: mac: reset power state before switching to power on (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: mlo: fix incorrect link address in management frames (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: mlo: fix missing TX null-data 1 during link switch (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: 8852b: increase beacon loss to 6 seconds (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtlwifi: fix typo 'received' in comment (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: 8852au: add support for TP TX30U Plus (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw89: add WQ_PERCPU to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw88: rtw8821cu: Add ID for Mercusys MU6H (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode() (Jose Ignacio Tornos Martinez) [RHEL-171417] {CVE-2025-71297}
  - wifi: rtw88: fix DTIM period handling when conf->dtim_period is zero (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Merge branch 'ath12k-ng' into ath-next (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Skip DP peer creation for scan vdev (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: move firmware stats request outside of atomic context (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: add the missing RCU lock in ath12k_dp_tx_free_txbuf() (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Remove Wi-Fi 7 header dependencies from common ath12k module (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move MSDU END TLV processing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move MU user processing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move remaining SIG TLV parsing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move EHT SIG processing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move HE SIG processing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move HT/VHT SIG processing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move TX monitor functionality to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move RX status TLV parsing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move MPDU pop functionality to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move monitor status processing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move monitor ring processing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Replace lock/unlock with guard() (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Use dp objects in performance critical paths (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Build all the files in wifi7 directory into ath12k_wifi7.ko (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Remove arch-specific HAL dependencies from common DP (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move ath12k_dp_rx_get_peer_id API to Wi-Fi 7 (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move ath12k_dp_rx_frags_cleanup API to Wi-Fi 7 (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Remove the wifi7 header inclusions in common code (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move ieee80211_ops callback to the arch specific module (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Add helper to free DP link peer (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move DP specific link stats to DP link peer (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move DP device stats to ath12k_dp (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Add callbacks in arch_ops for rx APIs (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Add lockdep warn for RCU (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Use ath12k_dp_peer in per packet Tx & Rx paths (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Attach and detach ath12k_dp_link_peer to ath12k_dp_peer (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Define ath12k_dp_peer structure & APIs for create & delete (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Add hash table for ath12k_dp_link_peer (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move ath12k_dp_link_peer list from ath12k_base to ath12k_dp (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Add hash table for ath12k_link_sta in ath12k_base (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Rename ath12k_peer to ath12k_dp_link_peer (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move DP related functions from peer.c to dp_peer.c file (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Drop hal_ prefix from hardware register names (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Rename hal_ops to ops (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Remove the unused ring inits in wcn (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Segregate the common and wifi7 specific structures (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move HAL Cookie Conversion and RBM related APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move HAL REO and Rx buf related APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move HAL Tx, REO and link idle setup related APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move HAL CE status and set link desc addr APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move HAL CE desc related APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move HAL SRNG shadow config and get ring id APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move HAL CE setup and SRNG related APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Use hal handle instead of ab handle (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Add direct HAL pointer in ath12k_dp (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move hal_params and regs to hal from hw (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move wbm_rbm_map to hw specific hal files (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Initialize hal_ops through hal_init (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Initialize desc_size through hal_init (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move srng config and hal_ops to hw specific hal files (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Rearrange PPDU radio stats (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Refactor data path pdev struct (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Refactor ath12k_vif structure (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Add framework for hardware specific DP interrupt handler (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Add framework for hardware specific ieee80211_ops registration (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Rearrange DP fields in ath12k_hw_group struct (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Support arch-specific DP device allocation (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Convert ath12k_dp member in ath12k_base to pointer (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Change the API prefixes to ath12k_wifi7 in tx/rx (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Remove hal_rx_ops and merge into hal_ops (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Add new infra for the rx path (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move hal_rx_ops callbacks to hal_ops (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Replace ops with direct calls for rxdma ring mask (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: unify HAL ops naming across chips (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move the hal APIs to hardware specific files (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Remove non-compact TLV support from QCN (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move HTT specific code from dp.c to newly introduced files (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move HTT Tx specific code to newly introduced files (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move HTT Rx specific code to newly introduced files (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move HTT code in dp.h to newly introduced files (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move ath12k_dp_tx and related APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move arch specific tx APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move arch specific rx tid and related functions to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move arch specific REO functions to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Separate arch specific part of RX APIs (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move srng processing to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move regular msdu processing functions to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move rx error and defrag functions to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move rxdma ring config functions to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move rx_desc.h file to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move hal_desc.h file to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move Rx error related functions to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move HAL Rx wrapper APIs to dp_rx.h (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move hal_rx.h file to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move hal_tx.h file to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move hal_tx and hal_rx to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Remove HAL define dependencies from shared AHB code (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Remove HAL defines from shared PCI code (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Rename ath12k_* symbols to ath12k_wifi7_* for clarity (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Modularize driver into common and Wi-Fi 7 specific components (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move hw_init invocation to target-specific probe (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move Wi-Fi 7 specific init routines to dedicated file (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Restructure ahb.c into common and Wi-Fi 7 specific modules (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Rename ahb_hif_ops to reflect generic usage (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Rename hw.c to Wi-Fi 7 specific implementation file (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move Wi-Fi 7 MHI configuration to dedicated file (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move Wi-Fi 7 WMI configuration to dedicated file (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Move Copy Engine configuration to Wi-Fi 7 specific file (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - wifi: ath12k: Restructure PCI code to common and Wi-Fi 7 specific logic (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - spinlock: extend guard with spinlock_bh variants (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - config: wifi: disable new unsupported configuration options (Jose Ignacio Tornos Martinez) [RHEL-171417]
  - dlm: fix add msg handle in send_queue ordered (Alexander Aring) [RHEL-169808]
  - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180140] {CVE-2026-46120}
  - redhat/configs: Enable CONFIG_DIBS built-in for s390x zfcpdump (Jan Polensky) [RHEL-136143]
  - redhat/configs: Disable CONFIG_DIBS_LO for s390x architecture (Jan Polensky) [RHEL-136143]
  - redhat/configs: Enable CONFIG_DIBS for s390x architecture (Jan Polensky) [RHEL-136143]
  - redhat/configs: Add CONFIG_DIBS configuration option (Jan Polensky) [RHEL-136143]
  - dibs: change dibs_class to a const struct (Jan Polensky) [RHEL-136143]
  - dibs: Remove KMSG_COMPONENT macro (Jan Polensky) [RHEL-136143]
  - dibs: Use subsys_initcall() (Jan Polensky) [RHEL-136143]
  - dibs: Remove reset of static vars in dibs_init() (Jan Polensky) [RHEL-136143]
  - dibs: Check correct variable in dibs_init() (Jan Polensky) [RHEL-136143]
  - net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer (Jan Polensky) [RHEL-136143]
  - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (Jan Polensky) [RHEL-136143]
  - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-136143]
  - net/smc: fix mismatch between CLC header and proposal (Jan Polensky) [RHEL-136143]
  - net/smc: handle -ENOMEM from smc_wr_alloc_link_mem gracefully (Jan Polensky) [RHEL-136143]
  - net/smc: make wr buffer count configurable (Jan Polensky) [RHEL-136143]
  - smc: rename smc_find_ism_store_rc to reflect broader usage (Jan Polensky) [RHEL-136143]
  - net/smc: fix general protection fault in __smc_diag_dump (Jan Polensky) [RHEL-136143]
  - dibs: Move event handling to dibs layer (Jan Polensky) [RHEL-136143]
  - dibs: Move data path to dibs layer (Jan Polensky) [RHEL-136143]
  - dibs: Move query_remote_gid() to dibs_dev_ops (Jan Polensky) [RHEL-136143]
  - dibs: Move vlan support to dibs_dev_ops (Jan Polensky) [RHEL-136143]
  - dibs: Local gid for dibs devices (Jan Polensky) [RHEL-136143]
  - dibs: Create class dibs (Jan Polensky) [RHEL-136143]
  - dibs: Move struct device to dibs_dev (Jan Polensky) [RHEL-136143]
  - dibs: Define dibs_client_ops and dibs_dev_ops (Jan Polensky) [RHEL-136143]
  - dibs: Define dibs loopback (Jan Polensky) [RHEL-136143]
  - dibs: Register ism as dibs device (Jan Polensky) [RHEL-136143]
  - dibs: Register smc as dibs_client (Jan Polensky) [RHEL-136143]
  - dibs: Create drivers/dibs (Jan Polensky) [RHEL-136143]
  - net/smc: Decouple sf and attached send_buf in smc_loopback (Jan Polensky) [RHEL-136143]
  - net/smc: Remove error handling of unregister_dmb() (Jan Polensky) [RHEL-136143]
  - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_vlan_by_tcpsk(). (Jan Polensky) [RHEL-136143]
  - smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set(). (Jan Polensky) [RHEL-136143]
  - net/smc: Remove unused argument from 2 SMC functions (Jan Polensky) [RHEL-136143]
  - net/smc: Improve log message for devices w/o pnetid (Jan Polensky) [RHEL-136143]
  - net/smc: Replace use of strncpy on NUL-terminated string with strscpy (Jan Polensky) [RHEL-136143]
  - net/smc: Unbind r/w buffer size from clcsock and make them tunable (Jan Polensky) [RHEL-136143]
  - net/iucv: Add missing kernel-doc return value descriptions (Jan Polensky) [RHEL-136143]
  - net/iucv: clean up iucv kernel-doc warnings (Jan Polensky) [RHEL-136143]
  - s390/barrier: Make array_index_mask_nospec() __always_inline (Jan Polensky) [RHEL-136143]
  - s390/syscalls: Add spectre boundary for syscall dispatch table (Jan Polensky) [RHEL-136143]
  - seq_buf: Export seq_buf_puts() (Anusha Srivatsa) [RHEL-170739]
  - host1x: Make remove callback return void (Anusha Srivatsa) [RHEL-170739]
  - drm/xe/svm: Remove page_pgmap() usage not present in RHEL (Anusha Srivatsa) [RHEL-170739]
  - drm/xe: Restore 2-argument __assign_str() in xe_trace.h tracepoints (Anusha Srivatsa) [RHEL-170739]
  - Revert "drm/xe/xe_survivability: Add support for survivability mode v2" (Anusha Srivatsa) [RHEL-170739]
  - drm/i915: Remove vma_flags_t usage not present in RHEL (Anusha Srivatsa) [RHEL-170739]
  - drm/xe: Remove rebar PCI helper usage not present in RHEL (Anusha Srivatsa) [RHEL-170739]
  - stddef: Introduce TRAILING_OVERLAP() helper macro (Anusha Srivatsa) [RHEL-170739]
  - kernel.h: move PTR_IF() and u64_to_user_ptr() to util_macros.h (Anusha Srivatsa) [RHEL-170739]
  - drm/xe/device: Remove ACQUIRE/ACQUIRE_ERR scope-based cleanup not present in RHEL (Anusha Srivatsa) [RHEL-170739]
  - drm/radeon: Remove partial backport artifacts from PCI MSI address mask conversion (Anusha Srivatsa) [RHEL-170739]
  - Revert "drm/radeon: Make MSI address limit based on the device DMA limit" (Anusha Srivatsa) [RHEL-170739]
  - drm/ttm: Remove vma_flags_t usage not present in RHEL (Anusha Srivatsa) [RHEL-170739]
  - Revert PMD huge page mapping support from drm/shmem-helper (Anusha Srivatsa) [RHEL-170739]
  - drm/pagemap: Remove page_pgmap() usage not present in RHEL (Anusha Srivatsa) [RHEL-170739]
  - drm/gpusvm: Remove page_pgmap() usage not present in RHEL (Anusha Srivatsa) [RHEL-170739]
  - Revert "drm/gem: fix build for mm_get_unmapped_area() call after backmerge" (Anusha Srivatsa) [RHEL-170739]
  - drm/gem: Remove vma_flags_t usage and adapt huge tmpfs helpers for RHEL (Anusha Srivatsa) [RHEL-170739]
  - drm/dma-buf: Restore 2-argument __assign_str() in dma_buf.h tracepoints (Anusha Srivatsa) [RHEL-170739]
  - add default_gfp() helper macro and use it in the new *alloc_obj() helpers (Anusha Srivatsa) [RHEL-170739]
  - slab.h: disable completely broken overflow handling in flex allocations (Anusha Srivatsa) [RHEL-170739]
  - slab: Introduce kmalloc_flex() and family (Anusha Srivatsa) [RHEL-170739]
  - compiler_types: Introduce __flex_counter() and family (Anusha Srivatsa) [RHEL-170739]
  - compiler_types: Introduce __annotated() macro (Anusha Srivatsa) [RHEL-170739]
  - slab: Introduce kmalloc_obj() and family (Anusha Srivatsa) [RHEL-170739]
  - drm: Restore -Wno-type-limits flag removed by upstream kbuild cleanup (Anusha Srivatsa) [RHEL-170739]
  - find: Switch from inline to __always_inline (Anusha Srivatsa) [RHEL-170739]
  - redhat/configs: Add new configs from DRM 7.0 backport (Anusha Srivatsa) [RHEL-170739]
  - Merge DRM changes from upstream v6.19..v7.0 (Anusha Srivatsa) [RHEL-170739]
  - powerpc/perf: Update check for PERF_SAMPLE_DATA_SRC marked events (Mamatha Inamdar) [RHEL-53366]
  - powerpc tools perf: Initialize error code in auxtrace_record_init function (Mamatha Inamdar) [RHEL-53366]
  - perf script: Enable to present DTL entries (Mamatha Inamdar) [RHEL-53366]
  - perf powerpc: Process the DTL entries in queue and deliver samples (Mamatha Inamdar) [RHEL-53366]
  - perf powerpc: Allocate and setup aux buffer queue to help co-relate with other events across CPU's (Mamatha Inamdar) [RHEL-53366]
  - perf powerpc: Add event name as vpa-dtl of PERF_TYPE_SYNTH type to present DTL samples (Mamatha Inamdar) [RHEL-53366]
  - perf powerpc: Process auxtrace events and display in 'perf report -D' (Mamatha Inamdar) [RHEL-53366]
  - perf powerpc: Add basic CONFIG_AUXTRACE support for VPA pmu on powerpc (Mamatha Inamdar) [RHEL-53366]
  - powerpc/perf/vpa-dtl: Add documentation for VPA dispatch trace log PMU (Mamatha Inamdar) [RHEL-53366]
  - powerpc/perf/vpa-dtl: Handle the writing of perf record when aux wake up is needed (Mamatha Inamdar) [RHEL-53366]
  - powerpc/perf/vpa-dtl: Add support to capture DTL data in aux buffer (Mamatha Inamdar) [RHEL-53366]
  - powerpc/perf/vpa-dtl: Add support to setup and free aux buffer for capturing DTL data (Mamatha Inamdar) [RHEL-53366]
  - powerpc/vpa_dtl: Add interface to expose vpa dtl counters via perf (Mamatha Inamdar) [RHEL-53366]
  - powerpc/time: Expose boot_tb via accessor (Mamatha Inamdar) [RHEL-53366]
  - docs: ABI: sysfs-bus-event_source-devices-vpa-dtl: Document sysfs event format entries for vpa_dtl pmu (Mamatha Inamdar) [RHEL-53366]
  - powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore (Mamatha Inamdar) [RHEL-53366]
  - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-162190]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-725.el9]
changelog:
  - crypto: qat - clear AES key schedule from stack (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - cancel work on re-enable SR-IOV timeout (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - use 2-arg strscpy where destination size is known (Vladislav Dronov) [RHEL-115837]
  - PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - validate RSA CRT component lengths (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - simplify adf_service_mask_to_string helper (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - add KPT support for GEN6 devices (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - use pci logging variants for PCI-specific messages (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - protect service table iterations with service_lock (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - fix restarting state leak on allocation failure (Vladislav Dronov) [RHEL-115837]
  - Documentation: qat_rl: make rate limiting wording clearer (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - handle sysfs-triggered reset callbacks (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - factor out AER reset helpers (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - skip restart for down devices (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - centralize bus master enable (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - notify fatal error before AER reset preparation (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - keep VFs enabled during reset (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - remove MODULE_VERSION (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - rename adf_ctl_drv.c to adf_module.c (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - remove unused character device and IOCTLs (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - fix heartbeat error injection (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - fix IRQ cleanup on 6xxx probe failure (Vladislav Dronov) [RHEL-115837] {CVE-2026-46060}
  - crypto: qat - use swab32 macro (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - replace scnprintf() with sysfs_emit() (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - fix type mismatch in RAS sysfs show functions (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - fix compression instance leak (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - use acomp_tfm_ctx() (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - disable 420xx AE cluster when lead engine is fused off (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - disable 4xxx AE cluster when lead engine is fused off (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - add anti-rollback support for GEN6 devices (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - add wireless mode support for QAT GEN6 (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - fix firmware loading failure for GEN6 devices (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - fix indentation of macros in qat_hal.c (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - Drop redundant local variables (Vladislav Dronov) [RHEL-115837]
  - zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work around compiler segfault (Vladislav Dronov) [RHEL-115837]
  - zstd: Import upstream v1.5.7 (Vladislav Dronov) [RHEL-115837]
  - lib: zstd: fix null-deref in ZSTD_createCDict_advanced2() (Vladislav Dronov) [RHEL-115837]
  - lib: zstd: export API needed for dictionary support (Vladislav Dronov) [RHEL-115837]
  - zstd: Fix array-index-out-of-bounds UBSAN warning (Vladislav Dronov) [RHEL-115837]
  - add intptr_t (Vladislav Dronov) [RHEL-115837]
  - zstd: Fix definition of assert() (Vladislav Dronov) [RHEL-115837]
  - lib: zstd: Backport fix for in-place decompression (Vladislav Dronov) [RHEL-115837]
  - lib: zstd: Fix -Wstringop-overflow warning (Vladislav Dronov) [RHEL-115837]
  - zstd: import usptream v1.5.2 (Vladislav Dronov) [RHEL-115837]
  - zstd: Move zstd-common module exports to zstd_common_module.c (Vladislav Dronov) [RHEL-115837]
  - lib: zstd: Fix comment typo (Vladislav Dronov) [RHEL-115837]
  - lib: zstd: fix repeated words in comments (Vladislav Dronov) [RHEL-115837]
  - zstd: Fixing mixed module-builtin objects (Vladislav Dronov) [RHEL-115837]
  - lib: zstd: clean up double word in comment. (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - convert to common field_get() helper (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - #undef field_get() before local definition (Vladislav Dronov) [RHEL-115837]
  - bitfield: Add non-constant field_{prep,get}() helpers (Vladislav Dronov) [RHEL-115837]
  - bitfield: Add less-checking __FIELD_{GET,PREP}() (Vladislav Dronov) [RHEL-115837]
  - bitfield: Ensure the return values of helper functions are checked (Vladislav Dronov) [RHEL-115837]
  - bitfield: suppress "dubious: x & !y" sparse warning (Vladislav Dronov) [RHEL-115837]
  - bitfield: add explicit inclusions to the example (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - Remove dst_null support (Vladislav Dronov) [RHEL-115837]
  - qat: don't mess with ->d_name (Vladislav Dronov) [RHEL-115837]
  - crypto: qat - Annotate struct adf_fw_counters with __counted_by (Vladislav Dronov) [RHEL-115837]
  - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183960]
  - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183960]
  - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-183589]
  - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-183589] {CVE-2026-31554}
  - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-183589] {CVE-2026-31555}
  - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-183589] {CVE-2026-23415}
  - amd/iommu: Preserve domain ids inside the kdump kernel (Eder Zulian) [RHEL-179518]
  - iommu/amd: Use maximum PPR log buffer size when SNP is enabled on Family 0x19 (Eder Zulian) [RHEL-179518]
  - iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (Eder Zulian) [RHEL-179518]
  - iommu/amd: Skip enabling command/event buffers for kdump (Eder Zulian) [RHEL-179518]
  - crypto: ccp: Skip SEV and SNP INIT for kdump boot (Eder Zulian) [RHEL-179518]
  - iommu/amd: Reuse device table for kdump (Eder Zulian) [RHEL-179518]
  - iommu/amd: Add support to remap/unmap IOMMU buffers for kdump (Eder Zulian) [RHEL-179518]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-726.el9]
changelog:
  - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189954] {CVE-2025-71147}
  - nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks (Maurizio Lombardi) [RHEL-177561]
  - ALSA: update RHEL kconfigs for 7.1 upstream code (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel Skylake: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (Jaroslav Kysela) [RHEL-183296]
  - ASoC: sdw_utils: fix missing component_name for cs42l43 part_id 0x2A3B (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Cleanup if component_probe fails (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Prevent double-free of debugfs (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Fix missing calls to wm_adsp2_remove() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: timer: Disable work at freeing timer object (Jaroslav Kysela) [RHEL-183296]
  - ALSA: timer: Manage timer object with kref (Jaroslav Kysela) [RHEL-183296]
  - Revert "ALSA: timer: Fix UAF at snd_timer_user_params()" (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1403CDA (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SOF: amd: set ipc flags to zero (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SOF: amd: fix for ipc flags check (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp: Fix NULL dereference when removing firmware controls (Jaroslav Kysela) [RHEL-183296]
  - ALSA: timer: Fix UAF at snd_timer_user_params() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: timer: Forcibly close timer instances at closing (Jaroslav Kysela) [RHEL-183296]
  - ALSA: pcm: Fix unlocked runtime state reads in xfer ioctls (Jaroslav Kysela) [RHEL-183296]
  - ALSA: seq: dummy: fix UMP event stack overread (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio (Jaroslav Kysela) [RHEL-183296]
  - ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: acp70: add standalone RT721 SoundWire machine (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: yc: Add MSI Raider A18 HX A9WJG to quirk table (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_sai: Fix 32 slots TDM broken by integer shift UB in xMR write (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: yc: Enable internal mic on MSI Bravo 17 C7VF (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: acp: Add DMI quirk for Lenovo Yoga Pro 7 15ASH11 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Set the value of potential sticky mixers to maximum (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek:ALC269 fixup for Yoga Pro 7 15ASH11 mic mute LED (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: simple-mux: Fix enum control bounds check (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: add quirk for HP Dragonfly Folio G3 2-in-1 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/cs420x: Add CS4208 fixup for iMac16,1 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add iface reset and delay quirk for TAE1160 USB Audio (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Fix speaker output on ASUS ROG Strix G615LP (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: q6asm-dai: remove unnecessary braces (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: q6asm-dai: fix error handling in prepare and set_params (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: q6asm-dai: close stream only when running (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: q6asm-dai: do not set stream state in event and trigger callbacks (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: bytcht_es8316: Fix MCLK leak on init errors (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Limit mic boost on Positivo DN140 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: scarlett2: Fix 2i2 Gen 4 direct monitor gain on firmware 2417 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: pcm: oss: Fix setup list UAF on proc write error (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: cs35l56: Fix system name string leaks (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Lenovo Yoga Slim 7 14AGP11 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Fix incorrect comment for ALC299_FIXUP_PREDATOR_SPK (Jaroslav Kysela) [RHEL-183296]
  - ALSA: firewire-motu: Protect register DSP event queue positions (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: pcm512x: fix null-ptr dereference in pcm512x_overclock_xxx_put() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: soc-acpi-intel-ptl-match: Remove unnecessary cs42l43 match (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-acpi-intel-ptl-match: Make Chrome matches conditional (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: soc-acpi: Add entry for sof_es8336 in NVL match table. (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: sof_sdw: Add support for nvlrvp in NVL platform (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs-amp-lib: Fix typo in error message: write -> read (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs-amp-lib: Fix missing dput() after debugfs_lookup() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs-amp-lib: Fix wrong sizeof() in _cs_amp_set_efi_calibration_data() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Fix flushing of IRQ work in cs35l56_sdw_remove() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: seq: Serialize UMP output teardown with event_input (Jaroslav Kysela) [RHEL-183296]
  - ALSA: scarlett2: Allow flash writes ending at segment boundary (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add LED quirk for HP ProBook 430 G6 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/intel: Make sure to cancel irq-pending work at closing PCM stream (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: Move irq pending work into hda-intel stream (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-utils: Add missing va_end in snd_soc_ret() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: ua101: Reject too-short USB descriptors (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP 16 Piston OmniBook X (Jaroslav Kysela) [RHEL-183296]
  - ALSA: seq: avoid past-the-end iterator in snd_seq_create_port() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: timer: avoid past-the-end iterator in snd_timer_dev_register() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add quirk for HP Z66 G6 14 laptop (Jaroslav Kysela) [RHEL-183296]
  - ALSA: pcm: Don't setup bogus iov_iter for silencing (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion Plus 14 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: pcm_drm_eld: rate-limit ELD parsing errors (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: Avoid quirk matching with zero PCI SSID (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add quirk for HP 250 G10 (103c:8b34) (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Use ALC287_FIXUP_TXNW2781_I2C for ASUS Strix Gxx5 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: asihpi: Fix potential OOB array access at reading cache (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: acp: Add DMI quirk for ASUS Zenbook S16 UM5606GA (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: acp-sdw-legacy: check CPU DAI name before logging (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: q6apm-dai: Allocate an extra page for PCM buffers (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/ca0132: Disable auto-detect on manual output select (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion Laptop 16-ag0xxx (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: ALC269 fixup for Lenovo Yoga Pro 7 15ASH111 audio (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: Fix NULL pointer dereference in snd_hda_ctl_add() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add quirk for Samsung Galaxy Book5 360 headphone (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: fix mic boost on Framework PTL (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Limit mic boost on Positivo DN50E (Jaroslav Kysela) [RHEL-183296]
  - ALSA: doc: cs35l56: Update path to HDA driver source (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: qcom: Check offload mapping failures (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Fix Legion 7 16ITHG6 speaker amp binding (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add iface reset and delay quirk for TTGK Technology USB-C Audio (Jaroslav Kysela) [RHEL-183296]
  - ALSA: scarlett2: Add missing error check when initialise Autogain Status (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Log SoundWire status updates only on changes (Jaroslav Kysela) [RHEL-183296]
  - ASoC: ti: omap-dmic: Fix IS_ERR() vs NULL check bug in omap_dmic_select_fclk() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Drop malformed default N from Kconfig (Jaroslav Kysela) [RHEL-183296]
  - ASoC: sdw_utils: Check speaker component string allocation (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SOF: amd: Fix error code handling in psp_send_cmd() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: sdw_utils: Add quirk to ignore RT721 CODEC_MIC (Jaroslav Kysela) [RHEL-183296]
  - ASoC: sdw_utils: Add quirk to ignore RT712 CODEC_MIC (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: soc-acpi: add LG Gram 16Z90U RT713 + single RT1320 quirk (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-acpi-intel-arl-match: add rt712_l0_rt1320_l3 support (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: soc-acpi-intel-arl-match: Reorder ACPI machine tables (Jaroslav Kysela) [RHEL-183296]
  - ASoC; dt-bindings: mediatek,mt8173-rt5650-rt5514: Fix mediatek,audio-codec constraints (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: cs35l56: Put ACPI device after setting companion (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: cs35l41: Put ACPI device on missing physical node (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Bound MIDI endpoint descriptor scans (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add codec SSID quirk for Lenovo Yoga Pro 9 16IMH9 (17aa:38d5) (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Destroy workqueue in probe error path (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Don't use devres to unregister component (Jaroslav Kysela) [RHEL-183296]
  - ALSA: sparc/dbri: add missing fallthrough (Jaroslav Kysela) [RHEL-183296]
  - ALSA: core: Serialize deferred fasync state checks (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add mute LED fixup for HP Pavilion 15-cs1xxx (Jaroslav Kysela) [RHEL-183296]
  - ALSA: seq: Fix UMP group 16 filtering (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp_fw_find_test: Clear searched_fw_files in find-by-index test (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp_fw_find_test: Redirect wm_adsp_release_firmware_files() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tas2770: Deal with bogus initial temperature value (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tas2764: Deal with bogus initial temperature register value (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: add clock quirk for Motu 1248 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: midi2: Restart output URBs on resume (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP Envy X360 15-fh0xxx (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add quirk flags for AlphaTheta EUPHONIA (Jaroslav Kysela) [RHEL-183296]
  - ALSA: firewire-tascam: Do not drop unread control events (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add quirk flags for JBL Pebbles (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_xcvr: Fix event generation for cached controls (Jaroslav Kysela) [RHEL-183296]
  - ASoC: sdw_utils: avoid the SDCA companion function not supported failure (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: yc: Add HP OMEN Gaming Laptop 16-ap0xxx product line in quirk table (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Fix out-of-bounds in dev_err() in cs35l56_read_onchip_spkid() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: yc: Add DMI quirk for MSI Bravo 15 C7VE (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Fix hibernate write in runtime resume error path (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: ab8500: Remove suspicious code (Jaroslav Kysela) [RHEL-183296]
  - ALSA: pcmtest: Return -EFAULT on pattern read copy failure (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: add min_mute quirk for Razer Nommo V2 X (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add codec SSID quirk for Lenovo Yoga Pro 9 16IMH9 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Fix speaker silence after S3 resume on Xiaomi Mi Laptop Pro 15 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/tas2781: Fix incorrect bit update for non-book-zero or book 0 pages >1 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: cs35l56: Fix uninitialized value in cs35l56_hda_read_acpi() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/conexant: Fix missing error check for jack detection (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: Avoid WARN_ON() for HDMI chmap slot checks (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Fix quirk entry placement for PreSonus AudioBox USB (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: ab8500: Fix casting of private data (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Fix illegal writes to OTP_MEM registers (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: bytcr_wm5102: Fix MCLK leak on platform_clock_control error (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() (Jaroslav Kysela) [RHEL-183296] {CVE-2026-46146}
  - ALSA: usb-audio: Fix potential leak of pd at parsing UAC3 streams (Jaroslav Kysela) [RHEL-183296]
  - ALSA: caiaq: Don't abort when no input device is available (Jaroslav Kysela) [RHEL-183296]
  - ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path (Jaroslav Kysela) [RHEL-183296]
  - ASoC: aw88395: Fix kernel panic caused by invalid GPIO error pointer (Jaroslav Kysela) [RHEL-183296]
  - ALSA: caiaq: fix usb_dev refcount leak on probe failure (Jaroslav Kysela) [RHEL-183296] {CVE-2026-46048}
  - sound: ua101: fix division by zero at probe (Jaroslav Kysela) [RHEL-183296] {CVE-2026-46184}
  - ALSA: usb-audio: apply quirk for Playstation PDP Riffmaster (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: Remove duplicate cmedia entries in codecs Makefile (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add micmute LED quirk for Acer Aspire A315-44P (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: enable mute LED support on ThinkBook 16p (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Fix UAC3 cluster descriptor size check (Jaroslav Kysela) [RHEL-183296]
  - ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger (Jaroslav Kysela) [RHEL-183296] {CVE-2026-46157}
  - ALSA: hda: cs35l56: Propagate ASP TX source control errors (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: wcd937x: fix AUX PA sequencing and mixer controls (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Remove stale snd-soc-tegra-utils composite module definition (Jaroslav Kysela) [RHEL-183296]
  - ASoC: rt722-sdca: add FU06 Playback Switch for speaker mute control (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tas2764: Mark die temp register as volatile (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tas2770: Fix order of operations for temperature calculation (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SOF: Intel: add an empty adr_link (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: acp: Add DMI quirk for Valve Steam Deck OLED (Jaroslav Kysela) [RHEL-183296]
  - regmap: sdw-mbq: Fix spelling mistake "undeferable" -> "undeferrable" (Jaroslav Kysela) [RHEL-183296]
  - Revert "ALSA: pcmtest: fix reference leak on failed device registration" (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tas2781: Add tas5832 support (Jaroslav Kysela) [RHEL-183296]
  - ASoC: dt-bindings: ti,tas2781: Add TAS5832 support (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Avoid false E-MU sample-rate notifications (Jaroslav Kysela) [RHEL-183296]
  - ASoC: sdw_utils: cs42l43: allow spk component names to be combined (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: x1e80100: limit speaker volumes (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek - Add mute LED support for HP Victus 15-fa2xxx (Jaroslav Kysela) [RHEL-183296]
  - ALSA: pcmtest: Fix resource leaks in module init error paths (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio/line6: Add support for POD HD PRO (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add LED fixup for HP EliteBook 6 G2a Laptops (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: Fix reading of mipi-sdca-control-deferrable (Jaroslav Kysela) [RHEL-183296]
  - regmap: sdw-mbq: Allow defers on undeferrable controls (Jaroslav Kysela) [RHEL-183296]
  - Revert "ALSA: usb-audio: Add quirk for SmartlinkTechnology M01" (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: add quirk for Acer Nitro 16 AN16-41 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: core: Fix potential data race at fasync handling (Jaroslav Kysela) [RHEL-183296]
  - ALSA: als4000: Fix capture trigger chip->mode race (Jaroslav Kysela) [RHEL-183296]
  - ALSA: caiaq: Fix control_put() result and cache rollback (Jaroslav Kysela) [RHEL-183296]
  - ALSA: pcmtest: fix reference leak on failed device registration (Jaroslav Kysela) [RHEL-183296]
  - ALSA: 6fire: Fix input volume change detection (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add quirk entries for NexiGo N930W webcam (Jaroslav Kysela) [RHEL-183296]
  - ALSA: vx: use correct function name in kernel-doc comment (Jaroslav Kysela) [RHEL-183296]
  - ALSA: virtio: drop an extaneous kernel-doc comment (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add quirk for SmartlinkTechnology M01 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES (Jaroslav Kysela) [RHEL-183296] {CVE-2026-46018}
  - ALSA: hda/intel: Move firmware loading into the probe work (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: add quirk for HONOR MRB-XXX M1020 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Tidy up error check for processing unit (Jaroslav Kysela) [RHEL-183296]
  - ALSA: 6fire: Drop unnecessary NULL checks (Jaroslav Kysela) [RHEL-183296]
  - ALSA: 6fire: Reduce multi-level conditionals in usb6fire_chip_disconnect() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-183296]
  - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-183296]
  - ALSA: caiaq: Handle probe errors properly (Jaroslav Kysela) [RHEL-183296] {CVE-2026-46004}
  - ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() (Jaroslav Kysela) [RHEL-183296] {CVE-2026-46088}
  - ALSA: usb-audio: Fix missing error handling for get_min_max*() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek - fixed speaker no sound update (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add quirk for Acer PT316-51S headset mic (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tas2781: fix unused-const-variable warning (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add quirk for Legion S7 15IMH (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add quirk for HP Spectre x360 14-ea (Jaroslav Kysela) [RHEL-183296]
  - ALSA: caiaq: take a reference on the USB device in create_card() (Jaroslav Kysela) [RHEL-183296] {CVE-2026-31701}
  - ALSA: sscape: Add suspend and resume support (Jaroslav Kysela) [RHEL-183296]
  - ALSA: sscape: Cache per-card resources for board reinitialization (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Do not expose sticky mixers (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Move volume control resolution check into a function (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add error checks against get_min_max*() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add quirk for PreSonus AudioBox USB (Jaroslav Kysela) [RHEL-183296]
  - ALSA: interwave: guard PM-only restore helpers with CONFIG_PM (Jaroslav Kysela) [RHEL-183296]
  - ALSA: fireworks: bound device-supplied status before string array lookup (Jaroslav Kysela) [RHEL-183296] {CVE-2026-31619}
  - ALSA: sc6000: Restore board setup across suspend (Jaroslav Kysela) [RHEL-183296]
  - ALSA: sc6000: Keep the programmed board state in card-private data (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usx2y: us144mkii: fix NULL deref on missing interface 0 (Jaroslav Kysela) [RHEL-183296] {CVE-2026-31620}
  - ASoC: SOF: Don't allow pointer operations on unconfigured streams (Jaroslav Kysela) [RHEL-183296] {CVE-2026-46179}
  - ASoC: rt1320-sdw: Add an approach to get new hardware advance gain (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: Update text of FIXME (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: yc: Add MSI Vector A16 HX A8WHG to quirk table (Jaroslav Kysela) [RHEL-183296]
  - ASoC: uda1380: Modernize the driver (Jaroslav Kysela) [RHEL-183296]
  - ASoC: rt1320-sdw: kcontrol for brown-out feature update (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Fix spelling error 'recieved' -> 'received' (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: Tidy up irq_enable_flags()/sdca_irq_disable() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: Fix cleanup inversion in class driver (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/alc269: Drop superfluous GPIO write at resume (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add quirk flags for Feaulle Rainbow (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/senarytech: Clean up with the new GPIO helper (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/sigmatel: Clean up with the new GPIO helper (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: Add sync version of snd_hda_codec_write() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: Add a simple GPIO setup helper function (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Clean up with snd_hda_codec_set_gpio() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/alc662: Simplify the quirk for CSL Unity BF24B (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/analog: Fix GPIO verb orders (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/ca0132: Clean up with the new GPIO helper (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/cirrus: Clean up with the new GPIO helper (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/conexant: Clean up with the new GPIO helper (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add iface reset and delay quirk for HUAWEI USB-C HEADSET (Jaroslav Kysela) [RHEL-183296]
  - ALSA: msnd: add ISA and PnP system sleep callbacks (Jaroslav Kysela) [RHEL-183296]
  - ALSA: msnd: prepare system sleep support (Jaroslav Kysela) [RHEL-183296]
  - ALSA: i2c: ak4xxx-adda: seed AK5365 cache with reset defaults (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add quirk for CSL Unity BF24B (Jaroslav Kysela) [RHEL-183296]
  - ASoC: dt-bindings: hisilicon: Convert hi6210 I2S to dt-schema (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tas2781: Explicit association of Device, Device Name, and Device ID (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: acp-da7219-max98357a: tidyup acp_soc_is_rltk_max() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: qcom: Fix incorrect type in enable_audio_stream (Jaroslav Kysela) [RHEL-183296]
  - ALSA: i2c: ak4xxx-adda: implement AK4529 reset handling (Jaroslav Kysela) [RHEL-183296]
  - ALSA: tea6330t: add mixer state restore helper (Jaroslav Kysela) [RHEL-183296]
  - ALSA: tea6330t: move snd_tea6330t_detect() EXPORT_SYMBOL (Jaroslav Kysela) [RHEL-183296]
  - ALSA: interwave: add ISA and PnP suspend and resume callbacks (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: ps: fix the pcm device numbering for acp pdm dmic (Jaroslav Kysela) [RHEL-183296]
  - ASoC: intel: avs: Fix type mismatch in variable assignment (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: Constify GPR packet being send over GPR interface (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc.h: remove unused card->pmdown_time (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SOF: compress: return the configured codec from get_params (Jaroslav Kysela) [RHEL-183296]
  - ASoC: rt5640: Handle 0Hz sysclk during stream shutdown (Jaroslav Kysela) [RHEL-183296]
  - ALSA: gusmax: add ISA suspend and resume callbacks (Jaroslav Kysela) [RHEL-183296]
  - ALSA: gus: add shared GF1 suspend and resume helpers (Jaroslav Kysela) [RHEL-183296]
  - ALSA: gusclassic: add ISA suspend and resume callbacks (Jaroslav Kysela) [RHEL-183296]
  - ALSA: gusextreme: add ISA suspend and resume callbacks (Jaroslav Kysela) [RHEL-183296]
  - ALSA: ctxfi: Add fallback to default RSR for S/PDIF (Jaroslav Kysela) [RHEL-183296] {CVE-2026-46049}
  - ALSA: ctxfi: Limit PTP to a single page (Jaroslav Kysela) [RHEL-183296] {CVE-2026-31602}
  - ALSA: scarlett2: Add missing sentinel initializer field (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Fix code style error (Jaroslav Kysela) [RHEL-183296]
  - ALSA: aoa: onyx: Update IEC958 sample-rate status for PCM playback (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: Standardize MCLK error logs across RT boards (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: cht_bsw_rt5672: Fix MCLK leak on platform_clock_control error (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: bytcr_rt5651: Fix MCLK leak on platform_clock_control error (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: bytcr_rt5640: Fix MCLK leak on platform_clock_control error (Jaroslav Kysela) [RHEL-183296]
  - ASoC: imx-rpmsg: Add DSD format support with dynamic DAI format switching (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: Export Q7.8 volume control helpers (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: tlv320dac33: remove kmemdup_array (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: Add RJ support to class driver (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: acp-sdw-legacy: remove unnecessary condition check (Jaroslav Kysela) [RHEL-183296]
  - ASoC: intel: sof_sdw: Prepare for configuration without a jack (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: Notify IEC958 Default PCM switch state changes (Jaroslav Kysela) [RHEL-183296]
  - ALSA: aoa/onyx: Fix OF node leak on probe failure (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: q6apm: Add support for early buffer mapping on DSP (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: qdsp6: remove search for module iid in hot path (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: q6apm-lpass-dai: move graph start to trigger (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: qdapm-lpass-dai: correct the error message (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: q6dsp: Add Senary MI2S audio interface support (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: qdsp6: lpass-ports: add support for LPASS LPI MI2S dais (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: common: validate cpu dai id during parsing (Jaroslav Kysela) [RHEL-183296]
  - ASoC: dt-bindings: qcom: add LPASS LPI MI2S dai ids (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: q6apm-dai: reset queue ptr on trigger stop (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens (Jaroslav Kysela) [RHEL-183296] {CVE-2026-46143}
  - ASoC: qcom: qdsp6: topology: check widget type before accessing data (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: q6apm: remove child devices when apm is removed (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: q6apm: move component registration to unmanaged version (Jaroslav Kysela) [RHEL-183296] {CVE-2026-31587}
  - soundwire: debugfs: initialize firmware_file to empty string (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: apply quirk for MOONDROP JU Jiu (Jaroslav Kysela) [RHEL-183296]
  - ALSA: aoa/tas: Fix OF node leak on probe failure (Jaroslav Kysela) [RHEL-183296]
  - ALSA: compress: Pay attention if drivers error out retrieving pointers (Jaroslav Kysela) [RHEL-183296]
  - ALSA: compress: Refuse to update timestamps for unconfigured streams (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_easrc: Change the type for iec958 channel status controls (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_easrc: Fix value type in fsl_easrc_iec958_get_bits() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_easrc: Check the variable range in fsl_easrc_iec958_put_bits() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_mode_put() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_arc_mode_put() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_micfil: Fix event generation in micfil_quality_set() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_micfil: Fix event generation in micfil_put_dc_remover_state() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_micfil: Fix event generation in micfil_range_set() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_micfil: Fix event generation in hwvad_put_init_mode() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_micfil: Fix event generation in hwvad_put_enable() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_micfil: Add access property for "VAD Detected" (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Use dev_err_probe() in tegra_asoc_machine probe (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Use dev_err_probe() for regmap init failures (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Use dev_err_probe() in OPE, PEQ and MBDRC drivers (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Add error logging in tegra210_admaif driver (Jaroslav Kysela) [RHEL-183296]
  - ASoC: mxs-sgtl5000: disable MCLK on error paths of mxs_sgtl5000_probe() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: es1688: add ISA suspend and resume callbacks (Jaroslav Kysela) [RHEL-183296]
  - ALSA: ctxfi: Use correct DAIO type for da_desc (Jaroslav Kysela) [RHEL-183296]
  - ALSA: ctxfi: Rename SPDIFI1 to SPDIFI_BAY (Jaroslav Kysela) [RHEL-183296]
  - ALSA: ctxfi: Precompute SRC allocation loop bound (Jaroslav Kysela) [RHEL-183296]
  - ASoC: ak5558: remove unused snd_soc_component (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc.h: remove snd_soc_of_parse_audio_prefix() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/cmedia: Remove duplicate pin configuration parsing (Jaroslav Kysela) [RHEL-183296]
  - ALSA: aoa: i2sbus: clear stale prepared state (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SOF: Intel: hda: Place check before dereference (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-core: remove duplicate snd_soc_flush_all_delayed_work() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: fix code style (ERROR: else should follow close brace '}') (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: fix bad indentation for alc269 (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: acp-sdw-legacy: rename the dmic component name (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: acp: update dmic_num logic for acp pdm dmic (Jaroslav Kysela) [RHEL-183296]
  - ASoC: jz4770: Convert to devm_clk_get_enabled() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: jz4760: Convert to devm_clk_get_enabled() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: jz4725b: Convert to devm_clk_get_enabled() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: samsung: spdif: Convert to devm_ioremap_resource() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add support for ASUS 2026 Commercial laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add support for HP Laptops (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: cs35l41: Fix boost type for HP Dragonfly 13.5 inch G4 (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: inline i2c_check_functionality checks (Jaroslav Kysela) [RHEL-183296]
  - ALSA: aoa: i2sbus: fix OF node lifetime handling (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/cs8409: Fix error message in cs8409_i2c_bulk_read() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: intel: Drop obsolete probe-work unlock workaround (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: tidy up the AF16Rig quirks (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: Add missing SET_GPI_* and SET_GPO_* verb definitions (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/proc: show GPI and GPO state in codec proc output (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add quirks for Arturia AF16Rig (Jaroslav Kysela) [RHEL-183296]
  - ALSA: asihpi: detect truncated control names (Jaroslav Kysela) [RHEL-183296]
  - ALSA: core: Validate compress device numbers without dynamic minors (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: ehl_rt5660: remove unused macro definitions (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: fix the register to ctl value conversion for Q7.8 format (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-core: remove unused dobj_list (Jaroslav Kysela) [RHEL-183296]
  - ASoC: ts3a227e: Drop unused include (Jaroslav Kysela) [RHEL-183296]
  - ASoC: rt1318: Drop unused include (Jaroslav Kysela) [RHEL-183296]
  - ASoC: nau8315: Drop unused include (Jaroslav Kysela) [RHEL-183296]
  - ASoC: dt-bindings: mediatek,mt8173-rt5650-rt5514: convert to DT schema (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Extend max number of channels to 64 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Replace hard-coded number with MAX_CHANNELS (Jaroslav Kysela) [RHEL-183296]
  - ALSA: pcm: Serialize snd_pcm_suspend_all() with open_mutex (Jaroslav Kysela) [RHEL-183296]
  - ALSA: pcm: Use pcm_lib_apply_appl_ptr() in x32 sync_ptr (Jaroslav Kysela) [RHEL-183296]
  - ALSA: core/seq: Optimize the return logic in cc_ev_to_ump_midi2 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: rotate standard MIDI output port scan (Jaroslav Kysela) [RHEL-183296]
  - ALSA: seq_oss: return full count for successful SEQ_FULLSIZE writes (Jaroslav Kysela) [RHEL-183296]
  - ASoC: sdw_utils: add rt1320 and rt1321 dmic dai in codec_info_list (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SOF: Intel: Add a is_amp flag to fix the wrong name prefix (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: soc-acpi-intel-ptl-match: drop rt722 monolithic match tables (Jaroslav Kysela) [RHEL-183296]
  - ASoC: renesas: Fix non-static global variable (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp_fw_find_test: Fix missing NULL terminator on file name list (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Allow factory calibration through ALSA controls (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc.h: Add SOC_SINGLE_BOOL_EXT_ACC() to allow setting access flags (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Use dev_err_probe() in tegra_audio_graph_card probe (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Use dev_err_probe() in tegra_asoc_machine probe (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Use dev_err_probe() in tegra210_sfc probe (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Use dev_err_probe() in tegra210_mvc probe (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Use dev_err_probe() in tegra210_mixer probe (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Add error logging in tegra210_i2s driver (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Use dev_err_probe() in tegra210_dmic probe (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Add error logging in tegra210_amx driver (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Use dev_err_probe() in tegra210_ahub probe (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Add error logging in tegra210_adx driver (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Use dev_err_probe() in tegra186_dspk probe (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Use dev_err_probe() in tegra186_asrc probe (Jaroslav Kysela) [RHEL-183296]
  - ASoC: update outdated comments for removed snd_soc_new_pcms() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: uda1380: use dev_err() and %pe for better error reporting (Jaroslav Kysela) [RHEL-183296]
  - ASoC: uda1380: fix missing return value checks for I2C operations (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SOF: sof-audio: pcm_id is __le32 (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: yc: Add MSI Thin A15 B7VF to quirk table (Jaroslav Kysela) [RHEL-183296]
  - ASoC: sdw_utils: add vendor_id to asoc_sdw_codec_info (Jaroslav Kysela) [RHEL-183296]
  - ASoC: sun4i-spdif: Make reset control non-optional and check for all errors (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-topology: fix __le32 conversion in printed values (Jaroslav Kysela) [RHEL-183296]
  - ASoC: generic: update outdated comment for removed soc_bind_dai_link() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp: select CONFIG_SND_SOC_WM_ADSP from all users (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-component: remove component->val_bytes (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-ops: use snd_soc_component_regmap_val_bytes() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: use snd_soc_component_regmap_val_bytes() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-component: add snd_soc_component_regmap_val_bytes() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: validate full match when resolving quirk aliases (Jaroslav Kysela) [RHEL-183296]
  - ASoC: dt-bindings: adi,ssm2305: Convert to DT schema (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp: Fix crash in kunit tests on arm64 (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: cs42l84: set up PLL for more sample rates (Jaroslav Kysela) [RHEL-183296]
  - soundwire: intel_auxdevice: Add cs42l49 to wake_capable_list (Jaroslav Kysela) [RHEL-183296]
  - ALSA: timer: keep a list of open masters for slave lookup (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: Use named control mux for GE/SU controls (Jaroslav Kysela) [RHEL-183296]
  - ASoC: dapm: Add a named controls variant of a mux widget (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: wcd-clsh: Always update buck/flyback on transitions on transitions (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_easrc: fix comment typo (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc_sdw_utils: remove codec name index of snd_soc_sdca codecs (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc_sdw_utils: remove cs42l45 SmartMic codec name index (Jaroslav Kysela) [RHEL-183296]
  - ALSA: pcm: oss: use proper stream lock for runtime->state access (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-component: remove pcm_construct()/pcm_destruct() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: xtensa: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: xilinx: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: uniphier: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: stm: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: sprd: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: sof: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-generic-dmaengine-pcm: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: samsung: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: pxa: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: kirkwood: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: intel: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: generic: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: dwc: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: rt5xxx-spi: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: cros_ec_codec: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: bcm: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: au1x: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: atmel: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: apple: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-component: re-add pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: aw88166: Support device specific firmware (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tas2770: expose SDOUT bus keeper via set_tdm_idle (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tas2764: expose SDOUT bus keeper via set_tdm_idle operation (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-dai: add common operation to set TDM idle mode (Jaroslav Kysela) [RHEL-183296]
  - ASoC: dt-bindings: add TDM slot idle mode properties (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-dai: define possible idle TDM slot modes (Jaroslav Kysela) [RHEL-183296]
  - ASoC: dt-bindings: update tdm-slot.txt references to tdm-slot.yaml (Jaroslav Kysela) [RHEL-183296]
  - ASoC: dt-bindings: convert tdm-slot to YAML (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: acp3x-rt5682-max9836: Drop unused include (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: acp3x-es83x: Drop unused include (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: acp-rt5645: Drop unused include (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: acp-es8336: Drop unused include (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: acp-da7291-max98357a: Drop unused include (Jaroslav Kysela) [RHEL-183296]
  - ASoC: sdw_utils: Add codec_info for cs42l49 (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: Add support for the Cirrus Logic cs42l49 (Jaroslav Kysela) [RHEL-183296]
  - soundwire: cadence: Clear message complete before signaling waiting thread (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: map UAC3 front wide channels in convert_chmap_v3() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Support clock stop mode 1 if enabled in ACPI (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: catpt: Migrate to the new control operations (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: catpt: Do not wake DSP just for volume setup (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: catpt: Simplify procedure of applying user settings (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: catpt: New volume and mute control operations (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: catpt: Synchronize stream access (Jaroslav Kysela) [RHEL-183296]
  - ASoC: da7219: scope AAD suspend and resume helpers to CONFIG_PM (Jaroslav Kysela) [RHEL-183296]
  - ALSA: aoa: Skip devices with no codecs in i2sbus_resume() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SOF: sof-audio: pcm_id is __le32 (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp: Combine some similar code in firmware file search (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp: Use a struct to pass around firmware struct and filename (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp: Add KUnit test cases for '/' in firmware filenames (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp: Convert '/' to '-' when normalizing firmware filenames (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp: Use consistent error checks in wm_adsp_request_firmware_files() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp: Remove duplicated code to find firmware file (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp: Add kunit test for firmware file search (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp: Export function for KUnit test to get firmware filenames (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp: Add KUnit redirection stubs for firmware file search (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp: Remove unused argument to wm_adsp_release_firmware_files() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_xcvr: add bitcount and timestamp controls (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_sai: add bitcount and timestamp controls (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_utils: Add snd_kcontrol functions for specific cases (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/senary: Fix beep error handling and optimize EAPD switching (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: wcd9335: Remove potential undefined behavior in wcd9335_slimbus_irq() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp: Make wm_adsp_fw_text[] const (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Put OTP register defines in correct address order (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: peb2466: Change the +/- 6dB switch to a volume (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56-test: Remove pointless duplicate loop counters (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: add Studio 1824 support (Jaroslav Kysela) [RHEL-183296]
  - mfd: cs42l43: Add support for the B variant (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs42l43: Add support for the B variant (Jaroslav Kysela) [RHEL-183296]
  - ASoC: dt-bindings: cirrus,cs42l43: Add CS42L43B variant (Jaroslav Kysela) [RHEL-183296]
  - ASoC: sdw_utils: Add CS42L43B codec info (Jaroslav Kysela) [RHEL-183296]
  - soundwire: Intel: test bus.bpt_stream before assigning it (Jaroslav Kysela) [RHEL-183296]
  - soundwire: bus: demote UNATTACHED state warnings to dev_dbg() (Jaroslav Kysela) [RHEL-183296]
  - soundwire: stream: Poll for DP prepare to avoid interrupt deadlock (Jaroslav Kysela) [RHEL-183296]
  - soundwire: amd: add clock init control function (Jaroslav Kysela) [RHEL-183296]
  - soundwire: amd: refactor bandwidth calculation logic (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Refine string-descriptor-based quirk matching (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: KUnit tests for reading speaker ID from host GPIOs (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: KUnit tests for setting dsp.system_name (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Some KUnit testing of cs35l56_get_speaker_id() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Use strings in struct usb_dev for manufacturer & co (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/senary: Add hardware init verbs and fixup framework (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Improve volume range checks (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add helper function for volume range checks (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Deconflict VID between Focusrite Novation & MV-SILICON (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Support string-descriptor-based quirk table entry (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add QUIRK_FLAG_MIXER_{PLAYBACK,CAPTURE}_LINEAR_VOL (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add linear volume quirk for Hotone Audio Pulze Mini (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Apply linear volume quirk on MV-SILICON devices (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56-test: Add test cases without onchip pulls defined (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-core: Use guard()/scoped_guard() for mutex lock (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l45: Hibernate wm_adsp on runtime suspend (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l41: Hibernate wm_adsp on runtime suspend (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: wm_adsp: Allow wm_adsp to hibernate without stopping DSP (Jaroslav Kysela) [RHEL-183296]
  - firmware: cs_dsp: Add API to hibernate the DSP (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Support WM8962 by machine driver (Jaroslav Kysela) [RHEL-183296]
  - ASoC: dt-bindings: nvidia,tegra-audio: document WM8962 CODEC (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Support CPCAP by machine driver (Jaroslav Kysela) [RHEL-183296]
  - ASoC: dt-bindings: nvidia,tegra-audio: document CPCAP CODEC (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs42xx8: add error checks for constraints in TDM mode (Jaroslav Kysela) [RHEL-183296]
  - ALSA: aoa: Constify struct codec_connection (Jaroslav Kysela) [RHEL-183296]
  - ALSA: control: Verify put() result when in debug mode (Jaroslav Kysela) [RHEL-183296]
  - ASoC: remove snd_soc_pcm_subclass (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: Pull the Q7.8 volume helpers out of soc-ops (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: Improve mapping of Q7.8 SDCA volumes (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: Add default value for mipi-sdca-function-reset-max-delay (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs-amp-lib-test: Stop including platform_device.h (Jaroslav Kysela) [RHEL-183296]
  - soundwire: intel_auxdevice: Add CS47L47 to wake_capable_list (Jaroslav Kysela) [RHEL-183296]
  - soundwire: slave: Don't register devices that are disabled in ACPI (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: Add CS47L47 to class driver (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc_sdw_utils: Add device info for CS47L47 (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tas2552: Allow audio enable GPIO to sleep (Jaroslav Kysela) [RHEL-183296]
  - soundwire: sdw.h: repair names and format of kernel-doc comments (Jaroslav Kysela) [RHEL-183296]
  - ASoC: ti: davinci-mcasp: Add system suspend/resume support (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-compress: use function to clear symmetric params (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Add SPDX ids to many soc files (Jaroslav Kysela) [RHEL-183296]
  - ASoC: rt5677-spi: Add SPI device ID matching table (Jaroslav Kysela) [RHEL-183296]
  - ASoC: rt5677: Reset the codec during probing (Jaroslav Kysela) [RHEL-183296]
  - ASoC: rt5677: Set up ACPI GPIO pins mapping table (Jaroslav Kysela) [RHEL-183296]
  - ASoC: rt5677: Report error if the ID register cannot be read (Jaroslav Kysela) [RHEL-183296]
  - ASoC: rt5677: Allow it to be defined as an I2C board (Jaroslav Kysela) [RHEL-183296]
  - ASoC: rt5677: Fix typo in the header file (Jaroslav Kysela) [RHEL-183296]
  - ASoC: rt5677: Add 10EC5677 ACPI ID as supported (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: aw88261: Add firmware-name support (Jaroslav Kysela) [RHEL-183296]
  - ASoC: dt-bindings: awinic,aw88395: Document firmware-name property (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Add quirk for Lecoo Bellator N176 (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Drop RPL driver (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Add DMIC support for the AMD RPL platform (Jaroslav Kysela) [RHEL-183296]
  - overflow: Introduce struct_offset() to get offset of member (Jaroslav Kysela) [RHEL-183296]
  - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-185517]
  - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-185517]
  - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-185517]
  - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-185517]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-727.el9]
changelog:
  - s390/sclp: Allow PCI reports for NVMe SMART data (Jan Polensky) [RHEL-188090]
  - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-190412]
  - vsock: initialize child_ns_mode_locked in vsock_net_init() (Stefano Garzarella) [RHEL-155389]
  - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Jan Polensky) [RHEL-190426]
  - s390/pkey: Check length in pkey_pckmo handler implementation (Jan Polensky) [RHEL-190425]
  - x86/mce: Restore MCA polling interval halving (David Arcari) [RHEL-208634]
  - powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked() (David Arcari) [RHEL-192478]
  - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179295] {CVE-2026-46099}
  - cpufreq: intel_pstate: Use correct scaling factor on Raptor Lake-E (Mark Langsdorf) [RHEL-185961]
  - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189960] {CVE-2026-22979}
  - Bluetooth: btintel_pcie: Fix incorrect MAC access programming (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: treat boot stage bit 12 as warning (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: use strscpy to copy plain strings (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: Align shared DMA memory to 128 bytes (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pci: Fix btintel_pcie_read_hwexp code style (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: Add device id of Scorpious2, Nova Lake-PCD-S (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: Add device id of Scorpius Peak2, Nova Lake-PCD-H (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: Add support for exception dump for ScP2F (David Marlin) [RHEL-117330]
  - Bluetooth: btintel: Add support for Scorpious Peak2F support (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: Add support for exception dump for ScP2 (David Marlin) [RHEL-117330]
  - Bluetooth: btintel: Add DSBR support for ScP2 onwards (David Marlin) [RHEL-117330]
  - Bluetooth: btintel: Add support for Scorpious Peak2 support (David Marlin) [RHEL-117330]
  - Bluetooth: btintel: Replace CNVi id with hardware variant (David Marlin) [RHEL-117330]
  - Bluetooth: btintel: Add support for hybrid signature for ScP2 onwards (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: Replace snprintf("%s") with strscpy (David Marlin) [RHEL-117330]
  - x86/microcode: Add platform mask to Intel microcode "old" list (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/cpu: Add platform ID to CPU matching structure (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/cpu: Add platform ID to CPU info structure (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/microcode: Refactor platform ID enumeration into a helper (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/cpu/intel: Replace early Family 6 checks with VFM ones (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/mtrr: Modify a x86_model check to an Intel VFM check (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/microcode: Update the Intel processor flag scan check (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/cpu/intel: Fix the MOVSL alignment preference for extended Families (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/apic: Fix 32-bit APIC initialization for extended Intel Families (Luis Claudio R. Goncalves) [RHEL-184789]
  - ceph: fix NULL pointer dereference in ceph_mds_auth_match() (Alex Markuze) [RHEL-180666]
  - ceph: fix multifs mds auth caps issue (Alex Markuze) [RHEL-180666]
  - ceph: fix memory leak in ceph_mds_auth_match() (Alex Markuze) [RHEL-180666]
  - ceph: fix cred leak in ceph_mds_check_access() (Alex Markuze) [RHEL-180666]
  - ceph: pass cred pointer to ceph_mds_auth_match() (Alex Markuze) [RHEL-180666]
  - ceph: fix a memory leak on cap_auths in MDS client (Alex Markuze) [RHEL-180666]
  - doc: ceph: update userspace command to get CephFS metadata (Alex Markuze) [RHEL-180666]
  - ceph: add CEPHFS_FEATURE_MDS_AUTH_CAPS_CHECK feature bit (Alex Markuze) [RHEL-180666]
  - ceph: check the cephx mds auth access for async dirop (Alex Markuze) [RHEL-180666]
  - ceph: check the cephx mds auth access for open (Alex Markuze) [RHEL-180666]
  - ceph: check the cephx mds auth access for setattr (Alex Markuze) [RHEL-180666]
  - ceph: add ceph_mds_check_access() helper (Alex Markuze) [RHEL-180666]
  - ceph: save cap_auths in MDS client when session is opened (Alex Markuze) [RHEL-180666]
  - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180065] {CVE-2026-46150}
  - efi: Allow to expose the workqueue via sysfs (Luis Claudio R. Goncalves) [RHEL-175657]
  - workqueue: Allow to expose ordered workqueues via sysfs (Luis Claudio R. Goncalves) [RHEL-175657]
  - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168069] {CVE-2026-31419}
  - net: add proper RCU protection to /proc/net/ptype (Paolo Abeni) [RHEL-152699]
  - net: sock: fix hardened usercopy panic in sock_recv_errqueue (Paolo Abeni) [RHEL-152699]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-728.el9]
changelog:
  - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193519] {CVE-2026-52973}
  - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190343] {CVE-2026-53281}
  - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190343]
  - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191440] {CVE-2026-53185}
  - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-100912]
  - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-100912]
  - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-100912]
  - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188545] {CVE-2026-53059}
  - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188460] {CVE-2026-53016}
  - RAS/AMD/ATL: Require PRM support for future systems (Joel Savitz) [RHEL-122804]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-729.el9]
changelog:
  - ppc/fadump: invoke kmsg_dump in fadump panic path (Mamatha Inamdar) [RHEL-211104]
  - selinux: fix incorrect execmem checks on overlayfs (Ondrej Mosnacek) [RHEL-210856]
  - Revert "selinux: RHEL-only hotfix for execmem regression" (Ondrej Mosnacek) [RHEL-210856]
  - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189963] {CVE-2026-23002}
  - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-185518]
  - icmp: fix NULL pointer dereference in icmp_tag_validation() (Guillaume Nault) [RHEL-152680]
  - net: nexthop: fix percpu use-after-free in remove_nh_grp_entry (Guillaume Nault) [RHEL-152680]
  - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Guillaume Nault) [RHEL-152680]
  - dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (Guillaume Nault) [RHEL-152680]
  - ipv4: Fix reference count leak when using error routes with nexthop objects (Guillaume Nault) [RHEL-152680]
  - ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (Guillaume Nault) [RHEL-152680]
  - arp: use RCU protection in arp_xmit() (Guillaume Nault) [RHEL-152680]
  - ipv4: icmp: convert to dev_net_rcu() (Guillaume Nault) [RHEL-152680]


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-471
changelog:
  - Make accessing environment by DynaLoader thread-safe
  - Use duplocale() if available
  - Fix fc() in Turkish locale
  - Fix croaking on "my $_" when "use utf8" is in effect (GH#18449)
  - Fix PERL_UNUSED_ARG() definition in XSUB.h
  - Add missing entries to perldiag (GH#18276)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-472
changelog:
  - Protect locale tests from LANGUAGE environment variable
  - Prevent the number of buckets in a hash from getting too large
  - Fix a memory leak when compiling a regular expression (GH#18604)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-474
changelog:
  - Fix dumping a hash entry of PL_strtab type
  - Fix an arithmetic left shift of a minimal integer value (GH#18639)


author: Tom Callaway <spot@fedoraproject.org> - 0.44-1
changelog:
  - Update to 0.44
    - Support Perls with COW disabled
    - Bump B::COW requirement for testing
  - Disable tests until B::COW is packaged


author: Tom Stellard <tstellar@redhat.com> - 1.64-4
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Petr Pisar <ppisar@redhat.com> - 1.66-2
changelog:
  - Update DBD-SQLite-1.60-Unbundle-Test-NoWarnings.patch
  - Do not build-require unused Test::FailWarnings
  - Update the description


author: Tom Stellard <tstellar@redhat.com> - 1.642-7
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix parts of CPAN RT#123989: more $a/$b/$_ refcounting bugs
      - Since some bugs are simply reported wrong, dealing with them breaks more
        (including running code) than it solves - way too heavy to feel better...
    - Introduce functions slide and slideatatime
    - Toolchain fixes
    - Fix LANG=nb_NO.utf8 related str tests fails (CPAN RT#133128)
    - Fix typo (GH#7)
    - Fix parts of CPAN RT#132043: listcmp misbehave in XS implementation
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 1.90-1
changelog:
  - Update to 1.90
    - Formalised libssl version support policy: all stable versions of OpenSSL
      in the 0.9.8-1.1.1 branches (with the exception of 0.9.8-0.9.8b) and all
      stable releases of LibreSSL in the 2.0-3.1 series are supported
    - The LibreSSL 3.2 series is not yet fully supported because its TLSv1.3
      implementation is not currently libssl-compatible
    - Added support for LibreSSL on Windows when built with Visual C++
    - Exposed P_X509_CRL_add_extensions, several SSL_CIPHER functions, and
      several stack functions
    - Fixed crashes in the callback functions CTX_set_next_proto_select_cb and
      CTX_set_alpn_select_cb
    - The test suite is now compatible with OpenSSL 1.1.1e onwards, as well as
      OpenSSL security level 2 (the default on many Linux distributions)


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-4
changelog:
  - Fix tests for openssl 3.0.0-alpha16. rhbz#1964854
    - Fix check across alpha1 vs alpha17
    - Change default alg for PEM_get_string_PrivateKey()
    - Different order in CA chain in some versions
    - Changed API of CTX_set_ciphersuites() and set_ciphersuites(), ignore
      unknown ciphers
    - Disable TLSv1 and TLSv1_1 usage in test


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-6
changelog:
  - Fix tests for openssl 3.0.0-beta1. rhbz#1964854
    - Add fix for t/05_passwd_cb.t
    - Update Net-SSLeay-1.90-openssl3.0.0-43_misc_functions.patch to accept beta version
  - Fix tab vs space in spec file
  - Update Net-SSLeay-1.90-openssl3.0.0-39_pkcs12.patch patch to upstream version


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-8
changelog:
  - Fix tests for openssl 3.0.0-beta2. rhbz#1992571
    - Add another fix for t/05_passwd_cb.t, because change in passphrase caching
  - Remove XXX in spec file


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.94-1
changelog:
  - Resolves: RHEL-40758
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list
  - Package tests


author: Tom Stellard <tstellar@redhat.com> - 3:1.54-441
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.29-6
changelog:
  - Spec file cleanups: Use make_build and make_install macros, use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.36-3
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Tom Stellard <tstellar@redhat.com> - 1.1-36
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Remi Collet <rcollet@redhat.com> - 8.1.6-2
changelog:
  - add upstream patch to initialize pcre before mbstring
  - add upstream patch to use more sha256 in openssl tests


author: Remi Collet <rcollet@redhat.com> - 8.2.13-1
changelog:
  - rebase to 8.2.13 RHEL-14699
  - add %__phpize and %__phpconfig macros
  - move httpd/nginx wants directives to config files in /etc
  - php-fpm.conf: move include directive after [global] section
    following upstream example, allowing overriding
  - use SPDX license IDs


author: Remi Collet <rcollet@redhat.com> - 8.3.12-1
changelog:
  - rebase to 8.3.12 RHEL-62189
  - enable command history in phpdbg
  - backport Argon2 password hashing in OpenSSL ext
  - build sockets extension statically
  - switch to nikic/php-parser version 5
  - openssl: always warn about missing curve_name


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Jakub Jelen <jjelen@redhat.com> - 1.1.1-2
changelog:
  - Move pinentry-tty to separate subpackage (#1782442)
  - Update the wrapper selecting the appropriate version (#1918969)


author: Neal Gompa <ngompa@centosproject.org> - 0.3.40-1
changelog:
  - Update to version 0.3.40 which drops media-session service for WirePlumber
    Resolves: rhbz#2022694


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-13.20200306git58a7289
changelog:
  - Add patches fixing crash on monitor hot(un)plug (rhbz#1809681)
  - Add patches fixing delay between gdm telling us to deactivate and
    us telling gdm it is ok to continue
  - Drop plymouth-plugin-throbgress sub-package, the spinfinity theme now
    uses the two-step plugin


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-14.20200306git58a7289
changelog:
  - New upstream git snapshot
  - Add RemainAfterExit=yes to plymouth's systemd service files (rhbz#1807771)
  - Fix the spinner / animation missing on shutdown and reboot


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-1.20210323git8a3c9bb
changelog:
  - Update to 0.9.5 + a bunch of extra fixes from git (new upstream git snapshot)
  - Fixes 1896929 - systemd complains about Unit configured to use KillMode=none


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-2.20210331git1ea1020
changelog:
  - New git snapshot
  - Fixes 1933378 - Bootsplash doesn't always fully clear on boot to console
  - Fixes 1941329 - Flickering plymouth on shutdown/reboot
  - Prune spec-file changelog a bit


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.1.1-rhel
    (https://github.com/containers/podman/commit/fa692a6)
  - Related: #2097694


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-6
changelog:
  - convert catatonit dependency to soft dep as catatonit is
    no longer in Appstream but in CRB
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.2.0
    (https://github.com/containers/podman/commit/7fe5a419cfd2880df2028ad3d7fd9378a88a04f4)
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/a994a04)
  - fixes "podman tests are failing"
  - Resolves: RHEL-86200


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/0ee1d49)
  - fixes "podman tests are failing - [RHEL-10.1.GA]"
  - Resolves: RHEL-88191


author: Jindrich Novy <jnovy@redhat.com> - 5:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 5:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 2:4.5.1-3
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175074
  - Resolves: #2179966
  - Resolves: #2187322
  - Resolves: #2187383
  - Resolves: #2203702
  - Resolves: #2207522


author: Jindrich Novy <jnovy@redhat.com> - 2:4.5.1-5
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175071
  - Resolves: #2179950
  - Resolves: #2187318
  - Resolves: #2187366
  - Resolves: #2203681
  - Resolves: #2207512


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.0
    (https://github.com/containers/podman/commit/38e6fab9664c6e59b66e73523b307a56130316ae)


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/1b2fadd)
  - Resolves: #2232127


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/8bb0204)
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/ea33dce)
  - Related: #2176063


author: Petr Lautrbach <lautrbach@redhat.com> - 3.6-5
changelog:
  - sandbox/seunshare: Replace system() with execv() to prevent shell injection
  - seunshare: fix the frail tmpdir cleanup


author: Tomas Korbar <tkorbar@redhat.com> - 2:3.5.9-20
changelog:
  - Backport dns SRV record resolution feature (RFC6186)
    Resolves: rhbz#2134789
  - Fix building in ZUUL CI
    Resolves: rhbz#2193363


author: Fedor Vorobev <fvorobev@redhat.com> - 2:3.5.25-3
changelog:
  - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code.
    Resolves: RHEL-176544


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.5.9-14
changelog:
  - Fixed cleanup crash when processing messages with whitespace only fullname
    Resolves: rhbz#1978901


author: Filip Januš <fjanus@redhat.com> - 15.0-1
changelog:
  - Initial import for postgresql 15
  - Specfile is based on version locate in centos stream
    It reflects changes with libpq. This version of databse server
    will use private libpq library.
  - Resolves: #2128241


author: Filip Januš <fjanus@redhat.com> - 15.2-1
changelog:
  - Update to upstream version 15.2
  - Update postgresql-setup to 8.8
  - PostgreSQL systemd unit waits for the network to be up
  - Resolves: #2128241


author: Filip Janus <fjanus@redhat.com> - 16.0-1
changelog:
  - New postgresql stream - 16
  - Remove pdf documentation
  - Update postgresql-setup to 8.9
  - postmaster binary no more shipped
  - Resolves: RHEL-3636


author: Bastien Nocera <bnocera@redhat.com> - 0.8.1-2
changelog:
  + power-profiles-daemon-0.8.1-2
  - Remove linter, as apparently unwanted in check section
  - Resolves: rhbz#1947950


author: Kate Hsuan <hpa@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Support multi-drivers mode and amdgpu
  - Support dynamically adjusts amd-pstate EPP values between battery and AC modes.
  - Resolves: RHEL-23395


author: Adrian Reber <adrian@lisas.de> - 3.14.0-6
changelog:
  - Reintroduce the emacs subpackage to avoid file conflicts between
    protobuf-compiler.x86_64 and protobuf-compiler.i686
  - Disable LTO to fix annobin errors


author: Adrian Reber <areber@redhat.com> - 3.14.0-14
changelog:
  - Applied patch for CVE-2022-1941 (#RHEL-40872)
  - Applied patch to make emacs dependency optional (#RHEL-40572)


author: Wim Taymans <wtaymans@redhat.com> - 15.0-1
changelog:
  - Update to 15.0
  - convert to meson build
  - esound, gconf, oss are no longer supported
  - Resolves: rhbz#1961581


author: Tomas Popela <tpopela@redhat.com> - 1.20.1-1
changelog:
  - Update to 1.20.1
  - Resolves: rhbz#2016905
  - Ship python3-cairo-devel in CRB
  - Resolves: rhbz#2053665


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.7-1
changelog:
  - Upgrade to pyparted-3.11.7 (BZ#1890443)
  - Set PY_SSIZE_T_CLEAN for the build (bcl)
  - add nvme support
  - Update RELEASE file to make last step be "make pypi" (dcantrell)


author: David Cantrell <dcantrell@redhat.com> - 1:3.12.0-1
changelog:
  - Patch pyparted to handle PED_DISK_TYPE_PARTITION_TYPE_ID for the
    msdos disk type and PED_DISK_TYPE_PARTITION_TYPE_UUID for the gpt
    label
    Resolves: rhbz#2103243


author: Christian Heimes <cheimes@redhat.com> - 3.4.7-1
changelog:
  - Update to 3.4.7
  - Remove dependency on python-cryptography-vectors package and use vectors
    directly from Github source tar ball. Related: rhbz#1952343


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-6
changelog:
  - Rebase to 36.0.1, related: rhbz#2059630, rhbz#2060787
  - OpenSSL 3.0 FIPS mode is now detected correctly, related: rhbz#2054785
  - Fix error check from EVP_PKEY_CTX_set_signature_md, related: rhbz#2060343
  - Block 3DES in FIPS mode, related: rhbz#2055209
  - Disable DSA tests in FIPS mode
  - Enable SHA1 signatures in test suite
  - Fix serialization of keyusage ext with no bits
  - Re-enable tests that are passing again


author: Miro Hrončok <mhroncok@redhat.com> - 4.6.2-1
changelog:
  - Update to 4.6.2
  - Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner
  - Fixes: rhbz#1855415
  - Fixes: rhbz#1901634


author: Miro Hrončok <mhroncok@redhat.com> - 0.10.6-9
changelog:
  - Subpackage python2-netifaces has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomas Orsava <torsava@redhat.com> - 5.8.0-5
changelog:
  - Remove unnecessary test dependency on python3-mock
  - Remove unnecessary macro __provides_exclude_from


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.8.6-6
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Add manual Obsoletes for python39-psycopg2-doc
  - Related: rhbz#1990421


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.3-3
changelog:
  - Replace pypi_name macro with srcname
  - Update BR’s
  - Run the doctests
  - Build documentation in a new -doc subpackage


author: Miro Hrončok <mhroncok@redhat.com> - 0.17.3-7
changelog:
  - Don't BuildRequire python3-hypothesis and exclude affected tests from %check
  - Resolves: rhbz#1928125


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Nils Philippsen <nils@tiptoe.de> - 1.4.32-1
changelog:
  - version 1.4.32
  - don't BR: python3-pytest-xdist on EL9
  - remove obsolete (no-op) tweak of setup.cfg


author: Sergio Correia <scorreia@redhat.com> - 1.4.37-3
changelog:
  - Remove obsolete cruft from the specfile, follow the packaging guidelines
  - Remove also extra packages we have no runtime dependencies for
    Related: rhbz#2084556


author: Sergio Correia <scorreia@redhat.com> - 3.1.2-2
changelog:
  - Remove 
   
  if [ $1 -eq 0 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then 
          /usr/lib/systemd/systemd-update-helper remove-system-units from %preun scriptlet, as it was causing troubles when removing audit || : 
  fi 

    Related: RHEL-14896


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-1
changelog:
  - New upstream maintenance release, 3.1.4
  - Prevent scriplets from failing
  - When upgrading, restart the daemon if it's running
  - If uninstalling, stop the daemon
  - auditctl: use pidfd_send_signal for signaling auditd
    Resolves: RHEL-45865
  - Minor doc update
    Resolves: RHEL-5186
  - augenrules: do not exit with failure if in immutable mode
    Resolves: RHEL-40110
  - auditd.service: Disable ProtectControlGroups
    Resolves: RHEL-5197
  - auditctl: correct output when displaying rules with exe/path/dir
    Resolves: RHEL-40243


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-2
changelog:
  - Disable ProtectKernelModules=true in service file
    Resolves: RHEL-59570
  - af_unix plugin: restore original behavior in binary mode
    Resolves: RHEL-59585
  - Support image mode
    Resolves: RHEL-69033
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-11252
  - Filter syscalls to ensure architecture-specific availability
    Resolves: RHEL-70455


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-5
changelog:
  - ausearch: correct search for DAEMON related events
  - allow hex digits when interpreting tty data
    Resolves: RHEL-82279
  - Fix TTY hostname in log messages
    Resolves: RHEL-78323


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Chris Leech <cleech@redhat.com> - 6.2.1.9-18.gita65a472
changelog:
  - rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
  - new meson build system, sync with fedora packaging


author: Chris Leech <cleech@redhat.com> - 6.2.1.2-1.git13e7f58
changelog:
  - iscsiadm overflow regression when discovering many targets at once
  - check for invalid session id during stop connection
  - add ability to attempt target logins asynchronously


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Karel Zak <kzak@redhat.com> 2.37.4-22
changelog:
  - fix RHEL-113638 - lscpu: update ARM identifiers
  - fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification


author: Karel Zak <kzak@redhat.com> 2.37.4-23
changelog:
  - fix RHEL-123527 - mount: improve --all documentation
  - fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
  - fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.4-1
changelog:
  - Use Decimal for Device.getSize() operations, return a
    float (#1801355)
  - Update the 'twine upload' line in the Makefile
  - Don't intentionally prohibit Python 2 usage (#67)
  - mips64 support


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.5-1
changelog:
  - Require at least libparted 3.3 and python 3.7 (dcantrell)
  - pedmodule.c: Fix partition enum flag handling (bcl)
  - Add support for chromeos_kernel and bls_boot partition flags (bcl)
  - Move exception declarations to _pedmodule.c (dcantrell)


author: Andreas Schneider <asn@redhat.com> - 4.14.4-1
changelog:
  - resolves: rhbz#1954531 - Update to Samba 4.14.4
  - resolves: rhbz#1949446 - Fix CVE-2021-20254
  - resolves: rhbz#1942378 - Disable nis support


author: Andreas Schneider <asn@redhat.com> - 4.14.4-7
changelog:
  - related: rhbz#1954531 - Fix build issues with gcc
  - resolves: rhbz#1959712 - Add iouring vfs module


author: Pavel Simovec <psimovec@redhat.com> - 1.9.3-2
changelog:
  - Apply upstream patch: MAINT:linalg:Adjust lwork/liwork changes OpenBLAS 0.3.26
  - Resolves: RHEL-70908


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Marek Blaha <mblaha@redhat.com> - 0.7.24-5
changelog:
  - Backport "choice rules: also do solver_choicerulecheck for package downgrades"
    Resolves: RHEL-141449


author: Miro Hrončok <mhroncok@redhat.com> - 234-11
changelog:
  - Subpackage python2-systemd has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Jerry James <loganjerry@gmail.com> - 2020.3-4
changelog:
  - Fix cmake file installation (bz 1930389)
  - Allow use of RTM instructions when available
  - At upstream's suggestion, do not force ITT_NOTIFY support
  - Drop -fetchadd64 patch, only needed for forced ITT_NOTIFY support


author: Petr Menšík <pemensik@redhat.com> - 1.24.2-2
changelog:
  - Switch TLS configuration to follow TLS sockets by crypto-policy again
    (RHEL-147860)
  - Change the default of tls-use-system-policy-versions at build-time


author: Charalampos Stratakis <cstratak@redhat.com> - 1.15.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Joel Capitao <jcapitao@redhat.com>
        John Dulaney <jdulaney@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Parag Nemade <pnemade@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 37.0.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11.13-1
changelog:
  - Update to 3.11.13
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.13-2
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-101551


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11.13-6
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143110
  Resolves: RHEL-143170
  Resolves: RHEL-144894


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11.13-7
changelog:
  - Rebuilding previous fixes for different build target
  Related: RHEL-143110, RHEL-143170, RHEL-144894


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <fale@redhat.com>
        Igor Raits <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jcollie@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>


author: Tomas Orsava <torsava@redhat.com> - 4.9.2-4
changelog:
  - Bring back the isoschematron submodule,
    but without the validation of the schema file itself
  - Resolves: RHEL-5570


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.23.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <sharkcz@fedoraproject.org>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <limburgher@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim GÜNDÜZ <devrim@fedoraproject.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 6.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <ausil@fedoraproject.org>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.8.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 41.0.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-88897


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98057, RHEL-98019, RHEL-97811, RHEL-98183, RHEL-98210


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-5
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143112
  Resolves: RHEL-143172
  Resolves: RHEL-144895


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-6
changelog:
  - Rebuilding previous fixes for different build target
  Related: RHEL-143112, RHEL-143172, RHEL-144895


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.13-1
changelog:
  - Update to 3.12.13
  - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672
  Related: RHEL-168159, RHEL-167917


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.13-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
  Resolves: RHEL-168159, RHEL-167917


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 4.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <me@fale.io>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jeff@ocjtech.us>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.24.4-2
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowitz@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.6-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim Gündüz <devrim@gunduz.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 6.0.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.14.0-2
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lukáš Zachar <lzachar@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <mhroncok@redhat.com>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Till Maas <opensource@till.name>
        Tom Stellard <tstellar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        U2FsdGVkX1 <U2FsdGVkX1@gmail.com>
        Victor Stinner <vstinner@redhat.com>
        Ville Skyttä <ville.skytta@iki.fi>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672,CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-11468, CVE-2025-15366,
  CVE-2025-15367
  Resolves: RHEL-144896, RHEL-143115, RHEL-143173


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367
  Resolves: RHEL-144896, RHEL-143115, RHEL-143173


author: Karolina Surma <ksurma@redhat.com> - 3.14.4-1
changelog:
  - Update to Python 3.14.4
  - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865
  Related: RHEL-167918, RHEL-168160


author: Charalampos Stratakis <cstratak@redhat.com> - 3.14.4-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100
  Resolves: RHEL-167918, RHEL-168160


author: Miro Hrončok <mhroncok@redhat.com> - 3.14.5~rc1-1
changelog:
  - Update to 3.14.5rc1
  - Move back to the generational from the incremental garbage collector
  - Security fix for CVE-2026-6019
  Resolves: RHEL-180642


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 5.0.2-5
changelog:
  - Initial package
  Fedora contributions by:
      Adam Williamson <awilliam@redhat.com>
      Alexander Bokovoy <abokovoy@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Dan Callaghan <dcallagh@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenko@redhat.com>
      Iryna Shcherbina <ishcherb@redhat.com>
      Jakub Dorňák <jdornak@redhat.com>
      James Bowes <jbowes@redhat.com> 1.0-1
      Jan Kaluza <jkaluza@redhat.com>
      Jesse Keating <jkeating@fedoraproject.org>
      Joe Orton <jorton@redhat.com>
      Josh Kayse <joshkayse@fedoraproject.org>
      Karolina Surma <ksurma@redhat.com>
      Kevin Fenzi <kevin@fedoraproject.org>
      Luboš Uhliarik <luhliari@redhat.com>
      Luke Macken <lmacken@redhat.com>
      Matthias Runge <mrunge@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Orion Poplawski <orion@cora.nwra.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Richard W.M. Jones <rjones@redhat.com>
      Ricky Zhou <ricky@fedoraproject.org>
      Tomas Orsava <torsava@redhat.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Stellard <tstellar@redhat.com>
      Troy Dawson <tdawson@redhat.com>
      Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.3.4-1
changelog:
  - Initial import
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lukáš Zaoral <lzaoral@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        Simone Caronni <negativo17@gmail.com>
        Songsong Zhang <u2fsdgvkx1@gmail.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Tulio Magno Quites Machado Filho <tuliom@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.10-3
changelog:
  - Initial package
  Fedora contributions by:
      Ales Nezbeda <anezbeda@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Bohuslav Kabrda <bkabrda@redhat.com>
      Charalampos Stratakis <cstratak@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Devrim Gündüz <devrim@gunduz.org>
      Filip Januš <fjanus@redhat.com>
      Honza Horak <hhorak@redhat.com>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenkobrain@fedoraproject.org>
      Jason L Tibbitts III <tibbs@math.uh.edu>
      Jesse Keating <jkeating@fedoraproject.org>
      Jozef Mlich <jmlich@redhat.com>
      Lumír Balhar <lbalhar@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Ondřej Sloup <ondrej.sloup@protonmail.com>
      Patrik Novotný <panovotn@redhat.com>
      Pavel Raiskup <praiskup@redhat.com>
      Petr Kubat <pkubat@redhat.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Todd Zullinger <tmz@pobox.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Lane <tgl@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.16.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Abdurachmanov <davidlt@rivosinc.com>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenko@redhat.com>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Dan Horák <dhorak@redhat.com> - 2.3.1-1
changelog:
  - updated to 2.3.1 (#2044214)
  - Add Support for new IBM Z Hardware (#2044215)
  - Resolves: #2044214 #2044215


author: Dan Horák <dhorak@redhat.com> - 2.5.0-1
changelog:
  - updated to 2.5.0 (RHEL-23692)
  - add runtime dependency for EBCDIC to ASCII conversion (RHEL-24407)
  - Resolves: RHEL-23692 RHEL-24407


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-9
changelog:
  - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144]
  - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193]
  - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193]
  - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193]
  - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193]
  - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193]
  - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193]
  - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193]
  - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193]
  - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193]
  - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193]
  - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193]
  - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193]
  - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193]
  - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193]
  - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193]
  - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193]
  - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193]
  - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193]
  - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193]
  - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193]
  - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193]
  - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193]
  - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193]
  - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193]
  - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193]
  - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193]
  - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193]
  - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193]
  - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193]
  - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193]
  - Resolves: RHEL-131144
    (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8])
  - Resolves: RHEL-132193
    ([rhel 9.8]L1VH qemu downstream initial merge RHEL9)


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-10
changelog:
  - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193]
  - Resolves: RHEL-132193
    ([rhel 9.8]L1VH qemu downstream initial merge RHEL9)


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-11
changelog:
  - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240]
  - Resolves: RHEL-138240
    (QEMU crashes when stopping source VM during live migration [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-12
changelog:
  - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
  - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
  - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
  - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
  - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
  - kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
  - Resolves: RHEL-132989
    (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
  - Resolves: RHEL-140187
    (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
  - Resolves: RHEL-139057
    ([qemu, rhel-9] increase default TSEG size)


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-13
changelog:
  - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
  - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
  - Resolves: RHEL-147422
    (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
  - Resolves: RHEL-130620
    (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-14
changelog:
  - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
  - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
  - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
  - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
  - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
  - Resolves: RHEL-67115
    ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-15
changelog:
  - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
  - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
  - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
  - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
  - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
  - Resolves: RHEL-149396
    (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-16
changelog:
  - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
  - Resolves: RHEL-151679
    ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-17
changelog:
  - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
  - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
  - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
  - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
  - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
  - Resolves: RHEL-155947
    (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
  - Resolves: RHEL-155948
    (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
  - Resolves: RHEL-154174
    (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-18
changelog:
  - kvm-pc-bios-s390-ccw-Always-reset-virtio-device-on-faile.patch [RHEL-156851]
  - kvm-block-enable-stats-intervals-for-storage-devices.patch [RHEL-135379]
  - kvm-qdev-Free-property-array-on-release.patch [RHEL-135379]
  - Resolves: RHEL-156851
    (RHEL9.8 - [KVM] Guest configured with different boot order, crashed during "virsh reset".)
  - Resolves: RHEL-135379
    (Add stats-intervals support to --blockdev [rhel9])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-19
changelog:
  - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164535]
  - Resolves: RHEL-164535
    (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.9])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-20
changelog:
  - kvm-vmstate-Introduce-VMSTATE_VARRAY_INT32_ALLOC.patch [RHEL-174859]
  - kvm-target-arm-Move-compare_u64-to-helper.c.patch [RHEL-174859]
  - kvm-target-arm-Convert-init_cpreg_list-to-g_hash_table_f.patch [RHEL-174859]
  - kvm-target-arm-machine-Use-VMSTATE_VARRAY_INT32_ALLOC-fo.patch [RHEL-174859]
  - kvm-target-arm-kvm-Export-kvm_print_register_name.patch [RHEL-174859]
  - kvm-target-arm-kvm-Tweak-print_register_name-for-arm64-s.patch [RHEL-174859]
  - kvm-target-arm-machine-Trace-cpreg-names-which-do-not-ma.patch [RHEL-174859]
  - kvm-target-arm-machine-Trace-all-register-mismatches.patch [RHEL-174859]
  - kvm-target-arm-machine-Fix-detection-of-unknown-incoming.patch [RHEL-174859]
  - kvm-target-arm-cpu-Introduce-the-infrastructure-for-cpre.patch [RHEL-174859]
  - kvm-target-arm-machine-Handle-ToleranceNotOnBothEnds-mig.patch [RHEL-174859]
  - kvm-target-arm-machine-Handle-ToleranceOnlySrcTestValue-.patch [RHEL-174859]
  - kvm-target-arm-cpu64-Mitigate-migration-failures-due-to-.patch [RHEL-174859]
  - kvm-target-arm-cpu64-Define-cpreg-migration-tolerance-fo.patch [RHEL-174859]
  - kvm-target-arm-helper-Define-cpreg-migration-tolerance-f.patch [RHEL-174859]
  - kvm-Revert-target-arm-Reinstate-bogus-AArch32-DBGDTRTX-r.patch [RHEL-174859]
  - Resolves: RHEL-174859
    ([rhel9] Backport qemu cross-kernel migration mitigation series)


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-21
changelog:
  - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-158243]
  - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-158243]
  - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-158243]
  - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-177969]
  - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-177969]
  - Resolves: RHEL-158243
    (live migration failed the VM just register key only [rhel-9.9])
  - Resolves: RHEL-177969
    (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests)


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-22
changelog:
  - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184528]
  - Resolves: RHEL-184528
    (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.0.0-8
changelog:
  - kvm-Disable-TPM-passthrough.patch [bz#1978911]
  - kvm-redhat-Replace-the-kvm-setup.service-with-a-etc-modu.patch [bz#1978837]
  - Resolves: bz#1978911
    (Remove TPM Passthrough option from RHEL 9)
  - Resolves: bz#1978837
    (Remove/replace kvm-setup.service)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.0.0-9
changelog:
  - kvm-s390x-cpumodel-add-3931-and-3932.patch [bz#1932191]
  - kvm-spapr-Fix-EEH-capability-issue-on-KVM-guest-for-PCI-.patch [bz#1957194]
  - kvm-ppc-pef.c-initialize-cgs-ready-in-kvmppc_svm_init.patch [bz#1957194]
  - kvm-redhat-Move-qemu-kvm-docs-dependency-to-qemu-kvm.patch [bz#1957194]
  - kvm-redhat-introducting-qemu-kvm-hw-usbredir.patch [bz#1957194]
  - kvm-redhat-use-the-standard-vhost-user-JSON-path.patch [bz#1957194]
  - Resolves: bz#1932191
    ([IBM 9.0 FEAT] CPU Model for new IBM Z Hardware - qemu part (kvm))
  - Resolves: bz#1957194
    (Synchronize RHEL-AV 8.5.0 changes to RHEL 9.0.0 Beta)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.0.0-10
changelog:
  - kvm-s390x-css-Introduce-an-ESW-struct.patch [bz#1957194]
  - kvm-s390x-css-Split-out-the-IRB-sense-data.patch [bz#1957194]
  - kvm-s390x-css-Refactor-IRB-construction.patch [bz#1957194]
  - kvm-s390x-css-Add-passthrough-IRB.patch [bz#1957194]
  - kvm-vhost-user-blk-Fail-gracefully-on-too-large-queue-si.patch [bz#1957194]
  - kvm-vhost-user-blk-Make-sure-to-set-Error-on-realize-fai.patch [bz#1957194]
  - kvm-vhost-user-blk-Don-t-reconnect-during-initialisation.patch [bz#1957194]
  - kvm-vhost-user-blk-Improve-error-reporting-in-realize.patch [bz#1957194]
  - kvm-vhost-user-blk-Get-more-feature-flags-from-vhost-dev.patch [bz#1957194]
  - kvm-virtio-Fail-if-iommu_platform-is-requested-but-unsup.patch [bz#1957194]
  - kvm-vhost-user-blk-Check-that-num-queues-is-supported-by.patch [bz#1957194]
  - kvm-vhost-user-Fix-backends-without-multiqueue-support.patch [bz#1957194]
  - kvm-file-posix-fix-max_iov-for-dev-sg-devices.patch [bz#1957194]
  - kvm-scsi-generic-pass-max_segments-via-max_iov-field-in-.patch [bz#1957194]
  - kvm-osdep-provide-ROUND_DOWN-macro.patch [bz#1957194]
  - kvm-block-backend-align-max_transfer-to-request-alignmen.patch [bz#1957194]
  - kvm-block-add-max_hw_transfer-to-BlockLimits.patch [bz#1957194]
  - kvm-file-posix-try-BLKSECTGET-on-block-devices-too-do-no.patch [bz#1957194]
  - kvm-block-Add-option-to-use-driver-whitelist-even-in-too.patch [bz#1957782]
  - kvm-spec-Restrict-block-drivers-in-tools.patch [bz#1957782]
  - kvm-Move-tools-to-separate-package.patch [bz#1972285]
  - kvm-Split-qemu-pr-helper-to-separate-package.patch [bz#1972300]
  - kvm-spec-RPM_BUILD_ROOT-buildroot.patch [bz#1973029]
  - kvm-spec-More-use-of-name-instead-of-qemu-kvm.patch [bz#1973029]
  - kvm-spec-Use-qemu-pr-helper.service-from-qemu.git.patch [bz#1973029]
  - kvm-spec-Use-_sourcedir-for-referencing-sources.patch [bz#1973029]
  - kvm-spec-Add-tools_only.patch [bz#1973029]
  - kvm-spec-build-Add-run_configure-helper.patch [bz#1973029]
  - kvm-spec-build-Disable-more-bits-with-disable_everything.patch [bz#1973029]
  - kvm-spec-build-Add-macros-for-some-configure-parameters.patch [bz#1973029]
  - kvm-spec-files-Move-qemu-guest-agent-and-qemu-img-earlie.patch [bz#1973029]
  - kvm-spec-install-Remove-redundant-bits.patch [bz#1973029]
  - kvm-spec-install-Add-modprobe_kvm_conf-macro.patch [bz#1973029]
  - kvm-spec-install-Remove-qemu-guest-agent-etc-qemu-kvm-us.patch [bz#1973029]
  - kvm-spec-install-clean-up-qemu-ga-section.patch [bz#1973029]
  - kvm-spec-install-Use-a-single-tools_only-section.patch [bz#1973029]
  - kvm-spec-Make-tools_only-not-cross-spec-sections.patch [bz#1973029]
  - kvm-spec-install-Limit-time-spent-in-qemu_kvm_build.patch [bz#1973029]
  - kvm-spec-misc-syntactic-merges-with-Fedora.patch [bz#1973029]
  - kvm-spec-Use-Fedora-s-pattern-for-specifying-rc-version.patch [bz#1973029]
  - kvm-spec-files-don-t-use-fine-grained-docs-file-list.patch [bz#1973029]
  - kvm-spec-files-Add-licenses-to-qemu-common-too.patch [bz#1973029]
  - kvm-spec-install-Drop-python3-shebang-fixup.patch [bz#1973029]
  - Resolves: bz#1957194
    (Synchronize RHEL-AV 8.5.0 changes to RHEL 9.0.0 Beta)
  - Resolves: bz#1957782
    (VMDK support should be read-only)
  - Resolves: bz#1972285
    (Split out a qemu-kvm-tools subpackage)
  - Resolves: bz#1972300
    (Split out a qemu-pr-helper subpackage)
  - Resolves: bz#1973029
    (Spec file cleanups)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.0.0-11
changelog:
  - kvm-arm-virt-Register-iommu-as-a-class-property.patch [bz#1838608]
  - kvm-arm-virt-Register-its-as-a-class-property.patch [bz#1838608]
  - kvm-arm-virt-Enable-ARM-RAS-support.patch [bz#1838608]
  - kvm-block-Fix-in_flight-leak-in-request-padding-error-pa.patch [bz#1972079]
  - kvm-spec-Remove-buildldflags.patch [bz#1973029]
  - kvm-spec-Use-make_build-macro.patch [bz#1973029]
  - kvm-spec-Drop-make-install-sharedir-and-datadir-usage.patch [bz#1973029]
  - kvm-spec-use-make_install-macro.patch [bz#1973029]
  - kvm-spec-parallelize-make-check.patch [bz#1973029]
  - kvm-spec-Drop-explicit-build-id.patch [bz#1973029]
  - kvm-spec-use-build_ldflags.patch [bz#1973029]
  - kvm-Move-virtiofsd-to-separate-package.patch [bz#1979728]
  - kvm-Utilize-firmware-configure-option.patch [bz#1980139]
  - Resolves: bz#1838608
    (aarch64: Enable ARMv8 RAS virtualization support)
  - Resolves: bz#1972079
    (Windows Installation blocked on 4k disk when using blk+raw+iothread)
  - Resolves: bz#1973029
    (Spec file cleanups)
  - Resolves: bz#1979728
    (Split out virtiofsd subpackage)
  - Resolves: bz#1980139
    (Use configure --firmwarepath more)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.0.0-12.el9
changelog:
  - kvm-migration-Move-yank-outside-qemu_start_incoming_migr.patch [bz#1974683]
  - kvm-migration-Allow-reset-of-postcopy_recover_triggered-.patch [bz#1974683]
  - kvm-Remove-RHEL-7.0.0-machine-type.patch [bz#1968519]
  - kvm-Remove-RHEL-7.1.0-machine-type.patch [bz#1968519]
  - kvm-Remove-RHEL-7.2.0-machine-type.patch [bz#1968519]
  - kvm-Remove-RHEL-7.3.0-machine-types.patch [bz#1968519]
  - kvm-Remove-RHEL-7.4.0-machine-types.patch [bz#1968519]
  - kvm-Remove-RHEL-7.5.0-machine-types.patch [bz#1968519]
  - kvm-acpi-pc-revert-back-to-v5.2-PCI-slot-enumeration.patch [bz#1957194]
  - kvm-migration-failover-reset-partially_hotplugged.patch [bz#1957194]
  - kvm-hmp-Fix-loadvm-to-resume-the-VM-on-success-instead-o.patch [bz#1957194]
  - kvm-migration-Move-bitmap_mutex-out-of-migration_bitmap_.patch [bz#1957194]
  - kvm-i386-cpu-Expose-AVX_VNNI-instruction-to-guest.patch [bz#1957194]
  - kvm-ratelimit-protect-with-a-mutex.patch [bz#1957194]
  - kvm-Update-Linux-headers-to-5.13-rc4.patch [bz#1957194]
  - kvm-i386-Add-ratelimit-for-bus-locks-acquired-in-guest.patch [bz#1957194]
  - kvm-iothread-generalize-iothread_set_param-iothread_get_.patch [bz#1957194]
  - kvm-iothread-add-aio-max-batch-parameter.patch [bz#1957194]
  - kvm-linux-aio-limit-the-batch-size-using-aio-max-batch-p.patch [bz#1957194]
  - kvm-block-nvme-Fix-VFIO_MAP_DMA-failed-No-space-left-on-.patch [bz#1957194]
  - kvm-migration-move-wait-unplug-loop-to-its-own-function.patch [bz#1957194]
  - kvm-migration-failover-continue-to-wait-card-unplug-on-e.patch [bz#1957194]
  - kvm-aarch64-Add-USB-storage-devices.patch [bz#1957194]
  - kvm-iotests-Improve-and-rename-test-291-to-qemu-img-bitm.patch [bz#1957194]
  - kvm-qemu-img-Fail-fast-on-convert-bitmaps-with-inconsist.patch [bz#1957194]
  - kvm-qemu-img-Add-skip-broken-bitmaps-for-convert-bitmaps.patch [bz#1957194]
  - kvm-audio-Never-send-migration-section.patch [bz#1957194]
  - kvm-pc-bios-s390-ccw-bootmap-Silence-compiler-warning-fr.patch [bz#1939509 bz#1940132]
  - kvm-pc-bios-s390-ccw-Use-reset_psw-pointer-instead-of-ha.patch [bz#1939509 bz#1940132]
  - kvm-pc-bios-s390-ccw-netboot-Use-Wl-prefix-to-pass-param.patch [bz#1939509 bz#1940132]
  - kvm-pc-bios-s390-ccw-Silence-warning-from-Clang-by-marki.patch [bz#1939509 bz#1940132]
  - kvm-pc-bios-s390-ccw-Fix-the-cc-option-macro-in-the-Make.patch [bz#1939509 bz#1940132]
  - kvm-pc-bios-s390-ccw-Silence-GCC-11-stringop-overflow-wa.patch [bz#1939509 bz#1940132]
  - kvm-pc-bios-s390-ccw-Allow-building-with-Clang-too.patch [bz#1939509 bz#1940132]
  - kvm-pc-bios-s390-ccw-Fix-inline-assembly-for-older-versi.patch [bz#1939509 bz#1940132]
  - kvm-configure-Fix-endianess-test-with-LTO.patch [bz#1939509 bz#1940132]
  - kvm-spec-Switch-toolchain-to-Clang-LLVM.patch [bz#1939509 bz#1940132]
  - kvm-spec-Use-safe-stack-for-x86_64.patch [bz#1939509 bz#1940132]
  - kvm-spec-Reenable-write-support-for-VMDK-etc.-in-tools.patch [bz#1989841]
  - Resolves: bz#1974683
    (Fail to set migrate incoming for 2nd time after the first time failed)
  - Resolves: bz#1968519
    (Remove all the old 7.0-7.5 machine types)
  - Resolves: bz#1957194
    (Synchronize RHEL-AV 8.5.0 changes to RHEL 9.0.0 Beta)
  - Resolves: bz#1939509
    (QEMU: enable SafeStack)
  - Resolves: bz#1940132
    (QEMU: switch build toolchain to Clang/LLVM)
  - Resolves: bz#1989841
    (RFE: qemu-img cannot convert images into vmdk and vpc formats)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.0.0-13
changelog:
  - kvm-qcow2-Deprecation-warning-when-opening-v2-images-rw.patch [bz#1951814]
  - kvm-disable-ac97-audio.patch [bz#1995819]
  - kvm-redhat-Disable-LTO-on-non-x86-architectures.patch [bz#1950192]
  - kvm-redhat-Enable-the-test-block-iothread-test-again.patch [bz#1950192]
  - Resolves: bz#1951814
    (RFE: Warning when using qcow2-v2 (compat=0.10))
  - Resolves: bz#1995819
    (RFE: Remove ac97 audio support from QEMU)
  - Resolves: bz#1950192
    (RHEL9: when ioeventfd=off and 8.4guest, (qemu) qemu-kvm: ../util/qemu-coroutine-lock.c:57: qemu_co_queue_wait_impl: Assertion `qemu_in_coroutine()' failed.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.1.0-2
changelog:
  - kvm-hw-arm-virt-Remove-9.0-machine-type.patch [bz#2002937]
  - kvm-remove-sgabios-dependency.patch [bz#2000845]
  - kvm-enable-pulseaudio.patch [bz#1997725]
  - kvm-spec-disable-use-of-gcrypt-for-crypto-backends-in-fa.patch [bz#1990068]
  - Resolves: bz#2002937
    ([qemu][aarch64] Remove 9.0 machine types in arm virt for 9-Beta)
  - Resolves: bz#2000845
    (RFE: Remove SGA, deprecate cirrus, and set defaults for QEMU machine-types in RHEL9)
  - Resolves: bz#1997725
    (RFE: enable pulseaudio backend on QEMU)
  - Resolves: bz#1990068
    (Disable use of gcrypt for crypto backends in favour of gnutls)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.1.0-3
changelog:
  - kvm-disable-sga-device.patch [bz#2000845]
  - kvm-tools-virtiofsd-Add-fstatfs64-syscall-to-the-seccomp.patch [bz#2005026]
  - Resolves: bz#2000845
    (RFE: Remove SGA, deprecate cirrus, and set defaults for QEMU machine-types in RHEL9)
  - Resolves: bz#2005026
    ([s390][virtio-fs] Umount virtiofs shared folder failure from guest side [rhel-9.0.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-4
changelog:
  - kvm-qapi-machine.json-Add-cluster-id.patch [bz#2041823]
  - kvm-qtest-numa-test-Specify-CPU-topology-in-aarch64_numa.patch [bz#2041823]
  - kvm-hw-arm-virt-Consider-SMP-configuration-in-CPU-topolo.patch [bz#2041823]
  - kvm-qtest-numa-test-Correct-CPU-and-NUMA-association-in-.patch [bz#2041823]
  - kvm-hw-arm-virt-Fix-CPU-s-default-NUMA-node-ID.patch [bz#2041823]
  - kvm-hw-acpi-aml-build-Use-existing-CPU-topology-to-build.patch [bz#2041823]
  - kvm-coroutine-Rename-qemu_coroutine_inc-dec_pool_size.patch [bz#2079938]
  - kvm-coroutine-Revert-to-constant-batch-size.patch [bz#2079938]
  - kvm-virtio-scsi-fix-ctrl-and-event-handler-functions-in-.patch [bz#2079347]
  - kvm-virtio-scsi-don-t-waste-CPU-polling-the-event-virtqu.patch [bz#2079347]
  - kvm-virtio-scsi-clean-up-virtio_scsi_handle_event_vq.patch [bz#2079347]
  - kvm-virtio-scsi-clean-up-virtio_scsi_handle_ctrl_vq.patch [bz#2079347]
  - kvm-virtio-scsi-clean-up-virtio_scsi_handle_cmd_vq.patch [bz#2079347]
  - kvm-virtio-scsi-move-request-related-items-from-.h-to-.c.patch [bz#2079347]
  - kvm-Revert-virtio-scsi-Reject-scsi-cd-if-data-plane-enab.patch [bz#1995710]
  - kvm-migration-Fix-operator-type.patch [bz#2064530]
  - Resolves: bz#2041823
    ([aarch64][numa] When there are at least 6 Numa nodes serial log shows 'arch topology borken')
  - Resolves: bz#2079938
    (qemu coredump when boot with multi disks (qemu) failed to set up stack guard page: Cannot allocate memory)
  - Resolves: bz#2079347
    (Guest boot blocked when scsi disks using same iothread and 100% CPU consumption)
  - Resolves: bz#1995710
    (RFE: Allow virtio-scsi CD-ROM media change with IOThreads)
  - Resolves: bz#2064530
    (Rebuild qemu-kvm with clang-14)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-5
changelog:
  - kvm-qemu-nbd-Pass-max-connections-to-blockdev-layer.patch [bz#1708300]
  - kvm-nbd-server-Allow-MULTI_CONN-for-shared-writable-expo.patch [bz#1708300]
  - Resolves: bz#1708300
    (RFE: qemu-nbd vs NBD_FLAG_CAN_MULTI_CONN)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-6
changelog:
  - kvm-Introduce-event-loop-base-abstract-class.patch [bz#2031024]
  - kvm-util-main-loop-Introduce-the-main-loop-into-QOM.patch [bz#2031024]
  - kvm-util-event-loop-base-Introduce-options-to-set-the-th.patch [bz#2031024]
  - kvm-qcow2-Improve-refcount-structure-rebuilding.patch [bz#2072379]
  - kvm-iotests-108-Test-new-refcount-rebuild-algorithm.patch [bz#2072379]
  - kvm-qcow2-Add-errp-to-rebuild_refcount_structure.patch [bz#2072379]
  - kvm-iotests-108-Fix-when-missing-user_allow_other.patch [bz#2072379]
  - kvm-virtio-net-setup-vhost_dev-and-notifiers-for-cvq-onl.patch [bz#2070804]
  - kvm-virtio-net-align-ctrl_vq-index-for-non-mq-guest-for-.patch [bz#2070804]
  - kvm-vhost-vdpa-fix-improper-cleanup-in-net_init_vhost_vd.patch [bz#2070804]
  - kvm-vhost-net-fix-improper-cleanup-in-vhost_net_start.patch [bz#2070804]
  - kvm-vhost-vdpa-backend-feature-should-set-only-once.patch [bz#2070804]
  - kvm-vhost-vdpa-change-name-and-polarity-for-vhost_vdpa_o.patch [bz#2070804]
  - kvm-virtio-net-don-t-handle-mq-request-in-userspace-hand.patch [bz#2070804]
  - kvm-Revert-globally-limit-the-maximum-number-of-CPUs.patch [bz#2094270]
  - kvm-vfio-common-remove-spurious-warning-on-vfio_listener.patch [bz#2086262]
  - Resolves: bz#2031024
    (Add support for fixing thread pool size [QEMU])
  - Resolves: bz#2072379
    (Fail to rebuild the reference count tables of qcow2 image on host block devices (e.g. LVs))
  - Resolves: bz#2070804
    (PXE boot crash qemu when using multiqueue vDPA)
  - Resolves: bz#2094270
    (Do not set the hard vCPU limit to the soft vCPU limit in downstream qemu-kvm anymore)
  - Resolves: bz#2086262
    ([Win11][tpm]vfio_listener_region_del received unaligned region)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-7
changelog:
  - kvm-coroutine-ucontext-use-QEMU_DEFINE_STATIC_CO_TLS.patch [bz#1952483]
  - kvm-coroutine-use-QEMU_DEFINE_STATIC_CO_TLS.patch [bz#1952483]
  - kvm-coroutine-win32-use-QEMU_DEFINE_STATIC_CO_TLS.patch [bz#1952483]
  - kvm-Enable-virtio-iommu-pci-on-x86_64.patch [bz#2094252]
  - kvm-linux-aio-fix-unbalanced-plugged-counter-in-laio_io_.patch [bz#2092788]
  - kvm-linux-aio-explain-why-max-batch-is-checked-in-laio_i.patch [bz#2092788]
  - Resolves: bz#1952483
    (RFE: QEMU's coroutines fail with CFLAGS=-flto on non-x86_64 architectures)
  - Resolves: bz#2094252
    (Compile the virtio-iommu device on x86_64)
  - Resolves: bz#2092788
    (Stalled IO Operations in VM)


author: Camilla Conte <cconte@redhat.com> - 7.0.0-8
changelog:
  - kvm-tests-avocado-update-aarch64_virt-test-to-exercise-c.patch [bz#2060839]
  - kvm-RHEL-only-tests-avocado-Switch-aarch64-tests-from-a5.patch [bz#2060839]
  - kvm-RHEL-only-AArch64-Drop-unsupported-CPU-types.patch [bz#2060839]
  - kvm-target-i386-deprecate-CPUs-older-than-x86_64-v2-ABI.patch [bz#2060839]
  - kvm-target-s390x-deprecate-CPUs-older-than-z14.patch [bz#2060839]
  - kvm-target-arm-deprecate-named-CPU-models.patch [bz#2060839]
  - kvm-meson.build-Fix-docker-test-build-alpine-when-includ.patch [bz#1968509]
  - kvm-QIOChannel-Add-flags-on-io_writev-and-introduce-io_f.patch [bz#1968509]
  - kvm-QIOChannelSocket-Implement-io_writev-zero-copy-flag-.patch [bz#1968509]
  - kvm-migration-Add-zero-copy-send-parameter-for-QMP-HMP-f.patch [bz#1968509]
  - kvm-migration-Add-migrate_use_tls-helper.patch [bz#1968509]
  - kvm-multifd-multifd_send_sync_main-now-returns-negative-.patch [bz#1968509]
  - kvm-multifd-Send-header-packet-without-flags-if-zero-cop.patch [bz#1968509]
  - kvm-multifd-Implement-zero-copy-write-in-multifd-migrati.patch [bz#1968509]
  - kvm-QIOChannelSocket-Introduce-assert-and-reduce-ifdefs-.patch [bz#1968509]
  - kvm-QIOChannelSocket-Fix-zero-copy-send-so-socket-flush-.patch [bz#1968509]
  - kvm-migration-Change-zero_copy_send-from-migration-param.patch [bz#1968509]
  - kvm-migration-Allow-migrate-recover-to-run-multiple-time.patch [bz#2096143]
  - Resolves: bz#2060839
    (Consider deprecating CPU models like "kvm64" / "qemu64" on RHEL 9)
  - Resolves: bz#1968509
    (Use MSG_ZEROCOPY on QEMU Live Migration)
  - Resolves: bz#2096143
    (The migration port is not released if use it again for recovering postcopy migration)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-9
changelog:
  - kvm-virtio-iommu-Add-bypass-mode-support-to-assigned-dev.patch [bz#2100106]
  - kvm-virtio-iommu-Use-recursive-lock-to-avoid-deadlock.patch [bz#2100106]
  - kvm-virtio-iommu-Add-an-assert-check-in-translate-routin.patch [bz#2100106]
  - kvm-virtio-iommu-Fix-the-partial-copy-of-probe-request.patch [bz#2100106]
  - kvm-virtio-iommu-Fix-migration-regression.patch [bz#2100106]
  - kvm-pc-bios-s390-ccw-virtio-Introduce-a-macro-for-the-DA.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-bootmap-Improve-the-guessing-logic-.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Simplify-fix-virtio_i.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Remove-virtio_assume_.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-Set-missing-status-bits-whil.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-Read-device-config-after-fea.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-Beautify-the-code-for-readin.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-Split-virtio-scsi-code-from-virtio_.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Request-the-right-fea.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-netboot.mak-Ignore-Clang-s-warnings.patch [bz#2098077]
  - kvm-hw-block-fdc-Prevent-end-of-track-overrun-CVE-2021-3.patch [bz#1951522]
  - kvm-tests-qtest-fdc-test-Add-a-regression-test-for-CVE-2.patch [bz#1951522]
  - Resolves: bz#2100106
    (Fix virtio-iommu/vfio bypass)
  - Resolves: bz#2098077
    (virtio-blk: Can't boot fresh installation from used virtio-blk dasd disk under certain conditions)
  - Resolves: bz#1951522
    (CVE-2021-3507 qemu-kvm: QEMU: fdc: heap buffer overflow in DMA read data transfers [rhel-9.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-10
changelog:
  - kvm-vhost-Track-descriptor-chain-in-private-at-SVQ.patch [bz#1939363]
  - kvm-vhost-Fix-device-s-used-descriptor-dequeue.patch [bz#1939363]
  - kvm-hw-virtio-Replace-g_memdup-by-g_memdup2.patch [bz#1939363]
  - kvm-vhost-Fix-element-in-vhost_svq_add-failure.patch [bz#1939363]
  - kvm-meson-create-have_vhost_-variables.patch [bz#1939363]
  - kvm-meson-use-have_vhost_-variables-to-pick-sources.patch [bz#1939363]
  - kvm-vhost-move-descriptor-translation-to-vhost_svq_vring.patch [bz#1939363]
  - kvm-virtio-net-Expose-MAC_TABLE_ENTRIES.patch [bz#1939363]
  - kvm-virtio-net-Expose-ctrl-virtqueue-logic.patch [bz#1939363]
  - kvm-vdpa-Avoid-compiler-to-squash-reads-to-used-idx.patch [bz#1939363]
  - kvm-vhost-Reorder-vhost_svq_kick.patch [bz#1939363]
  - kvm-vhost-Move-vhost_svq_kick-call-to-vhost_svq_add.patch [bz#1939363]
  - kvm-vhost-Check-for-queue-full-at-vhost_svq_add.patch [bz#1939363]
  - kvm-vhost-Decouple-vhost_svq_add-from-VirtQueueElement.patch [bz#1939363]
  - kvm-vhost-Add-SVQDescState.patch [bz#1939363]
  - kvm-vhost-Track-number-of-descs-in-SVQDescState.patch [bz#1939363]
  - kvm-vhost-add-vhost_svq_push_elem.patch [bz#1939363]
  - kvm-vhost-Expose-vhost_svq_add.patch [bz#1939363]
  - kvm-vhost-add-vhost_svq_poll.patch [bz#1939363]
  - kvm-vhost-Add-svq-avail_handler-callback.patch [bz#1939363]
  - kvm-vdpa-Export-vhost_vdpa_dma_map-and-unmap-calls.patch [bz#1939363]
  - kvm-vhost-net-vdpa-add-stubs-for-when-no-virtio-net-devi.patch [bz#1939363]
  - kvm-vdpa-manual-forward-CVQ-buffers.patch [bz#1939363]
  - kvm-vdpa-Buffer-CVQ-support-on-shadow-virtqueue.patch [bz#1939363]
  - kvm-vdpa-Extract-get-features-part-from-vhost_vdpa_get_m.patch [bz#1939363]
  - kvm-vdpa-Add-device-migration-blocker.patch [bz#1939363]
  - kvm-vdpa-Add-x-svq-to-NetdevVhostVDPAOptions.patch [bz#1939363]
  - kvm-redhat-Update-linux-headers-linux-kvm.h-to-v5.18-rc6.patch [bz#2111994]
  - kvm-target-s390x-kvm-Honor-storage-keys-during-emulation.patch [bz#2111994]
  - kvm-kvm-don-t-use-perror-without-useful-errno.patch [bz#2095608]
  - kvm-multifd-Copy-pages-before-compressing-them-with-zlib.patch [bz#2099934]
  - kvm-Revert-migration-Simplify-unqueue_page.patch [bz#2099934]
  - Resolves: bz#1939363
    (vDPA control virtqueue support in Qemu)
  - Resolves: bz#2111994
    (RHEL9: skey test in kvm_unit_test got failed)
  - Resolves: bz#2095608
    (Please correct the error message when try to start qemu with "-M kernel-irqchip=split")
  - Resolves: bz#2099934
    (Guest reboot on destination host after postcopy migration completed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-11
changelog:
  - kvm-QIOChannelSocket-Fix-zero-copy-flush-returning-code-.patch [bz#2107466]
  - kvm-Add-dirty-sync-missed-zero-copy-migration-stat.patch [bz#2107466]
  - kvm-migration-multifd-Report-to-user-when-zerocopy-not-w.patch [bz#2107466]
  - kvm-migration-Avoid-false-positive-on-non-supported-scen.patch [bz#2107466]
  - kvm-migration-add-remaining-params-has_-true-in-migratio.patch [bz#2107466]
  - kvm-QIOChannelSocket-Add-support-for-MSG_ZEROCOPY-IPV6.patch [bz#2107466]
  - kvm-pc-bios-s390-ccw-Fix-booting-with-logical-block-size.patch [bz#2112303]
  - kvm-vdpa-Fix-bad-index-calculus-at-vhost_vdpa_get_vring_.patch [bz#2116876]
  - kvm-vdpa-Fix-index-calculus-at-vhost_vdpa_svqs_start.patch [bz#2116876]
  - kvm-vdpa-Fix-memory-listener-deletions-of-iova-tree.patch [bz#2116876]
  - kvm-vdpa-Fix-file-descriptor-leak-on-get-features-error.patch [bz#2116876]
  - Resolves: bz#2107466
    (zerocopy capability can be enabled when set migrate capabilities with multifd and compress/xbzrle together)
  - Resolves: bz#2112303
    (virtio-blk: Can't boot fresh installation from used 512 cluster_size image under certain conditions)
  - Resolves: bz#2116876
    (Fixes for vDPA control virtqueue support in Qemu)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.1.0-2
changelog:
  - kvm-vdpa-Skip-the-maps-not-in-the-iova-tree.patch [RHELX-57]
  - kvm-vdpa-do-not-save-failed-dma-maps-in-SVQ-iova-tree.patch [RHELX-57]
  - kvm-util-accept-iova_tree_remove_parameter-by-value.patch [RHELX-57]
  - kvm-vdpa-Remove-SVQ-vring-from-iova_tree-at-shutdown.patch [RHELX-57]
  - kvm-vdpa-Make-SVQ-vring-unmapping-return-void.patch [RHELX-57]
  - kvm-vhost-Always-store-new-kick-fd-on-vhost_svq_set_svq_.patch [RHELX-57]
  - kvm-vdpa-Use-ring-hwaddr-at-vhost_vdpa_svq_unmap_ring.patch [RHELX-57]
  - kvm-vhost-stop-transfer-elem-ownership-in-vhost_handle_g.patch [RHELX-57]
  - kvm-vhost-use-SVQ-element-ndescs-instead-of-opaque-data-.patch [RHELX-57]
  - kvm-vhost-Delete-useless-read-memory-barrier.patch [RHELX-57]
  - kvm-vhost-Do-not-depend-on-NULL-VirtQueueElement-on-vhos.patch [RHELX-57]
  - kvm-vhost_net-Add-NetClientInfo-start-callback.patch [RHELX-57]
  - kvm-vhost_net-Add-NetClientInfo-stop-callback.patch [RHELX-57]
  - kvm-vdpa-add-net_vhost_vdpa_cvq_info-NetClientInfo.patch [RHELX-57]
  - kvm-vdpa-Move-command-buffers-map-to-start-of-net-device.patch [RHELX-57]
  - kvm-vdpa-extract-vhost_vdpa_net_cvq_add-from-vhost_vdpa_.patch [RHELX-57]
  - kvm-vhost_net-add-NetClientState-load-callback.patch [RHELX-57]
  - kvm-vdpa-Add-virtio-net-mac-address-via-CVQ-at-start.patch [RHELX-57]
  - kvm-vdpa-Delete-CVQ-migration-blocker.patch [RHELX-57]
  - kvm-vdpa-Make-VhostVDPAState-cvq_cmd_in_buffer-control-a.patch [RHELX-57]
  - kvm-vdpa-extract-vhost_vdpa_net_load_mac-from-vhost_vdpa.patch [RHELX-57]
  - kvm-vdpa-Add-vhost_vdpa_net_load_mq.patch [RHELX-57]
  - kvm-vdpa-validate-MQ-CVQ-commands.patch [RHELX-57]
  - kvm-virtio-net-Update-virtio-net-curr_queue_pairs-in-vdp.patch [RHELX-57]
  - kvm-vdpa-Allow-MQ-feature-in-SVQ.patch [RHELX-57]
  - kvm-i386-reset-KVM-nested-state-upon-CPU-reset.patch [bz#2125281]
  - kvm-i386-do-kvm_put_msr_feature_control-first-thing-when.patch [bz#2125281]
  - kvm-Revert-Re-enable-capstone-internal-build.patch [bz#2127825]
  - kvm-spec-Use-capstone-package.patch [bz#2127825]
  - Resolves: RHELX-57
    (vDPA SVQ Multiqueue support )
  - Resolves: bz#2125281
    ([RHEL9.1] Guests in VMX root operation fail to reboot with QEMU's 'system_reset' command [rhel-9.2.0])
  - Resolves: bz#2127825
    (Use capstone for qemu-kvm build)


author: Jon Maloy <jmaloy@redhat.com> - 7.1.0-3
changelog:
  - kvm-target-i386-kvm-fix-kvmclock_current_nsec-Assertion-.patch [bz#2108531]
  - Resolves: bz#2108531
    (Windows guest reboot after migration with wsl2 installed inside)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.1.0-4
changelog:
  - kvm-Revert-intel_iommu-Fix-irqchip-X2APIC-configuration-.patch [bz#2126095]
  - Resolves: bz#2126095
    ([rhel9.2][intel_iommu]Booting guest with "-device intel-iommu,intremap=on,device-iotlb=on,caching-mode=on" causes kernel call trace)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.1.0-5
changelog:
  - kvm-rtl8139-Remove-unused-variable.patch [bz#2141218]
  - kvm-qemu-img-remove-unused-variable.patch [bz#2141218]
  - kvm-host-libusb-Remove-unused-variable.patch [bz#2141218]
  - Resolves: bz#2141218
    (qemu-kvm build fails with clang 15.0.1 due to false unused variable error)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.1.0-6
changelog:
  - kvm-block-move-bdrv_qiov_is_aligned-to-file-posix.patch [bz#2143170]
  - kvm-block-use-the-request-length-for-iov-alignment.patch [bz#2143170]
  - Resolves: bz#2143170
    (The installation can not start when install files (iso) locate on a 4k disk)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-2
changelog:
  - kvm-redhat-Add-rhel8.6.0-and-rhel9.0.0-machine-types-for.patch [bz#2008060]
  - kvm-redhat-Enable-virtio-mem-as-tech-preview-on-x86-64.patch [bz#2014484]
  - Resolves: bz#2008060
    (Fix CPU Model for new IBM Z Hardware - qemu part)
  - Resolves: bz#2014484
    ([RHEL9] Enable virtio-mem as tech-preview on x86-64 - QEMU)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-3
changelog:
  - kvm-hw-arm-virt-Register-iommu-as-a-class-property.patch [bz#2031044]
  - kvm-hw-arm-virt-Register-its-as-a-class-property.patch [bz#2031044]
  - kvm-hw-arm-virt-Rename-default_bus_bypass_iommu.patch [bz#2031044]
  - kvm-hw-arm-virt-Expose-the-RAS-option.patch [bz#2031044]
  - kvm-hw-arm-virt-Add-9.0-machine-type-and-remove-8.5-one.patch [bz#2031044]
  - kvm-hw-arm-virt-Check-no_tcg_its-and-minor-style-changes.patch [bz#2031044]
  - Resolves: bz#2031044
    (Add rhel-9.0.0 machine types for RHEL 9.0 [aarch64])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-4
changelog:
  - kvm-block-nvme-fix-infinite-loop-in-nvme_free_req_queue_.patch [bz#2024544]
  - kvm-rhel-machine-types-x86-set-prefer_sockets.patch [bz#2028623]
  - Resolves: bz#2024544
    (Fio workers hangs when running fio with 32 jobs iodepth 32 and QEMU's userspace NVMe driver)
  - Resolves: bz#2028623
    ([9.0] machine types: 6.2: Fix prefer_sockets)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-5
changelog:
  - kvm-x86-Add-q35-RHEL-8.6.0-machine-type.patch [bz#1945666]
  - kvm-x86-Add-q35-RHEL-9.0.0-machine-type.patch [bz#1945666]
  - kvm-softmmu-fix-device-deletion-events-with-device-JSON-.patch [bz#2036669]
  - Resolves: bz#1945666
    (9.0: x86 machine types)
  - Resolves: bz#2036669
    (DEVICE_DELETED event is not delivered for device frontend if -device is configured via JSON)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-6
changelog:
  - Moving feature support out of qemu-kvm-core to separate packages (can
    cause loss of functionality when using only qemu-kvm-core - qemu-kvm keeps
    same feature set).
  - kvm-spec-Rename-qemu-kvm-hw-usbredir-to-qemu-kvm-device-.patch [bz#2022847]
  - kvm-spec-Split-qemu-kvm-ui-opengl.patch [bz#2022847]
  - kvm-spec-Introduce-packages-for-virtio-gpu-modules.patch [bz#2022847]
  - kvm-spec-Introduce-device-display-virtio-vga-packages.patch [bz#2022847]
  - kvm-spec-Move-usb-host-module-to-separate-package.patch [bz#2022847]
  - kvm-spec-Move-qtest-accel-module-to-tests-package.patch [bz#2022847]
  - kvm-spec-Extend-qemu-kvm-core-description.patch [bz#2022847]
  - Resolves: bz#2022847
    (qemu-kvm: Align package split with Fedora)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-7
changelog:
  - kvm-qemu-storage-daemon-Add-vhost-user-blk-help.patch [bz#1962088]
  - kvm-qemu-storage-daemon-Fix-typo-in-vhost-user-blk-help.patch [bz#1962088]
  - kvm-virtiofsd-Drop-membership-of-all-supplementary-group.patch [bz#2046201]
  - kvm-block-rbd-fix-handling-of-holes-in-.bdrv_co_block_st.patch [bz#2034791]
  - kvm-block-rbd-workaround-for-ceph-issue-53784.patch [bz#2034791]
  - Resolves: bz#1962088
    ([QSD] wrong help message for the fuse)
  - Resolves: bz#2046201
    (CVE-2022-0358 qemu-kvm: QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405 [rhel-9.0])
  - Resolves: bz#2034791
    (Booting from Local Snapshot Core Dumped Whose Backing File Is Based on RBD)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-8
changelog:
  - kvm-numa-Enable-numa-for-SGX-EPC-sections.patch [bz#2033708]
  - kvm-numa-Support-SGX-numa-in-the-monitor-and-Libvirt-int.patch [bz#2033708]
  - kvm-doc-Add-the-SGX-numa-description.patch [bz#2033708]
  - kvm-Enable-SGX-RH-Only.patch [bz#2033708]
  - kvm-qapi-Cleanup-SGX-related-comments-and-restore-sectio.patch [bz#2033708]
  - kvm-block-io-Update-BSC-only-if-want_zero-is-true.patch [bz#2041461]
  - kvm-iotests-block-status-cache-New-test.patch [bz#2041461]
  - kvm-iotests-Test-qemu-img-convert-of-zeroed-data-cluster.patch [bz#1882917]
  - kvm-qemu-img-make-is_allocated_sectors-more-efficient.patch [bz#1882917]
  - kvm-block-backend-prevent-dangling-BDS-pointers-across-a.patch [bz#2040123]
  - kvm-iotests-stream-error-on-reset-New-test.patch [bz#2040123]
  - kvm-hw-arm-smmuv3-Fix-device-reset.patch [bz#2042481]
  - Resolves: bz#2033708
    ([Intel 9.0 Feat] qemu-kvm: SGX 1.5 (SGX1 + Flexible Launch Control) support)
  - Resolves: bz#2041461
    (Inconsistent block status reply in qemu-nbd)
  - Resolves: bz#1882917
    (the target image size is incorrect when converting a badly fragmented file)
  - Resolves: bz#2040123
    (Qemu core dumped when do block-stream to a snapshot node on non-enough space storage)
  - Resolves: bz#2042481
    ([aarch64] Launch guest with "default-bus-bypass-iommu=off,iommu=smmuv3" and "iommu_platform=on", guest hangs after system_reset)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-9
changelog:
  - kvm-block-Lock-AioContext-for-drain_end-in-blockdev-reop.patch [bz#2046659]
  - kvm-iotests-Test-blockdev-reopen-with-iothreads-and-thro.patch [bz#2046659]
  - kvm-block-nbd-Delete-reconnect-delay-timer-when-done.patch [bz#2033626]
  - kvm-block-nbd-Assert-there-are-no-timers-when-closed.patch [bz#2033626]
  - kvm-iotests.py-Add-QemuStorageDaemon-class.patch [bz#2033626]
  - kvm-iotests-281-Test-lingering-timers.patch [bz#2033626]
  - kvm-block-nbd-Move-s-ioc-on-AioContext-change.patch [bz#2033626]
  - kvm-iotests-281-Let-NBD-connection-yield-in-iothread.patch [bz#2033626]
  - Resolves: bz#2046659
    (qemu crash after execute blockdev-reopen with  iothread)
  - Resolves: bz#2033626
    (Qemu core dump when start guest with nbd node or do block jobs to nbd node)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-10
changelog:
  - kvm-Revert-ui-clipboard-Don-t-use-g_autoptr-just-to-free.patch [bz#2042820]
  - kvm-ui-avoid-compiler-warnings-from-unused-clipboard-inf.patch [bz#2042820]
  - kvm-ui-clipboard-fix-use-after-free-regression.patch [bz#2042820]
  - kvm-ui-vnc.c-Fixed-a-deadlock-bug.patch [bz#2042820]
  - kvm-memory-Fix-incorrect-calls-of-log_global_start-stop.patch [bz#2044818]
  - kvm-memory-Fix-qemu-crash-on-starting-dirty-log-twice-wi.patch [bz#2044818]
  - Resolves: bz#2042820
    (qemu crash when try to copy and paste contents from client to VM)
  - Resolves: bz#2044818
    (Qemu Core Dumped when migrate -> migrate_cancel -> migrate again during guest is paused)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.1.0-4
changelog:
  - kvm-redhat-Define-hw_compat_rhel_8_5.patch [bz#1998943]
  - kvm-redhat-Add-s390x-machine-type-compatibility-update-f.patch [bz#1998943]
  - Resolves: bz#1998943
    (Add machine type compatibility update for 6.1 rebase [s390x])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.1.0-5
changelog:
  - kvm-virtio-balloon-Fix-page-poison-subsection-name.patch [bz#1984401]
  - kvm-spec-Remove-block-curl-and-block-ssh-dependency.patch [bz#2010985]
  - Resolves: bz#1984401
    (fails to revert snapshot of a VM [balloon/page-poison])
  - Resolves: bz#2010985
    (Remove dependency on qemu-kvm-block-curl and qemu-kvm-block-ssh [rhel-9.0.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.1.0-6
changelog:
  - kvm-hw-arm-virt-Add-hw_compat_rhel_8_5-to-8.5-machine-ty.patch [bz#1998942]
  - Resolves: bz#1998942
    (Add machine type compatibility update for 6.1 rebase [aarch64])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.1.0-7
changelog:
  - kvm-migration-Make-migration-blocker-work-for-snapshots-.patch [bz#1996609]
  - kvm-migration-Add-migrate_add_blocker_internal.patch [bz#1996609]
  - kvm-dump-guest-memory-Block-live-migration.patch [bz#1996609]
  - kvm-spec-Build-the-VDI-block-driver.patch [bz#2013331]
  - kvm-spec-Explicitly-include-compress-filter.patch [bz#1980035]
  - Resolves: bz#1996609
    (Qemu hit core dump when dump guest memory during live migration)
  - Resolves: bz#2013331
    (RFE: qemu-img cannot convert from vdi format)
  - Resolves: bz#1980035
    (RFE: Enable compress filter so we can create new, compressed qcow2 files via qemu-nbd)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.1.0-8
changelog:
  - kvm-Move-ksmtuned-files-to-separate-package.patch [bz#1971678]
  - Resolves: bz#1971678
    (Split out ksmtuned package from qemu-kvm)


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-4
changelog:
  - Rebuild (LLVM-15)
    Resolves: bz#2119003

  - Add versioned dependencies between subpackages
    Resolves: bz#2088352


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-2
changelog:
  - Assimp: Fix heap-based overflow in Assimp::LWO::AnimResolver::UpdateAnimRangeSetup
    Resolves: RHEL-104999
  - Assimp: Fix heap-based overflow in Assimp::ASE::Parser::ParseLV4MeshBonesVertices
    Resolves: RHEL-105004


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-4
changelog:
  - Fix specific overflow in qtextlayout
  - Fix incorrect parsing of the strict-transport-security (HSTS) header
  - Fix buffer over-read via a crafted reply from a DNS server
    Resolves: bz#2209492


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-5
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-6
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410) (version #2)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-9
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch fixes
    - pull in candidate fix QTBUG-83890
    Resolves: bz#1988934


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: Pavel Reichl <preichl@redhat.com> - 1:4.09-1
changelog:
  - Update to new upstream version
  - Add tmpfs quota support
  - Remove rhel-only patches that were merged upstream


author: Remi Collet <remi@remirepo.net> - 7.0.10-2
changelog:
  - fix modules directory ownership and permissions #2176173
  - drop redis-shutdown helper and rely on systemd #2181181


author: Alba Hita Catala <ahitacat@redhat.com> - 0.2.4-1
changelog:
  - Configure proxy for http connections (RHBZ#2227018)
  - Failling to get system profile is not an error but a warning (RHBZ#2227012)
  - Prevent message content being logged at any level (RHBZ#2227010)
  - Added bash completion (RHBZ#2145198)


author: Link Dupont <link@redhat.com> - 0.2.4-5
changelog:
  - Update embedded yggdrasil-worker-package-manager to 0.1.3 (RHEL-17179)
  - Update embedded yggdrasil to 0.2.4 (RHEL-17179)


author: Jeremy Crafts <jcrafts@redhat.com> - 0.1.13-5
changelog:
  - Update rhc-worker-playbook to 0.1.13 (RHEL-137408)
  - Reduce size of rhc-worker-playbook messages (RHEL-142699)
  - Invoke rhc-playbook-verifier for playbook verification (RHEL-142700)


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-27
changelog:
  - Fix short circuiting of version strings in expressions (RHEL-15688)
  - Fix description of whatconflicts in the man page (RHEL-6303)
  - Expose and document rpmdb --verifydb operation (RHEL-14591)
  - Fixes to the file handling backport


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-29
changelog:
  - Actually add --verifydb to the man page (RHEL-14591)
  - Don't warn about missing user/group on skipped files (RHEL-18037)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-30
changelog:
  - Don't segfault on missing priority tag (RHEL-35249)
  - Use unsigned integers for buildtime too for Y2K38 safety (RHEL-22602)
  - Rebuild against libimaevm.so.4 (RHEL-32505)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-31
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-22604)
  - Fix potential use of uninitialized pgp struct (RHEL-22605)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)
  - Add SourceLicense tag to spec syntax (RHEL-28798)
  - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-33
changelog:
  - Fix root relocation regression (RHEL-28967)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-35
changelog:
  - Fix %patch N applying Patch0 implicitly (RHEL-6294)
  - Issue deprecation warning for number-less %patch (RHEL-6294)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-37
changelog:
  - Allow parametric macros to opt out of option processing (RHEL-67161)
  - Report unsafe symlinks during installation as a specific case (RHEL-33393)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-38
changelog:
  - Add support for spec local file attributes and generators (RHEL-52772)
  - Store configurable digest(s) on packages in rpmdb (RHEL-35619)
  - Fix a hard link race condition in brp-strip (RHEL-74011)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-40
changelog:
  - Improve error handling on keystore load (RHEL-114837)
  - Sort files before passing to file attr dependency generators (RHEL-95376)


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2025.6-4
changelog:
  - Backport: https://github.com/coreos/rpm-ostree/pull/5322
    Backport: https://github.com/coreos/rpm-ostree/pull/5339
    Resolves: #RHEL-84466


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2026.1-5
changelog:
  - Backport https://github.com/coreos/rpm-ostree/pull/5575
    Backport https://github.com/coreos/rpm-ostree/pull/5576
    Resolves: RHEL-154808


author: Liming Sun <lsun@mellanox.com> - 2.0.2-1
changelog:
  - Remove unnecessary dependency in .spec and use make_build
  - Add package build for debian/ubuntu
  - Fix some format in the man page
  - Add check for syslog headers


author: Liming Sun <lsun@mellanox.com> - 2.0.3-1
changelog:
  - Enable pci device during probing
  - Map the pci resource0 file instead of /dev/mem
  - Add copyright header in bootstrap.sh
  - Add 'Requires' tag check in the rpm .spec for kernel-modules-extra
  - Fix the 'rshim --version' output


author: Liming Sun <lsun@mellanox.com> - 2.0.4-1
changelog:
  - Update .spec file according to review comments
  - Fix the 'KillMode' in rshim.service
  - Support process termination by SIGTERM
  - Fix some compiling warnings and configure issue for FreeBSD
  - Fix a read()/write() issue in rshim_pcie.c caused by optimization


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-1
changelog:
  - Update user-space rshim driver source to version 2.0.5
  - Modify rshim.spec accordingly
  - Switch to %autosetup to handle Patch0 and any future patches
  - Resolves: rhbz#1858577


author: Dean Nelson <dnelson@redhat.com> - 2.0.8-1
changelog:
  - Update user-space rshim driver source to version 2.0.8
  - Modify rshim.spec accordingly
  - Resolves: rhbz#2196626


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-116
changelog:
  - libcapng: do not try to drop capabilities that are not present
  - add global libcapng.default to not abort when libcapng fails
    resolves: rhbz#2216919


author: Attila Lakatos <alakatos@redhat.com> - 8.2310.0-3
changelog:
  - Rebase to 8.2310.0
    Resolves: RHEL-5196
  - Allow setting certificates for separate connections
    Resolves: RHEL-937
  - Capability dropping feature can be turned off
    Resolves: RHEL-943
  - imjournal: new module parameter filecreatemode
    Resolves: RHEL-949


author: Attila Lakatos <alakatos@redhat.com> - 8.2412.0-1
changelog:
  - Rebase to 8.2412.0
    Resolves: RHEL-65177
  - Fix segfault when $ControlCharacterEscapePrefix is set
    Resolves: RHEL-38222
    Resolves: RHEL-70099
  - Fix segfault due to processing malform queue message
    Resolves: RHEL-70100
  - Fix $ActionQueueDiscardMark default value to 80% queue size
    Resolves: RHEL-70109
  - Fix crash on startup when an invalid function is specified
    Resolves: RHEL-70111


author: Attila Lakatos <alakatos@redhat.com> - 8.2506.0-1
changelog:
  - Rebase to 8.2506.0
  - imuxsock: track dropped messages by ratelimiting
    Resolves: RHEL-66274
  - man page version update
    Resolves: RHEL-78220
  - omfwd: do not hang forever in case of broken TLS handshake
    Resolves: RHEL-67639


author: Attila Lakatos <alakatos@redhat.com> - 8.2510.0-2
changelog:
  - Rebase to 8.2510.0
  - gnutls netstream driver: improve doc
    Resolves: RHEL-86031
  - rsyslog.conf: use RainerSscript syntax in actions
    Resolves: RHEL-42508
  - gnutls netstream driver: report missing certificate just once
    Resolves: RHEL-105782


author: Attila Lakatos <alakatos@redhat.com> - 8.2604.0-1
changelog:
  - Rebase to 8.2604.0
    Resolves: RHEL-140914
  - Drop ossl-free-cert.patch (upstream)
  - Drop gtls-unused-certificates.patch (upstream)
  - Add SAN:IP validation support
    Resolves: RHEL-169794
  - Fix omelasticsearch IPv6 handling
    Resolves: RHEL-169492
  - Fix imfile not releasing deleted file FDs in inotify mode
    Resolves: RHEL-171897
  - Move logrotate configuration back to the main package
    Resolves: RHEL-173192


author: Attila Lakatos <alakatos@redhat.com> - 8.2604.0-2
changelog:
  - Backport omelasticsearch PQC TLS parameters (tls.tlsversion, tls.ciphersuites,
    tls.keyexchangegroups) and apply them during startup version detection
    Resolves: RHEL-193506


author: Attila Lakatos <alakatos@redhat.com> - 8.2604.0-3
changelog:
  - Backport: warn when imjournal fails to retrieve MESSAGE field from journal entry
    Resolves: RHEL-194529


author: Jun Aruga <jaruga@redhat.com> - 3.1.2-142
changelog:
  - Bypass git submodule test failure on Git >= 2.38.1.
  - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b.
  - Fix for tzdata-2022g.
  - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS.
    Resolves: RHEL-5590
  - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters
    Related: RHEL-5590
  - Disable fiddle tests that use FFI closures.
    Related: RHEL-5590


author: Jarek Prokop <jprokop@redhat.com> - 3.3.1-2
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-33976
  - Fix buffer overread vulnerability in StringIO.
    (CVE-2024-27280)
    Resolves: RHEL-34130
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    (CVE-2024-27281)
    Resolves: RHEL-34122
  - Fix Arbitrary memory address read vulnerability with Regex search.
    (CVE-2024-27282)
    Resolves: RHEL-33872


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-3
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-55411
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57575
    Resolves: RHEL-57572
    Resolves: RHEL-57068
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-57569
  - Fix incorrect symlink for rubygem-irb's library.
    Resolves: RHEL-42646


author: Jarek Prokop <jprokop@redhat.com> - 3.3.8-4
changelog:
  - Upgrade to Ruby 3.3.8.
    Resolves: RHEL-68631
  - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
    Resolves: RHEL-86109
  - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)


author: Jun Aruga <jaruga@redhat.com> - 3.3.10-5
changelog:
  - Upgrade to Ruby 3.3.10.
    Resolves: RHEL-106821
  - Fix possible denial of service in resolv gem (CVE-2025-24294)
  - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
  - Fix REXML denial of service. (CVE-2025-58767)
    Resolves: RHEL-126728


author: Jarek Prokop <jprokop@redhat.com> - 3.3.10-6
changelog:
  - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
    Resolves: RHEL-171260


author: Tomas Juhasz <tjuhasz@redhat.com> - 4.0.3-32
changelog:
  - Upgrade to Ruby 4.0.3.
    Resolves: RHEL-170932
  - Fix ERB: Arbitrary code execution via deserialization bypass
   (CVE-2026-41316)
    Resolves: RHEL-171261
  - Fix JSON: Denial of Service or Information Disclosure via format string injection
   (CVE-2026-33210)
   Resolves: RHEL-169965


author: Tomas Juhasz <tjuhasz@redhat.com> - 4.0.3-33
changelog:
  - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
    Resolves: RHEL-181683
  - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
    Resolves: RHEL-181776
  - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
    Resolves: RHEL-181807


author: <msekleta@redhat.com> - 0.3.2-5
changelog:
  - Adjust packaging to account for differences between Fedora and CentOS/RHEL rust packaging (#1930369)


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-1
changelog:
  - rebased to 2.29.0 (RHEL-11408)
  - KVM: Support AP Bindings in SE Header (RHEL-10572)
  - KVM: Userspace Tool for IBK Request Generation and Insertion (RHEL-10578)
  - zkey: support for key type PKEY_TYPE_EP11_AES (RHEL-11440)
  - vmur: fix handling of option -t (RHEL-11480)
  - dbginfo.sh: global original Input Field Separator (IFS) (RHEL-16527)
  - enable multi-arch build (RHEL-10567)
  - Resolves: RHEL-11408 RHEL-10572 RHEL-10578 RHEL-11440 RHEL-11480 RHEL-16527 RHEL-10567


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-3
changelog:
  - add s390utils-se-data as a noarch subpackage with Secure Execution data files
  - Resolves: RHEL-10567


author: Dan Horák <dhorak@redhat.com> - 2:2.33.1-1
changelog:
  - rebased to 2.33.1 (RHEL-23704)
  - dbginfo.sh: missing data of new ROCE cards (RHEL-24109)
  - SE-tooling: New IBM host-key subject locality (RHEL-30273)
  - Fix disk type detection when running under QEMU (RHEL-40358)
  - Resolves: RHEL-23704 RHEL-24109 RHEL-30273 RHEL-40358


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-50026)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-50030)
  - Resolves: RHEL-50026 RHEL-50030


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-50026)
  - cpacfinfo: new tool to provide CPACF information (RHEL-50020)
  - chpstat: Additional Channel Measurements (RHEL-50023)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-50024)
  - KVM: Support extended attestation for Secure Execution (RHEL-50009)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-50008)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64705)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70853)
  - KVM: Rewrite genprotimg in Rust (RHEL-72023)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71819)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-50019)
  - zkey key support for dm-crypt with XTS keys (RHEL-50010)
  - Resolves: RHEL-50026 RHEL-50020 RHEL-50023 RHEL-50024 RHEL-50009 RHEL-50008 RHEL-64705 RHEL-70853 RHEL-72023 RHEL-71819 RHEL-50019 RHEL-50010


author: Dan Horák <dhorak@redhat.com> - 2:2.38.0-1
changelog:
  - rebased to 2.38.0 (RHEL-73342)
  - LPAR level power consumption reporting (RHEL-72675)
  - Provide Topology-Map information to userspace (RHEL-72682)
  - Add CCK secret type for updating the Customer Communication Key (RHEL-73021)
  - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85390)
  - Resolves: RHEL-73342 RHEL-72675 RHEL-72682 RHEL-73021 RHEL-85390


author: Dan Horák <dhorak@redhat.com> - 2:2.39.0-1
changelog:
  - rebased to 2.39.0 (RHEL-100439)
  - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126743)
  - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126745)
  - zipl: makedumpfile is required for ngdump support (RHEL-114663)
  - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114885)
  - chpstat: Fix DPU utilization scaling in reports (RHEL-109215)
  - Resolves: RHEL-100439 RHEL-126743 RHEL-126745 RHEL-114663 RHEL-114885 RHEL-109215


author: Dan Horák <dhorak@redhat.com> - 2:2.40.0-1
changelog:
  - rebased to 2.40.0 (RHEL-100439)
  - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent
  - Secure Execution: Add tool to verify host-key documents (RHEL-136796)
  - Resolves: RHEL-100439 RHEL-136796


author: Dan Horák <dhorak@redhat.com> - 2:2.41.0-1
changelog:
  - rebased to 2.41.0 (RHEL-136098)
  - hsci: Automatically set appropriate MTU for HSCI (RHEL-153547)
  - Resolves: RHEL-136098 RHEL-153547


author: Dan Horák <dhorak@redhat.com> - 2:2.42.1-1
changelog:
  - rebased to 2.42.1 (RHEL-174896)
  - hyptop: Backward compatibility options causes other issues (RHEL-166158)
  - zipl/boot: Fix stage3 secure boot trailer placement (RHEL-169659)
  - SEL-EBC: instrumentation of an SEL initramfs to support early boot customization (RHEL-136434)
  - SEL-EBC: tool to build basic SEL-qcow2 image supporting early boot customization (RHEL-136437)
  - KVM: Enhance pvimg info command to display additional SE image information (RHEL-73137)
  - Cannot configure "portno" of the network interface (RHEL-76751)
  - Resolves: RHEL-174896 RHEL-166158 RHEL-169659 RHEL-136434 RHEL-136437 RHEL-73137 RHEL-76751


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-1
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114548 - Update to version 4.23.4
  - resolves: RHEL-132995 - Fix Time Machine backup
  - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-1
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-143401 - Fix winbind group resolution
  - resolves: RHEL-141027 - Fix winbind crash


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.24.3-1
changelog:
  - Update to version 4.24.3
  - resolves: RHEL-156320 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
    various flaws
  - resolves: RHEL-161658 - CVE-2026-4480 Samba: Remote Code Execution in
    printing
  - resolves: RHEL-170594 - CVE-2026-40170 samba: ngtcp2
  - resolves: RHEL-177925 - CVE-2026-4408 samba: Remote Code Execution in
    SAMR
  - resolves: RHEL-166869 - build hardening with FORTIFY_SOURCE


author: Michal Fabik <mfabik@redhat.com> 0.35-1
changelog:
  - New upstream version
   - Fix leaks in koops stacktrace- and report-handling code
   - Replace utility code with GLib functions
   - Fix unit test portability issue
   - Add build dependency on make


author: Michal Fabik <mfabik@redhat.com> 0.38-1
changelog:
  - New upstream version
   - lib: Use GLib for computing SHA-1 digests
   - sr_distances_cluster_objects: Check arg safety


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.0-2
changelog:
  - properly conflict with pacemaker not providing sync-default we need
    Resolves: rhbz#1979961
    Resolves: rhbz#1979573


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.1-2
changelog:
  - obviously autoconf is defining runstatedir - but with a
    wrong default - directly hand it over to configure
    and skip --with-runstatedir implemented in configure.ac
    for older versions of autoconf

    Resolves: rhbz#2011707


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management

    Resolves: rhbz#2168579


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-14
changelog:
  - Fix getting of InstallDate property, improve it to work on non en_US locales
    and update support for recent Fedora distributions


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-26
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-118293
  - Eliminate use of obsolete %patchN syntax
    Related: RHEL-91101
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    and drop attempt to delete group
    Related: RHEL-91101
  - Add support for Image Mode
    Resolves: RHEL-91101


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.3-16
changelog:
  - Fix exit status (i. e. apply https://sourceforge.net/p/sblim/bugs/2761/)
  - Fix issues found by static analysis


author: Jan Černý <jcerny@redhat.com> - 1.2.1-5
changelog:
  - Remove qt5-devel from "Requires" section
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/WO625MVYEAAJNHNRLEEJDVZTIWMQOBRR/
  - Update for new CMake out of source builds
    https://fedoraproject.org/wiki/Changes/CMake_to_do_out-of-source_builds
  - Fix Qt5 deprecated symbols
  - Fix FTBS in Rawhide/F33 (RHBZ#1865462)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.16.1-1
changelog:
  - New version
    Resolves: rhbz#1853885
  - Dropped smtp-session-reuse-fix, openssl-1.1.0-fix, openssl-1.1.0-ecdhe-fix,
    gethostbyname2, fix-covscan-issues, gcc-10-fix patches (not needed)
  - Dropped format-security patch (upstreamed)
  - Updated patches


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.27-1
changelog:
  - sedispatch: check read_size
  - SafeConfigParser is deprecated and will be dropped
  - Fix typos in --help, man pages and developer's guide
  - Improve Python 3.10 compatibility
    https://pagure.io/setroubleshoot/issue/58
  - Update translations


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.28-1
changelog:
  - Look for modules in /usr/share/selinux/packages
  - Always use rpm source package for reporting
  - Improve after_first email filter behavior


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.30-1
changelog:
  - Miscellaneous python and build system changes
   - Fix couple of typos
   - Drop Python2 support
   - Use inspect.signature() instead of instead.getargspec()
   - Update translations


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.31-1
changelog:
  - Add a screen reader label to the icon
  - seapplet: avoid ValueError when parsing sealert.conf
  - doc: Document performance related changes
  - Decrease setroubleshootd priority and limit RAM utilization to 1GB
  - Use setup from setuptools
  - Use `pip install` instead of `setup.py install`


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.32-1
changelog:
  - Always reset pending alarms when alarm(0) (rhbz#2112573)
  - 'imp' module is deprecated in favor of 'importlib' (rhbz#2224393)
  - Fix build with pip 23.1.2+
  - Remove dbus-glib-devel BR as it's only needed when compiled with seappletlegacy
  - Rename session bus name to org.fedoraproject.sealert
  - seapplet: wrap SEApplet() to try except
  - util.py: Add doctext test for build_module_type_cache()
  - Update translations


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-1
changelog:
  - Update tmpfiles.d config (bz#2346971)
  - Do not hardcode /var/lib/selinux as store_root
  - data: update app icon
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations
  - Ship with contemporary app icon
  - Check that SELinux is enabled before running (rhbz#2178950)


author: Jindrich Novy <jnovy@redhat.com> - 2:1.18.1-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18
    (https://github.com/containers/skopeo/commit/bfd0850)
  - fixes "CVE-2025-27144 skopeo: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-9.7]"
  - Resolves: RHEL-80616


author: Jindrich Novy <jnovy@redhat.com> - 2:1.22.2-2
changelog:
  - update to https://github.com/containers/skopeo/releases/tag/v1.22.2
  - re-add test file installation to fix tier0 tests
  - Resolves: RHEL-170602


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-1
changelog:
  - New upstream release
  - Resolves: rhbz#1751295: (2) When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming
  - Resolves: rhbz#1768156: ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.7-2
changelog:
  - Resolves: rhbz#1979619
    IPA: High CPU utilization (over 1000% plus) by ns-slapd process
  - Resolves: rhbz#1979623
    With base object scope, ldapsearch against compat tree does not return any data on Rhel8 IPA servers.


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-1
changelog:
  - upstream release 0.60.0
  - Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
  - Fix ID views integration
  - Fix base scope lookups
  - Bump NIS max dgram size to 8KB by default instead of 1KB
  - Resolves: rhbz#2117299
    Allow to rebuild the compat tree


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-5
changelog:
  - Ignore updates from non-tracked subtrees during modify/modrdn/update
    to avoid deadlocks with retro changelog
  - Resolves: RHEL-11983


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 1.2.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.2
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.2.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.3
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.3.0-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1.3.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1.3.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1.3.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.3
  - Resolves: RHEL-94765


author: Jindrich Novy <jnovy@redhat.com> - 1.3.4-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.4
  - Resolves: RHEL-212436


author: Čestmír Kalina <ckalina@redhat.com> - 1.8.3-1
changelog:
  - Resolves: RHEL-11416 Upgrade smc-tools to latest version
  - smc_stats: Fix man page name
  - Bump version.


author: Lukáš Tyrychtr <lukastyrychtr@gmail.com> 2.5-9
changelog:
  - Add an obsoletes directive for the old speech-tools-libs as they're
    no longer part of the Festival package.


author: Tomas Korbar <tkorbar@redhat.com> - 1.2.0-11
changelog:
  - CVE-2020-23903 speex: divide by zero in read_samples() via crafted WAV file
  - Resolves: CVE-2020-23903


author: Benjamin Berg <bberg@redhat.com> - 0.19.0-3
changelog:
  - Add patch to lookup graphical session
    https://gitlab.freedesktop.org/spice/linux/vd_agent/merge_requests/2
  - Resolves: #1750120


author: Uri Lublin <uril@redhat.com> - 0.21.0-2
changelog:
  - Build without pciaccess
    Resolves: rhbz#1964922
  - Fix g_memdup deprecation warning with glib >= 2.68


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-12
changelog:
  - Resolves: RHEL-28530 - squid: Denial of Service in HTTP Chunked
    Decoding (CVE-2024-25111)
  - Resolves: RHEL-26092 - squid: denial of service in HTTP header
    parser (CVE-2024-25617)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-13
changelog:
  - Resolves: RHEL-30352 - squid v5 crashes with SIGABRT when ipv6 is disabled
    at kernel level but it is asked to connect to an ipv6 address by a client


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-14
changelog:
  - Resolves: RHEL-45057 - squid: Out-of-bounds write error may lead to Denial of 
    Service (CVE-2024-37894)
  - Resolves: RHEL-22594 - squid: vulnerable to a Denial of Service attack against
    Cache Manager error responses (CVE-2024-23638)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-15
changelog:
  - Resolves: RHEL-62324 - (Regression) Transfer-encoding:chunked data is not sent
    to the client in its complementary


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-17
changelog:
  - Disable ESI support
  - Resolves: RHEL-65080 - CVE-2024-45802 squid: Denial of Service processing
    ESI response content


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-20
changelog:
  - Resolves: RHEL-77282 - ”TCP connection to XX.XX.XX.XX/XXXX failed” message is
    output frequently on RHEL9


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-23
changelog:
  - Resolves: RHEL-122493 - squid: Squid vulnerable to information disclosure via
    authentication credential leakage in error handling (CVE-2025-62168)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-24
changelog:
  - Resolves: RHEL-119047 - "ICAP_ERR_OTHER/408" occurs in icap.log when
    downloading a file on RHEL9


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-26
changelog:
  - Resolves: RHEL-160697 - squid: Squid: Denial of Service via heap
    Use-After-Free vulnerability in ICP handling (CVE-2026-33526)
  - Resolves: RHEL-160696 - squid: Squid: Denial of Service via crafted
    ICP traffic (CVE-2026-32748)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-1
changelog:
  - Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
  - Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
  - Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
  - Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
  - Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-3
changelog:
  - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  - Resolves: RHEL-103434 - cache_credentials = true not working


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-4
changelog:
  - Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Tomas Halman <thalman@redhat.com> - 2.9.8-1
changelog:
  - Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
  - Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
  - Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
  - Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
  - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache


author: Iker Pedrosa <ipedrosa@redhat.com> - 2.9.9-1
changelog:
  - Resolves: RHEL-173741 - SSSD Rebase for RHEL 9.9
  - Resolves: RHEL-173740 - CVE-2026-6245 sssd: out-of-bounds read in the sssd
  - Resolves: RHEL-150439 - Poor performance of `BE_REQ_INITGROUPS` handling by 'sssd_be' (LDAP RFC2307, no nested groups)
  - Resolves: RHEL-143416 - Performance impact with enumerate in SSSD > 2.7.3
  - Resolves: RHEL-152067 - [RFE] SSSD PAM: Support Microsoft AD PKINIT authentication indicator (ms-pkca) for pam_gssapi_indicators_map
  - Resolves: RHEL-173742 - Man page update: man sssd_krb5_localauth_plugin – Missing disable = an2ln
  - Resolves: RHEL-173743 - Concurrent child processes trigger unnecessarily backtrace
  - Resolves: RHEL-173744 - Detect foreign security principals in AD group members and silently ignore them
  - Resolves: RHEL-156519 - GDM Support for IdM IdP feature and MFA [SSSD]


author: Justin Stephenson <jstephen@redhat.com> - 2.9.9-3
changelog:
  - Resolves: RHEL-192062 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
  - Resolves: RHEL-192072 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root


author: Chris White <chwhite@redhat.com> - 1.19.5-1
changelog:
  - Updated compile options for annocheck hardening
  - Ensure we resolve library symbols at load time (-z now) and are a Position Independent Executable (-pie). Refactored compile options to better deal with arch differences.
  - Added an 'annocheck' makefile target for local checking.
  - Makefile: change build to use FORTIFY_SOURCE=3
  - src/utils.c: fix off-by-one error in buffer allocation
  Resolves: RHEL-33662


author: Chris White <chwhite@redhat.com> - 1.19.6-1
changelog:
  - Makefile: add uninstall target
  - systemd: add BE environment variable to select backend
  Resolves: RHEL-33662


author: Wander Lairson Costa <wander@redhat.com> - 1.20.3-1
changelog:
  - Rebase to stalld-1.20.3
  - Make systemd start stalld with the SCHED_FIFO:10 priority
  Resolves: RHEL-109088


author: Wander Lairson Costa <wander@redhat.com> - 1.20.4-1
changelog:
  - Rebase to stalld-1.20.4
  - Remove duplicated ExecStart entry from the stalld.service file
  Resolves: RHEL-108827


author: Wander Lairson Costa <wander@redhat.com> - 1.26.3-1
changelog:
  - Rebase to stalld-1.26.3
  - Build System Improvements and added riscv64 arch
  - Remove LTO build flags
  - Make queue_track the default backend
  - Remove the -m64 build option
  Resolves: RHEL-111528 RHEL-111526 RHEL-96207 RHEL-96205 RHEL-111803


author: Bryan Gurney <bgurney@redhat.com> - 3.4.0-1
changelog:
  - Update to version 3.4.0
  - Resolves: rhbz#2124976
  - Allow a pool to make use of added capacity of a block device
  - Resolves: rhbz#2039955
  - Enforce per-pool consistency of block device sector sizes
  - Resolves: rhbz#2039957
  - Do not read data from device specified in udev remove event
  - Resolves: rhbz#2124681
  - Specify pool to start by its name
  - Resolves: rhbz#2125012


author: Bryan Gurney <bgurney@redhat.com> - 3.5.5-1
changelog:
  - Update to version 3.5.5
  - Resolves: rhbz#2167463
  - Take into account the sector size of crypt devices
  - Resolves: rhbz#2170318
  - Add stratisd-tools package with stratis-dumpmetadata program
  - Resolves: rhbz#2173726
  - Support key description key in kernel keyring
  - Resolves: rhbz#2038492


author: Bryan Gurney <bgurney@redhat.com> - 3.6.1-1
changelog:
  - Update to version 3.6.1
  - Resolves: RHEL-2278
  - Add filesystem growth limits
  - Resolves: RHEL-12898


author: John Kacur <jkacur@redhat.com> - 0.15.00-1
changelog:
  - Rebase to upstream V0.15.00
  - Add the following upstream patches
  - stress-shm: move /dev/shm check to earlier in the setup phase
  - stress-shm: skip stressor if /dev/shm is not mounted with tmpfs on linux
  - stress-sysfs: check for zero sysfs entries after pruning the directory
  Resolves: rhbz#2144070


author: John Kacur <jkacur@redhat.com> - 0.17.08-1
changelog:
  - Rebase to upstream V0.17.08
  - ARM: Don't declare inlined yield helper if yield is not available
  Resolves: RHEL-33304


author: John Kacur <jkacur@redhat.com> - 0.18.06-1
changelog:
  - Update the stress-ng-0.18.06 upstream
  - Include some upstream patches after 0.18.06
  Resolves: RHEL-65474


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-10
changelog:
  RHEL 9.3.0.Z ERRATUM
  - CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output
  Resolves: RHEL-21834
  - CVE-2023-28486 sudo: Sudo does not escape control characters in log messages
  Resolves: RHEL-21828
  - CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables
  Resolves: RHEL-21821


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-13
changelog:
  RHEL: 9.7.0 ERRATUM
  - sudo missing spacing and separator in log when using "--preserve-env=list"
  Resolves: RHEL-71916
  - CVE-2025-32462 sudo: LPE via host option
  Resolves: RHEL-100020


author: Alejandro López <allopez@redhat.com> - 1.9.17p2-2
changelog:
  - Request to backport support for regex in sudo [rhel-9]
  Resolves: RHEL-1376
  - Rebase of sudo to 1.9.17p2 [rhel-9]
  Resolves: RHEL-128623
  - sudo passes SHELL environment variable twice to the shell being executed [rhel-9]
  Resolves: RHEL-127359


author: Alejandro López <allopez@redhat.com> - 1.9.17p2-4
changelog:
  - CVE-2026-35535 sudo: Privilege escalation due to failure in privilege drop calls
  Resolves: RHEL-166066


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-8
changelog:
  RHEL 9.2.0 ERRATUM
  - sudo digest check fails incorrectly for certain file sizes (SHA512/SHA384)
  Resolves: rhbz#2115789


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-9
changelog:
  RHEL 9.2.0 ERRATUM
  - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user
  Resolves: rhbz#2161225


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-12
changelog:
  RHEL: 9.7.0 ERRATUM
  - sudo missing spacing and separator in log when using "--preserve-env=list"
  Resolves: RHEL-71916


author: Orion Poplawski <orion@nwra.com> - 5.4.0-1
changelog:
  - Update to 5.4.0
  - Use upstream shared library builds
  - Build with metis
  - Explicitly list libraries and soname versions


author: Kalev Lember <klember@redhat.com> - 3.39.92-2
changelog:
  - Split sysprof-capture library and header files out to sysprof-capture-devel
  - Update minimum required glib2 version


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.5.4-8
changelog:
  - fix allocation errors with malformed sa files (RHEL-35684)
  - reorder patches to prevent errors during their application


author: Michal Sekletar <msekleta@redhat.com> 12.5.4-3
changelog:
  - sysstat's buildsystem doesn't really use LDFLAGS, we have to merge CFLAGS and LDFLAGS to get binaries with full RELRO (#2044893)


author: Pavel Šimovec <psimovec@redhat.com> - 12.5.4-6
changelog:
  - fix the arithmetic overflow in allocate_structures() that is still possible on some 32 bit systems (CVE-2023-33204)


author: systemd maintenance team <systemd-maint@redhat.com> - 249-9
changelog:
  - test: don't install test-network-generator-conversion.sh w/o networkd (#2017035)
  - meson.build: change operator combining bools from + to and (#2017035)
  - openssl-util: use EVP API to get RSA bits (#2016042)
  - procfs-util: fix confusion wrt. quantity limit and maximum value (#2017035)
  - test-process-util: also add EROFS to the list of "good" errors (#2017035)
  - ci: use C9S chroots in Packit (#2017035)
  - test-mountpointutil-util: do not assert in test_mnt_id() (#2017035)
  - core/mount: add implicit unit dependencies even if when mount unit is generated from /proc/self/mountinfo (#2019468)
  - Drop Patch9001 - https://github.com/systemd/systemd/pull/17050 - Replaced by Patch0046


author: systemd maintenance team <systemd-maint@redhat.com> - 250-3
changelog:
  - Treat EPERM as "not available" too (#2017035)
  - test: copy portable profiles into the image if they don't exist there (#2017035)
  - test: introduce `get_cgroup_hierarchy() helper (#2047768)
  - test: require unified cgroup hierarchy for TEST-56 (#2047768)
  - tests: rework test macros to not take code as parameters (#2017035)
  - test: allow to set NULL to intro or outro (#2017035)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-4
changelog:
  - udev/net-setup-link: change the default MACAddressPolicy to "none" (#2009237)
  - man: mention System Administrator's Guide in systemctl manpage (#1982596)
  - Net naming scheme for RHEL-9.0 (#2052106)
  - core: decrease log level of messages about use of KillMode=none (#2013213)
  - ci: replace apt-key with signed-by (#2013213)
  - ci: fix clang-13 installation (#2013213)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-7
changelog:
  - test: check systemd RPM macros (#2017035)
  - test: do not assume x86-64 arch in TEST-58-REPART (#2017035)
  - tests: add repart tests for block devices with 1024, 2048, 4096 byte sector sizes (#2017035)
  - test: accept both unpadded and padded partition sizes (#2017035)
  - test: lvm 2.03.15 dropped the static autoactivation (#2017035)
  - test: accept GC'ed units in newer LVM (#2017035)
  - shared: Add more dlopen() tests (#2017035)
  - systemctl: Show how long a service ran for after it exited in status output (#2017035)
  - time-util: introduce TIMESTAMP_UNIX (#2017035)
  - systemctl,man: update docs for `--timestamp=` (#2017035)
  - systemctl: make `--timestamp=` affect the `show` verb as well (#2017035)
  - tests: allow running all the services with SYSTEMD_LOG_LEVEL (#2017035)
  - coredump: raise the coredump save size on 64bit systems to 32G (and lower it to 1G on 32bit systems) (#2017035)
  - repart: fix sector size handling (#2017035)
  - mkdir: allow to create directory whose path contains symlink (#2017035)
  - mkdir: CHASE_NONEXISTENT cannot used in chase_symlinks_and_stat() (#2017035)
  - meson: move efi file lists closer to where they are used (#2017035)
  - meson: move efi summary() section to src/boot/efi (#2017035)
  - meson: report SBAT settings (#2017035)
  - boot: Build BCD parser only on arches supported by Windows (#2017035)
  - meson: Remove efi-cc option (#2017035)
  - meson: Get objcopy location from compiler (#2017035)
  - meson: Use files() for source lists for boot and fundamental (#2017035)
  - meson: Use files() for tests (#2017035)
  - tests: add fuzz-bcd (#2017035)
  - meson: Use files() for fuzzers (#2017035)
  - meson: Add check argument to remaining run_command() calls (#2017035)
  - meson: Use echo to list files (#2017035)
  - test: add a test for mkdir_p() (#2017035)
  - util: another set of CVE-2021-4034 assert()s (#2017035)
  - basic: update CIFS magic (#2017035)
  - shared: be extra paranoid and check if argc > 0 (#2017035)
  - core: check if argc > 0 and argv[0] is set (#2017035)
  - core: check argc/argv uncoditionally (#2017035)
  - test: temporary workaround for #21819 (#2017035)
  - test: don't leak local variable to outer scopes (#2017035)
  - tree-wide: don't use strjoina() on getenv() values (#2017035)
  - man: clarify Environmentfile format (#2017035)
  - test-load-fragment: add a basic test for config_parse_unit_env_file() (#2017035)
  - core/execute: use _cleanup_ in exec_context_load_environment() (#2017035)
  - test-env-file: add tests for quoting in env files (#2017035)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-8
changelog:
  - core: shorten long unit names that are based on paths and append path hash at the end (#2083493)
  - tests: add test case for long unit names (#2083493)
  - tests: reflect that we can now handle devices with very long sysfs paths (#2083493)
  - test: extend the "hashed" unit names coverage a bit (#2083493)
  - Revert "kernel-install: also remove modules.builtin.alias.bin" (#2065061)
  - Revert "kernel-install: prefer /boot over /boot/efi for $BOOT_ROOT" (#2065061)
  - kernel-install: 50-depmod: port to /bin/sh (#2065061)
  - kernel-install: 90-loaderentry: port to /bin/sh (#2065061)
  - kernel-install: fix shellcheck (#2065061)
  - kernel-install: port to /bin/sh (#2065061)
  - kernel-install: 90-loaderentry: error out on nonexistent initrds instead of swallowing them quietly (#2065061)
  - kernel-install: don't pull out KERNEL_IMAGE (#2065061)
  - kernel-install: prefer /boot over /boot/efi for $BOOT_ROOT (#2065061)
  - kernel-install: also remove modules.builtin.alias.bin (#2065061)
  - kernel-install: add new variable $KERNEL_INSTALL_INITRD_GENERATOR (#2065061)
  - kernel-install: k-i already creates $ENTRY_DIR_ABS, no need to do it again (#2065061)
  - kernel-install: prefix errors with "Error:", exit immediately (#2065061)
  - kernel-install: add "$KERNEL_INSTALL_STAGING_AREA" directory (#2065061)
  - kernel-install: add missing log line (#2065061)
  - kernel-install: don't try to persist used machine ID locally (#2065061)
  - kernel-install: add a new $ENTRY_TOKEN variable for naming boot entries (#2065061)
  - kernel-install: only generate systemd.boot_id= in kernel command line if used for naming the boot loader spec files/dirs (#2065061)
  - kernel-install: search harder for kernel image/initrd drop-in dir (#2065061)
  - kernel-install: add new "inspect" verb, showing paths and parameters we discovered (#2065061)
  - ci(Mergify): configuration update (#2087652)
  - ci(Mergify): fix copy&paste bug (#2087652)
  - shared: Fix memory leak in bus_append_execute_property() (#2087652)
  - fuzz: no longer skip empty files (#2087652)
  - networkctl: open the bus just once (#2087652)
  - json: align table (#2087652)
  - fuzz-json: optionally allow logging and output (#2087652)
  - shared/json: reduce scope of variables (#2087652)
  - fuzz-json: also do sorting and normalizing and other easy calls (#2087652)
  - shared/json: wrap long comments (#2087652)
  - shared/json: fix memory leak on failed normalization (#2087652)
  - shared/json: add helper to ref first, unref second (#2087652)
  - basic/alloc-util: remove unnecessary parens (#2087652)
  - fuzz-json: also try self-merge operations (#2087652)
  - shared/json: fix another memleak in normalization (#2087652)
  - shared/json: fix memleak in sort (#2087652)
  - execute: fix resource leak (#2087652)
  - tests: ignore dbus-broker-launcher (#2087652)
  - core/timer: fix memleak (#2087652)
  - timedatectl: fix a memory leak (#2087652)
  - test: fix file descriptor leak in test-psi-util (#2087652)
  - test: fix file descriptor leak in test-tmpfiles.c (#2087652)
  - test: fix file descriptor leak in test-fs-util (#2087652)
  - test: fix file descriptor leak in test-oomd-util (#2087652)
  - test: fix file descriptor leak in test-catalog (#2087652)
  - test: make masking of supplementary services configurable (#2087652)
  - test: fuzz our dbus interfaces with dfuzzer (#2087652)
  - test: skip TEST-21-DFUZZER without ASan (#2087652)
  - core: annotate Reexecute() as NoReply (#2087652)
  - test: always force a new image for dfuzzer (#2087652)
  - test: make dfuzzer less verbose (#2087652)
  - test: drop the at_exit() coredump check (#2087652)
  - test: make the shutdown routine a bit more "robust" (#2087652)
  - tree-wide: drop manually-crafted message for missing variables (#2087652)
  - test: allow overriding $QEMU_MEM when running w/ ASan (#2087652)
  - test: don't test buses we don't ship (#2087652)
  - shutdown: get only active md arrays. (#2047682)
  - bus: Use OrderedSet for introspection (#2068131)
  - logind-session-dbus: allow to set display name via dbus (#2100340)
  - ci: limit which env variables we pass through `sudo` (#2087652)
  - ci(Mergify): Add `ci-waived` logic (#2087652)
  - json: use unsigned for refernce counter (#2087652)
  - macro: check over flow in reference counter (#2087652)
  - sd-bus: fix reference counter to be incremented (#2087652)
  - sd-bus: introduce ref/unref function for track_item (#2087652)
  - sd-bus: do not read unused value (#2087652)
  - sd-bus: do not return negative errno when unknown name is specified (#2087652)
  - sd-bus: use hashmap_contains() and drop unnecessary cast (#2087652)
  - test: shorten code a bit (#2087652)
  - test: add several tests for track item (#2087652)
  - core/slice: make slice_freezer_action() return 0 if freezing state is unchanged (#2087652)
  - core/unit: fix use-after-free (#2087652)
  - core/timer: fix potential use-after-free (#2087652)
  - core: command argument can be longer than PATH_MAX (#2073994)
  - shared/install: consistently use 'lp' as the name for the LookupPaths instance (#2082131)
  - shared/specifier: treat NULL the same as "" (#2082131)
  - shared/install: do not print aliases longer than UNIT_NAME_MAX (#2082131)
  - shared/install-printf: drop now-unused install_path_printf() (#2082131)
  - strv: declare iterator of FOREACH_STRING() in the loop (#2082131)
  - basic/unit-file: split out the subroutine for symlink verification (#2082131)
  - basic/stat-util: add null_or_empty_path_with_root() (#2082131)
  - shared/install: reuse the standard symlink verification subroutine (#2082131)
  - shared/install: add a bit more quoting (#2082131)
  - test: add test for systemctl link & enable (#2082131)
  - tests: add helper for creating tempfiles with content (#2082131)
  - man: clarify the descriptions of aliases and linked unit files (#2082131)
  - basic: add new variable $SYSTEMD_OS_RELEASE to override location of os-release (#2082131)
  - test-os-util: add basic tests for os-release parsing (#2082131)
  - basic/env-file: make load-env-file deduplicate entries with the same key (#2082131)
  - man/os-release: add a note about repeating entries (#2082131)
  - shared/specifier: clarify and add test for missing data (#2082131)
  - shared/specifier: provide proper error messages when specifiers fail to read files (#2082131)
  - shared/install: provide proper error messages when invalid specifiers are used (#2082131)
  - shared/install: move scope into InstallContext (#2082131)
  - shared/specifier: fix %u/%U/%g/%G when called as unprivileged user (#2082131)
  - shared/install: simplify unit_file_dump_changes() (#2082131)
  - shared/install: propagate errors about invalid aliases and such too (#2082131)
  - shared/install: return failure when enablement fails, but process as much as possible (#2082131)
  - systemctl: fix silent failure when --root is not found (#2082131)
  - shared/install: also check for self-aliases during installation and ignore them (#2082131)
  - docs: Correct WantedBy= regarding template units (#2082131)
  - man: fix invalid description of template handling in WantedBy= (#2082131)
  - shared/install: drop unnecessary casts (#2082131)
  - strv: make iterator in STRV_FOREACH() declaread in the loop (#2082131)
  - core: ExecContext::restrict_filesystems is set of string (#2082131)
  - install: when linking a file, create the link first or abort (#2082131)
  - shared/install: split unit_file_{disable,enable}() so _reenable doesn't do setup twice (#2082131)
  - shared/install: fix reenable on linked unit files (#2082131)
  - test-systemctl-enable: extend the test for repeated WantedBy/RequiredBy (#2082131)
  - shared/install: when we fail to chase a symlink, show some logs (#2082131)
  - shared/install: do not try to resolve symlinks outside of root directory (#2082131)
  - test-systemctl-enable: enhance the test for unit file linking (#2082131)
  - shared/install: skip unnecessary chasing of symlinks in disable (#2082131)
  - shared/install: also remove symlinks like .wants/foo@one.service → ../foo@one.service (#2082131)
  - shared/install: create relative symlinks for enablement and aliasing (#2082131)
  - shared/install: when looking for symlinks in .wants/.requires, ignore symlink target (#2082131)
  - shared/install: stop passing duplicate root argument to install_name_printf() (#2082131)
  - basic/unit-file: reverse negative conditional (#2082131)
  - shared/install: split UNIT_FILE_SYMLINK into two states (#2082131)
  - shared/install: fix handling of a linked unit file (#2082131)
  - test-systemctl-enable: make shellcheck happy (#2082131)
  - shared/install: when creating symlinks, accept different but equivalent symlinks (#2082131)
  - test-systemctl-enable: use magic syntax to allow inverted tests (#2082131)
  - test-systemctl-enable: also use freshly-built systemd-id128 (#2082131)
  - test-systemctl-enable: disable the test for %a for now (#2082131)
  - Rename UnitFileScope to LookupScope (#2082131)
  - core: handle lookup paths being symlinks (#2082131)
  - shared/install: use correct cleanup function (#2082131)
  - udev/net_id: avoid slot based names only for single function devices (#2073003)
  - test: import logind test from debian/ubuntu test suite (#2087652)
  - test: drop redundant IMAGE_NAME= (#2087652)
  - test: import timedated test from debian/ubuntu test suite (#2087652)
  - test: introduce assert_not_in() helper function (#2087652)
  - test: drop unnecessary --no-pager option (#2087652)
  - test: support debian/ubuntu specific timezone config file (#2087652)
  - test: import hostnamed tests from debian/ubuntu test suite (#2087652)
  - locale-util: fix memleak on failure (#2087652)
  - locale-util: check if enumerated locales are valid (#2087652)
  - locale-util: align locale entries (#2087652)
  - core: inline an iterator variable (#2087652)
  - locale-setup: merge locale handling in PID1 and localed (#2087652)
  - locale: rename keymap-util.[ch] -> localed-util.[ch] (#2087652)
  - test: add one more path to search keymaps (#2087652)
  - test: introduce inst_recursive() helper function (#2087652)
  - hmac/sha256: move size define to sha256.h (#2087652)
  - tpm2: support policies with PIN (#2087652)
  - cryptenroll: add support for TPM2 pin (#2087652)
  - cryptsetup: add support for TPM2 pin (#2087652)
  - cryptsetup: add libcryptsetup TPM2 PIN support (#2087652)
  - cryptenroll: add TPM2 PIN documentation (#2087652)
  - cryptsetup: add manual TPM2 PIN configuration (#2087652)
  - cryptenroll: add tests for TPM2 unlocking (#2087652)
  - env-util: replace unsetenv_erase() by new getenv_steal_erase() helper (#2087652)
  - test: install libxkbcommon and x11 keymaps (#2087652)
  - test: install C.UTF-8 and English locales (#2087652)
  - test: import localed tests from debian/ubuntu test suite (#2087652)
  - unit: check for mount rate limiting before checking active state (#2087652)
  - tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2087652)
  - test: insert space in for loop (#2087652)
  - test: move "do" at the end of line (#2087652)
  - test: use trap RETURN (#2087652)
  - test: ignore the error about our own libraries missing during image creation (#2087652)
  - test: wrap binaries using systemd DSOs when running w/ ASan (#2087652)
  - test: set $ASAN_RT_PATH along with $LD_PRELOAD to the ASan runtime DSO (#2087652)
  - test: drop all LD_PRELOAD-related ASan workarounds (#2087652)
  - test: don't wrap binaries built with ASan (#2087652)
  - test: send stdout/stderr of testsuite units to journal & console (#2087652)
  - test: make the busy loop in TEST-02 less verbose (#2087652)
  - test: always wrap useradd/userdel when running w/ ASan (#2087652)
  - test: don't flush debug logs to the console (#2087652)
  - test: fix a couple of issues found by shellcheck (#2087652)
  - test: pass the initdir to check_result_{qemu,nspawn} hooks (#2087652)
  - test: run the custom check hooks before common checks (#2087652)
  - test: check journal directly instead of capturing console output (#2087652)
  - test: use saved process PID instead of % (#2087652)
  - test: account for ADDR_NO_RANDOMIZE if it's set (#2087652)
  - fuzz-bcd: silence warning about always-true comparison (#2087652)
  - test: disable test_ntp on RHEL (#2087652)
  - core: do not filter out systemd.unit= and run-level specifier from kernel command line (#2087652)
  - test: add a simple test for daemon-reexec (#2087652)
  - test: install /usr/libexec/vi as well (#2087652)
  - test: resize the terminal automagically with INTERACTIVE_DEBUG=yes (#2087652)
  - test: create an ASan wrapper for `getent` and `su` (#2087652)
  - test: mark partition bootable (#2087652)
  - test: bump the data partition size if we don't strip binaries (#2087652)
  - test: use PBKDF2 with capped iterations instead of Argon2 (#2087652)
  - locale: drop unnecessary allocation (#2087652)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-9
changelog:
  - Revert "shared/install: create relative symlinks for enablement and aliasing" (#2118668)
  - glyph-util: add new glyphs for up/down arrows (#2118297)
  - tree-wide: allow ASCII fallback for → in logs (#2118297)
  - tree-wide: allow ASCII fallback for … in logs (#2118297)
  - core: allow to set default timeout for devices (#2116681)
  - man: document DefaultDeviceTimeoutSec= (#2116681)
  - man: update dbus docs (#2116681)
  - hwdb: 60-keyboard: Fix volume-button mapping on Asus TF103C (#2087778)
  - hwdb: CH Pro Pedals not classified correctly due to no buttons (#2087778)
  - hwdb: Add accel orientation quirk for the GPD Pocket 3 (#2087778)
  - hostname: Allow overriding the chassis type from hwdb (#2087778)
  - hwdb: Add Microsoft Surface Pro 1 chassis quirk (#2087778)
  - hwdb: treat logitech craft keyboard as a keyboard (#2087778)
  - test: frequency in mouse DPI is optional (#2087778)
  - hwdb: add two Elecom trackballs (#2087778)
  - hwdb: add new database file for PDA devices (#2087778)
  - hwdb: add support for Surface Laptop 2 & 3 (#22303) (#2087778)
  - hwdb: add HP calculators (#2087778)
  - hwbd: 60-sensor.hwdb: Add Pipo W2Pro (#2087778)
  - hwdb: 60-keyboard: Support the buttons on CZC P10T tablet (#2087778)
  - hwdb: add CST Laser Trackball (#22583) (#2087778)
  - hwdb: Force release calculator key on all HP OMEN laptops (#2087778)
  - Add support for NEC VersaPro VG-S (#2087778)
  - Fix mic mute on Acer TravelMate B311-31 (#22677) (#2087778)
  - Add AV production controllers to hwdb and add uaccess (#2087778)
  - hwdb: Add AV production access to Elgado Stream Deck devices (#2087778)
  - Add HP Elitebook 2760p support (#22766) (#2087778)
  - hwdb: Add mic mute key mapping for HP Elite x360 (#2087778)
  - hwdb: fix parser to work with newer pyparsing (#2087778)
  - hwdb: update for v251 (#2087778)
  - hwdb: update autosuspend entries (#2087778)
  - hwdb: drop boilerplate about match patterns being unstable (#2087778)
  - hwdb: Update 60-keyboard.hwdb (#23074) (#2087778)
  - hwdb: 60-keyboard: Add Acer Aspire One AO532h keymappings (#2087778)
  - hwdb 60-keyboard Add HP/Compaq KBR0133 (#2087778)
  - hwdb: add resolutions for the Vaio FE14 touchpad (#23136) (#2087778)
  - hwdb: Remap micmute to f20 for ASUS WMI hotkeys (#2087778)
  - hwdb: Fix rotation for HP Pro Tablet 408 G1 (#2087778)
  - hwdb: add keyboard mapping for HP ProBook 11G2 (#2087778)
  - hwdb: make sure "ninja update-hwdb" works on f35 (#2087778)
  - hwbd: run "update-hwdb" for v251-rc2 (#2087778)
  - hwdb: run "ninja update-hwdb-autosuspend" for v251-rc2 (#2087778)
  - Fix orientation detection for Asus Transformer T100TAF, copied T100TA rule (#2087778)
  - Fix orientation detection for HP Pavilion X2 10-k010nr (#2087778)
  - fix typo (#2087778)
  - Adding a description of the keyboard shortcut Fn+F12 for the HP EliteBook 845 G7 device. (#23253) (#2087778)
  - hwdb: run "update-hwdb" (#2087778)
  - hwdb: add rammus accelerometer support (#2087778)
  - Add support to set autosuspend delay via hwdb (#2087778)
  - Set autosuspend delay for Fibocom LG850-GL (#2087778)
  - Add HUION Inspiroy H420X to hwdb (#2087778)
  - hwdb: run 'update-hwdb' for v251-rc3 (#2087778)
  - hwdb: add touchpad parameters for Lenovo T15g Gen1 (#23373) (#2087778)
  -  hwdb: Add accel orientation for the I15-TG (#2087778)
  - hwdb: fix accelerometer mount matrix for Aquarius NS483 (#2087778)
  - hwdb: Add Google Hangouts Meet speakermic (#2087778)
  - hwdb: update via ninja -C build update-hwdb (#2087778)
  - hwdb: Add Google Meet speakermic (#2087778)
  - hwdb: Add accel orientation quirk for the Aya Neo Next (#2087778)
  - hwdb: Add HP Dev One (#2087778)
  - hwdb: analyzers: remove generic "STM Device in DFU Mode" (#2087778)
  - hwdb: Add Lenovo ThinkPad C13 Yoga (#2087778)
  - Fix automatic screen rotation for Asus Transformer T100TAM (#2087778)
  - hwdb: Add Acer Aspire A317-33 (#24050) (#2087778)
  - Add ACCEL_MOUNT_MATRIX for OXP Mini (#2087778)
  - Added DERE DBook D10 (#24173) (#2087778)
  - hwdb: analyzers: Clarify the type of devices we want listed (#2087778)
  - hwdb: Add Greaseweazle "drives" to the list of analyzers (#2087778)
  - hwdb: Apply existing accel orientation quirk to all Chromebooks (#2087778)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-11
changelog:
  - scope: allow unprivileged delegation on scopes (#2120604)
  - udev/net_id: add "rhel-9.1" naming scheme (#2121144)


author: systemd maintenance team <systemd-maint@redhat.com> - 249-2
changelog:
  - basic/unit-name: do not use strdupa() on a path (#1984299)
  - basic/unit-name: adjust comments (#1984299)
  - tmpfiles: don't create resolv.conf -> stub-resolv.conf symlink (#1989472)
  - Copy 40-redhat.rules from RHEL-8 (#1978639)
  - Avoid /tmp being mounted as tmpfs without the user's will (#1959826)
  - unit: don't add Requires for tmp.mount (#1619292)
  - units: add [Install] section to tmp.mount (#1959826)
  - rc-local: order after network-online.target (#1954429)
  - ci: drop CIs irrelevant for downstream (#1960703)
  - ci: reconfigure Packit for RHEL 9 (#1960703)
  - ci: run unit tests on z-stream branches as well (#1960703)
  - Check return value of pam_get_item/pam_get_data functions (#1973210)
  - random-util: increase random seed size to 1024 (#1982603)
  - journal: don't enable systemd-journald-audit.socket by default (#1973856)
  - journald.conf: don't touch current audit settings (#1973856)


author: systemd maintenance team <systemd-maint@redhat.com> - 249-8
changelog:
  - Really don't enable systemd-journald-audit.socket (#1973856)
  - rules: add elevator= kernel command line parameter (#2003002)
  - boot: don't build bootctl when -Dgnu-efi=false is set (#2003130)
  - unit: install the systemd-bless-boot.service only if we have gnu-efi (#2003130)
  - units: don't enable tmp.mount statically in local-fs.target (#2000927)
  - pid1: bump DefaultTasksMax to 80% of the kernel pid.max value (#2003031)
  - sd-device: introduce device_has_devlink() (#2005024)
  - udev-node: split out permission handling from udev_node_add() (#2005024)
  - udev-node: stack directory must exist when adding device node symlink (#2005024)
  - udev-node: save information about device node and priority in symlink (#2005024)
  - udev-node: always update timestamp of stack directory (#2005024)
  - udev-node: assume no new claim to a symlink if /run/udev/links is not updated (#2005024)
  - udev-node: always atomically create symlink to device node (#2005024)
  - udev-node: check stack directory change even if devlink is removed (#2005024)
  - udev-node: shorten code a bit and update log message (#2005024)
  - udev-node: add random delay on conflict in updating device node symlink (#2005024)
  - udev-node: drop redundant trial of devlink creation (#2005024)
  - udev-node: simplify the example of race (#2005024)
  - udev-node: do not ignore unexpected errors on removing symlink in stack directory (#2005024)
  - basic/time-util: introduce FORMAT_TIMESPAN (#2005024)
  - udev/net-setup-link: change the default MACAddressPolicy to "none" (#2009237)
  - set core ulimit to 0 like on RHEL-7 (#1998509)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-59
changelog:
  - test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118215)
  - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118215)
  - test: check the next elapse timer timestamp after deserialization (RHEL-118215)
  - timer: don't run service immediately after restart of a timer (RHEL-118215)
  - test: store and compare just the property value (RHEL-118215)
  - test: make test-fd-util more lenient when using fd_move_above_stdio() (RHEL-114974)
  - basic: add PIDFS magic (#31709) (RHEL-114974)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-60
changelog:
  - man: fix a missing word (RHEL-115182)
  - cryptsetup: Add optional support for linking volume key in keyring. (RHEL-97175)
  - cryptsetup: fix typo (RHEL-97175)
  - cryptsetup: HAVE_CRYPT_SET_KEYRING_TO_LINK is always defined (RHEL-97175)
  - coredump: make check that all argv[] meta data fields are passed strict (RHEL-104138)
  - coredump: restore compatibility with older patterns (RHEL-104138)
  - coredump: use %d in kernel core pattern (RHEL-104138)
  - pidref: add structure that can reference a pid via both pidfd and pid_t (RHEL-104138)
  - fd-util: introduce parse_fd() (RHEL-104138)
  - coredump: add support for new %F PIDFD specifier (RHEL-104138)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-61
changelog:
  - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
  - strv: introduce string_strv_hashmap_remove() (RHEL-14112)
  - unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
  - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
  - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
  - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-62
changelog:
  - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
  - timer: rebase last_trigger timestamp if needed (RHEL-118215)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-63
changelog:
  - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
  - cryptsetup-generator: continue parsing after error (RHEL-127859)
  - cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
  - cryptsetup-generator: always process cmdline devices (RHEL-127859)
  - logind: add "background-light" session class (RHEL-109833)
  - pam_systemd: honor session class provided via PAM environment (RHEL-109833)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-64
changelog:
  - core: fix array size in unit_log_resources() (RHEL-131338)
  - pid1: add env var to override default mount rate limit burst (RHEL-129153)
  - pid1: add env var to override default mount rate limit interval (RHEL-129153)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-65
changelog:
  - update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-66
changelog:
  - core/service: fix error cause in the log (RHEL-138414)
  - fstab-generator: drop assertions for mount opts (RHEL-92752)
  - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
  - core: reorder systemd arguments on reexec (RHEL-111135)
  - basic: add RuntimeScope enum (RHEL-137252)
  - runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
  - sd-path: add support for XDG_STATE_HOME (RHEL-137252)
  - sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
  - path tool: add some basic ansi highlighing (RHEL-137252)
  - execude: include RuntimeScope field in ExecParameters (RHEL-137252)
  - execute: remove redundant assignment (RHEL-137252)
  - execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
  - execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
  - execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
  - execute: shorten some code by using RET_NERRNO() (RHEL-137252)
  - execute: shorten code by making use of laccess() return code properly (RHEL-137252)
  - execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
  - test: add test for new XDG_STATE_HOME handling (RHEL-137252)
  - man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
  - man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
  - man: properly close XML tags (RHEL-137252)
  - tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
  - test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
  - man: fully adopt ~/.local/state/ (RHEL-137252)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-68
changelog:
  - integritysetup: Add support for hmac-sha512 (RHEL-50213)
  - integritysetup: Add PHMAC algorithm to list of known algorithms (RHEL-50213)
  - manager: fix scope for environment generators (RHEL-159230)
  - core: validate input cgroup path more prudently (RHEL-155393)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-69
changelog:
  - nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163871)
  - nspawn: normalize pivot_root paths (RHEL-163871)
  - core/service: do not propagate reload for combined RELOADING=1 + READY=1 when notify-reload (RHEL-108575)
  - udev: check for invalid chars in various fields received from the kernel (RHEL-163877)
  - udev: fix review mixup (RHEL-163877)
  - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163877)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-70
changelog:
  - core: cleanup unit's dropin directories from global cache (RHEL-127425)
  - udev: allow persistent storage rules for rbd devices (RHEL-3631)
  - udev/net_id: introduce naming scheme for RHEL-9.9 (RHEL-25518)
  - fstab-generator: support swap on network block devices (RHEL-166187)
  - core: increment start limit counter only when we can start the unit (RHEL-164539)
  - TEST-07-PID1: wait for systemd-resolved being stopped (RHEL-164539)
  - test: extend start limit interval (RHEL-164539)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-72
changelog:
  - man: reword the description of "secure pager" handling (RHEL-102941)
  - pager: also check for $SUDO_UID (RHEL-102941)
  - hwdb: make three more hwdb files parsed by parse_hwdb.py (RHEL-180937)
  - nss-systemd: avoid ELF TLS for recursion guard (RHEL-193714)
  - udev-builtin-net-id: print cescaped bad attributes (RHEL-180934)
  - udev: drop redundant checks (RHEL-180934)
  - Revert "udev-builtin-net-id: print cescaped bad attributes" (RHEL-180934)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-73
changelog:
  - hwdb,rules: add 82-net-auto-link-local.{hwdb,rules} to build (RHEL-180938)
  - test: reenable test for cg_get_keyed_attribute() (RHEL-180940)
  - Revert "hwdb: fix arrow keys on HP Elite Dragonfly G3" (RHEL-180939)
  - ci: bump the mkosi job to Ubuntu Noble (RHEL-155457)
  - ci: bump super-linter to v8.7.0 (RHEL-155457)
  - ci: explicitly disable multi status for Super-Linter (RHEL-155457)
  - github/linter: disable ENABLE_GITHUB_PULL_REQUEST_SUMMARY_COMMENT for super-linter (RHEL-155457)
  - test: install iscsi-gen-initiatorname from iscsi-initiator-utils (RHEL-155457)


author: Martin Cermak <mcermak@redhat.com> - 5.1-4
changelog:
  - RHEL-50107.patch:  Make systemtap compatible with kernel
    commit 68cbd415dd4b .  Related: RHEL-56962 .


author: Frank Ch. Eigler <fche@redhat.com> - 5.2-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
  - https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Frank Ch. Eigler <fche@redhat.com> - 5.3-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Sergio Correia <scorreia@redhat.com> - 7.8
changelog:
  - Move build system to meson
    Upstream commits (fed9020, 590de27)
  - Move key handling to tang itself
    Upstream commits (6090505, c71df1d, 7119454)


author: Jan Macku <jamacku@redhat.com> - 6.22.03-1
changelog:
  - Update to tcsh-6.22.03
  - Drop tcsh-6.22.02-avoid-gcc-to-fail.patch                              - applied by upstream
  - Drop tcsh-6.22.02-call-seterror-consistently-and-abort-quickly.patch   - applied by upstream
  - Drop tcsh-6.22.02-avoid-crashing-when-loading-corrupted-history.patch  - applied by upstream


author: Petr Pisar <ppisar@redhat.com> - 2.5.9-2
changelog:
  - Modernize spec file
  - License corrected to
    ((LGPLv2+ or CPL) and (LGPLv2+ or GPLv2+ or MPLv2.0 or MPLv1.1))


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-82
changelog:
  - Changing LD_FLAGS to RPM_LD_FLAGS
  - Use make_build macro and remove hard-coded gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Than Ngo <than@redhat.com> - 9:20200327-19
changelog:
  - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.2-36
changelog:
  - Fix inconsistent --map-file option spelling in manual (rhbz#2066855)
  - Fix memory corruption in tftpd when filename remapping with macro \x
    is used (rhbz#2066858)


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.2-37
changelog:
  - Review and fix issues reported by static analysers (rhbz#2069613)
  - Use systemd-rpm-macros and modernise the specfile a bit
    - Based on changes made by Dominik 'Rathann' Mierzejewski in Fedora.
      Thanks a lot!


author: Jan Grulich <jgrulich@redhat.com> - 1.14.1-2
changelog:
  - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability
    Resolves: RHEL-62001


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-1
changelog:
  - 1.15.0
    Resolves: RHEL-78617
  - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open
    Resolves: RHEL-77973
  - Add SELinux policy rules allowing to create directories under /root
    Resolves: RHEL-77975
  - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor
    Resolves: RHEL-80208
  - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText()
    Resolves: RHEL-80189
  - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms()
    Resolves: RHEL-80194
  - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey()
    Resolves: RHEL-80196
  - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient()
    Resolves: RHEL-80197
  - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow()
    Resolves: RHEL-80206
  - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents()
    Resolves: RHEL-80205
  - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger()
    Resolves: RHEL-80209


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-5
changelog:
  - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors
    Resolves: RHEL-97284

  - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension
    Resolves: RHEL-97303

  - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore
    Resolves: RHEL-97379

  - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension
    Resolves: RHEL-97414

  - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension
    Resolves: RHEL-97429


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-7
changelog:
  - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation
    Resolves: RHEL-119989

  - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal
    Resolves: RHEL-120009

  - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap()
    Resolves: RHEL-120770


author: Jan Grulich <jgrulich@redhat.com> - 1.16.2-2
changelog:
  - Rebuild against updated xorg-x11-server
    Fixes CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002,
          CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities
    Resolves: RHEL-163282
    Resolves: RHEL-163268
    Resolves: RHEL-163214


author: Justin Stephenson <jstephen@redhat.com> - 8-1
changelog:
  - Release v8
  - Spec file fixes for EL6
  - Spec file improvements for Debian/Ubuntu pkg-config
  - Tlog-play improve authentication options
  - Handle piped in I/O from stdin and improve the main recording
    transfer exit condition.
  - Use empty string on hostname resolution failure


author: Justin Stephenson <jstephen@redhat.com> - 9-1
changelog:
  - Release v9
  - Add libutempter support
  - Require journal match filter
  - Add file reader match functionality
  - Restore cursor visibility and color attributes on tlog-play exit
  - Add "time" real clock timestamp message field
  - Various upstream CI improvements


author: Justin Stephenson <jstephen@redhat.com> - 12-1
changelog:
  - Release v12
  - Prevent infinite transfer loop on GDM login.
  - tlog-play: add journal namespace support.
  - tlitest: extend delay for limit-action delay test.


author: Justin Stephenson <jstephen@redhat.com> - 12.1
changelog:
  - Exit transfer loop when output fd is closed
  - Revert "Prevent infinite transfer loop on GDM login"


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-65
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-81721
  - Remove deprecated path from systemd service file
    Resolves: RHEL-81716


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-66
changelog:
  - Use systemd-sysusers for the 'pegasus' user and group creation
  - Fix Requires of subpackages
    Related: RHEL-90737
  - Add support for Image Mode
    Resolves: RHEL-90737


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.4-7
changelog:
  - Rebuild for CVE-2023-39318, CVE-2023-39319, CVE-2023-39325 and
    CVE-2023-44487
  Resolves: RHEL-4435, RHEL-4439, RHEL-12694


author: Debarshi Ray <rishi@fedoraproject.org> - 0.2-2
changelog:
  - Update to 0.2
  - Fix CVE-2025-23266, CVE-2025-23267, and GHSA-fv92-fjc5-jj9h or GO-2025-3787
  Resolves: RHEL-104455


author: Štěpán Horáček <shoracek@redhat.com> - 5.2-4
changelog:
  - Backport upstream fixes.
  - tpm2_checkquote: Fix check of magic number. (CVE-2024-29038)
  - tpm2_checkquote: Add comparison of pcr selection. (CVE-2024-29039)
  - Fix check of magic number.
    Resolves: RHEL-23198
    Resolves: RHEL-41031
    Resolves: RHEL-41035


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-2
changelog:
  - Update to 3.1.0.rc, based on earlier tracker3-miners packaging
  - Obsolete separate tracker3-miners package


author: Tom Stellard <tstellar@redhat.com> - 3.0.9-59
changelog:
  - Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used


author: RHEL Packaging Agent <jotnar@redhat.com> - 2.3.12-1
changelog:
  - Rebase to version 2.3.12
  - Add unixODBC-c89.patch for GCC 14 compatibility
  - Update so-version-bump.patch for new version
  - Fix multilib_fix_c_header path to match actual header location
  - Resolves: RHEL-94798


author: Christian Kellner <ckellner@redhat.com> - 0.99.11-2
changelog:
  - Add systemd service snippets
  - Use macros for _unitdir and _udevrulesdir
  - Mark _datadir/gtk-doc as directory


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.0-1
changelog:
  - rebase usbguard to 1.0.0
  - added support for rules covering combination of classes
  - fix usbguard being killed
  Resolves: rhbz#1916039
  Resolves: rhbz#1861330
  Resolves: rhbz#1905257


author: Radovan Sroka <rsroka@redhat.com> - 1.0.0-7
changelog:
  RHEL 9 BETA
  - starting usbguard service complains about PIDFile= references a path below legacy directory /var/run/
  Resolves: rhbz#1985627
  - file conflict when installing usbguard on rhel
  Resolves: rhbz#1986785


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.0-10
changelog:
  - fix DSP module definition in spec file
  Resolves: rhbz#2014442
  - fix IPC access control files override
  Resolves: rhbz#2009227
  - validate ACL permission existence
  Resolves: rhbz#2009229
  - decrease usbguard-notifier spam when denied connection
  Resolves: rhbz#2009226


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-11
changelog:
  - Fix unauthorized access via D-bus
  - Fix memory leak when connection to dbus is broken
  Resolves: rhbz#2059068


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-12
changelog:
  - Set OOMScoreAdjust to -1000 in service file
  Resolves: rhbz#2097419
  - Fix race condition in usbguard-daemon when forking
  Resolves: rhbz#2042345
  - Add missing files to documentation
  Resolves: rhbz#2122107
  - Neither RuleFolder nor RuleFile exists bugfix
  Resolves: rhbz#2122109
  - Remove build for i686 arch
  Resolves: rhbz#2126622


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-15
changelog:
  - Disable logging to console, logging to syslog is still enabled
  Resolves: rhbz#2122109
  - Store permanent rules even if RuleFile is not set but RuleFolder is
  Resolves: rhbz#2155910


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Rebase to latest upstream: 0.13.0
  - Keeps usbredirserver binary (removed upstream)
    Related: rhbz#2135760


author: Victor Toso <victortoso@redhat.com> - 0.13.0-2
changelog:
  - Fixes 100% CPU usage when usbredirect used as TCP server
    Related: rhbz#2157520
  - Fixes USB redirection of identical devices
    Resolves: rhbz#2157520


author: Jiri Kucera <jkucera@redhat.com> - 1.114-3
changelog:
  - Do not use fexecve
    Script executed via fexecve has a file descriptor number in
    argv[0]. This results in unexpected output: when displaying
    the script help, a user see "Usage: <number> [options]"
    instead of "Usage: <scriptname> [options]".
    Resolves: #1984417


author: Mark Wielaard <mjw@redhat.com> - 3.23.0-4
changelog:
  Add upstream VALGRIND_3_23_BRANCH patches
    0001-Prepare-NEWS-for-branch-3.23-fixes.patch
    0002-486180-MIPS-VexGuestArchState-has-no-member-named-gu.patch
    0003-Bug-486293-memccpy-false-positives.patch
    0004-Bug-486569-linux-inotify_init-syscall-wrapper-missin.patch
    0005-aarch64-frinta-and-frinta-vector-instructions.patch
    0006-mips-skip-using-shared-syscall-numbers-for-mips32.patch
    0007-Fix-uninitialized-err-in-handle_extension.patch
    0008-Avoid-use-of-guest_IP_AT_SYSCALL-in-handle_extension.patch
    0009-s390x-Minor-fixes-in-extension-s390x.c.patch
    0010-Bug-453044-gbserver_tests-failures-in-aarch64.patch
    0011-Linux-regtest-reallocarray-needs-malloc.h.patch
    0012-Bug-487439-SIGILL-in-JDK11-JDK17.patch
    0013-Don-t-leave-fds-created-with-log-file-xml-file-or-lo.patch
    0014-Close-both-internal-pipe-fds-after-VG_-fork-in-paren.patch
    0015-Don-t-allow-programs-calling-fnctl-on-valgrind-s-own.patch
    0016-mips-skip-using-shared-syscall-numbers-for-mips64.patch
    0017-gdbserver_tests-filters-remove-python-rpm-module-loa.patch
    0018-Implement-VMOVQ-xmm1-xmm2-m64.patch
    0019-arm64-Fix-fcvtas-instruction.patch
    0020-gdbserver_tests-filters-remove-more-verbose-python-r.patch
    0021-Avoid-dev-inode-check-on-btrfs-with-sanity-level-3.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-2
changelog:
  - Add VALGRIND_3_24_BRANCH patches
    0001-Prepare-NEWS-for-branch-3.24-fixes.patch
    0002-vgdb.c-fork_and_exec_valgrind-Fix-off-by-one-error-w.patch
    0003-vgdb.c-fork_and_exec_valgrind-Fix-another-off-by-one.patch
    0004-regtest-add-a-fdleak-filter-for-write-on-write-on-li.patch
    0005-Add-exp-and-supp-patterns-for-missing-main-frame-for.patch
    0006-Add-additional-exp-ppc64le-files-to-EXTRA_DIST.patch
    0007-Add-support-for-landlock_create_ruleset-444-landlock.patch
    0008-helgrind-tests-tc17_sembar.c-Remove-bool-typedef.patch
    0009-drd-tests-swapcontext.c-Rename-typedef-struct-thread.patch
    0010-none-tests-bug234814.c-sa_handler-take-an-int-as-arg.patch
    0011-Add-open_tree-move_mount-fsopen-fsconfig-fsmount-fsp.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-3
changelog:
  - Add more VALGRIND_3_24_BRANCH patches
    0012-Recognize-new-DWARF5-DW_LANG-constants.patch
    0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch
    0014-linux-support-EVIOCGRAB-ioctl.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-4
changelog:
  - Split main valgrind package into several subpackages:
    - valgrind now contains just the core tools.
    - valgrind-scripts contains the post-processing scripts for callgrind,
      cachegrind, massif and dhat which depend on perl and python.
    - valgrind-gdb contains the debuginfo client/server and (v)gdb support.
    - valgrind-docs contains the man pages, html and pdf manual.
  - Adjust Requires/Recommends to subpackages can be installed independently.
    - valgrind-devel now Recommends, instead of Requires, valgrind.
    - valgrind-gdb Requires valgrind
    - valgrind-scripts Recommends valgrind-gdb
    - valgrind-gdb Recommends gdb


author: Mark Wielaard <mjw@redhat.com> - 3.25.1-2
changelog:
  - Add VALGRIND_3_25_BRANCH patches
    - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch
    - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch


author: Mark Wielaard <mjw@redhat.com> - 3.26.0-1
changelog:
  - Valgrind 3.26.0 final
  - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches
  - Refresh some-stack-protector and some-Wl-z-now patches.
  - Add vgstack to valgrind-gdb.
  - Update License to GPL-3.0-or-later


author: Mark Wielaard <mjw@redhat.com> - 3.26.0-4
changelog:
  - Add VALGRIND_3_26_BRANCH patches
    - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch
    - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch
    - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch
    - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch
    - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch
    - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch
    - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch
    - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch


author: Remi Collet <rcollet@redhat.com> - 7.2.6.1
changelog:
  - rebase to 7.2.6
  - merge limit.conf in main service files
  - drop /etc/sysconfig/valkey
  - rename compat package
  - fix working dir
  - partially enable upstream test suite


author: Lukas Javorsky <ljavorsk@redhat.com> - 8.1.6-1
changelog:
  - Rebase to version 8.1
  - fix CONFIG REWRITE breaks configuration
    reported as https://github.com/valkey-io/valkey/issues/2678
    using patch from https://github.com/valkey-io/valkey/pull/2689
  - add sub-package for rdma module
  - use patch for configuration changes
  - add /etc/valkey/modules drop-in directory for module configuration files
  - add %valkey_version and %valkey_modules_cfg macros
  - fix module linker flags using patch from
    https://github.com/valkey-io/valkey/pull/3344


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 0.17.0-0.1.klarlack.20200916git
changelog:
  - Switched upstream to Nils Goroll's fork which is the defacto current upstream
  - Synced description to reality
  - This is a snapshot build that needs autotools for building
  - Rebuilt for varnish-6.5.0


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 0.17.1-1
changelog:
  - New upstream release
  - Switched back to original varnish github upstream, as it has catched up
  - Includes fix for CVE-2021-28543, VSV00006, bz#1939669


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-23
changelog:
  - RHEL-112005 CVE-2025-53905 vim: Vim path traversial
  - RHEL-112009 CVE-2025-53906 vim: Vim path traversal


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-26
changelog:
  - RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin
  - RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-28
changelog:
  - Resolves: RHEL-159631 vim: Vim: Arbitrary code execution via command injection
    in glob() function


author: Uri Lublin <uril@redhat.com> - 10.0-3
changelog:
  - Show OS-ID when running 'remote-viewer -V'
    Resolves: rhbz#1953282
  - Clear auth entry fields
    Resolves: rhbz#1953933


author: Daniel P. Berrangé <berrange@redhat.com> - 11.0-1
changelog:
  - Rebase to 11.0 release
  - Add missing dep on libvirt-client for bash completion
  - Resolves: rhbz#2028604, rhbz#2000528


author: Sergio Lopez <slp@redhat.com> - 1.1.0-2
changelog:
  - Explicitly declare the conflict with qemu-virtiofsd
  - Remove explicit library dependencies
  - Remove useless "Provides: virtiosfd"
  - Remove Windows binaries from vendor tarball


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.10.1-1
changelog:
  - Update to upstream version 1.10.1 [RHEL-22739]
  - Resolves: RHEL-22739
    (Rebase virtiofsd to latest version for RHEL 9.4)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.11.1-1
changelog:
  - Update to upstream version 1.11.1 [RHEL-47989]
  - Resolves: RHEL-47989
    (Rebase virtiofsd to latest version for RHEL 9.5)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.0-1
changelog:
  - Update to upstream version 1.13.0 [RHEL-69134]
  - Resolves: RHEL-69134
    (Rebase virtiofsd to latest version for RHEL 9.6)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.2-1
changelog:
  - Rebase to 1.13.2 [RHEL-96976]
  - Resolves: RHEL-96976
    (Rebase virtiofsd to latest version for RHEL 9.6.z)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.3-1
changelog:
  - Rebase to 1.13.3 [RHEL-133032]
  - Resolves: RHEL-133032
    (Rebase virtiofsd to latest version for RHEL 9.8)


author: Artem Egorenkov <aegorenk@redhat.com> - 3.0.3-44
changelog:
  - Enable support for wide-character strings in logs
  - Replace unprintables with HEX code, not question marks
  - Resolves: rhbz#1948570


author: Artem Egorenkov <aegorenk@redhat.com> - 3.0.3-45
changelog:
  - Temporary pass -Wno-deprecated-declarations to gcc to ignore
    deprecated warnings to be able to build against OpenSSL-3.0
  - Resolves: rhbz#1958028


author: Debarshi Ray <rishi@fedoraproject.org> - 0.64.2-1
changelog:
  - Update to 0.64.2
  - Add missing _VTE_CXX_NOEXCEPT to downstream patches (#1973174)
  - Fix the License fields and ship the correct license texts (#1973299)


author: Brian C. Lane <bcl@redhat.com> - 35.9-1
changelog:
  - Copy rhel-92.json test repository from osbuild-composer
  - Update osbuild-composer test repositories from osbuild-composer
  - New release: 35.9 (bcl)
    Resolves: rhbz#2164560
  - tests: Replace os.MkdirTemp with t.TempDir (bcl)
  - blueprint save: Allow overriding bad blueprint names (bcl)
  - tests: Clean up checking err in tests (bcl)
  - composer-cli: Implement blueprints diff (bcl)
  - saveBlueprint: Return the filename to the caller (bcl)
  - composer-cli: Add tests for using --commit with old servers (bcl)
  - weldr: Return error about the blueprints change route (bcl)
  - weldr: Save the http status code as part of APIResponse (bcl)
  - Add --commit support to blueprints save (bcl)
  - Add --commit to blueprints show (bcl)
  - gitleaks: Exclude the test password used in tests (bcl)
  - ci: add tags to AWS instances (tlavocat)
  - Update github.com/BurntSushi/toml to 1.2.1
  - Update github.com/stretchr/testify to 1.8.1
  - Update bump github.com/spf13/cobra to 1.6.1
  - New release: 35.8 (bcl)
  - completion: Remove providers from bash completion script (bcl)
  - completion: Filter out new headers from compose list (bcl)
  - docs: Remove unneeded Long descriptions (bcl)
  - docs: Use a custom help template (bcl)
  - docs: Add more command documentation (bcl)
  - cmdline: Add package glob support to modules list command (bcl)
  - workflow: Add govulncheck on go v1.18 (bcl)
  - tests: Update to use golangci-lint 1.49.0 (bcl)
  - New release: 35.7 (bcl)
  - spec: Move %gometa macro above %gourl (bcl)
  - weldr: When starting a compose pass size as bytes, not MiB (bcl)
  - tests: Use correct size value in bytes for test (bcl)
  - workflow: Add Go 1.18 to text matrix (bcl)
  - Replace deprecated ioutil functions (bcl)
  - New release: 35.6 (bcl)
  - tests: Update tests for osbuild-composer changes (bcl)
  - CMD: Compose status format (eloy.coto)
  - CMD: Compose list format (eloy.coto)
  - tests: Update tests to check for JSON list output (bcl)
  - composer-cli: Change JSON output to be a list of objects (bcl)
  - weldr: Simplify the old ComposeLog, etc. functions (bcl)
  - composer-cli: Add --filename to blueprints freeze save command (bcl)
  - composer-cli: Add --filename to blueprints save command (bcl)
  - composer-cli: Add --filename to compose logs command (bcl)
  - composer-cli: Add --filename to compose image command (bcl)
  - composer-cli: Add --filename to compose metadata command (bcl)
  - composer-cli: Add --filename to compose results command (bcl)
  - weldr: Add saving to a new filename to GetFilePath function (bcl)
  - github: Fix issue with codecov and forced pushes in PRs (bcl)
  - Use golangci-lint 1.45.2 in workflow (bcl)
  - Run workflow tests for go 1.16.x and 1.17.x (bcl)
  - Move go.mod to go 1.16 (bcl)
  - workflows/trigger-gitlab: run Gitlab CI in new image-builder project (jrusz)
  - Update GitHub actions/setup-go to 3
  - Update GitHub actions/checkout to 3


author: Brian C. Lane <bcl@redhat.com> - 35.12-1
changelog:
  - Copy rhel-9.4.json test repository from osbuild-composer
  - New release: 35.12 (bcl)
    Resolves: RHEL-1035
  - Add support for compose start warning messages (bcl)
  - Update documentation urls for new locations (bcl)
  - weldr: go fmt changes to a couple comments (bcl)
  - weldr: Update ostree test for parentid with no url (bcl)
  - Makefile: Turn off seccomp for build-in-podman (bcl)
  - composer-cli: Update doc links (simon.steinbeiss)
  - docs: fix typo/formatting in HACKING.md (idiez)
  - Add release creation documentation (bcl)
  - spec: Require createrepo_c for weldr-client-tests package (bcl)
  - spec: migrate the license field to SPDX (ondrej)
  - Go: Switch to go 1.19 (bcl)
  - CI: Update terraform hash (bcl)
  - Actions: add workflow for marking and closing stale issues and PRs (thozza)
  - workflows: Stop using golint (bcl)
  - workflows: Add Go 1.21 and 1.22 to test matrix (bcl)
  - workflows: Update to golangci-lint 1.56.2 (bcl)
  - workflow: Ignore govulncheck failures (bcl)
  - workflow: Switch to testing on go 1.18, 1.19, 1.20 (bcl)
  - build(deps): bump actions/setup-go from 3 to 5 (49699333+dependabot[bot])
  - build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.8.0 (49699333+dependabot[bot])
  - build(deps): bump actions/checkout from 3 to 4 (49699333+dependabot[bot])
  - build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.2 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4 (49699333+dependabot[bot])


author: Brian C. Lane <bcl@redhat.com> - 35.12-3
changelog:
  - tests: OSTree does not support the qcow2 image type
  - Add test repositories for RHEL 9.6 and 9.7
  - Rebuild for CVE-2025-22871
    Resolves: RHEL-89344


author: Brian C. Lane <bcl@redhat.com> - 35.12-4
changelog:
  - Bump release for y-stream AND z-stream building using
    centpkg build --rhel-target=zstream
    Related: RHEL-89344


author: Brian C. Lane <bcl@redhat.com> - 35.5-1
changelog:
  - New release: 35.5 (bcl)
    Resolves: rhbz#2052601
  - docs: Explain how to undo blueprints delete (bcl)
  - test: server status no longer returns devel (bcl)
  - Use GetFrozenBlueprintsTOML for blueprints freeze save (bcl)
  - Add a test for float uid/gid in frozen blueprint (bcl)
  - Use GetBlueprintsTOML for blueprints save (bcl)
  - test: Add a test for float uid/gid in saved blueprint (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 0.4.1 to 1.0.0 (49699333+dependabot[bot])
  - tests: trigger on push to main (jrusz)
  - build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (49699333+dependabot[bot])
  - ci: add keystore for sonarqube (jrusz)
  - spec: Switch to using %gobuild macro on Fedora (bcl)
  - ci: change workflow name (jrusz)
  - ci: add gitlab-ci and sonarqube (jrusz)
  - doc: fix example links from the README (tdecacqu)
  - build(deps): bump actions/checkout from 2.3.4 to 2.4.0 (49699333+dependabot[bot])
  - ci: Enable Coverity Scan tool (atodorov)


author: Michal Ruprich <mruprich@redhat.com> - 1.21.1-7
changelog:
  - Resolves: #2017842 - Two different segfaults when downloading multiple files
  - Removing metalink from manpage


author: Joe Doss <joe@solidadmin.com> - 1.0.20200820-1
changelog:
  - Update to 1.0.20200820
  - ipc: split into separate files per-platform
  - wincompat: fold random into genkey
  - systemd: add reload target to systemd unit
  - man: wg-quick: use syncconf instead of addconf for strip example
  - pubkey: isblank is a subset of isspace
  - ctype: use non-locale-specific ctype.h
  - wg-quick: wait on process substitutions


author: Joe Doss <joe@solidadmin.com> - 1.0.20200827-1
changelog:
  - Update to 1.0.20200827
  - wg-quick: android: use iproute2 to bring up interface instead of ndc
  - wg-quick: Revert wait on process substitutions


author: Joe Doss <joe@solidadmin.com> - 1.0.20210223-1
changelog:
  - wg-quick: android: do not free iterated pointer
  - wg-quick: openbsd: no use for userspace support
  - embeddable-wg-library: sync latest from netlink.h
  - wincompat: recent mingw has inet_ntop/inet_pton
  - wincompat: add resource and manifest and enable lto
  - wincompat: do not elevate by default
  - completion: add help and syncconf completions
  - sticky-sockets: do not use SO_REUSEADDR
  - man: LOG_LEVEL variables changed name
  - ipc: do not use fscanf with trailing \n
  - ipc: read trailing responses after set operation


author: Joe Doss <joe@solidadmin.com> - 1.0.20210315-1
changelog:
  - Makefile: fix version indicator
  - wireguard-tools: const correctness
  - wireguard-tools: drag in headers for prototypes
  - ipc: uniformly ignore preshared keys that are zero
  - wg-quick: freebsd: add kernel support
  - ipc: freebsd: add initial FreeBSD support
  - wg-quick: freebsd: avoid writing private keys to /tmp


author: Michal Ruprich <mruprich@redhat.com> - 1:3.4.10-4
changelog:
  - Resolves: #2152064 - CVE-2022-3190 wireshark: f5ethtrailer Infinite loop in legacy style dissector


author: Michal Ruprich <mruprich@redhat.com> - 1:3.4.10-5
changelog:
  - Resolves: #2210864 - Candump log file parser crash
    Resolves: #2210865 - VMS TCPIPtrace file parser crash
    Resolves: #2210868 - NetScaler file parser crash
    Resolves: #2210870 - RTPS dissector crash
    Resolves: #2210871 - IEEE C37.118 Synchrophasor dissector crash


author: Tomas Popela <tpopela@redhat.com> - 1.0.2-8
changelog:
  - Package woff2_decompress, woff2_compress and woff2_info in a tools subpackage.
    Thanks to Tomasz Gąsior <kontakt@tomaszgasior.pl>


author: Tomas Popela <tpopela@redhat.com> - 1.8.1-3
changelog:
  - Drop PipeWire 0.2 requirement as Chrom[e|ium] 90 now depends on PipeWire 0.3
  - Resolves: rhbz#1929237


author: Debarshi Ray <rishi@fedoraproject.org> - 41.1-2
changelog:
  - Make the Supplements specific to Fedora to retain consistency with
    xdg-desktop-portal-gtk
  Resolves: #2051473


author: Pavel Reichl <preichl@redhat.com> - 5.19.0-1
changelog:
  - New upstream release
  - Tolerate tiny (<300MB) filesystems
  - Rename xfsprogs-5.12.0-default-bigtime-inobtcnt-on.patch to
      xfsprogs-5.19.0-disable-old-kernel-bigtime-inobtcnt-on.patch
      and amend it to reflect upstream changes
  - Backport all "Fixing" patches relevant to 5.19
    Related: rhbz#2142910


author: Pavel Reichl <preichl@redhat.com> - 6.3.0-1
changelog:
  - Rebase to upstream version 6.3.0
  -
  - Following is a list of dropped backported patches which
  - are contained in the current rebase:
  - xfsprogs-5.19.0-xfs-hoist-refcount-record-merge-predicates.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs_db-fix-dir3-block-magic-check.patch (v6.1.0)
  - xfsprogs-5.19.0-xfs-estimate-post-merge-refcounts-correctly.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-get-rid-of-assert-from-xfs_btree_islastblock.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-fix-off-by-one-error-in-xfs_btree_space_to_heigh.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-fix-sb-write-verify-for-lazysbcount.patch (v6.1.0)
  - xfsprogs-5.19.0-xfs-removed-useless-condition-in-function-xfs_attr_n.patch (v6.0.0)
  - xfsprogs-5.19.0-xfs_repair-retain-superblock-buffer-to-avoid-write-h.patch (v6.1.0)
  -
  - Rename the remaining patches so the name contains upstream version in which
  - they are implemented, or "rhelonly".
  -
  - Drop Eric Sandeen's public key used to check tarball signature and replace it by
  - Carlos Maiolino's (current upstream xfsprogs maintainer).
  -
  - Following is a list of newly backported patches from versions released after 6.3
  - which are fixing patches present in version 6.3:
  - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
  -
  - Backport:
  - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
  - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
  - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
  - to implement RHEL-RHEL-8284
  -
  - Backport xfsprogs-rhelonly-xfs_quota-fix-missing-mount-point-warning.patch
  - to implement RHEL-7900
  -
  - Related: RHEL-15399
  - Related: RHEL-8284
  - Related: RHEL-7900


author: Pavel Reichl <preichl@redhat.com> - 6.4.0-1
changelog:
  - Rebase to a more recent upstream release
  - Related: RHEL-28339
  - Following is a list of dropped backported patches which
  - are contained in the current rebase:
  - xfsprogs-6.4.0-set-bnobt-cntbt-numrecs-correctly-when-formattin.patch
  - xfsprogs-6.4.0-mkfs-fix-man-s-default-value-for-sparse-option.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
  - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
  - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
  - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
  -
  - Rename xfs_quota-fix-missing-mount-point-warning.patch to reflect upstream
  -	version it was merged in.


author: Bill O'Donnell <bodonnel@redhat.com> - 6.4.0-2
changelog:
  - Fix various CVE issues.
  - Related: RHEL-32996
  - Following is the patch list:
  - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-fix-leak-in-flist_find_ftyp.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-make-duration-take-time_t.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_scrub-don-t-call-phase_end-if-phase_rusage-was-n.patch
  - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-convert-fsrallfs-to-use-time_t-instead-of-in.patch
  - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-replace-atoi-with-strtol.patch
  - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-add-helper-for-flist_find_type-for-clearer-fi.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-catch-strtol-errors.patch
  - xfsprogs-rhelonly-xfs_db-fix-unitialized-variable-in-check_parents-function.patch


author: Bill O'Donnell <bodonnel@redhat.com> - 6.4.0-3
changelog:
  - Fix coverity issue
  - Related: RHEL-39449
  - Following is the patch list:
  - xfsprogs-6.5.0-xfs.8-xfs-fix-bounds-check-in-xfs_defer_agfl_block.patch


author: Pavel Reichl <preichl@redhat.com> - 6.4.0-7
changelog:
  - xfs unrepairable filesystem if directory block not junked in phase 3 - more
  - fixes
  - Related: RHEL-54342


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.29-7
changelog:
  - compile without sha1 and md5
  - Resolves: rhbz#1936682 - xmlsec1 implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.1-2
changelog:
  - xf86-input-libinput 1.0.1 (#1951879)
  - Fix the upstream source URL
  - Use autosetup instead of manual patch handling


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.0.0-5
changelog:
  - Emulate a zero axis events after REL_WHEEL (RHEL-153540)
  - Fix ToolSerials assignment for serials greater than INT_MAX (RHEL-153532)


author: José Expósito <jexposit@redhat.com> - 1.20.11-25
changelog:
  - CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and
    CVE-2024-31083
  - Add util-linux as a dependency of Xvfb
  - Fix compilation error on i686


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-28
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186),
                 CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191),
                 CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199),
                 CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200)


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.11-30
changelog:
  - xfree86: Fix potentially NULL reference to platform device's PCI device
    Resolves: https://issues.redhat.com/browse/RHEL-84253


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-31
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308),
                 CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409),
                 CVE-2025-49180 (RHEL-97253)


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-32
changelog:
  - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035),
                 CVE-2025-62231 (RHEL-125003)


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-34
changelog:
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
                 CVE-2026-34002, CVE-2026-34003
    Resolves: https://redhat.atlassian.net/browse/RHEL-163227
    Resolves: https://redhat.atlassian.net/browse/RHEL-163309
    Resolves: https://redhat.atlassian.net/browse/RHEL-163240


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.11-35
changelog:
  - dri2: Protect against dri2ClientPrivate assertion failures
    Resolves: https://redhat.atlassian.net/browse/RHEL-169728


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-36
changelog:
  - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
                 CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
                 CVE-2026-50262, CVE-2026-50263, CVE-2026-50264
    Resolves: https://redhat.atlassian.net/browse/RHEL-182428


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.9-5
changelog:
  Fix for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408, CVE-2024-0409


author: Olivier Fourdan <ofourdan@redhat.com> - 23.2.7-3
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80204), CVE-2025-26595 (RHEL-80187),
                 CVE-2025-26596 (RHEL-80190), CVE-2025-26597 (RHEL-80193),
                 CVE-2025-26598 (RHEL-80195), CVE-2025-26599 (RHEL-80202),
                 CVE-2025-26600 (RHEL-80203), CVE-2025-26601 (RHEL-80207)


author: Olivier Fourdan <ofourdan@redhat.com> - 23.2.7-4
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97288), CVE-2025-49176 (RHEL-97334),
                 CVE-2025-49177 (RHEL-97357), CVE-2025-49178 (RHEL-97393),
                 CVE-2025-49179 (RHEL-97404), CVE-2025-49180 (RHEL-97244)


author: Olivier Fourdan <ofourdan@redhat.com> - 23.2.7-5
changelog:
  - CVE fix for: CVE-2025-62229 (RHEL-119977), CVE-2025-62230 (RHEL-120023),
                 CVE-2025-62231 (RHEL-125018)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-3
changelog:
  - Fix a regression in Xwayland 24.1.9 with XTS test Xlib10
    Resolves: https://redhat.atlassian.net/browse/RHEL-169765


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-4
changelog:
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
                 CVE-2026-34002, CVE-2026-34003
    Resolves: https://redhat.atlassian.net/browse/RHEL-163200
    Resolves: https://redhat.atlassian.net/browse/RHEL-163296
    Resolves: https://redhat.atlassian.net/browse/RHEL-163254


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-5
changelog:
  - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
                 CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
                 CVE-2026-50262, CVE-2026-50263
    Resolves: https://redhat.atlassian.net/browse/RHEL-182448


author: Vladis Dronov <vdronov@redhat.com> - 0.8.2-1
changelog:
  - Update to version 0.8.2
  - Drop patch 1-fix-man-page-installation.patch
  - Use SPDX license identifiers


author: Petr Kubat <pkubat@redhat.com> - 5.2.4-7
changelog:
  - Use relative path for COPYING files so that rpm moves them to correct place
    Related: rhbz#1741074


author: Kalev Lember <klember@redhat.com> - 2:40~beta-2
changelog:
  - Drop libtool as-needed hack as as-needed is in default LDFLAGS now
  - Remove unneeded ldconfig_scriptlets macro call
  - Tighten soname globs


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-1
changelog:
  - Rebase to 0.13.71
  - Drop the CVE patches, they are now part of the upstream package
  - Build no longer requires python2
  - Resolves: 1807565


