# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-653.el9]
changelog:
  - sfc: fix potential memory leak in efx_mae_process_mport() (Izabela Bakollari) [RHEL-97678]
  - sfc: replace min/max nesting with clamp() (Izabela Bakollari) [RHEL-97678]
  - sfc: siena: eliminate xdp_rxq_info_valid using XDP base API (Izabela Bakollari) [RHEL-97678]
  - sfc: eliminate xdp_rxq_info_valid using XDP base API (Izabela Bakollari) [RHEL-97678]
  - HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124606] {CVE-2025-39806}
  - ACPI: CPPC: Perform fast check switch only for online CPUs (Mark Langsdorf) [RHEL-114091]
  - ACPI: MRRM: Check revision of MRRM table (Mark Langsdorf) [RHEL-114091]
  - ACPI: fan: Use platform device for devres-related actions (Mark Langsdorf) [RHEL-114091]
  - ACPI/IORT: Fix memory leak in iort_rmr_alloc_sids() (Mark Langsdorf) [RHEL-114091]
  - ACPI: pfr_update: Fix the driver update version check (Mark Langsdorf) [RHEL-114091]
  - ACPI: EC: Relax sanity check of the ECDT ID string (Mark Langsdorf) [RHEL-114091]
  - ACPI: processor: perflib: Move problematic pr->performance check (Mark Langsdorf) [RHEL-114091]
  - ACPI: Fix typos (Mark Langsdorf) [RHEL-114091]
  - ACPI/PCI: Remove space before newline (Mark Langsdorf) [RHEL-114091]
  - ACPI: processor: throttling: Remove space before newline (Mark Langsdorf) [RHEL-114091]
  - ACPI: processor: perflib: Fix initial _PPC limit application (Mark Langsdorf) [RHEL-114091]
  - ACPI: TAD: Replace sprintf() with sysfs_emit() (Mark Langsdorf) [RHEL-114091]
  - ACPI: fan: Update debug message in fan_get_state_acpi4() (Mark Langsdorf) [RHEL-114091]
  - ACPI: PRM: Reduce unnecessary printing to avoid user confusion (Mark Langsdorf) [RHEL-114091]
  - ACPI: fan: Replace sprintf() with sysfs_emit() (Mark Langsdorf) [RHEL-114091]
  - ACPI: processor: fix acpi_object initialization (Mark Langsdorf) [RHEL-114091]
  - ACPI: LPSS: Remove AudioDSP related ID (Mark Langsdorf) [RHEL-114091]
  - ACPI: fan: Replace sprintf()/scnprintf() with sysfs_emit() in show() functions (Mark Langsdorf) [RHEL-114091]
  - ACPI: PM: Set .detach in acpi_general_pm_domain definition (Mark Langsdorf) [RHEL-114091]
  - ACPI: pfr_update: Add more debug information when firmware update failed (Mark Langsdorf) [RHEL-114091]
  - ACPI: proc: Prefer to use octal permission (Mark Langsdorf) [RHEL-114091]
  - ACPI: proc: Use str_enabled_disabled() helper (Mark Langsdorf) [RHEL-114091]
  - ACPI: proc: Remove unused header (Mark Langsdorf) [RHEL-114091]
  - ACPI: proc: Use correct format specifier and drop casting (Mark Langsdorf) [RHEL-114091]
  - ACPI: wakeup: Drop unneeded casting for sleep_state (Mark Langsdorf) [RHEL-114091]
  - ACPICA: Decrease `AcpiExTracePoint` verbosity (Mark Langsdorf) [RHEL-114091]
  - ACPICA: Refuse to evaluate a method if arguments are missing (Mark Langsdorf) [RHEL-114091]
  - ACPI: Enable CONFIG_ACPI_DEBUG by default (Mark Langsdorf) [RHEL-114091]
  - ACPI: resource: Use IRQ override on MACHENIKE 16P (Mark Langsdorf) [RHEL-114091]
  - ACPI: EC: Ignore ECDT tables with an invalid ID string (Mark Langsdorf) [RHEL-114091]
  - ACPI: CPPC: Fix NULL pointer dereference when nosmp is used (Mark Langsdorf) [RHEL-114091]
  - ACPI: PAD: Update arguments of mwait_idle_with_hints() (Mark Langsdorf) [RHEL-114091]
  - ACPICA: Switch back to using strncpy() in acpi_ut_safe_strncpy() (Mark Langsdorf) [RHEL-114091]
  - ACPI: MRRM: Silence error code static checker warning (Mark Langsdorf) [RHEL-114091]
  - ACPI: MRRM: Fix default max memory region (Mark Langsdorf) [RHEL-114091]
  - ACPI: irq: Introduce acpi_get_gsi_dispatcher() (Mark Langsdorf) [RHEL-114091]
  - ACPI: bus: Bail out if acpi_kobj registration fails (Mark Langsdorf) [RHEL-114091]
  - ACPI: thermal: Execute _SCP before reading trip points (Mark Langsdorf) [RHEL-114091]
  - ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions" (Mark Langsdorf) [RHEL-114091]
  - ACPI: tables: Improve logging around acpi_initialize_tables() (Mark Langsdorf) [RHEL-114091]
  - ACPI: VIOT: Remove (explicitly) unused header (Mark Langsdorf) [RHEL-114091]
  - ACPI: MRRM: Add /sys files to describe memory ranges (Mark Langsdorf) [RHEL-114091]
  - ACPI: MRRM: Minimal parse of ACPI MRRM table (Mark Langsdorf) [RHEL-114091]
  - ACPICA: Update copyright year (Mark Langsdorf) [RHEL-114091]
  - ACPICA: Replace strncpy() with memcpy() (Mark Langsdorf) [RHEL-114091]
  - ACPICA: Utilities: Fix spelling mistake "Incremement" -> "Increment" (Mark Langsdorf) [RHEL-114091]
  - ACPICA: utilities: Fix overflow check in vsnprintf() (Mark Langsdorf) [RHEL-114091]
  - ACPI: EC: Add device to acpi_ec_no_wakeup[] qurik list (Mark Langsdorf) [RHEL-114091]
  - ACPI: PPTT: Fix processor subtable walk (Mark Langsdorf) [RHEL-114091]
  - ACPICA: Apply pack(1) to union aml_resource (Mark Langsdorf) [RHEL-114091]
  - ACPICA: Add support for printing AML arguments when trace point enabled (Mark Langsdorf) [RHEL-114091]
  - ACPI: processor: idle: Remove redundant pr->power.count assignment (Mark Langsdorf) [RHEL-114091]
  - ACPI: processor: idle: Set pr->flags.power unconditionally (Mark Langsdorf) [RHEL-114091]
  - ACPI: battery: Round capacity percengate to closest integer (Mark Langsdorf) [RHEL-114091]
  - ACPICA: exserial: don't forget to handle FFixedHW opregions for reading (Mark Langsdorf) [RHEL-114091]
  - ACPI: processor: idle: Remove obsolete comment (Mark Langsdorf) [RHEL-114091]
  - ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls (Mark Langsdorf) [RHEL-114091]
  - ACPI: EC: Set ec_no_wakeup for Lenovo Go S (Mark Langsdorf) [RHEL-114091]
  - ACPI: button: Only send `KEY_POWER` for `ACPI_BUTTON_NOTIFY_STATUS` (Mark Langsdorf) [RHEL-114091]
  - ACPI: video: Handle fetching EDID as ACPI_TYPE_PACKAGE (Mark Langsdorf) [RHEL-114091]
  - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-114091]
  - ACPI: x86: Extend Lenovo Yoga Tab 3 quirk with skip GPIO event-handlers (Mark Langsdorf) [RHEL-114091]
  - ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP (Mark Langsdorf) [RHEL-114091]
  - ACPI: PNP: Add Intel OC Watchdog IDs to non-PNP device list (Mark Langsdorf) [RHEL-114091]
  - ACPI: NUMA: Use str_enabled_disabled() helper function (Mark Langsdorf) [RHEL-114091]
  - ACPICA: Fix warnings from PR #295 merge (Mark Langsdorf) [RHEL-114091]
  - ACPICA: fix acpi parse and parseext cache leaks (Mark Langsdorf) [RHEL-114091]
  - ACPICA: fix acpi operand cache leak in dswstate.c (Mark Langsdorf) [RHEL-114091]
  - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register (Mark Langsdorf) [RHEL-114091]
  - ACPI: button: Install notifier for system events as well (Mark Langsdorf) [RHEL-114091]
  - acpi: nfit: fix narrowing conversion in acpi_nfit_ctl (Mark Langsdorf) [RHEL-114091]
  - hwmon: (acpi_power_meter) Fix the fake power alarm reporting (Mark Langsdorf) [RHEL-114091]
  - ACPI: fan: Add fan speed reporting for fans with only _FST (Mark Langsdorf) [RHEL-114091]
  - ACPI: HED: Always initialize before evged (Mark Langsdorf) [RHEL-114091]
  - ACPI: video: Use str_yes_no() helper in acpi_video_bus_add() (Mark Langsdorf) [RHEL-114091]
  - ACPI: power: Use str_on_off() helper function (Mark Langsdorf) [RHEL-114091]
  - ACPI: thermal: Fix stale comment regarding trip points (Mark Langsdorf) [RHEL-114091]
  - ACPI: tables: Use string choice helpers (Mark Langsdorf) [RHEL-114091]
  - x86/amd: Use heterogeneous core topology for identifying boost numerator (Mark Langsdorf) [RHEL-114091]
  - ACPI: resource: fix a typo for MECHREVO in irq1_edge_low_force_override[] (Mark Langsdorf) [RHEL-82671]
  - genirq: Unexport nr_irqs (Mark Langsdorf) [RHEL-82671]
  - genirq: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - fs/procfs: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - xen/events: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - serial: ucc_uart: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - serial: cpm_uart: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - serial: amba-pl011: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - serial: amba-pl010: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - serial: 8250: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - serial: core: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - scsi: aha152x: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - net: 3com: 3c59x: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - hpet: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - s390/irq: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - powerpc/cell: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - x86/aperfmperf: Fix deadlock on cpu_hotplug_lock (Mark Langsdorf) [RHEL-82671]
  - ACPI: bus: implement acpi_device_hid when !ACPI (Mark Langsdorf) [RHEL-82671]
  - ACPI: bus: implement for_each_acpi_consumer_dev when !ACPI (Mark Langsdorf) [RHEL-82671]
  - ACPI: header: implement acpi_device_handle when !ACPI (Mark Langsdorf) [RHEL-82671]
  - ACPI: bus: implement for_each_acpi_dev_match when !ACPI (Mark Langsdorf) [RHEL-82671]
  - ACPI: bus: change the prototype for acpi_get_physical_device_location (Mark Langsdorf) [RHEL-82671]
  - ACPI: GTDT: Relax sanity checking on Platform Timers array count (Mark Langsdorf) [RHEL-82671]
  - ACPI: PRM: Remove unnecessary strict handler address checks (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: IRQ override for Eluktronics MECH-17 (Mark Langsdorf) [RHEL-82671]
  - ACPI: property: Fix return value for nval == 0 in acpi_data_prop_read() (Mark Langsdorf) [RHEL-82671]
  - ACPI: x86: Add skip i2c clients quirk for Vexia EDU ATLA 10 tablet 5V (Mark Langsdorf) [RHEL-82671]
  - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices(). (Mark Langsdorf) [RHEL-82671]
  - APEI: GHES: Have GHES honor the panic= setting (Mark Langsdorf) [RHEL-82671]
  - mm/early_ioremap: add null pointer checks to prevent NULL-pointer dereference (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: Fix random crashes due to bad kfree() (Mark Langsdorf) [RHEL-82671]
  - hwmon: (acpi_power_meter) Fix update the power trip points on failure (Mark Langsdorf) [RHEL-82671]
  - hwmon: (acpi_power_meter) Fix uninitialized variables (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: acpi_dev_irq_override(): Check DMI match last (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] (Mark Langsdorf) [RHEL-82671]
  - ACPI: property: Consider data nodes as being available (Mark Langsdorf) [RHEL-82671]
  - ACPI: fan: cleanup resources in the error path of .probe() (Mark Langsdorf) [RHEL-82671]
  - ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: Rename extensions to hook in messages (Mark Langsdorf) [RHEL-82671]
  - ACPI: OSL: Use usleep_range() in acpi_os_sleep() (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Fix memory resource type union access (Mark Langsdorf) [RHEL-82671]
  - ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A (Mark Langsdorf) [RHEL-82671]
  - ACPI: introduce acpi_arch_init() (Mark Langsdorf) [RHEL-82671]
  - ACPI: x86: Clean up Asus entries in acpi_quirk_skip_dmi_ids[] (Mark Langsdorf) [RHEL-82671]
  - ACPI: x86: Add skip i2c clients quirk for Acer Iconia One 8 A1-840 (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor_idle: Use acpi_idle_play_dead() for all C-states (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: force native for Apple MacbookPro11,2 and Air7,2 (Mark Langsdorf) [RHEL-82671]
  - ACPI: CPPC: Fix _CPC register setting issue (Mark Langsdorf) [RHEL-82671]
  - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method (Mark Langsdorf) [RHEL-82671]
  - ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration() (Mark Langsdorf) [RHEL-82671]
  - ACPI: x86: Make UART skip quirks work on PCI UARTs without an UID (Mark Langsdorf) [RHEL-82671]
  - acpi/arm64: remove unnecessary cast (Mark Langsdorf) [RHEL-82671]
  - acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() (Mark Langsdorf) [RHEL-82671]
  - ACPI: allow building without CONFIG_HAS_IOPORT (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor_perflib: extend X86 dependency (Mark Langsdorf) [RHEL-82671]
  - ACPI: scan: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: SBSHC: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: SBS: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: power: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: pci_root: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: pci_link: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: event: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: EC: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: APD: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: thermal: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: Check for error code from devm_mutex_init() call (Mark Langsdorf) [RHEL-82671]
  - ACPI: GTDT: Tighten the check for the array of platform timer structures (Mark Langsdorf) [RHEL-82671]
  - ACPI: CPPC: Make rmw_lock a raw_spin_lock (Mark Langsdorf) [RHEL-82671]
  - ACPI: EC: make EC support compile-time conditional (Mark Langsdorf) [RHEL-82671]
  - redhat/configs: enable CONFIG_ACPI_EC (Mark Langsdorf) [RHEL-82671]
  - ACPI: pfr_telemetry: remove redundant error check on ret (Mark Langsdorf) [RHEL-82671]
  - cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception (Mark Langsdorf) [RHEL-82671]
  - ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[] (Mark Langsdorf) [RHEL-82671]
  - x86/acpi: Switch to irq_get_nr_irqs() and irq_set_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - genirq: Introduce irq_get_nr_irqs() and irq_set_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: Register power supply with power_supply_register() (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Fold Asus ExpertBook B1402C* and B1502C* DMI quirks together (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Make Asus ExpertBook B2502 matches cover more models (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Make Asus ExpertBook B2402 matches cover more models (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: use DEFINE_SIMPLE_DEV_PM_OPS (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: initialize mutexes through devm_ APIs (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: allocate driver data through devm_ APIs (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: check result of register_pm_notifier() (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: Fix possible crash when unregistering a battery hook (Mark Langsdorf) [RHEL-82671]
  - power: supply: core: add wakeup source inhibit by power_supply_config (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: Simplify battery hook locking (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: Add backlight=native quirk for Dell OptiPlex 5480 AIO (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[] (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[] (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Loosen the Asus E1404GAB DMI match to also cover the E1404GA (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Remove duplicate Asus E1504GAB IRQ override (Mark Langsdorf) [RHEL-82671]
  - ACPI: CPPC: Adjust debug messages in amd_set_max_freq_ratio() to warn (Mark Langsdorf) [RHEL-82671]
  - ACPI: CPPC: Drop check for non zero perf ratio (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Add another DMI match for the TongFang GMxXGxx (Mark Langsdorf) [RHEL-82671]
  - ACPI: CPPC: Add support for setting EPP register in FFH (Mark Langsdorf) [RHEL-82671]
  - ACPI: PM: Quirk ASUS ROG M16 to default to S3 sleep (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18 (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: use driver core managed async probing (Mark Langsdorf) [RHEL-82671]
  - ACPI: button: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: bus: Define and use symbols for device and class name lengths (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Skip IRQ override on Asus Vivobook Go E1404GAB (Mark Langsdorf) [RHEL-82671]
  - ACPI: CPPC: Fix MASK_VAL() usage (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Allow for more flexibility in _DSM args (Mark Langsdorf) [RHEL-82671]
  - ACPICA: iasl: handle empty connection_node (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Avoid warning for Dump Functions (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Add support for Windows 11 22H2 _OSI string (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Update integer-to-hex-string conversions (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Add support for supressing leading zeros in hex strings (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Allow for supressing leading zeros when using acpi_ex_convert_to_ascii() (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Fix memory leak if acpi_ps_get_next_field() fails (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Allow PCC Data Type in MCTP resource. (Mark Langsdorf) [RHEL-82671]
  - ACPICA: executer/exsystem: Don't nag user about every Stall() violating the spec (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Implement ACPI_WARNING_ONCE and ACPI_ERROR_ONCE (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Implement the Dword_PCC Resource Descriptor Macro (Mark Langsdorf) [RHEL-82671]
  - ACPICA: haiku: Fix invalid value used for semaphores (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Allow setting waking vector on reduced hardware platforms (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Detect FACS in reduced hardware build (Mark Langsdorf) [RHEL-82671]
  - ACPI: utils: Add rev/func to message when acpi_evaluate_dsm() fails (Mark Langsdorf) [RHEL-82671]
  - ACPI: x86: Make Lenovo Yoga Tab 3 X90F DMI match less strict (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: Make Lenovo Yoga Tab 3 X90F DMI match less strict (Mark Langsdorf) [RHEL-82671]
  - ACPI: scan: Refactor dependency creation (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: force native for Apple MacbookPro9,2 (Mark Langsdorf) [RHEL-82671]
  - ACPI: acpi_processor: Use strscpy instead() of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: AC: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: PAD: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Do IRQ override on MECHREV GM7XG0M (Mark Langsdorf) [RHEL-82671]
  - ACPI: APD: Add AMDI0015 as platform device (Mark Langsdorf) [RHEL-82671]
  - ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11 (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: Add backlight=native quirk for Dell OptiPlex 7760 AIO (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: Add Dell UART backlight controller detection (Mark Langsdorf) [RHEL-82671]
  - ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe() (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor: Reduce the log level of a per-CPU message about idle states (Mark Langsdorf) [RHEL-82671]
  - ACPI: sysfs: remove return value of acpi_device_setup_files() (Mark Langsdorf) [RHEL-82671]
  - ACPI: sysfs: manage sysfs attributes through device core (Mark Langsdorf) [RHEL-82671]
  - ACPI: sysfs: manage attributes as attribute_group (Mark Langsdorf) [RHEL-82671]
  - ACPI: sysfs: evaluate _STR on each sysfs access (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: Remove redundant NULL initalizations (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: EC: Do not release locks during operation region accesses (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Skip IRQ override on Asus Vivobook Pro N6506MJ (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: force native for some T2 macbooks (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: CPPC: Replace ternary operator with umax() (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Skip IRQ override on Asus Vivobook Pro N6506MU (Mark Langsdorf) [RHEL-82671]
  - ACPI: PMIC: Constify struct pmic_table (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: Add support for charge limiting state (Mark Langsdorf) [RHEL-82671]
  - ACPI: bus: Indicate support for battery charge limiting thru _OSC (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: add devm_battery_hook_register() (Mark Langsdorf) [RHEL-82671]
  - ACPI: Add post_eject to struct acpi_scan_handler for cpu hotplug (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor: Register deferred CPUs from acpi_processor_get_info() (Mark Langsdorf) [RHEL-82671]
  - ACPI: scan: switch to flags for acpi_scan_check_and_detach() (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor: Add acpi_get_processor_handle() helper (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor: Move checks and availability of acpi_processor earlier (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor: Drop duplicated check on _STA (enabled + present) (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor: Simplify initial onlining to use same path for cold and hotplug (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor: Fix memory leaks in error paths of processor_add() (Mark Langsdorf) [RHEL-82671]
  - ACPI / amba: Drop unnecessary check for registered amba_dummy_clk (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor: Downgrade Intel _OSC and _PDC messages to debug (Mark Langsdorf) [RHEL-82671]
  - ACPI: NFIT: add missing MODULE_DESCRIPTION() macro (Mark Langsdorf) [RHEL-82671]
  - ACPI: SBS: manage alarm sysfs attribute through psy core (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: use sysfs_emit over sprintf (Mark Langsdorf) [RHEL-82671]
  - ACPI: SBS: constify powersupply properties (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: create alarm sysfs attribute atomically (Mark Langsdorf) [RHEL-82671]
  - ACPI: AC: constify powersupply properties (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: constify powersupply properties (Mark Langsdorf) [RHEL-82671]
  - ACPI: PMIC: Replace open coded be16_to_cpu() (Mark Langsdorf) [RHEL-82671]
  - ACPI: PMIC: Convert pr_*() to dev_*() printing macros (Mark Langsdorf) [RHEL-82671]
  - ACPI: PMIC: Use sizeof() instead of hard coded value (Mark Langsdorf) [RHEL-82671]
  - ACPI: CPPC: add sysfs entry for guaranteed performance (Mark Langsdorf) [RHEL-82671]
  - ACPI: HMAT: Use ACCESS_COORDINATE_CPU when appropriate (Mark Langsdorf) [RHEL-82671]
  - ACPI: acpi_pad: Still evaluate _OST when _PUR evaluation fails (Mark Langsdorf) [RHEL-82671]
  - ACPI: x86: Switch to new Intel CPU model defines (Mark Langsdorf) [RHEL-82671]
  - ACPI: arm64: Sort entries alphabetically (Mark Langsdorf) [RHEL-82671]
  - ACPI: LPSS: Switch to new Intel CPU model defines (Mark Langsdorf) [RHEL-82671]
  - ACPI: fan: Add hwmon support (Mark Langsdorf) [RHEL-82671]
  - PM: sleep: core: Fix runtime PM enabling in device_resume_early() (Mark Langsdorf) [RHEL-109251]
  - drm/amd/pm: fix missing device_attr cleanup in amdgpu_pm_sysfs_init() (Mark Langsdorf) [RHEL-81536]
  - driver core: Drop unneeded 'extern' keyword in fwnode.h (Mark Langsdorf) [RHEL-109251]
  - ucsi_ccg: Disable async suspend in ucsi_ccg_probe() (Mark Langsdorf) [RHEL-109251]
  - soundwire: intel_auxdevice: Fix system suspend/resume handling (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: annotate RCU list iterations (Mark Langsdorf) [RHEL-109251]
  - regmap: irq: Avoid lockdep warnings with nested regmap-irq chips (Mark Langsdorf) [RHEL-109251]
  - regmap: irq: Free the regmap-irq mutex (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Rearrange suspend/resume error handling in the core (Mark Langsdorf) [RHEL-109251]
  - driver core: auxiliary bus: fix OF node leak (Mark Langsdorf) [RHEL-109251]
  - PM: runtime: Take active children into account in pm_runtime_get_if_in_use() (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Update power.completion for all devices on errors (Mark Langsdorf) [RHEL-109251]
  - regmap: get rid of redundant debugfs_file_{get,put}() (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Add strict_midlayer flag to struct dev_pm_info (Mark Langsdorf) [RHEL-109251]
  - PM: runtime: Introduce __rpm_get_driver_callback() (Mark Langsdorf) [RHEL-109251]
  - PM: Check power.needs_force_resume in pm_runtime_force_suspend() (Mark Langsdorf) [RHEL-109251]
  - PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit() (Mark Langsdorf) [RHEL-109251]
  - PM: Make pm_runtime_force_resume() work with DPM_FLAG_SMART_SUSPEND (Mark Langsdorf) [RHEL-109251]
  - PM: Move two sleep-related functions under CONFIG_PM_SLEEP (Mark Langsdorf) [RHEL-109251]
  - PM: Use true/false as power.needs_force_resume values (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Make async suspend handle suppliers like parents (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Make async resume handle consumers like children (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Drop superfluous might_sleep() calls (Mark Langsdorf) [RHEL-109251]
  - regmap: fix potential memory leak of regmap_bus (Mark Langsdorf) [RHEL-109251]
  - driver core: Add device_link_test() for testing device link flags (Mark Langsdorf) [RHEL-109251]
  - driver core: faux: Quiet probe failures (Mark Langsdorf) [RHEL-109251]
  - driver core: faux: Suppress bind attributes (Mark Langsdorf) [RHEL-109251]
  - regmap: kunit: Constify regmap_range_cfg array (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Add locking to dpm_async_resume_children() (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Fix power.is_suspended cleanup for direct-complete devices (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Fix list splicing in device suspend error paths (Mark Langsdorf) [RHEL-109251]
  - regmap-irq: Use dedicated interrupt wake setters (Mark Langsdorf) [RHEL-109251]
  - regmap: Move selecting for REGMAP_MDIO and REGMAP_IRQ (Mark Langsdorf) [RHEL-109251]
  - PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn() (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Introduce pm_sleep_transition_in_progress() (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Print PM debug messages during hibernation (Mark Langsdorf) [RHEL-109251]
  - PM: sysfs: Move debug runtime PM attributes to runtime_attrs[] (Mark Langsdorf) [RHEL-109251]
  - PM: wakeup: Add missing wakeup source attribute relax_count (Mark Langsdorf) [RHEL-109251]
  - firmware_loader: use SHA-256 library API instead of crypto_shash API (Mark Langsdorf) [RHEL-109251]
  - regcache: Use sort()'s default swap() implementation (Mark Langsdorf) [RHEL-109251]
  - PM: runtime: Add new devm functions (Mark Langsdorf) [RHEL-109251]
  - devres: Add devm_is_action_added() helper (Mark Langsdorf) [RHEL-109251]
  - devres: Move devm_*_action*() APIs to devres.h (Mark Langsdorf) [RHEL-109251]
  - devres: rename the first parameter of devm_add_action(_or_reset) (Mark Langsdorf) [RHEL-109251]
  - devres: Pass unique name of the resource to devm_add_action_or_reset() (Mark Langsdorf) [RHEL-109251]
  - PM: wakeup: Do not expose 4 device wakeup source APIs (Mark Langsdorf) [RHEL-109251]
  - driver core: auxiliary bus: Fix IS_ERR() vs NULL mixup in __devm_auxiliary_device_create() (Mark Langsdorf) [RHEL-109251]
  - property: Add functions to iterate named child (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Make suspend of devices more asynchronous (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Suspend async parents after suspending children (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Resume children after resuming the parent (Mark Langsdorf) [RHEL-109251]
  - software node: Correct a OOB check in software_node_get_reference_args() (Mark Langsdorf) [RHEL-109251]
  - drivers/base/memory: Avoid overhead from for_each_present_section_nr() (Mark Langsdorf) [RHEL-109251]
  - drivers/base: Extend documentation with preferred way to use auxbus (Mark Langsdorf) [RHEL-109251]
  - devres: simplify devm_kstrdup() using devm_kmemdup() (Mark Langsdorf) [RHEL-109251]
  - platform: replace magic number with macro PLATFORM_DEVID_NONE (Mark Langsdorf) [RHEL-109251]
  - component: do not try to unbind unbound components (Mark Langsdorf) [RHEL-109251]
  - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-109251]
  - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-109251]
  - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-109251]
  - driver core: auxiliary bus: add device creation helpers (Mark Langsdorf) [RHEL-109251]
  - driver core: faux: Add sysfs groups after probing (Mark Langsdorf) [RHEL-109251]
  - drivers/base/memory: improve add_boot_memory_block() (Mark Langsdorf) [RHEL-109251]
  - drivers/base/memory: simplify outputting of valid_zones_show() (Mark Langsdorf) [RHEL-109251]
  - arch_topology: Support SMT control for OF based system (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Fix handling devices with direct_complete set on errors (Mark Langsdorf) [RHEL-109251]
  - PM: clk: Remove unused pm_clk_remove() (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: core: Fix indentation in dpm_wait_for_children() (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Remove unused pm_generic_ wrappers (Mark Langsdorf) [RHEL-109251]
  - PM: runtime: Unify error handling during suspend and resume (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Rearrange dpm_async_fn() and async state clearing (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Rename power.async_in_progress to power.work_in_progress (Mark Langsdorf) [RHEL-109251]
  - PM: core: Tweak pm_runtime_block_if_disabled() return value (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Update power.smart_suspend under PM spinlock (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Adjust check before setting power.must_resume (Mark Langsdorf) [RHEL-109251]
  - PM: runtime: Drop status check from pm_runtime_force_resume() (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Suppress sleeping parent warning in special case (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Avoid unnecessary checks in device_prepare_smart_suspend() (Mark Langsdorf) [RHEL-109251]
  - driver core: Introduce device_{add,remove}_of_node() (Mark Langsdorf) [RHEL-109251]
  - driver core: faux: only create the device if probe() succeeds (Mark Langsdorf) [RHEL-109251]
  - drivers: base: component: add function to query the bound status (Mark Langsdorf) [RHEL-109251]
  - PM: clk: remove unused of_pm_clk_add_clk() (Mark Langsdorf) [RHEL-109251]
  - drivers: base: component: Add debug message for unbind (Mark Langsdorf) [RHEL-109251]
  - drivers: base: devres: Fix find_group() documentation (Mark Langsdorf) [RHEL-109251]
  - drivers: base: devres: Allow to release group on device release (Mark Langsdorf) [RHEL-109251]
  - devres: Introduce devm_kmemdup_array() (Mark Langsdorf) [RHEL-109251]
  - driver core: Split devres APIs to device/devres.h (Mark Langsdorf) [RHEL-109251]
  - driver core: location: Use str_yes_no() helper function (Mark Langsdorf) [RHEL-109251]
  - drivers: base: component: Allow more space for device name (Mark Langsdorf) [RHEL-109251]
  - drivers/base/bus.c: fix spelling of "subsystem" (Mark Langsdorf) [RHEL-109251]
  - driver core: class: Remove needless return in void API class_remove_file() (Mark Langsdorf) [RHEL-109251]
  - err.h: move IOMEM_ERR_PTR() to err.h (Mark Langsdorf) [RHEL-109251]
  - PM: runtime: Switch to use hrtimer_setup() (Mark Langsdorf) [RHEL-109251]
  - regmap: irq: Use one way of setting all bits in the register (Mark Langsdorf) [RHEL-109251]
  - devtmpfs: replace ->mount with ->get_tree in public instance (Mark Langsdorf) [RHEL-109251]
  - regmap: Reorder 'struct regmap' (Mark Langsdorf) [RHEL-109251]
  - spi: use container_of_cont() for to_spi_device() (Mark Langsdorf) [RHEL-81536]
  - cpumask: align text in comment (Mark Langsdorf) [RHEL-81536]
  - PM: runtime: Convert pm_runtime_blocked() to static inline (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Fix bit masking operation (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Use DPM_FLAG_SMART_SUSPEND conditionally (Mark Langsdorf) [RHEL-81536]
  - PM: runtime: Introduce pm_runtime_blocked() (Mark Langsdorf) [RHEL-81536]
  - PM: Block enabling of runtime PM during system suspend (Mark Langsdorf) [RHEL-81536]
  - PM: Rearrange documentation related to __pm_runtime_disable() (Mark Langsdorf) [RHEL-81536]
  - drivers: core: fix device leak in __fw_devlink_relax_cycles() (Mark Langsdorf) [RHEL-81536]
  - dio: Have dio_bus_match() callback take a const * (Mark Langsdorf) [RHEL-81536]
  - zorro: make match function take a const pointer (Mark Langsdorf) [RHEL-81536]
  - mfd: syscon: Use regmap max_register_is_0 as needed (Mark Langsdorf) [RHEL-81536]
  - driver core: add a faux bus for use when a simple device/bus is needed (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: core: Restrict power.set_active propagation (Mark Langsdorf) [RHEL-81536]
  - regmap-irq: Add missing kfree() (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: core: Synchronize runtime PM status of parents and children (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: wakeirq: Introduce device-managed variant of dev_pm_set_wake_irq() (Mark Langsdorf) [RHEL-81536]
  - devcoredump: Define 'struct bin_attribute' through macro (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Allow configuring the DPM watchdog to warn earlier than panic (Mark Langsdorf) [RHEL-81536]
  - device property: Split property reading bool and presence test ops (Mark Langsdorf) [RHEL-81536]
  - devres: add devm_remove_action_nowarn() (Mark Langsdorf) [RHEL-81536]
  - drivers: core: remove device_link argument from class_compat_[create|remove]_link (Mark Langsdorf) [RHEL-81536]
  - i2c: Remove I2C_COMPAT config symbol and related code (Mark Langsdorf) [RHEL-81536]
  - driver core: Move two simple APIs for finding child device to header (Mark Langsdorf) [RHEL-81536]
  - driver core: Introduce device_iter_t for device iterating APIs (Mark Langsdorf) [RHEL-81536]
  - driver core: Correct API device_for_each_child_reverse_from() prototype (Mark Langsdorf) [RHEL-81536]
  - driver core: Correct parameter check for API device_for_each_child_reverse_from() (Mark Langsdorf) [RHEL-81536]
  - driver core: Move true expression out of if condition in 3 device finding APIs (Mark Langsdorf) [RHEL-81536]
  - driver core: class: Fix wild pointer dereferences in API class_dev_iter_next() (Mark Langsdorf) [RHEL-81536]
  - devcoredump: cleanup some comments (Mark Langsdorf) [RHEL-81536]
  - driver core: Introduce an device matching API device_match_type() (Mark Langsdorf) [RHEL-81536]
  - driver core: Remove match_any() (Mark Langsdorf) [RHEL-81536]
  - driver core: Simplify API device_find_child_by_name() implementation (Mark Langsdorf) [RHEL-81536]
  - driver core: Constify API device_find_child() and adapt for various usages (Mark Langsdorf) [RHEL-81536]
  - driver core: have match() callback in struct bus_type take a const * (Mark Langsdorf) [RHEL-81536]
  - w1: Remove driver match function (Mark Langsdorf) [RHEL-81536]
  - kernel/range: Const-ify range_contains parameters (Mark Langsdorf) [RHEL-81536]
  - drivers: base: test: Add ...find_device_by...(... NULL) tests (Mark Langsdorf) [RHEL-81536]
  - drivers: base: test: Enable device model tests with KUNIT_ALL_TESTS (Mark Langsdorf) [RHEL-81536]
  - drivers: base: Don't match devices with NULL of_node/fwnode/etc (Mark Langsdorf) [RHEL-81536]
  - regmap: regmap_multi_reg_read(): make register list const (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: sysfs: don't include 'pm_wakeup.h' directly (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Update stale comment in device_resume() (Mark Langsdorf) [RHEL-81536]
  - regmap: cache: rbtree: use krealloc_array() to replace krealloc() (Mark Langsdorf) [RHEL-81536]
  - regmap: cache: mapple: use kmalloc_array() to replace kmalloc() (Mark Langsdorf) [RHEL-81536]
  - regmap: place foo / 8 and foo % 8 closer to each other (Mark Langsdorf) [RHEL-81536]
  - regmap: Use BITS_TO_BYTES() (Mark Langsdorf) [RHEL-81536]
  - regmap: cache: Use BITS_TO_BYTES() (Mark Langsdorf) [RHEL-81536]
  - regmap: detach regmap from dev on regmap_exit (Mark Langsdorf) [RHEL-81536]
  - regmap: Use correct format specifier for logging range errors (Mark Langsdorf) [RHEL-81536]
  - firmware_loader: Fix possible resource leak in fw_log_firmware_info() (Mark Langsdorf) [RHEL-81536]
  - drivers: core: fw_devlink: Fix excess parameter description in docstring (Mark Langsdorf) [RHEL-81536]
  - driver core: class: Correct WARN() message in APIs class_(for_each|find)_device() (Mark Langsdorf) [RHEL-81536]
  - cacheinfo: Use of_property_present() for non-boolean properties (Mark Langsdorf) [RHEL-81536]
  - drivers: core: fw_devlink: Make the error message a bit more useful (Mark Langsdorf) [RHEL-81536]
  - driver core: fw_devlink: Stop trying to optimize cycle detection logic (Mark Langsdorf) [RHEL-81536]
  - driver core: constify devlink class (Mark Langsdorf) [RHEL-81536]
  - driver core: Put device attribute @wakeup_last_time_ms and its show() together (Mark Langsdorf) [RHEL-81536]
  - cacheinfo: Don't opencode per_cpu_cacheinfo() (Mark Langsdorf) [RHEL-81536]
  - driver core: auxiliary bus: Spelling s/pecific/specific/ (Mark Langsdorf) [RHEL-81536]
  - regmap: irq: Set lockdep class for hierarchical IRQ domains (Mark Langsdorf) [RHEL-81536]
  - regmap: maple: Provide lockdep (sub)class for maple tree's internal lock (Mark Langsdorf) [RHEL-81536]
  - regmap: kunit: Fix repeated test param (Mark Langsdorf) [RHEL-81536]
  - Revert "driver core: Fix uevent_show() vs driver detach race" (Mark Langsdorf) [RHEL-81536]
  - drivers/base: Remove unused auxiliary_find_device (Mark Langsdorf) [RHEL-81536]
  - firmware_loader: Reorganize kerneldoc parameter names (Mark Langsdorf) [RHEL-81536]
  - PM: domains: Support required OPPs in dev_pm_domain_attach_list() (Mark Langsdorf) [RHEL-81536]
  - OPP: Rework _set_required_devs() to manage a single device per call (Mark Langsdorf) [RHEL-81536]
  - OPP: fix error code in dev_pm_opp_set_config() (Mark Langsdorf) [RHEL-81536]
  - PM: domains: Fix alloc/free in dev_pm_domain_attach|detach_list() (Mark Langsdorf) [RHEL-81536]
  - driver core: Add device probe log helper dev_warn_probe() (Mark Langsdorf) [RHEL-81536]
  - regmap: Specifically test writing 0 as a value to sparse caches (Mark Langsdorf) [RHEL-81536]
  - regmap-irq: Consistently use memset32() in regmap_irq_thread() (Mark Langsdorf) [RHEL-81536]
  - driver core: attribute_container: Remove unused functions (Mark Langsdorf) [RHEL-81536]
  - driver core: Trivially simplify ((struct device_private *)curr)->device->p to @curr (Mark Langsdorf) [RHEL-81536]
  - devres: Correclty strip percpu address space of devm_free_percpu() argument (Mark Langsdorf) [RHEL-81536]
  - driver core: Make parameter check consistent for API cluster device_(for_each|find)_child() (Mark Langsdorf) [RHEL-81536]
  - platform: Make platform_bus_type constant (Mark Langsdorf) [RHEL-81536]
  - driver core: class: Check namespace relevant parameters in class_register() (Mark Langsdorf) [RHEL-81536]
  - driver:base:core: Adding a "Return:" line in comment for device_link_add() (Mark Langsdorf) [RHEL-81536]
  - drivers/base: Introduce device_match_t for device finding APIs (Mark Langsdorf) [RHEL-81536]
  - firmware_loader: Block path traversal (Mark Langsdorf) [RHEL-81536]
  - regmap: kunit: Add coverage of spinlocked regmaps (Mark Langsdorf) [RHEL-81536]
  - regcache: use map->alloc_flags also for allocating cache (Mark Langsdorf) [RHEL-81536]
  - regmap: Use locking during kunit tests (Mark Langsdorf) [RHEL-81536]
  - regmap: Hold the regmap lock when allocating and freeing the cache (Mark Langsdorf) [RHEL-81536]
  - driver core: Use 2-argument strscpy() (Mark Langsdorf) [RHEL-81536]
  - driver core: Make use of returned value of dev_err_probe() (Mark Langsdorf) [RHEL-81536]
  - driver core: Use guards for simple mutex locks (Mark Langsdorf) [RHEL-81536]
  - driver core: Use kasprintf() instead of fixed buffer formatting (Mark Langsdorf) [RHEL-81536]
  - driver core: Sort headers (Mark Langsdorf) [RHEL-81536]
  - PM: domains: add device managed version of dev_pm_domain_attach|detach_list() (Mark Langsdorf) [RHEL-81536]
  - driver core: Fix a potential null-ptr-deref in module_add_driver() (Mark Langsdorf) [RHEL-81536]
  - driver core: bus: Add simple error handling for buses_init() (Mark Langsdorf) [RHEL-81536]
  - driver core: Remove unused parameter for virtual_device_parent() (Mark Langsdorf) [RHEL-81536]
  - driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute (Mark Langsdorf) [RHEL-81536]
  - driver core: Fix error handling in driver API device_rename() (Mark Langsdorf) [RHEL-81536]
  - driver core: Fix size calculation of symlink name for devlink_(add|remove)_symlinks() (Mark Langsdorf) [RHEL-81536]
  - drivers: cacheinfo: use __free attribute instead of of_node_put() (Mark Langsdorf) [RHEL-81536]
  - regmap: maple: work around gcc-14.1 false-positive warning (Mark Langsdorf) [RHEL-81536]
  - regmap: kunit: Add test cases for regmap_multi_reg_(read,write}() (Mark Langsdorf) [RHEL-81536]
  - regmap: Implement regmap_multi_reg_read() (Mark Langsdorf) [RHEL-81536]
  - driver core: module: make module_[add|remove]_driver take a const * (Mark Langsdorf) [RHEL-81536]
  - driver core: make driver_find_device() take a const * (Mark Langsdorf) [RHEL-81536]
  - driver core: make driver_[create|remove]_file take a const * (Mark Langsdorf) [RHEL-81536]
  - regmap-irq: handle const struct regmap_irq_sub_irq_map (Mark Langsdorf) [RHEL-81536]
  - devres: Correct code style for functions that return a pointer type (Mark Langsdorf) [RHEL-81536]
  - devres: Initialize an uninitialized struct member (Mark Langsdorf) [RHEL-81536]
  - devres: Fix devm_krealloc() wasting memory (Mark Langsdorf) [RHEL-81536]
  - cpumask: Add enabled cpumask for present CPUs that can be brought online (Mark Langsdorf) [RHEL-81536]
  - cpu: Do not warn on arch_register_cpu() returning -EPROBE_DEFER (Mark Langsdorf) [RHEL-81536]
  - regmap: add missing MODULE_DESCRIPTION() macros (Mark Langsdorf) [RHEL-81536]
  - driver core: make [device_]driver_attach take a const * (Mark Langsdorf) [RHEL-81536]
  - driver core: Make dev_err_probe() silent for -ENOMEM (Mark Langsdorf) [RHEL-81536]
  - drivers: arch_topology: use __free attribute instead of of_node_put() (Mark Langsdorf) [RHEL-81536]
  - drivers: arch_topology: Refactor do-while loops (Mark Langsdorf) [RHEL-81536]
  - regmap-i2c: add missing MODULE_DESCRIPTION() macro (Mark Langsdorf) [RHEL-81536]
  - regmap: kunit: Use array_size() and sizeof(*ptr) consistently (Mark Langsdorf) [RHEL-81536]
  - regmap: cache: Use correct type of the rb_for_each() parameter (Mark Langsdorf) [RHEL-81536]
  - regmap: spi: Fix potential off-by-one when calculating reserved size (Mark Langsdorf) [RHEL-81536]
  - driver core: remove devm_device_add_groups() (Mark Langsdorf) [RHEL-81536]
  - regmap: kunit: add missing MODULE_DESCRIPTION() (Mark Langsdorf) [RHEL-81536]
  - regmap: kunit: Fix memory leaks in gen_regmap() and gen_raw_regmap() (Mark Langsdorf) [RHEL-81536]
  - regmap-i2c: Subtract reg size from max_write (Mark Langsdorf) [RHEL-81536]
  - driver core: Add device_show_string() helper for sysfs attributes (Mark Langsdorf) [RHEL-81536]
  - module: don't ignore sysfs_create_link() failures (Mark Langsdorf) [RHEL-81536]
  - regmap: spi: Add missing MODULE_DESCRIPTION() (Mark Langsdorf) [RHEL-81536]
  - regmap: Drop capitalisation in MODULE_DESCRIPTION() (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Take advantage of %ps to simplify debug output (Mark Langsdorf) [RHEL-81536]
  - driver core: Remove unused platform_notify, platform_notify_remove (Mark Langsdorf) [RHEL-81536]
  - driver core: Introduce device_link_wait_removal() (Mark Langsdorf) [RHEL-81536]
  - regmap: maple: Remove second semicolon (Mark Langsdorf) [RHEL-81536]
  - device: core: Log warning for devices pending deferred probe on timeout (Mark Langsdorf) [RHEL-81536]
  - driver: core: Use dev_* instead of pr_* so device metadata is added (Mark Langsdorf) [RHEL-81536]
  - driver: core: Log probe failure as error and with device metadata (Mark Langsdorf) [RHEL-81536]
  - driver core: Add FWLINK_FLAG_IGNORE to completely ignore a fwnode link (Mark Langsdorf) [RHEL-81536]
  - driver core: Adds flags param to fwnode_link_add() (Mark Langsdorf) [RHEL-81536]
  - driver core: Move fw_devlink stuff to where it belongs (Mark Langsdorf) [RHEL-81536]
  - firmware_loader: Suppress warning on FW_OPT_NO_WARN flag (Mark Langsdorf) [RHEL-81536]
  - PM: runtime: add tracepoint for runtime_status changes (Mark Langsdorf) [RHEL-81536]
  - regmap: rework ->max_register handling (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Call dpm_async_fn() directly in each suspend phase (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Move devices to new lists earlier in each suspend phase (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Move some assignments from under a lock (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: stats: Log errors right after running suspend callbacks (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: stats: Call dpm_save_failed_step() at most once per phase (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: stats: Define suspend_stats next to the code using it (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: stats: Use an array of step failure counters (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: stats: Use array of suspend step names (Mark Langsdorf) [RHEL-81536]
  - driver core: component: fix spellos (Mark Langsdorf) [RHEL-81536]
  - driver core: cpu: make cpu_subsys const (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Relocate two device PM core functions (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Simplify dpm_suspended_list walk in dpm_resume() (Mark Langsdorf) [RHEL-81536]
  - PM: QoS: Use kcalloc() instead of kzalloc() (Mark Langsdorf) [RHEL-81536]
  - class: fix use-after-free in class_register() (Mark Langsdorf) [RHEL-81536]
  - driver core: class: fix Excess kernel-doc description warning (Mark Langsdorf) [RHEL-81536]
  - driver core: mark remaining local bus_type variables as const (Mark Langsdorf) [RHEL-81536]
  - driver core: container: make container_subsys const (Mark Langsdorf) [RHEL-81536]
  - PM: fix missing rculist.h dependency (Mark Langsdorf) [RHEL-81536]
  - regmap: fix kcalloc() arguments order (Mark Langsdorf) [RHEL-81536]
  - driver core: Better advertise dev_err_probe() (Mark Langsdorf) [RHEL-81536]
  - driver core: Emit reason for pending deferred probe (Mark Langsdorf) [RHEL-81536]
  - driver core: Enable fw_devlink=rpm by default (Mark Langsdorf) [RHEL-81536]
  - device property: fwnode_property_get_reference_args allows NULL args now (Mark Langsdorf) [RHEL-81536]
  - software node: Let args be NULL in software_node_get_reference_args (Mark Langsdorf) [RHEL-81536]
  - software node: Remove usage of the deprecated ida_simple_xx() API (Mark Langsdorf) [RHEL-81536]
  - base: soc: Remove usage of the deprecated ida_simple_xx() API (Mark Langsdorf) [RHEL-81536]
  - drivers: base: Print a warning instead of panic() when register_cpu() fails (Mark Langsdorf) [RHEL-81536]
  - drivers: base: add arch_cpu_is_hotpluggable() (Mark Langsdorf) [RHEL-81536]
  - device property: Add fwnode_name_eq() (Mark Langsdorf) [RHEL-81536]
  - driver core: make device_is_dependent() static (Mark Langsdorf) [RHEL-81536]
  - devcoredump: Send uevent once devcd is ready (Mark Langsdorf) [RHEL-81536]
  - firmware_loader: Expand Firmware upload error codes with firmware invalid error (Mark Langsdorf) [RHEL-81536]
  - regmap: fix regmap_noinc_write() description (Mark Langsdorf) [RHEL-81536]
  - firmware_loader: Abort all upcoming firmware load request once reboot triggered (Mark Langsdorf) [RHEL-81536]
  - firmware_loader: Refactor kill_pending_fw_fallback_reqs() (Mark Langsdorf) [RHEL-81536]
  - driver core: Release all resources during unbind before updating device links (Mark Langsdorf) [RHEL-81536]
  - driver core: class: remove boilerplate code (Mark Langsdorf) [RHEL-81536]
  - dev_printk: add new dev_err_probe() helpers (Mark Langsdorf) [RHEL-109251]
  - driver core: Move dev_err_probe() to where it belogs (Mark Langsdorf) [RHEL-109251]
  - sysfs: Introduce DEFINE_SIMPLE_SYSFS_GROUP_VISIBLE() (Mark Langsdorf) [RHEL-81536]
  - sysfs: Document new "group visible" helpers (Mark Langsdorf) [RHEL-81536]
  - soundwire: sysfs: have the driver core handle the creation of the device groups (Mark Langsdorf) [RHEL-81536]
  - soundwire: sysfs: cleanup the logic for creating the dp0 sysfs attributes (Mark Langsdorf) [RHEL-81536]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-654.el9]
changelog:
  - x86/cpu: Rename and move CPU model entry for Diamond Rapids (David Arcari) [RHEL-129861]
  - x86/CPU/AMD: Prevent reset reasons from being retained across reboot (CKI Backport Bot) [RHEL-129867]
  - selftests/bpf: Clobber a lot of registers in tailcall_bpf2bpf_hierarchy tests (Gregory Bell) [RHEL-102718]
  - s390/bpf: Write back tail call counter for BPF_TRAMP_F_CALL_ORIG (Gregory Bell) [RHEL-102718]
  - s390/bpf: Write back tail call counter for BPF_PSEUDO_CALL (Gregory Bell) [RHEL-102718]
  - s390/bpf: Do not write tail call counter into helper and kfunc frames (Gregory Bell) [RHEL-102718]
  - s390/bpf: Describe the frame using a struct instead of constants (Gregory Bell) [RHEL-102718]
  - s390/bpf: Centralize frame offset calculations (Gregory Bell) [RHEL-102718]
  - s390/bpf: Use kernel's expoline thunks (Gregory Bell) [RHEL-102718]
  - s390/bpf: Add macros for calling external functions (Gregory Bell) [RHEL-102718]
  - bnxt_en: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Shruti Parab) [RHEL-108695]
  - bnxt_en: correct offset handling for IPv6 destination address (Shruti Parab) [RHEL-108695]
  - bnxt_en: Implement ethtool .set_tunable() for ETHTOOL_PFC_PREVENTION_TOUT (Shruti Parab) [RHEL-108695]
  - bnxt_en: Implement ethtool .get_tunable() for ETHTOOL_PFC_PREVENTION_TOUT (Shruti Parab) [RHEL-108695]
  - bnxt_en: Use VLAN_ETH_HLEN when possible (Shruti Parab) [RHEL-108695]
  - bnxt_en: Support for RoCE resources dynamically shared within VFs. (Shruti Parab) [RHEL-108695]
  - bnxt_en: Add err_qpc backing store handling (Shruti Parab) [RHEL-108695]
  - bnxt_en: hsi: Update FW interface to 1.10.3.133 (Shruti Parab) [RHEL-108695]
  - bnxt_en: Add fw log trace support for 5731X/5741X chips (Shruti Parab) [RHEL-108695]
  - bnxt_en: Improve bnxt_backing_store_cfg_v2() (Shruti Parab) [RHEL-108695]
  - bnxt_en: Optimize bnxt_sriov_disable() (Shruti Parab) [RHEL-108695]
  - bnxt_en: Remove unnecessary VF check in bnxt_hwrm_nvm_req() (Shruti Parab) [RHEL-108695]
  - bnxt_en: Drop redundant if block in bnxt_dl_flash_update() (Shruti Parab) [RHEL-108695]
  - bnxt_en: fix incorrect page count in RX aggr ring log (Shruti Parab) [RHEL-108695]
  - bnxt_en: Fix stats context reservation logic (Shruti Parab) [RHEL-108695]
  - bnxt_en: Adjust TX rings if reservation is less than requested (Shruti Parab) [RHEL-108695]
  - bnxt_en: Fix memory corruption when FW resources change during ifdown (Shruti Parab) [RHEL-108695]
  - bnxt_en: Add Hyper-V VF ID (Shruti Parab) [RHEL-108695]
  - bnxt_en: Add pcie_ctx_v2 support for ethtool -d (Shruti Parab) [RHEL-108695]
  - bnxt_en: Add pcie_stat_len to struct bp (Shruti Parab) [RHEL-108695]
  - bnxt_en: Refactor bnxt_get_regs() (Shruti Parab) [RHEL-108695]
  - bnxt: move bnxt_hsi.h to include/linux/bnxt/hsi.h (Shruti Parab) [RHEL-108695]
  - bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT (Shruti Parab) [RHEL-108695]
  - bnxt_en: Fix DCB ETS validation (Shruti Parab) [RHEL-108695]
  - bnxt_en: eliminate the compile warning in bnxt_request_irq due to CONFIG_RFS_ACCEL (Shruti Parab) [RHEL-108695]
  - bnxt: properly flush XDP redirect lists (Shruti Parab) [RHEL-108695]
  - bnxt_en: Improve comment wording and error return code (Shruti Parab) [RHEL-108695]
  - bnxt_en: Update MRU and RSS table of RSS contexts on queue reset (Shruti Parab) [RHEL-108695]
  - bnxt_en: Add a helper function to configure MRU and RSS (Shruti Parab) [RHEL-108695]
  - bnxt_en: Fix double invocation of bnxt_ulp_stop()/bnxt_ulp_start() (Shruti Parab) [RHEL-108695]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-655.el9]
changelog:
  - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137148] {CVE-2025-68287}
  - cpufreq/amd-pstate: Fix a regression leading to EPP 0 after hibernate (David Arcari) [RHEL-129866]
  - cpufreq/amd-pstate: Fix a regression leading to EPP 0 after resume (David Arcari) [RHEL-129866]
  - cpufreq/amd-pstate: Fix setting of CPPC.min_perf in active mode for performance governor (David Arcari) [RHEL-129866]
  - KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134723]
  - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-120685]
  - tick/sched: Limit non-timekeeper CPUs calling jiffies update (Phil Auld) [RHEL-132755]
  - PCI/ACPI: Fix pci_acpi_preserve_config() memory leak (Thilak KN) [RHEL-73305]
  - be2net: pass wrb_params in case of OS2BMC (Mohammad Heib) [RHEL-101842 RHEL-96554 RHEL-97699]
  - be2net: Use correct byte order and format string for TCP seq and ack_seq (Mohammad Heib) [RHEL-101842 RHEL-96554 RHEL-97699]
  - proc: block mounting on top of /proc/<pid>/fdinfo/* (Waiman Long) [RHEL-128728]
  - proc: block mounting on top of /proc/<pid>/fd/* (Waiman Long) [RHEL-128728]
  - proc: block mounting on top of /proc/<pid>/map_files/* (Waiman Long) [RHEL-128728]
  - proc: add proc_splice_unmountable() (Waiman Long) [RHEL-128728]
  - proc: proc_readfdinfo() -> proc_fdinfo_iterate() (Waiman Long) [RHEL-128728]
  - proc: proc_readfd() -> proc_fd_iterate() (Waiman Long) [RHEL-128728]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-656.el9]
changelog:
  - block: don't freeze queue for updating queue limits (Ming Lei) [RHEL-134978]
  - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID (David Arcari) [RHEL-129399]
  - x86/resctrl: Implement resctrl_arch_reset_cntr() and resctrl_arch_cntr_read() (David Arcari) [RHEL-129399]
  - fs/resctrl: Introduce counter ID read, reset calls in mbm_event mode (David Arcari) [RHEL-129399]
  - x86/resctrl: Refactor resctrl_arch_rmid_read() (David Arcari) [RHEL-129399]
  - scsi: lpfc: Update lpfc version to 14.4.0.12 (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Add capability to register Platform Name ID to fabric (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Allow support for BB credit recovery in point-to-point topology (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Modify kref handling for Fabric Controller ndlps (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Ensure unregistration of rpis for received PLOGIs (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb() (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Revise discovery related function headers and comments (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Update various NPIV diagnostic log messaging (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Copyright updates for 14.4.0.11 patches (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Update lpfc version to 14.4.0.11 (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Clean up extraneous phba dentries (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Use switch case statements in DIF debugfs handlers (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Define size of debugfs entry for xri rebalancing (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Use int type to store negative error codes (Paul Ely) [RHEL-127902]
  - scsi: lpfc: use min() to improve code (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Fix wrong function reference in a comment (Paul Ely) [RHEL-127902]
  - lpfc: don't use file->f_path.dentry for comparisons (Paul Ely) [RHEL-127902]
  - nvmet-auth: update sc_c in target host hash calculation (Chris Leech) [RHEL-127047]
  - nvmet-auth: update sc_c in host response (Chris Leech) [RHEL-127047]
  - nvme/tcp: handle tls partially sent records in write_space() (Chris Leech) [RHEL-127047]
  - nvme-auth: update sc_c in host response (Chris Leech) [RHEL-127047]
  - nvme-auth: use hkdf_expand_label() (Chris Leech) [RHEL-127047]
  - nvme-auth: add hkdf_expand_label() (Chris Leech) [RHEL-127047]
  - nvme-tcp: send only permitted commands for secure concat (Chris Leech) [RHEL-127047]
  - nvme-auth: update bi_directional flag (Chris Leech) [RHEL-127047]
  - nvme-auth: remove unneeded semicolon (Chris Leech) [RHEL-127047]
  - nvme-tcp: log TLS handshake failures at error level (Chris Leech) [RHEL-127047]
  - nvme-tcp: fix signedness bug in nvme_tcp_init_connection() (Chris Leech) [RHEL-127047]
  - nvme-tcp: fix connect failure on receiving partial ICResp PDU (Chris Leech) [RHEL-127047]
  - fbcon: Fix OOB access in font allocation (Jocelyn Falempe) [RHEL-107476]
  - fbcon: fix integer overflow in fbcon_do_set_font (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (Jocelyn Falempe) [RHEL-107476]
  - fbcon: Use 'bool' where appopriate (Jocelyn Falempe) [RHEL-107476]
  - fbcon: Introduce get_{fg,bg}_color() (Jocelyn Falempe) [RHEL-107476]
  - fbcon: fbcon_is_inactive() -> fbcon_is_active() (Jocelyn Falempe) [RHEL-107476]
  - fbcon: fbcon_cursor_noblink -> fbcon_cursor_blink (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Fix typo in Kconfig text for FB_DEVICE (Jocelyn Falempe) [RHEL-107476]
  - fbdev: svgalib: Clean up coding style (Jocelyn Falempe) [RHEL-107476]
  - fbdev: fix potential buffer overflow in do_register_framebuffer() (Jocelyn Falempe) [RHEL-107476]
  - fbcon: Fix outdated registered_fb reference in comment (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Include <linux/export.h> (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Remove trailing whitespaces (Jocelyn Falempe) [RHEL-107476]
  - video: screen_info: Relocate framebuffers behind PCI bridges (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var (Jocelyn Falempe) [RHEL-107476]
  - fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() (Jocelyn Falempe) [RHEL-107476]
  - fbcon: Make sure modelist not set on unregistered console (Jocelyn Falempe) [RHEL-107476]
  - dummycon: Trigger redraw when switching consoles with deferred takeover (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Send old blank state in FB_EVENT_BLANK (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Track display blanking state (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Rework fb_blank() (Jocelyn Falempe) [RHEL-107476]
  - fbcon: Use static attribute groups for sysfs entries (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Refactoring the fbcon packed pixel drawing routines (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Register sysfs groups through device_add_group (Jocelyn Falempe) [RHEL-107476]
  - mdacon: rework dependency list (Jocelyn Falempe) [RHEL-107476]
  - dummycon: fix default rows/cols (Jocelyn Falempe) [RHEL-107476]
  - dummycon: only build module if there are users (Jocelyn Falempe) [RHEL-107476]
  - fbcon: Use correct erase colour for clearing in fbcon (Jocelyn Falempe) [RHEL-107476]
  - fbdev: core: tileblit: Implement missing margin clearing for tileblit (Jocelyn Falempe) [RHEL-107476]
  - genirq/irqdesc: Prevent use-after-free in irq_find_at_or_after() (Aristeu Rozanski) [RHEL-114221]
  - genirq: Initialize resend_node hlist for all interrupt descriptors (Aristeu Rozanski) [RHEL-114221]
  - xen/events: avoid using info_for_irq() in xen_send_IPI_one() (Aristeu Rozanski) [RHEL-114221]
  - genirq: Fix software resend lockup and nested resend (Aristeu Rozanski) [RHEL-114221]
  - genirq: Use a maple tree for interrupt descriptor management (Aristeu Rozanski) [RHEL-114221]
  - genirq: Encapsulate sparse bitmap handling (Aristeu Rozanski) [RHEL-114221]
  - genirq: Use hlist for managing resend handlers (Aristeu Rozanski) [RHEL-114221]
  - Revert "arm64-64k: Increase max NR_IRQS from 64+8192 to 2^^19" (Aristeu Rozanski) [RHEL-114221]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-657.el9]
changelog:
  - powerpc/kexec: Enable SMT before waking offline CPUs (Mamatha Inamdar) [RHEL-137134]
  - dpll: zl3073x: Allow to configure phase offset averaging factor (CKI Backport Bot) [RHEL-118666]
  - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134429] {CVE-2025-40277}
  - PM: hibernate: shrink shmem pages after dev_pm_ops.prepare() (José Expósito) [RHEL-120786]
  - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (David Thompson) [RHEL-103900]
  - mlxbf-bootctl: Support sysfs entries for RTC battery status (David Thompson) [RHEL-103900]
  - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (David Thompson) [RHEL-103900]
  - gpio: mlxbf3: use platform_get_irq_optional() (David Thompson) [RHEL-103874]
  - gpio: mlxbf3: Support shutdown() function (David Thompson) [RHEL-103874]
  - pinctrl: mlxbf3: Fix return value check for devm_platform_ioremap_resource (David Thompson) [RHEL-104059]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-658.el9]
changelog:
  - powerpc/64s/slb: Fix SLB multihit issue during SLB preload (Mamatha Inamdar) [RHEL-104980]
  - KVM: arm64: Guard PMSCR_EL1 initialization with SPE presence check (Cornelia Huck) [RHEL-131243]
  - KVM: arm64: nv: Don't advance PC when pending an SVE exception (Cornelia Huck) [RHEL-131243]
  - KVM: arm64: Don't access ICC_SRE_EL2 if GICv3 doesn't support v2 compatibility (Cornelia Huck) [RHEL-131243]
  - KVM: arm64: Fix kvm_vcpu_{set,is}_be() to deal with EL2 state (Cornelia Huck) [RHEL-131243]
  - rtla/timerlat_bpf: Stop tracing on user latency (Tomas Glozar) [RHEL-125445]
  - cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() (David Arcari) [RHEL-129862]
  - dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-129505]
  - dlm: check for undefined release_option values (Alexander Aring) [RHEL-127940]
  - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-127940]
  - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-127940]
  - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-127940]
  - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-127940]
  - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-127940]
  - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-127940]
  - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-127940]
  - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-127940]
  - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-127940] {CVE-2025-23131}
  - bits: introduce fixed-type BIT_U*() (José Expósito) [RHEL-125803]
  - bits: introduce fixed-type GENMASK_U*() (José Expósito) [RHEL-125803]
  - bits: add comments and newlines to #if, #else and #endif directives (José Expósito) [RHEL-125803]
  - linux/bits.h: simplify GENMASK_INPUT_CHECK() (José Expósito) [RHEL-125803]
  - compiler.h: add const_true() (José Expósito) [RHEL-125803]
  - iopoll: Generalize read_poll_timeout() into poll_timeout_us() (José Expósito) [RHEL-125803]
  - PM: hibernate: Fix pm_hibernation_mode_is_suspend() build breakage (José Expósito) [RHEL-125803]
  - PM: hibernate: Add pm_hibernation_mode_is_suspend() (José Expósito) [RHEL-125803]
  - overflow: add range_overflows() and range_end_overflows() (José Expósito) [RHEL-125803]
  - list: add list_last_entry_or_null() (José Expósito) [RHEL-125803]
  - redhat: Temporary stop adding 'kernel' component to SBAT (Li Tian) [RHEL-124584]
  - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Li Tian) [RHEL-124584]
  - redhat: Add SBAT information to Linux kernel (Li Tian) [RHEL-124584]
  - x86/efi: Implement support for embedding SBAT data for x86 (Li Tian) [RHEL-124584]
  - efi: Fix .data section size calculations when .sbat is present (Li Tian) [RHEL-124584]
  - efi: Drop preprocessor directives from zboot.lds (Li Tian) [RHEL-124584]
  - efi: zboot specific mechanism for embedding SBAT section (Li Tian) [RHEL-124584]
  - mlxbf_gige: return EPROBE_DEFER if PHY IRQ is not available (David Thompson) [RHEL-104015]
  - mlxbf_gige: emit messages during open and probe failures (David Thompson) [RHEL-104015]
  - mlxbf_gige: disable RX filters until RX path initialized (David Thompson) [RHEL-104015]
  - mlxbf_gige: add support to display pause frame counters (David Thompson) [RHEL-104015]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-659.el9]
changelog:
  - mm: hugetlb: avoid soft lockup when mprotect to large memory area (Luiz Capitulino) [RHEL-139899]
  - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139488] {CVE-2025-68301}
  - block: fix race between wbt_enable_default and IO submission (Ming Lei) [RHEL-137734]
  - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137401] {CVE-2025-68285}
  - block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock (Ming Lei) [RHEL-136168]
  - net: mana: Handle hardware recovery events when probing the device (Maxim Levitsky) [RHEL-132184]
  - net: mana: Drop TX skb on post_work_request failure and unmap resources (Maxim Levitsky) [RHEL-132184]
  - net: mana: Handle SKB if TX SGEs exceed hardware limit (Maxim Levitsky) [RHEL-132184]
  - net: mana: Add standard counter rx_missed_errors (Maxim Levitsky) [RHEL-132184]
  - net: mana: Move hardware counter stats from per-port to per-VF context (Maxim Levitsky) [RHEL-132184]
  - net: mana: Support HW link state events (Maxim Levitsky) [RHEL-132184]
  - RDMA/mana_ib: Extend modify QP (Maxim Levitsky) [RHEL-132184]
  - net: mana: Reduce waiting time if HWC not responding (Maxim Levitsky) [RHEL-132184]
  - net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Maxim Levitsky) [RHEL-132184]
  - RDMA/mana_ib: Drain send wrs of GSI QP (Maxim Levitsky) [RHEL-132184]
  - net: hv_netvsc: fix loss of early receive events from host during channel open. (Maxim Levitsky) [RHEL-132184]
  - rv: Update RHEL kconfigs for 6.17 upstream code (Gabriele Monaco) [RHEL-114755]
  - redhat/configs: Move CONFIG_RV_PER_TASK_MONITORS to common/generic (Gabriele Monaco) [RHEL-114755]
  - New configs in kernel/trace (Gabriele Monaco) [RHEL-114755]
  - rv: Make rtapp/pagefault monitor depends on CONFIG_MMU (Gabriele Monaco) [RHEL-114755]
  - rv: Fully convert enabled_monitors to use list_head as iterator (Gabriele Monaco) [RHEL-114755]
  - rv: Fix missing mutex unlock in rv_register_monitor() (Gabriele Monaco) [RHEL-114755]
  - include/linux/rv.h: remove redundant include file (Gabriele Monaco) [RHEL-114755]
  - rv: Fix wrong type cast in enabled_monitors_next() (Gabriele Monaco) [RHEL-114755]
  - rv: Support systems with time64-only syscalls (Gabriele Monaco) [RHEL-114755]
  - Documentation/rv: Fix minor typo in monitor_synthesis page (Gabriele Monaco) [RHEL-114755]
  - rv: Add opid per-cpu monitor (Gabriele Monaco) [RHEL-114755]
  - rv: Add nrp and sssw per-task monitors (Gabriele Monaco) [RHEL-114755]
  - rv: Replace tss and sncid monitors with more complete sts (Gabriele Monaco) [RHEL-114755]
  - sched: Adapt sched tracepoints for RV task model (Gabriele Monaco) [RHEL-114755]
  - rv: Retry when da monitor detects race conditions (Gabriele Monaco) [RHEL-114755]
  - rv: Adjust monitor dependencies (Gabriele Monaco) [RHEL-114755]
  - rv: Use strings in da monitors tracepoints (Gabriele Monaco) [RHEL-114755]
  - rv: Remove trailing whitespace from tracepoint string (Gabriele Monaco) [RHEL-114755]
  - rv: Add da_handle_start_run_event_ to per-task monitors (Gabriele Monaco) [RHEL-114755]
  - rv: Fix wrong type cast in reactors_show() and monitor_reactor_show() (Gabriele Monaco) [RHEL-114755]
  - rv: Fix wrong type cast in monitors_show() (Gabriele Monaco) [RHEL-114755]
  - rv: Remove struct rv_monitor::reacting (Gabriele Monaco) [RHEL-114755]
  - rv: Remove rv_reactor's reference counter (Gabriele Monaco) [RHEL-114755]
  - rv: Merge struct rv_reactor_def into struct rv_reactor (Gabriele Monaco) [RHEL-114755]
  - rv: Merge struct rv_monitor_def into struct rv_monitor (Gabriele Monaco) [RHEL-114755]
  - rv: Remove unused field in struct rv_monitor_def (Gabriele Monaco) [RHEL-114755]
  - rv: Return init error when registering monitors (Gabriele Monaco) [RHEL-114755]
  - verification/rvgen: Organise Kconfig entries for nested monitors (Gabriele Monaco) [RHEL-114755]
  - tools/dot2c: Fix generated files going over 100 column limit (Gabriele Monaco) [RHEL-114755]
  - tools/rv: Stop gracefully also on SIGTERM (Gabriele Monaco) [RHEL-114755]
  - tools/rv: Do not skip idle in trace (Gabriele Monaco) [RHEL-114755]
  - verification/rvgen: Do not generate unused variables (Gabriele Monaco) [RHEL-114755]
  - verification/rvgen: Generate each variable definition only once (Gabriele Monaco) [RHEL-114755]
  - rv/ltl: Do not execute the Buchi automaton twice on start condition (Gabriele Monaco) [RHEL-114755]
  - verification/rvgen: Support the 'next' operator (Gabriele Monaco) [RHEL-114755]
  - panic: Fix up description of vpanic() (Gabriele Monaco) [RHEL-114755]
  - Documentation/rv: Add documentation for linear temporal logic monitors (Gabriele Monaco) [RHEL-114755]
  - verification/rvgen: Add support for linear temporal logic (Gabriele Monaco) [RHEL-114755]
  - verification/rvgen: Restructure the classes to prepare for LTL inclusion (Gabriele Monaco) [RHEL-114755]
  - verification/rvgen: Restructure the templates files (Gabriele Monaco) [RHEL-114755]
  - Documentation/rv: Prepare monitor synthesis document for LTL inclusion (Gabriele Monaco) [RHEL-114755]
  - verification/dot2k: Prepare the frontend for LTL inclusion (Gabriele Monaco) [RHEL-114755]
  - verification/dot2k: Replace is_container() hack with subparsers (Gabriele Monaco) [RHEL-114755]
  - verification/dot2k: Remove __buff_to_string() (Gabriele Monaco) [RHEL-114755]
  - verification/dot2k: Make a separate dot2k_templates/Kconfig_container (Gabriele Monaco) [RHEL-114755]
  - tracing: Remove pointless memory barriers (Gabriele Monaco) [RHEL-114755]
  - rv: Allow to configure the number of per-task monitor (Gabriele Monaco) [RHEL-114755]
  - rv: Add documentation for rtapp monitor (Gabriele Monaco) [RHEL-114755]
  - rv: Add rtapp_sleep monitor (Gabriele Monaco) [RHEL-114755]
  - rv: Add rtapp_pagefault monitor (Gabriele Monaco) [RHEL-114755]
  - riscv: mm: Add page fault trace points (Gabriele Monaco) [RHEL-114755]
  - x86/tracing, x86/mm: Move page fault tracepoints to generic (Gabriele Monaco) [RHEL-114755]
  - x86/tracing, x86/mm: Remove redundant trace_pagefault_key (Gabriele Monaco) [RHEL-114755]
  - rv: Add rtapp container monitor (Gabriele Monaco) [RHEL-114755]
  - rv: Add support for LTL monitors (Gabriele Monaco) [RHEL-114755]
  - rv: rename CONFIG_DA_MON_EVENTS to CONFIG_RV_MON_EVENTS (Gabriele Monaco) [RHEL-114755]
  - rv: Let the reactors take care of buffers (Gabriele Monaco) [RHEL-114755]
  - panic: Add vpanic() (Gabriele Monaco) [RHEL-114755]
  - kernel/panic.c: format kernel-doc comments (Gabriele Monaco) [RHEL-114755]
  - printk: Make vprintk_deferred() public (Gabriele Monaco) [RHEL-114755]
  - rv: Add #undef TRACE_INCLUDE_FILE (Gabriele Monaco) [RHEL-114755]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-660.el9]
changelog:
  - bpf, arm64: Do not audit capability check in do_jit() (CKI Backport Bot) [RHEL-126125]
  - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139285] {CVE-2025-40248}
  - x86/sev: Guard sev_evict_cache() with CONFIG_AMD_MEM_ENCRYPT (Paolo Bonzini) [RHEL-32892]
  - x86/sev: Evict cache lines during SNP memory validation (Paolo Bonzini) [RHEL-32892]
  - HID: intel-ish-hid: Fix -Wcast-function-type-strict in devm_ishtp_alloc_workqueue() (Tony Camuso) [RHEL-136560]
  - HID: intel-ish-hid: ipc: Separate hibernate callbacks in dev_pm_ops (Tony Camuso) [RHEL-136560]
  - HID: intel-ish-hid: Use IPC RESET instead of void message in ish_wakeup() (Tony Camuso) [RHEL-136560]
  - HID: intel-ish-hid: ipc: Always schedule FW reset work on RESET_NOTIFY/ACK (Tony Camuso) [RHEL-136560]
  - HID: intel-ish-ipc: Reset clients state on resume from D3 (Tony Camuso) [RHEL-136560]
  - HID: intel-ishtp-hid: Clear suspended flag only after connected on resume (Tony Camuso) [RHEL-136560]
  - HID: intel-ish-hid: Add ishtp_get_connection_state() interface (Tony Camuso) [RHEL-136560]
  - HID: intel-ish-hid: Use dedicated unbound workqueues to prevent resume blocking (Tony Camuso) [RHEL-136560]
  - HID: intel-ish-ipc: Remove redundant ready check after timeout function (Tony Camuso) [RHEL-136560]
  - HID: intel-ish-hid: Increase ISHTP resume ack timeout to 300ms (Tony Camuso) [RHEL-136560]
  - HID: intel-ish-hid: ipc: Add Wildcat Lake PCI device ID (Tony Camuso) [RHEL-136560]
  - hid: intel-ish-hid: Use PCI_DEVICE_DATA() macro for ISH device table (Tony Camuso) [RHEL-136560]
  - cifs: Fix deadlock in cifs_writepages during reconnect (Paulo Alcantara) [RHEL-132486]
  - irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131972] {CVE-2025-37819}
  - time/timecounter: Fix the lie that struct cyclecounter is const (Ivan Vecera) [RHEL-127559]
  - Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128894] {CVE-2025-40141}
  - ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128470] {CVE-2025-40185}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-661.el9]
changelog:
  - iavf: avoid deadlock by cancelling work without netdev lock in remove path (Mohammad Heib) [RHEL-130117]
  - tools/power turbostat: Validate APERF access for VMWARE (David Arcari) [RHEL-127044]
  - workqueue: Initialize wq_isolated_cpumask in workqueue_init_early() (Waiman Long) [RHEL-120441]
  - workqueue: add printf attribute to __alloc_workqueue() (Waiman Long) [RHEL-120441]
  - workqueue: Increase worker desc's length to 32 (Waiman Long) [RHEL-120441]
  - workqueue: Refactor worker ID formatting and make wq_worker_comm() use full ID string (Waiman Long) [RHEL-120441]
  - Revert "Drivers: hv: Add CONFIG_HYPERV_VMBUS option" (José Expósito) [RHEL-125801]
  - Reapply "drm/amdgpu: fix incorrect vm flags to map bo" (José Expósito) [RHEL-125801]
  - Reapply "drm/i915: Convert REG_GENMASK*() to fixed-width GENMASK_U*()" (José Expósito) [RHEL-125801]
  - drm/amd/display: Do not use CC_FLAGS_FPU/CC_FLAGS_NO_FPU (José Expósito) [RHEL-125801]
  - dma-buf: dma-heap: Do not use string literal in EXPORT_SYMBOL_NS_GPL (José Expósito) [RHEL-125801]
  - Revert "drm/sysfb: Find screen_info format with helpers" (José Expósito) [RHEL-125801]
  - Revert "change the calling conventions for vfs_parse_fs_string()" (José Expósito) [RHEL-125801]
  - drm/pagemap: Add missing parameter to vma_alloc_folio() (José Expósito) [RHEL-125801]
  - drm: Use previous includes (José Expósito) [RHEL-125801]
  - Revert "mm: make folio page count functions return unsigned" (José Expósito) [RHEL-125801]
  - redhat/configs: Add new configs from DRM 6.18 backport (José Expósito) [RHEL-125801]
  - Merge DRM changes from upstream v6.18-rc7..v6.18 (José Expósito) [RHEL-125801]
  - Merge DRM changes from upstream v6.18-rc6..v6.18-rc7 (José Expósito) [RHEL-125801]
  - Merge DRM changes from upstream v6.18-rc5..v6.18-rc6 (José Expósito) [RHEL-125801]
  - Merge DRM changes from upstream v6.18-rc4..v6.18-rc5 (José Expósito) [RHEL-125801]
  - Merge DRM changes from upstream v6.17..v6.18-rc4 (José Expósito) [RHEL-125801]
  - efi/x86: Memory protection on EfiGcdMemoryTypeMoreReliable (Lenny Szubowicz) [RHEL-95228]
  - mmc: dw_mmc: add exynos7870 DW MMC support (Steve Dunnagan) [RHEL-104061]
  - mmc: dw_mmc-bluefield: Add support for eMMC HW reset (Steve Dunnagan) [RHEL-104061]
  - mmc: dw_mmc: Use devm_mmc_alloc_host() helper (Steve Dunnagan) [RHEL-104061]
  - mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves (Steve Dunnagan) [RHEL-104061]
  - mmc: host: Fix typos in comments across various files (Steve Dunnagan) [RHEL-104061]
  - mmc: dw_mmc: allow biu and ciu clocks to defer (Steve Dunnagan) [RHEL-104061]
  - mmc: dw_mmc: Add support for platform specific eMMC HW reset (Steve Dunnagan) [RHEL-104061]
  - mmc: Convert from tasklet to BH workqueue (Steve Dunnagan) [RHEL-104061]
  - mmc: dw_mmc: Remove unused of_gpio.h (Steve Dunnagan) [RHEL-104061]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-662.el9]
changelog:
  - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139463] {CVE-2025-68305}
  - Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6 (Guillaume Nault) [RHEL-138491]
  - net: ethtool: update set_rxfh_indir to use ethtool_get_rx_ring_count helper (Ivan Vecera) [RHEL-132646]
  - net: ethtool: update set_rxfh to use ethtool_get_rx_ring_count helper (Ivan Vecera) [RHEL-132646]
  - net: ethtool: add get_rx_ring_count callback to optimize RX ring queries (Ivan Vecera) [RHEL-132646]
  - net: ethtool: remove the duplicated handling from ethtool_get_rxrings (Ivan Vecera) [RHEL-132646]
  - net: ethtool: add support for ETHTOOL_GRXRINGS ioctl (Ivan Vecera) [RHEL-132646]
  - net: ethtool: pass the num of RX rings directly to ethtool_copy_validate_indir (Ivan Vecera) [RHEL-132646]
  - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy (Adrian Moreno) [RHEL-137482]
  - powercap: intel_rapl: Add support for Wildcat Lake platform (CKI Backport Bot) [RHEL-95625]
  - Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136967] {CVE-2025-40294}
  - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136823] {CVE-2025-38568}
  - net/handshake: Fix memory leak in tls_handshake_accept() (Olga Kornievskaia) [RHEL-134735]
  - NFSv4: Fix an incorrect parameter when calling nfs4_call_sync() (Olga Kornievskaia) [RHEL-134735]
  - NFS: sysfs: fix leak when nfs_client kobject add fails (Olga Kornievskaia) [RHEL-134735]
  - pnfs: Set transport security policy to RPC_XPRTSEC_NONE unless using TLS (Olga Kornievskaia) [RHEL-134735]
  - pnfs: Fix TLS logic in _nfs4_pnfs_v4_ds_connect() (Olga Kornievskaia) [RHEL-134735]
  - NFSD: Never cache a COMPOUND when the SEQUENCE operation fails (Olga Kornievskaia) [RHEL-134735]
  - NFSD: Skip close replay processing if XDR encoding fails (Olga Kornievskaia) [RHEL-134735]
  - NFSD: Encode COMPOUND operation status on page boundaries (Olga Kornievskaia) [RHEL-134735]
  - NFSD: free copynotify stateid in nfs4_free_ol_stateid() (Olga Kornievskaia) [RHEL-134735]
  - NFSD: Fix crash in nfsd4_read_release() (Olga Kornievskaia) [RHEL-134735]
  - NFSD: Define a proc_layoutcommit for the FlexFiles layout type (Olga Kornievskaia) [RHEL-134735]
  - NFSv4.1: fix backchannel max_resp_sz verification check (Olga Kornievskaia) [RHEL-134735]
  - NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul() (Olga Kornievskaia) [RHEL-134735]
  - sunrpc: fix null pointer dereference on zero-length checksum (Olga Kornievskaia) [RHEL-134735]
  - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136257] {CVE-2025-40318}
  - net: vlan: sync VLAN features with lower device (CKI Backport Bot) [RHEL-80409]
  - mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134449] {CVE-2025-40258}
  - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134005] {CVE-2025-40240}
  - inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-116117]
  - inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-116117]
  - inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-116117]
  - inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-116117]
  - ipv4/route: avoid unused-but-set-variable warning (Guillaume Nault) [RHEL-116117]
  - net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133365]
  - openvswitch: Stricter validation for the userspace action (Paolo Valerio) [RHEL-115648]
  - openvswitch: Fix unsafe attribute parsing in output_userspace() (Paolo Valerio) [RHEL-115648]
  - net: openvswitch: fix nested key length validation in the set() action (Paolo Valerio) [RHEL-115648]
  - openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (Paolo Valerio) [RHEL-115648]
  - openvswitch: fix lockup on tx to unregistering netdev with carrier (Paolo Valerio) [RHEL-115648]
  - ethtool: Don't check for RXFH fields conflict when no input_xfrm is requested (Ivan Vecera) [RHEL-127561]
  - net: ethtool: don't mux RXFH via rxnfc callbacks (Ivan Vecera) [RHEL-127561]
  - eth: hns3: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: hinic: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: nfp: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: mlx5: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: qede: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: benet: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: sfc: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: sfc: siena: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: sfc: falcon: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: sxgbe: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: dpaa2: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: dpaa: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: niu: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: otx2: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: thunder: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: ena: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: bnxt: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: bnx2x: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: iavf: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: ice: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: i40e: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: fm10k: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: ixgbe: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: igc: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: igb: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: e1000e: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: lan743x: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: cxgb4: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: cisco: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: gianfar: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - net: drv: hyperv: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - net: drv: virtio: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - net: drv: vmxnet3: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: remove empty RXFH handling from drivers (Ivan Vecera) [RHEL-127561]
  - net: ethtool: add dedicated callbacks for getting and setting rxfh fields (Ivan Vecera) [RHEL-127561]
  - net: ethtool: require drivers to opt into the per-RSS ctx RXFH (Ivan Vecera) [RHEL-127561]
  - net: ethtool: remove the duplicated handling from rxfh and rxnfc (Ivan Vecera) [RHEL-127561]
  - net: ethtool: copy the rxfh flow handling (Ivan Vecera) [RHEL-127561]
  - net: ethtool: mm: reset verification status when link is down (Ivan Vecera) [RHEL-127569]
  - net: ethtool: mm: extract stmmac verification logic into common library (Ivan Vecera) [RHEL-127569]
  - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129085] {CVE-2025-40170}
  - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-129085]
  - net: ipv4: Consolidate ipv4_mtu and ip_dst_mtu_maybe_forward (Hangbin Liu) [RHEL-129085]
  - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129022] {CVE-2025-40135}
  - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128985] {CVE-2025-40158}
  - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128985]
  - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128985]
  - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128985]
  - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128985]
  - bpf: Fix mismatched RCU unlock flavour in bpf_out_neigh_v6 (Hangbin Liu) [RHEL-128985]
  - vrf: Fix lockdep splat in output path (Hangbin Liu) [RHEL-128985]
  - ipv6: remove nexthop_fib6_nh_bh() (Hangbin Liu) [RHEL-128985]
  - net: remove rcu_dereference_bh_rtnl() (Hangbin Liu) [RHEL-128985]
  - neighbour: switch to standard rcu, instead of rcu_bh (Hangbin Liu) [RHEL-128985]
  - ipv6: flowlabel: do not disable BH where not needed (Hangbin Liu) [RHEL-128985]
  - ipv6: remove one read_lock()/read_unlock() pair in rt6_check_neigh() (Hangbin Liu) [RHEL-128985]
  - neigh: introduce neigh_confirm() helper function (Hangbin Liu) [RHEL-128985]
  - net: Prevent use after free in netif_napi_set_irq_locked() (Petr Oros) [RHEL-83023]
  - net: move aRFS rmap management and CPU affinity to core (Petr Oros) [RHEL-83023]
  - xfrm: Check inner packet family directly from skb_dst (Hangbin Liu) [RHEL-95005]
  - xfrm: fix offloading of cross-family tunnels (Hangbin Liu) [RHEL-95005]
  - udp: also consider secpath when evaluating ipsec use for checksumming (Hangbin Liu) [RHEL-95005]
  - xfrm: restore GSO for SW crypto (Hangbin Liu) [RHEL-95005]
  - xfrm: always initialize offload path (Hangbin Liu) [RHEL-95005]
  - xfrm: check for PMTU in tunnel mode for packet offload (Hangbin Liu) [RHEL-95005]
  - xfrm: provide common xdo_dev_offload_ok callback implementation (Hangbin Liu) [RHEL-95005]
  - xfrm: rely on XFRM offload (Hangbin Liu) [RHEL-95005]
  - xfrm: simplify SA initialization routine (Hangbin Liu) [RHEL-95005]
  - xfrm: delay initialization of offload path till its actually requested (Hangbin Liu) [RHEL-95005]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-663.el9]
changelog:
  - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout (Michal Rábek) [RHEL-58952]
  - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140261] {CVE-2025-68349}
  - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131389] {CVE-2025-39933}
  - redhat/kernel.spec.template: Let kernel-modules installation rebuild initrd in UKI system (Li Tian) [RHEL-135721]
  - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129113] {CVE-2025-40154}
  - xfrm: bring back device check in validate_xmit_xfrm (Hangbin Liu) [RHEL-116770]
  - bonding: Fix multiple long standing offload races (Hangbin Liu) [RHEL-116770]
  - bonding: Mark active offloaded xfrm_states (Hangbin Liu) [RHEL-116770]
  - xfrm: Add explicit dev to .xdo_dev_state_{add,delete,free} (Hangbin Liu) [RHEL-116770]
  - xfrm: Remove unneeded device check from validate_xmit_xfrm (Hangbin Liu) [RHEL-116770]
  - xfrm: Use xdo.dev instead of xdo.real_dev (Hangbin Liu) [RHEL-116770]
  - net/mlx5: Avoid using xso.real_dev unnecessarily (Hangbin Liu) [RHEL-116770]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-664.el9]
changelog:
  - nvme: fix PCIe subsystem reset controller state transition (John Meneghini) [RHEL-137435]
  - powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling (John Meneghini) [RHEL-137435]
  - powerpc/eeh: Make EEH driver device hotplug safe (John Meneghini) [RHEL-137435] {CVE-2025-38576}
  - objtool: Fix standalone --hacks=jump_label (Rado Vrbovsky) [RHEL-114923]
  - objtool: Fix weak symbol detection (Rado Vrbovsky) [RHEL-114923]
  - objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq() (Rado Vrbovsky) [RHEL-114923]
  - bus: mhi: host: pci_generic: Set DMA mask for VFs (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: core: Improve mhi_sync_power_up handling for SYS_ERR state (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: host: pci_generic: Reset QDU100 while the MHI driver is removed (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: host: pci_generic: Add SRIOV support (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: host: pci_generic: Read SUBSYSTEM_VENDOR_ID for VF's to check status (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: host: Add support for separate controller configurations for VF and PF (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: ep: Fix chained transfer handling in read path (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: host: Notify EE change via uevent (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup() (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: host: pci_generic: Add support for all Foxconn T99W696 SKU variants (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135362]
  - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135362]
  - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135362]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-665.el9]
changelog:
  - sched: Fix build for modules using set_tsk_need_resched() (Gabriele Monaco) [RHEL-141542]
  - sched: Export hidden tracepoints to modules (Gabriele Monaco) [RHEL-141542]
  - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-138326]
  - devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (Petr Oros) [RHEL-121722]
  - devlink: Introduce switchdev_inactive eswitch mode (Petr Oros) [RHEL-121722]
  - devlink: Add new "max_mac_per_vf" generic device param (Petr Oros) [RHEL-121722]
  - devlink: region: correct port region lookup to use port_ops (Petr Oros) [RHEL-121722]
  - devlink rate: Remove unnecessary 'static' from a couple places (Petr Oros) [RHEL-121722]
  - devlink: Add a 'num_doorbells' driverinit param (Petr Oros) [RHEL-121722]
  - devlink: Add 'total_vfs' generic device param (Petr Oros) [RHEL-121722]
  - devlink: Make health reporter burst period configurable (Petr Oros) [RHEL-121722]
  - devlink: Introduce burst period for health reporter (Petr Oros) [RHEL-121722]
  - devlink: Move health reporter recovery abort logic to a separate function (Petr Oros) [RHEL-121722]
  - devlink: Move graceful period parameter to reporter ops (Petr Oros) [RHEL-121722]
  - devlink/port: Check attributes early and constify (Petr Oros) [RHEL-121722]
  - devlink/port: Simplify return checks (Petr Oros) [RHEL-121722]
  - netdevsim: add fw_update_flash_chunk_time_ms debugfs knobs (Petr Oros) [RHEL-121722]
  - devlink: Fix excessive stack usage in rate TC bandwidth parsing (Petr Oros) [RHEL-121722]
  - selftest: netdevsim: Add devlink rate tc-bw test (Petr Oros) [RHEL-121722]
  - devlink: Extend devlink rate API with traffic classes bandwidth management (Petr Oros) [RHEL-121722]
  - netlink: introduce type-checking attribute iteration for nlmsg (Petr Oros) [RHEL-121722]
  - docs: netdevsim: fixe typo in netdevsim documentation (Petr Oros) [RHEL-121722]
  - selftests: drv-net: import things in lib one by one (Petr Oros) [RHEL-121722]
  - documentation: networking: devlink: Fix a typo in devlink-trap.rst (Petr Oros) [RHEL-121722]
  - devlink: add value check to devlink_info_version_put() (Petr Oros) [RHEL-121722]
  - x86/bugs: Report correct retbleed mitigation status (Waiman Long) [RHEL-119225]
  - x86/bugs: Fix reporting of LFENCE retpoline (Waiman Long) [RHEL-119225]
  - x86/bugs: Fix spectre_v2 forcing (Waiman Long) [RHEL-119225]
  - x86/bugs: Remove uses of cpu_mitigations_off() (Waiman Long) [RHEL-119225]
  - x86/bugs: Simplify SSB cmdline parsing (Waiman Long) [RHEL-119225]
  - x86/bugs: Use early_param() for spectre_v2 (Waiman Long) [RHEL-119225]
  - x86/bugs: Use early_param() for spectre_v2_user (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for VMSCAPE (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for SSB (Waiman Long) [RHEL-119225]
  - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-119225]
  - x86/bugs: Fix GDS mitigation selecting when mitigation is off (Waiman Long) [RHEL-119225]
  - x86/bugs: Select best SRSO mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Print enabled attack vectors (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for TSA (Waiman Long) [RHEL-119225]
  - x86/pti: Add attack vector controls for PTI (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for ITS (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for SRSO (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for L1TF (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for spectre_v2 (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for BHI (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for spectre_v2_user (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for retbleed (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for spectre_v1 (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for GDS (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for SRBDS (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for RFDS (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for MMIO (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for TAA (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for MDS (Waiman Long) [RHEL-119225]
  - x86/bugs: Define attack vectors relevant for each bug (Waiman Long) [RHEL-119225]
  - x86/Kconfig: Add arch attack vector support (Waiman Long) [RHEL-119225]
  - cpu: Define attack vectors (Waiman Long) [RHEL-119225]
  - Documentation/x86: Document new attack vector controls (Waiman Long) [RHEL-119225]
  - x86/bugs: Clean up SRSO microcode handling (Waiman Long) [RHEL-119225]
  - x86/bugs: Use IBPB for retbleed if used by SRSO (Waiman Long) [RHEL-119225]
  - x86/bugs: Add SRSO_MITIGATION_NOSMT (Waiman Long) [RHEL-119225]
  - x86/bugs: Allow ITS stuffing in eIBRS+retpoline mode also (Waiman Long) [RHEL-119225]
  - x86/bugs: Remove its=stuff dependency on retbleed (Waiman Long) [RHEL-119225]
  - x86/bugs: Introduce cdt_possible() (Waiman Long) [RHEL-119225]
  - x86/bugs: Use switch/case in its_apply_mitigation() (Waiman Long) [RHEL-119225]
  - x86/bugs: Avoid warning when overriding return thunk (Waiman Long) [RHEL-119225]
  - x86/bugs: Simplify the retbleed=stuff checks (Waiman Long) [RHEL-119225]
  - x86/bugs: Avoid AUTO after the select step in the retbleed mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Fix spectre_v2 mitigation default on Intel (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure ITS mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Fix SRSO reporting on Zen1/2 with SMT disabled (Waiman Long) [RHEL-119225]
  - x86/cpu: Add "Old Microcode" docs to hw-vuln toctree (Waiman Long) [RHEL-119225]
  - x86/cpu: Help users notice when running old Intel microcode (Waiman Long) [RHEL-119225]
  - x86/cpufeatures: Shorten X86_FEATURE_CLEAR_BHB_LOOP_ON_VMEXIT (Waiman Long) [RHEL-119225]
  - x86/bugs: Remove X86_BUG_MMIO_UNKNOWN (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure SRSO mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure L1TF mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure SSB mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure spectre_v2 mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure BHI mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure spectre_v2_user mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure retbleed mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Allow retbleed=stuff only on Intel (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure spectre_v1 mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure GDS mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure SRBDS mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Remove md_clear_*_mitigation() (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure RFDS mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure MMIO mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure TAA mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure MDS mitigation (Waiman Long) [RHEL-119225]
  - KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 <=> 1 VM count transitions (Waiman Long) [RHEL-119225]
  - Documentation/x86: Update the naming of CPU features for /proc/cpuinfo (Waiman Long) [RHEL-119225]
  - redhat/configs: Enable CONFIG_CPU_MITIGATIONS (Waiman Long) [RHEL-119225]
  - cpu: Ignore "mitigations" kernel parameter if CPU_MITIGATIONS=n (Waiman Long) [RHEL-119225]
  - cpu: Re-enable CPU mitigations by default for !X86 architectures (Waiman Long) [RHEL-119225]
  - x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n (Waiman Long) [RHEL-119225]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-666.el9]
changelog:
  - wifi: rtw88: limit indirect IO under powered off for RTL8822CS (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: Fix firmware version handling (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Move mt76_abort_scan out of mt76_reset_device() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: hw_scan: Don't let the operating channel be last (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: always take beacon ies in link grading (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mvm: fix beacon template/fixed rate (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: fix aux ROC time event iterator usage (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211_hwsim: Fix possible NULL dereference (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: skip rate verification for not captured PSDUs (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: reject address change while connecting (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath11k: zero init info->status in wmi_process_mgmt_tx_comp() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211_hwsim: Limit destroy_on_close radio removal to netgroup (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - Revert "wifi: ath12k: Fix missing station power save configuration" (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: use wiphy_hrtimer_work for csa.switch_work (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: use wiphy_hrtimer_work for ml_reconf_work (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: use wiphy_hrtimer_work for ttlm_work (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: add an hrtimer based delayed work item (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - Revert "wifi: ath10k: avoid unnecessary wait for service ready message" (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: fix key tailroom accounting leak (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode (Jose Ignacio Tornos Martinez) [RHEL-132587] {CVE-2025-40321}
  - wifi: mac80211: reset FILS discovery and unsol probe resp intervals (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: fix potential use after free in iwl_mld_remove_link() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: free skb during idr cleanup callback (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath10k: Fix memory leak on unsupported WMI command (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: enforce CPU endian format for all QMI data (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Use 1KB Cache Flush Command for QoS TID Descriptors (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Fix flush cache failure during RX queue update (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Add Retry Mechanism for REO RX Queue Update Failures (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Refactor REO command to use ath12k_dp_rx_tid_rxq (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Refactor RX TID buffer cleanup into helper function (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Refactor RX TID deletion handling into helper function (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Increase DP_REO_CMD_RING_SIZE to 256 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: remove IEEE80211_CHAN_{1,2,4,8,16}MHZ flags (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: fix Rx packet handling when pubsta information is not available (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: remove ieee80211_s1g_channel_width (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: correctly initialise S1G chandef for STA (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: correctly implement and validate S1G chandef (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: remove tx_handlers_drop debugfs stats (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Remove redundant rcu_read_lock/unlock() in spin_lock (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211_hwsim: Add simulation support for NAN device (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Extend support for changing NAN configuration (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Export an API to check if NAN is started (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Get the correct interface for non-netdev skb status (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Track NAN interface start/stop (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Accept management frames on NAN interface (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Support Tx of action frame for NAN (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: Store the NAN cluster ID (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: Support Tx/Rx of action frame for NAN (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: Advertise supported NAN capabilities (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: nl80211: Add more NAN capabilities (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: Add cluster joined notification APIs (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: nl80211: Add NAN Discovery Window (DW) notification (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: nl80211: Add more configuration options for NAN commands (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Extend beacon miss handling for MLO non-AP STA (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Add support to handle reason inactivity STA kickout event for QCN9274/IPQ5332 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: enhance the WMI_PEER_STA_KICKOUT event with reasons and RSSI reporting (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: report station mode per-chain signal strength (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath10k: Fix connection after GTK rekeying (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath10k: avoid unnecessary wait for service ready message (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load() (Jose Ignacio Tornos Martinez) [RHEL-132587] {CVE-2025-39991}
  - wifi: ath10k: remove gpio number assignment (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath11k: Remove redundant semicolon (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: downgrade log level for CE buffer enqueue failure (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: fix wrong logging ID used for CE (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath11k: downgrade log level for CE buffer enqueue failure (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Add fallback for invalid channel number in PHY metadata (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: fix the fetching of combined rssi (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: fix HAL_PHYRX_COMMON_USER_INFO handling in monitor mode (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: fix signal in radiotap for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Add support to set per-radio RTS threshold (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: wow: enable TKIP related feature (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8922a: add TAS feature support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: open C2H event waiting window first before sending H2C command (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: renew a completion for each H2C command waiting C2H event (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852b: enable beacon tracking support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: debug: support SER L0 simulation (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: phy: initialize AFE by firmware element table (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: obtain RX path from ppdu status IE00 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: disable RTW89_PHYSTS_IE09_FTR_0 for ppdu status (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: use ieee80211_tx_info::driver_data to store driver TX info (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: chan: allow callers to check if a link has no managed chanctx (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: abort scan/roc on hw restart (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: improve phy reset on hw restart (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: fill User Priority in skb->priority for rx packets (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: set VTA in txwi (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: remove the mem_total field of STA_REC_BF command (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: disable promiscuous mode by default (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: use altx queue for offchannel tx on connac+ (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: fix updating beacon protection with beacons enabled (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: fix key add/remove imbalance (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: delete vif keys when requested (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: fix memory leak on mt7996_mcu_sta_key_tlv error (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: fix setting beacon protection keys (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: decrease timeout for commonly issued MCU commands (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: improve hardware restart reliability (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: remove redundant per-phy mac80211 calls during restart (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7921u: Add VID/PID for Netgear A7500 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt76_eeprom_override to int (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: support writing MAC TXD for AddBA Request (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7925: refine the txpower initialization flow (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7915: fix mt7981 pre-calibration (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Add mt76_dma_get_rxdmad_c_buf utility routione (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Decouple RRO logic from WED support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Add rx_queue_init callback (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Introduce RRO MSDU callbacks (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Convert mt7996_wed_rro_addr to LE (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Fix RX packets configuration for primary WED device (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Fix tx-queues initialization for second phy on mt7996 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Introduce the capability to reset MT7992 WED device (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Enable HW RRO for MT7992 chipset (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Initial DMA configuration for MT7992 WED support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Do not always enable NAPIs for WED RRO queues (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Differentiate between RRO data and RRO MSDU queues (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Remove q->ndesc check in mt76_dma_rx_fill() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Add reset_idx to reset_q mt76_queue_ops signature. (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Enable MLO support for client interfaces (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Set EML capabilities for AP interface (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Export MLO AP capabilities to mac80211 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Temporarily disable EPCS (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Implement MLD address translation for EAPOL (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Add all active links to poll list in mt7996_mac_tx_free() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Fix mt7996_reverse_frag0_hdr_trans for MLO (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Use proper link info in mt7996_mcu_add_group (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7921: Add 160MHz beamformee capability for mt7922 device (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7925: add pci restore for hibernate (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Check phy before init msta_link in mt7996_mac_sta_add_links() (Jose Ignacio Tornos Martinez) [RHEL-132587] {CVE-2025-40066}
  - wifi: mt76: mt7996: Use proper link_id in link_sta_rc_update callback (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Remove dead code in mt76_scan_work (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Use deflink for AMPDU rx reordering (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7921: add MBSSID support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: fix potential memory leak in mt76_wmac_probe() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7925: add MBSSID support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7925u: Add VID/PID for Netgear A9000 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Set proper link destination address in mt7996_tx() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Set def_wcid pointer in mt7996_mac_sta_init_link() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Fix mt7996_mcu_bss_mld_tlv routine (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Fix mt7996_mcu_sta_ba wcid configuration (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Overwrite unspecified link_id in mt7996_tx() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mwifiex: fix endianness handling in mwifiex_send_rgpower_table (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: Remove the redundant wiphy_dev (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: fix incorrect comment (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: update the time stamps in hidden ssid (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Fix HE capabilities element check (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: add tx_handlers_drop statistics to ethtool (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: CHANNEL_SURVEY_NOTIF is always supported (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: remove support of iwl_esr_mode_notif version 1 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: remove support from of sta cmd version 1 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: remove support of roc cmd version 5 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: remove support of mac cmd ver 2 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: don't consider phy cmd version 5 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: implement wowlan status notification API update (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: fw: Add ASUS to PPAG and TAS list (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: add kunit tests for nvm parse (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: api: add a flag to iwl_link_ctx_modify_flags (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: pcie: move ltr_enabled to the specific transport (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: pcie: move pm_support to the specific transport (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: rename iwl_finish_nic_init (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: replace SUPPRESS_CMD_ERROR_ONCE status bit with a boolean (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: add STATUS_FW_ERROR API (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: Add USB ID 2001:3327 for D-Link AX18U rev. A1 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: Add USB ID 2001:332a for D-Link AX9U rev. A1 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtl8xxxu: expose efuse via debugfs (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: Fix dentry reference leak in iwl_mld_add_link_debugfs (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mei: Remove unused flexible-array member in struct iwl_sap_hdr (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: Remove redundant header files (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: Remove duplicated include in trans.c (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mwifiex: fix double free in mwifiex_send_rgpower_table() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Fix 6 GHz Band capabilities element advertisement in lower bands (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: reduce the scope of rts_threshold (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: reduce the scope of link_id (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: brcmfmac: support AP isolation to restrict reachability between stations (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: nl80211: strict checking attributes for NL80211_CMD_SET_BSS (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: drivers: indicate support for attributes in NL80211_CMD_SET_BSS (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: nl80211: allow drivers to support subset of NL80211_CMD_SET_BSS (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: nl80211: Add EHT fixed Tx rate support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: kunit: add kunit tests for S1G PVB decoding (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: support parsing S1G TIM PVB (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: support block bitmap S1G TIM encoding (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: brcmfmac: fix 43752 SDIO FWVID incorrectly labelled as Cypress (CYW) (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mwifiex: send world regulatory domain to driver (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mwifiex: add rgpower table loading support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: brcmfmac: avoid assignment in if/else-if conditions in NVRAM load path (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: count reg connection element in the size (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: Remove unused tracepoints (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852bt: Remove redundant off_reverse variables (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: use int type to store negative error codes (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: add getting function of DMA channel v1 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: abstract getting function of DMA channel (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: add RPP parser v1 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: abstract RPP parser (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: add group BD address design (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: define TX/RX buffer descriptor pool (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: add struct rtw89_{tx,rx}_rings to put related fields (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: use RDU status of R_BE_PCIE_DMA_IMR_0_V1 instead for 8922DE (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: prepare interrupt related registers and functions for 8922DE (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: move chip ISR definition out from chip generation (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtl8xxxu: Remove TL-WN722N V2 (0x2357: 0x010c) from untested devices (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: don't support WH a step (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: remove a TODO (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: carefully select the PNVM source (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: make iwl_mld_rm_vif void (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: pcie: remember when interrupts are disabled (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: support TLC command version 5 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: gen1_2: move gen specific code to a function (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: gen1_2: rename iwl_trans_pcie_op_mode_enter (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: really remove hw_wfpm_id (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: remove unneeded jacket indication (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: don't publish TWT capabilities (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: trans: move dev_cmd_pool to trans specific (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: remove .pnvm files from module info (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: acpi: make iwl_guid static (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: uefi: remove runtime check of constant values (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: refactor iwl_pnvm_get_from_fs (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: iwl-config: include module.h (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: don't modify trans state where not needed (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: simplify iwl_trans_pcie_d3_resume (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: trans: remove STATUS_SUSPENDED (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: trans: remove d3 test code (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: remove dump file name extension support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mvm: remove d3 test code (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: add a new FW file numbering scheme (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: add few missing hcmd/notif names (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: Add debug log for second link (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: simplify iwl_poll_prph_bit return value (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: pcie: relocate finish_nic_init logic to gen1_2 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: trigger mlo scan only when not in EMLSR (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: don't check the cipher on resume (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: don't validate keys state on resume (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: rename iwl_mld_set_key_rx_seq (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: refactor iwl_mld_add_all_rekeys (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: don't consider old versions of PPAG (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: make ppag versioning clear (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - Reapply "wifi: iwlwifi: remove support of several iwl_ppag_table_cmd versions" (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: bump MIN API in HR/GF/BZ/SC/DR (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mvm: remove a function declaration (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld/mvm: set beacon protection capability in wowlan config (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mvm/mld: correctly retrieve the keyidx from the beacon (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: track BIGTK per link (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: support MLO rekey on resume (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mvm: cleanup cipher lookup in resume (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: cleanup cipher lookup in resume (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mvm: remove MLO code (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw88: Use led->brightness_set_blocking for PCI too (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: coex: Limit Wi-Fi scan slot cost to avoid A2DP glitch (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852c: update firmware crash trigger type for newer firmware (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852a: report average RSSI to avoid unnecessary scanning (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852a: report per-channel noise level by get_survey ops (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852bt: Simplify unnecessary if-else conditions in _dpk_onoff() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtl8xxxu: Don't claim USB ID 07b8:8188 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: fix group frames loss when connected to non-transmitted BSSID (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: fix BSSID comparison for non-transmitted BSSID (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852c: check LPS H2C command complete by C2H reg instead of done ack (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8851b: rfk: update TX wideband IQK (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8851b: rfk: update IQK TIA setting (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: wow: remove notify during WoWLAN net-detect (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: debug: add beacon_info debugfs (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: introduce beacon tracking to improve connection stability (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852bt: Use standard helper for string choice (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: add dummy C2H handlers for BCN resend and update done (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: print just once for unknown C2H events (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw88: Lock rtwdev->mutex before setting the LED (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw88: sdio: use indirect IO for device registers before power-on (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - ktime: Add us_to_ktime() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - net: convert to nla_get_*_default() [wireless] (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138032] {CVE-2025-38349}
  - blk-mq: Abort suspend when wakeup events are pending (Ming Lei) [RHEL-137855]
  - fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137099] {CVE-2025-40271}
  - idpf: set mac type when adding and removing MAC filters (Michal Schmidt) [RHEL-82234 RHEL-91991 RHEL-92017]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-667.el9]
changelog:
  - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() (Maurizio Lombardi) [RHEL-87800]
  - ata: libata-scsi: Fix system suspend for a security locked drive (Tomas Henzl) [RHEL-106827]
  - ata: ahci: Use correct DMI identifier for ASUSPRO-D840SA LPM quirk (Tomas Henzl) [RHEL-106827]
  - ata: libata-scsi: Fix ata_to_sense_error() status handling (Tomas Henzl) [RHEL-106827]
  - ata: ahci: Disallow LPM for Asus B550-F motherboard (Tomas Henzl) [RHEL-106827]
  - ata: ahci: Disallow LPM for ASUSPRO-D840SA motherboard (Tomas Henzl) [RHEL-106827]
  - ata: libata-scsi: Fix offsets for the fixed format sense data (Tomas Henzl) [RHEL-106827]
  - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137065] {CVE-2025-38024}
  - scsi: qla2xxx: Update version to 10.02.10.100-k (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Fix bsg_done() causing double free (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Query FW again before proceeding with login (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Validate sp before freeing associated memory (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Free sp in error path to fix system crash (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Delay module unload while fabric scan in progress (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Allow recovery for tape devices (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Add bsg interface to support firmware img validation (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Validate MCU signature before executing MBC 03h (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Add load flash firmware mailbox support for 28xxx (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Add support for 64G SFP speed (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Add Speed in SFP print information (Nilesh Javali) [RHEL-136530]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-668.el9]
changelog:
  - bonding: don't set oif to bond dev when getting NS target destination (CKI Backport Bot) [RHEL-128764]
  - thunderbolt: Add support for Intel Wildcat Lake (Desnes Nunes) [RHEL-95661]
  - crypto: seqiv - Do not use req->iv after crypto_aead_encrypt (Xin Long) [RHEL-118175]
  - redhat: hsr: Remove tech preview tainting (Felix Maurer) [RHEL-100941]
  - redhat: Package net/hsr selftests (Felix Maurer) [RHEL-127796]
  - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (Felix Maurer) [RHEL-127794]
  - hsr: Follow standard for HSRv0 supervision frames (Felix Maurer) [RHEL-127794]
  - hsr: Fix supervision frame sending on HSRv0 (Felix Maurer) [RHEL-127794]
  - net: hsr: prevent creation of HSR device with slaves from another netns (Felix Maurer) [RHEL-127794]
  - net/hsr: add interlink to fill_info output (Felix Maurer) [RHEL-127764 RHEL-127794]
  - net/hsr: add protocol version to fill_info output (Felix Maurer) [RHEL-127764 RHEL-127794]
  - hsr: hold rcu and dev lock for hsr_get_port_ndev (Felix Maurer) [RHEL-127794]
  - hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr (Felix Maurer) [RHEL-127794]
  - hsr: use rtnl lock when iterating over ports (Felix Maurer) [RHEL-127794]
  - hsr: use netdev_master_upper_dev_link() when linking lower ports (Felix Maurer) [RHEL-127794]
  - net, hsr: reject HSR frame if skb can't hold tag (Felix Maurer) [RHEL-127794] {CVE-2025-39703}
  - net: hsr: sync hw addr of slave2 according to slave1 hw addr on PRP (Felix Maurer) [RHEL-127794 RHEL-130474]
  - redhat: hsr: Enable KUnit test for PRP duplicate discard (Felix Maurer) [RHEL-127794]
  - net: hsr: Add KUnit test for PRP (Felix Maurer) [RHEL-127794]
  - net: hsr: Fix PRP duplicate detection (Felix Maurer) [RHEL-127794]
  - net: hsr: Create and export hsr_get_port_ndev() (Felix Maurer) [RHEL-127794]
  - net: hsr: remove synchronize_rcu() from hsr_add_port() (Felix Maurer) [RHEL-127794]
  - net: hsr: remove one synchronize_rcu() from hsr_del_port() (Felix Maurer) [RHEL-127794]
  - net: hsr: must allocate more bytes for RedBox support (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Add test for VLAN (Felix Maurer) [RHEL-127794 RHEL-130476]
  - net: hsr: Add VLAN CTAG filter support (Felix Maurer) [RHEL-127794 RHEL-130476]
  - net: hsr: Add VLAN support (Felix Maurer) [RHEL-127794 RHEL-130476]
  - tests: hsr: Increase timeout to 50 seconds (Felix Maurer) [RHEL-127794]
  - net: hsr: convert to use new timer APIs (Felix Maurer) [RHEL-127794]
  - net: hsr: Remove interlink_sequence_nr. (Felix Maurer) [RHEL-127794]
  - net: hsr: Use the seqnr lock for frames received via interlink port. (Felix Maurer) [RHEL-127794]
  - net: hsr: prevent NULL pointer dereference in hsr_proxy_announce() (Felix Maurer) [RHEL-127794]
  - net: hsr: cosmetic: Remove extra white space (Felix Maurer) [RHEL-127794]
  - treewide, timers: Rename from_timer() to timer_container_of() (Felix Maurer) [RHEL-100940 RHEL-127794]
  - net: hsr: Send supervisory frames to HSR network with ProxyNodeTable data (Felix Maurer) [RHEL-100940 RHEL-127794]
  - selftests: hsr: Extend the hsr_ping.sh test to use fixed MAC addresses (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Extend the hsr_redbox.sh test to use fixed MAC addresses (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Fix "File exists" errors for hsr_ping (Felix Maurer) [RHEL-127794]
  - test: hsr: Extend the hsr_redbox.sh to have more SAN devices connected (Felix Maurer) [RHEL-127794]
  - test: hsr: Call cleanup_all_ns when hsr_redbox.sh script exits (Felix Maurer) [RHEL-100940 RHEL-127794]
  - net: hsr: init prune_proxy_timer sooner (Felix Maurer) [RHEL-100940 RHEL-127794]
  - test: hsr: Add test for HSR RedBOX (HSR-SAN) mode of operation (Felix Maurer) [RHEL-100940 RHEL-127794]
  - test: hsr: Extract version agnostic information from ping command output (Felix Maurer) [RHEL-100940 RHEL-127794]
  - test: hsr: Move common code to hsr_common.sh file (Felix Maurer) [RHEL-100940 RHEL-127794]
  - test: hsr: Remove script code already implemented in lib.sh (Felix Maurer) [RHEL-100940 RHEL-127794]
  - net: hsr: Provide RedBox support (HSR-SAN) (Felix Maurer) [RHEL-100940 RHEL-127794]
  - net: hsr: Use full string description when opening HSR network device (Felix Maurer) [RHEL-127794]
  - net: hsr: Fix typo in the hsr_forward_do() function comment (Felix Maurer) [RHEL-127794]
  - net: hsr: constify the struct device_type usage (Felix Maurer) [RHEL-127794]
  - net: fill in MODULE_DESCRIPTION()s for HSR (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Extend the testsuite to also cover HSRv1. (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Reorder the testsuite. (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Use `let' properly. (Felix Maurer) [RHEL-127794]
  - net/hsr: Remove unused function declarations (Felix Maurer) [RHEL-127794]
  - net: ionic: map SKB after pseudo-header checksum prep (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: add dma_wmb() before ringing TX doorbell (Jakub Ramaseuski) [RHEL-127815]
  - ionic: convert to ndo_hwtstamp API (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Fix memory leak of admin q_wr (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Use ether_addr_copy instead of memcpy (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Fix build failure on SPARC due to xchg() operand size (Jakub Ramaseuski) [RHEL-127815]
  - ionic: use int type for err in ionic_get_module_eeprom_by_page (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Add Makefile/Kconfig to kernel build environment (Jakub Ramaseuski) [RHEL-127815]
  - RDMA: Add IONIC to rdma_driver_id definition (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Implement device stats ops (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Register device ops for miscellaneous functionality (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Register device ops for datapath (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Register device ops for control path (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Create device queues to support admin operations (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Register auxiliary module for ionic ethernet adapter (Jakub Ramaseuski) [RHEL-127815]
  - redhat/configs: Disable CONFIG_INFINIBAND_IONIC in generic (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Provide doorbell and CMB region information (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Provide interrupt allocation support for the RDMA driver (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Provide RDMA reset support for the RDMA driver (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Export the APIs from net driver to support device commands (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Update LIF identity with additional RDMA capabilities (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Create an auxiliary device for rdma driver (Jakub Ramaseuski) [RHEL-127815]
  - ethernet: ionic: Fix DMA mapping tests (Jakub Ramaseuski) [RHEL-127815]
  - ionic: cancel delayed work earlier in remove (Jakub Ramaseuski) [RHEL-127815]
  - ionic: clean dbpage in de-init (Jakub Ramaseuski) [RHEL-127815]
  - ionic: print firmware heartbeat as unsigned (Jakub Ramaseuski) [RHEL-127815]
  - ionic: Prevent driver/fw getting out of sync on devcmd(s) (Jakub Ramaseuski) [RHEL-127815]
  - redhat: enable TDX host config (Paolo Bonzini) [RHEL-115482]
  - KVM: TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-115482]
  - x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-115482]
  - x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-115482]
  - x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-115482]
  - x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-115482]
  - x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-115482]
  - x86/virt/tdx: Avoid indirect calls to TDX assembly functions (Paolo Bonzini) [RHEL-115482]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-669.el9]
changelog:
  - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144333] {CVE-2026-22998}
  - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-141483]
  - virtio-net: remove unused delayed refill worker (Laurent Vivier) [RHEL-139819]
  - virtio-net: don't schedule delayed refill worker (Laurent Vivier) [RHEL-139819]
  - virtio-net: don't re-enable refill work too early when NAPI is disabled (Laurent Vivier) [RHEL-139819]
  - virtio-net: disable delayed refill when pausing rx (Laurent Vivier) [RHEL-139819]
  - virtio-net: Refactor napi_disable paths (Laurent Vivier) [RHEL-139819]
  - virtio-net: Refactor napi_enable paths (Laurent Vivier) [RHEL-139819]
  - virtio_net: separate virtnet_tx_resize() (Laurent Vivier) [RHEL-139819]
  - virtio_net: separate virtnet_rx_resize() (Laurent Vivier) [RHEL-139819]
  - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137698] {CVE-2025-38403}
  - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Mamatha Inamdar) [RHEL-14156]
  - ftrace: Fix BPF fexit with livepatch (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/modules: replace stub allocation sentinel with an explicit counter (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: ensure ftrace record ops are always set for NOPs (Mamatha Inamdar) [RHEL-14156]
  - redhat: Add CONFIG_PPC_FTRACE_OUT_OF_LINE_NUM_RESERVE (Mamatha Inamdar) [RHEL-14156]
  - ftrace: fix incorrect hash size in register_ftrace_direct() (Mamatha Inamdar) [RHEL-14156]
  - kbuild: dummy-tools: pretend we understand -fpatchable-function-entry (Mamatha Inamdar) [RHEL-14156]
  - ftrace: Fix modification of direct_function hash while in use (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/ftrace: fix module loading without patchable function entries (Mamatha Inamdar) [RHEL-14156]
  - powerpc: Replace kretprobe code with rethook on powerpc (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/ftrace: fix clobbered r15 during livepatching (Mamatha Inamdar) [RHEL-14156]
  - powerpc/bpf: fix JIT code size calculation of bpf trampoline (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Fix ftrace bug with KASAN=y (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/bpf: Add support for bpf trampolines (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add support for DYNAMIC_FTRACE_WITH_DIRECT_CALLS (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add support for DYNAMIC_FTRACE_WITH_CALL_OPS (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/ftrace: Support .text larger than 32MB with out-of-line stubs (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/ftrace: Move ftrace sequence out of line (Mamatha Inamdar) [RHEL-14156]
  - kbuild: Add generic hook for architectures to use before the final vmlinux link (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add a postlink script to validate function tracer (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/bpf: Fold bpf_jit_emit_func_call_hlp() into bpf_jit_emit_func_call_rel() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Move ftrace stub used for init text before _einittext (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Skip instruction patching if the instructions are the same (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Remove pointer to struct module from dyn_arch_ftrace (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/ftrace: Nop out additional 'std' instruction emitted by gcc v5.x (Mamatha Inamdar) [RHEL-14156]
  - powerpc/kprobes: Use ftrace to determine if a probe is at function entry (Mamatha Inamdar) [RHEL-14156]
  - powerpc/trace: Account for -fpatchable-function-entry support by toolchain (Mamatha Inamdar) [RHEL-14156]
  - kbuild: move vmlinux.o rule to the top Makefile (Mamatha Inamdar) [RHEL-14156]
  - powerpc/code-patching: Use dedicated memory routines for patching (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Ignore ftrace locations in exit text sections (Mamatha Inamdar) [RHEL-14156]
  - powerpc: Fix build issue with LD_DEAD_CODE_DATA_ELIMINATION and FTRACE_MCOUNT_USE_PATCHABLE_FUNCTION_ENTRY (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add support for -fpatchable-function-entry (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Implement ftrace_replace_code() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Replace use of ftrace_call_replace() with ftrace_create_branch_inst() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Simplify ftrace_modify_call() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Simplify ftrace_make_call() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Simplify ftrace_make_nop() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add separate ftrace_init_nop() with additional validation (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Stop re-purposing linker generated long branches for ftrace (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Refactor ftrace_modify_code() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Simplify function_graph support in ftrace.c (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Use patch_instruction() return directly (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Refactor prepare_ftrace_return() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Have arch_ftrace_get_regs() return NULL unless FL_SAVE_REGS is set (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add recursion protection in prepare_ftrace_return() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Also save r1 in ftrace_caller() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: directly call of function graph tracer by ftrace caller (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Refactor ftrace_{en/dis}able_ftrace_graph_caller (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Implement CONFIG_DYNAMIC_FTRACE_WITH_ARGS (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Prepare PPC64's ftrace_caller() for CONFIG_DYNAMIC_FTRACE_WITH_ARGS (Mamatha Inamdar) [RHEL-14156]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-670.el9]
changelog:
  - memblock: Accept allocated memory before use in memblock_double_array() (Aristeu Rozanski) [RHEL-140475]
  - Reapply "Bluetooth: revert TX timestamping" for kernel v6.18 rebase. (David Marlin) [RHEL-141499]
  - Bluetooth: hci_sync: enable PA Sync Lost event (David Marlin) [RHEL-141499]
  - Bluetooth: SMP: Fix not generating mackey and ltk when repairing (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: mediatek: Avoid btusb_mtk_claim_iso_intf() NULL deref (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: lookup hci_conn on RX path on protocol side (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: Fix triggering cmd_timer for HCI_OP_NOP (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interface (David Marlin) [RHEL-141499]
  - Bluetooth: btrtl: Avoid loading the config file on security chips (David Marlin) [RHEL-141499]
  - Bluetooth: hci_event: Fix not handling PA Sync Lost event (David Marlin) [RHEL-141499]
  - Bluetooth: hci_conn: Fix not cleaning up PA_LINK connections (David Marlin) [RHEL-141499]
  - Bluetooth: 6lowpan: add missing l2cap_chan_lock() (David Marlin) [RHEL-141499]
  - Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions (David Marlin) [RHEL-141499]
  - Bluetooth: L2CAP: export l2cap_chan_hold for modules (David Marlin) [RHEL-141499]
  - Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion (David Marlin) [RHEL-141499]
  - Bluetooth: 6lowpan: reset link-local header on ipv6 recv path (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-141499]
  - Bluetooth: MGMT: cancel mesh send timer when hdev removed (David Marlin) [RHEL-141499]
  - Bluetooth: btrtl: Fix memory leak in rtlbt_parse_firmware_v2() (David Marlin) [RHEL-141499]
  - Bluetooth: hci_event: validate skb length for unknown CC opcode (David Marlin) [RHEL-141499]
  - Bluetooth: rfcomm: fix modem control handling (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: Fix tracking of periodic advertisement (David Marlin) [RHEL-141499]
  - Bluetooth: hci_conn: Fix connection cleanup with BIG with 2 or more BIS (David Marlin) [RHEL-141499]
  - Bluetooth: fix corruption in h4_recv_buf() after cleanup (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Fix event packet loss issue (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: Fix another instance of dst_type handling (David Marlin) [RHEL-141499]
  - Bluetooth: btmtksdio: Add pmctrl handling for BT closed state during reset (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: Fix BIS connection dst_type handling (David Marlin) [RHEL-141499]
  - Bluetooth: Avoid a couple dozen -Wflex-array-member-not-at-end warnings (David Marlin) [RHEL-141499]
  - Bluetooth: hci_sync: Fix using random address for BIG/PA advertisements (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: don't leak skb in ISO_CONT RX (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: free rx_skb if not consumed (David Marlin) [RHEL-141499]
  - Bluetooth: SCO: Fix UAF on sco_conn_free (David Marlin) [RHEL-141499]
  - Bluetooth: bcsp: receive data only if registered (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: Add new VID/PID 13d3/3633 for MT7922 (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: Add new VID/PID 13d3/3627 for MT7925 (David Marlin) [RHEL-141499]
  - Bluetooth: remove duplicate h4_recv_buf() in header (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: Check for unexpected bytes when defragmenting HCI frames (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: Print information of hcon on hci_low_sent (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: Print number of packets in conn->data_q (David Marlin) [RHEL-141499]
  - Bluetooth: Add function and line information to bt_dbg (David Marlin) [RHEL-141499]
  - Bluetooth: MGMT: Fix not exposing debug UUID on MGMT_OP_READ_EXP_FEATURES_INFO (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: Detect if an ISO link has stalled (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: Use sk_sndtimeo as conn_timeout (David Marlin) [RHEL-141499]
  - Bluetooth: HCI: Fix using LE/ACL buffers for ISO packets (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: Don't initiate CIS connections if there are no buffers (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Refactor Device Coredump (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Use strscpy() instead of strscpy_pad() (David Marlin) [RHEL-141499]
  - Bluetooth: Annotate struct hci_drv_rp_read_info with __counted_by_le() (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Define hdev->wakeup() callback (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: Add USB ID 2001:332a for D-Link AX9U rev. A1 (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Move model comment before its definition (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Add id of Scorpious, Panther Lake-H484 (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Add Bluetooth core/platform as comments (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Add support for _suspend() / _resume() (David Marlin) [RHEL-141499]
  - Bluetooth: btintel: Add support for BlazarIW core (David Marlin) [RHEL-141499]
  - Revert "Bluetooth: revert TX timestamping" (David Marlin) [RHEL-141499]
  - dm log-writes: Add missing set_freezable() for freezable kthread (Benjamin Marzinski) [RHEL-136400]
  - dm-raid: fix possible NULL dereference with undefined raid type (Benjamin Marzinski) [RHEL-136400]
  - dm-snapshot: fix 'scheduling while atomic' on real-time kernels (Benjamin Marzinski) [RHEL-136400]
  - dm-verity: fix unreliable memory allocation (Benjamin Marzinski) [RHEL-136400]
  - perf jitdump: Add sym/str-tables to build-ID generation (Michael Petlan) [RHEL-139923]
  - perf genelf: Fix NO_LIBDW=1 build (Michael Petlan) [RHEL-139923]
  - perf genelf: Remove libcrypto dependency and use built-in sha1() (Michael Petlan) [RHEL-139923]
  - perf util: add a basic SHA-1 implementation (Michael Petlan) [RHEL-139923]
  - dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-139700]
  - net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-131711]
  - net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-131711]
  - net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-131711]
  - gfs2: Clean up quotad timeout handling (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: Minor cosmetic remote delete cleanups (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: fix remote evict for read-only filesystems (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: fix freeze error handling (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129403]
  - redhat/configs: Add CONFIG_CRYPTO_DEV_QAT_6XXX (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix warning on adf_pfvf_pf_proto.c (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add bank state save and restore for qat_420xx (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix parameter order used in ICP_QAT_FW_COMN_FLAGS_BUILD (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix duplicate restarting msg during AER error (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add WQ_PERCPU to alloc_workqueue users (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - use simple_strtoull to improve qat_uclo_parse_num (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - Return pointer directly in adf_ctl_alloc_resources (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - Replace kzalloc() + copy_from_user() with memdup_user() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - use kcalloc() in qat_uclo_map_objs_from_mof() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add command queue telemetry counters for GEN6 (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add ring buffer idle telemetry counter for GEN6 (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - make adf_dev_autoreset() static (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - refactor ring-related debug functions (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix seq_file position update in adf_ring_next() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix DMA direction for compression on GEN2 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - flush misc workqueue during device shutdown (Vladislav Dronov) [RHEL-94929] {CVE-2025-39721}
  - crypto: qat - enable rate limiting feature for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add compression slice count for rate limiting (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add get_svc_slice_cnt() in device data structure (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add adf_rl_get_num_svc_aes() in rate limiting (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - relocate service related functions (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - consolidate service enums (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add decompression service for rate limiting (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - validate service in rate limiting sysfs api (Vladislav Dronov) [RHEL-94929]
  - Documentation: qat: update debugfs-driver-qat_telemetry for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - enable telemetry for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add decompression service to telemetry (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - enable power management debugfs for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - relocate power management debugfs helper APIs (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix virtual channel configuration for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add live migration enablers for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - relocate and rename bank state structure definition (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - relocate bank state helper functions (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - replace CHECK_STAT macro with static inline function (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - use pr_fmt() in adf_gen4_hw_data.c (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - disable ZUC-256 capability for QAT GEN5 (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - restore ASYM service support for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - remove duplicate masking for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - lower priority for skcipher and aead algorithms (Vladislav Dronov) [RHEL-94929]
  - Documentation: qat: update sysfs-driver-qat for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add support for decompression service to GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix state restore for banks with exceptions (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - allow enabling VFs in the absence of IOMMU (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - use unmanaged allocation for dc_data (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add missing header inclusion (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - enable reporting of error counters for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - enable RAS support for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat/qat_6xxx - Fix NULL vs IS_ERR() check in adf_probe() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add qat_6xxx driver (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add firmware headers for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - update firmware api (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - export adf_init_admin_pm() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - expose configuration functions (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - export adf_get_service_mask() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add GEN6 firmware loader (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - refactor FW signing algorithm (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - use pr_fmt() in qat uclo.c (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - refactor compression template logic (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - rename and relocate timer logic (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - include qat_common in top Makefile (Vladislav Dronov) [RHEL-94929]
  - workqueue: Add new WQ_PERCPU flag (Vladislav Dronov) [RHEL-94929]
  - bitfield: Add FIELD_MODIFY() helper (Vladislav Dronov) [RHEL-94929]
  - sprintf.h requires stdarg.h (Vladislav Dronov) [RHEL-94929]
  - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (CKI Backport Bot) [RHEL-130018] {CVE-2025-40168}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-671.el9]
changelog:
  - ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-137910]
  - ice: fix devlink reload call trace (Michal Schmidt) [RHEL-141485]
  - ice: add missing ice_deinit_hw() in devlink reinit path (Michal Schmidt) [RHEL-141485]
  - ice: Fix persistent failure in ice_get_rxfh (Michal Schmidt) [RHEL-141485]
  - ice: Fix incorrect timeout ice_release_res() (Michal Schmidt) [RHEL-141485]
  - ice: Avoid detrimental cleanup for bond during interface stop (Michal Schmidt) [RHEL-141485]
  - ice: initialize ring_stats->syncp (Michal Schmidt) [RHEL-141485]
  - ice: remove duplicate call to ice_deinit_hw() on error paths (Michal Schmidt) [RHEL-141485]
  - ice: move ice_deinit_dev() to the end of deinit paths (Michal Schmidt) [RHEL-141485]
  - ice: extract ice_init_dev() from ice_init() (Michal Schmidt) [RHEL-141485]
  - ice: move ice_init_pf() out of ice_init_dev() (Michal Schmidt) [RHEL-141485]
  - ice: move udp_tunnel_nic and misc IRQ setup into ice_init_pf() (Michal Schmidt) [RHEL-141485]
  - iavf: add RSS support for GTP protocol via ethtool (Michal Schmidt) [RHEL-141485]
  - ice: implement GTP RSS context tracking and configuration (Michal Schmidt) [RHEL-141485]
  - ice: add virtchnl definitions and static data for GTP RSS (Michal Schmidt) [RHEL-141485]
  - ice: ice_init_pf: destroy mutexes and xarrays on memory alloc failure (Michal Schmidt) [RHEL-141485]
  - ice: refactor to use helpers (Michal Schmidt) [RHEL-141485]
  - ice: add E830 Earliest TxTime First Offload support (Michal Schmidt) [RHEL-141485]
  - ice, libie: move fwlog code to libie (Michal Schmidt) [RHEL-141485]
  - ice: support egress drop rules on PF (Michal Schmidt) [RHEL-141485]
  - iavf: fix off-by-one issues in iavf_config_rss_reg() (Michal Schmidt) [RHEL-141485] {CVE-2025-71087}
  - iavf: clarify VLAN add/delete log messages and lower log level (Michal Schmidt) [RHEL-141485]
  - ice: fix comment typo and correct module format string (Michal Schmidt) [RHEL-141485]
  - iavf: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-141485] {CVE-2025-68752}
  - ice: fix PTP cleanup on driver removal in error path (Michal Schmidt) [RHEL-141485] {CVE-2025-68215}
  - ice: Extend PTYPE bitmap coverage for GTP encapsulated flows (Michal Schmidt) [RHEL-141485]
  - ice: improve TCAM priority handling for RSS profiles (Michal Schmidt) [RHEL-141485]
  - ice: add flow parsing for GTP and new protocol field support (Michal Schmidt) [RHEL-141485]
  - ice: Allow 100M speed for E825C SGMII device (Michal Schmidt) [RHEL-141485]
  - ice: fix usage of logical PF id (Michal Schmidt) [RHEL-141485]
  - ice: fix destination CGU for dual complex E825 (Michal Schmidt) [RHEL-141485]
  - ice: fix lane number calculation (Michal Schmidt) [RHEL-141485]
  - ice: move ice_init_interrupt_scheme() prior ice_init_pf() (Michal Schmidt) [RHEL-141485]
  - ice: move service task start out of ice_init_pf() (Michal Schmidt) [RHEL-141485]
  - ice: enforce RTNL assumption of queue NAPI manipulation (Michal Schmidt) [RHEL-141485]
  - ice: implement transmit hardware timestamp statistics (Michal Schmidt) [RHEL-141485]
  - ice: add tracking of good transmit timestamps (Michal Schmidt) [RHEL-141485]
  - ice: implement ethtool standard stats (Michal Schmidt) [RHEL-141485]
  - libie: fix string names for AQ error codes (Michal Schmidt) [RHEL-141485]
  - iavf: fix proper type for error code in iavf_resume() (Michal Schmidt) [RHEL-141485]
  - ice: Remove deprecated ice_lag_move_new_vf_nodes() call (Michal Schmidt) [RHEL-141485]
  - ice: move ice_qp_[ena|dis] for reuse (Michal Schmidt) [RHEL-141485]
  - ice: reregister fwlog after driver reinit (Michal Schmidt) [RHEL-141485]
  - ice: prepare for moving file to libie (Michal Schmidt) [RHEL-141485]
  - ice: move debugfs code to fwlog (Michal Schmidt) [RHEL-141485]
  - libie, ice: move fwlog admin queue to libie (Michal Schmidt) [RHEL-141485]
  - ice: drop driver specific structure from fwlog code (Michal Schmidt) [RHEL-141485]
  - ice: check for PF number outside the fwlog code (Michal Schmidt) [RHEL-141485]
  - ice: move out debugfs init from fwlog (Michal Schmidt) [RHEL-141485]
  - ice: allow calling custom send function in fwlog (Michal Schmidt) [RHEL-141485]
  - ice: add pdev into fwlog structure and use it for logging (Michal Schmidt) [RHEL-141485]
  - ice: introduce ice_fwlog structure (Michal Schmidt) [RHEL-141485]
  - ice: drop ice_pf_fwlog_update_module() (Michal Schmidt) [RHEL-141485]
  - ice: move get_fwlog_data() to fwlog file (Michal Schmidt) [RHEL-141485]
  - ice: make fwlog functions static (Michal Schmidt) [RHEL-141485]
  - ice: finish virtchnl.c split into rss.c (Michal Schmidt) [RHEL-141485]
  - ice: extract virt/rss.c: cleanup - p2 (Michal Schmidt) [RHEL-141485]
  - ice: extract virt/rss.c: cleanup - p1 (Michal Schmidt) [RHEL-141485]
  - ice: split RSS stuff out of virtchnl.c - copy back (Michal Schmidt) [RHEL-141485]
  - ice: split RSS stuff out of virtchnl.c - tmp rename (Michal Schmidt) [RHEL-141485]
  - ice: finish virtchnl.c split into queues.c (Michal Schmidt) [RHEL-141485]
  - ice: extract virt/queues.c: cleanup - p3 (Michal Schmidt) [RHEL-141485]
  - ice: extract virt/queues.c: cleanup - p2 (Michal Schmidt) [RHEL-141485]
  - ice: extract virt/queues.c: cleanup - p1 (Michal Schmidt) [RHEL-141485]
  - ice: split queue stuff out of virtchnl.c - copy back (Michal Schmidt) [RHEL-141485]
  - ice: split queue stuff out of virtchnl.c - tmp rename (Michal Schmidt) [RHEL-141485]
  - ice: fix incorrect counter for buffer allocation failures (Michal Schmidt) [RHEL-141485]
  - ice: add virt/ and move ice_virtchnl* files there (Michal Schmidt) [RHEL-141485]
  - ice: Implement support for SRIOV VFs across Active/Active bonds (Michal Schmidt) [RHEL-141485]
  - ice: cleanup capabilities evaluation (Michal Schmidt) [RHEL-141485]
  - ice: Cleanup variable initialization in LAG code (Michal Schmidt) [RHEL-141485]
  - ice: move LAG function in code to prepare for Active-Active (Michal Schmidt) [RHEL-141485]
  - ice: Add driver specific prefix to LAG defines (Michal Schmidt) [RHEL-141485]
  - ice: replace u8 elements with bool where appropriate (Michal Schmidt) [RHEL-141485]
  - ice: Remove casts on void pointers in LAG code (Michal Schmidt) [RHEL-141485]
  - ice: Don't use %pK through printk or tracepoints (Michal Schmidt) [RHEL-141485]
  - net: Fix typos [partial:ice] (Michal Schmidt) [RHEL-141485]
  - iavf: use libie_aq_str (Michal Schmidt) [RHEL-141485]
  - ice: use libie_aq_str (Michal Schmidt) [RHEL-141485]
  - libie: add adminq helper for converting err to str (Michal Schmidt) [RHEL-141485]
  - iavf: use libie adminq descriptors (Michal Schmidt) [RHEL-141485]
  - i40e: use libie adminq descriptors [partial:ice,libie] (Michal Schmidt) [RHEL-141485]
  - ixgbe: use libie adminq descriptors [partial:libie] (Michal Schmidt) [RHEL-141485]
  - ice, libie: move generic adminq descriptors to lib (Michal Schmidt) [RHEL-141485]
  - ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (Michal Schmidt) [RHEL-141485] {CVE-2025-38664}
  - ice: breakout common LAG code into helpers (Michal Schmidt) [RHEL-141485]
  - ice: convert ice_add_prof() to bitmap (Michal Schmidt) [RHEL-141485]
  - ice: add E835 device IDs (Michal Schmidt) [RHEL-141485]
  - ice: add 40G speed to Admin Command GET PORT OPTION (Michal Schmidt) [RHEL-141485]
  - ice: check correct pointer in fwlog debugfs (Michal Schmidt) [RHEL-141485]
  - ice: add NULL check in eswitch lag check (Michal Schmidt) [RHEL-141485] {CVE-2025-38526}
  - ice: introduce ice_get_vf_by_dev() wrapper (Michal Schmidt) [RHEL-141485]
  - ice: avoid rebuilding if MSI-X vector count is unchanged (Michal Schmidt) [RHEL-141485]
  - ice: use pci_iov_vf_id() to get VF ID (Michal Schmidt) [RHEL-141485]
  - ice: expose VF functions used by live migration (Michal Schmidt) [RHEL-141485]
  - ice: move ice_vsi_update_l2tsel to ice_lib.c (Michal Schmidt) [RHEL-141485]
  - ice: save RSS hash configuration for migration (Michal Schmidt) [RHEL-141485]
  - ice: add functions to get and set Tx queue context (Michal Schmidt) [RHEL-141485]
  - ice: add support for reading and unpacking Rx queue context (Michal Schmidt) [RHEL-141485]
  - eth: ice: drop the dead code related to rss_contexts (Michal Schmidt) [RHEL-141485]
  - ice: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Michal Schmidt) [RHEL-141485]
  - ice: add ref-sync dpll pins (Michal Schmidt) [RHEL-141485]
  - net: ice: Perform accurate aRFS flow match (Michal Schmidt) [RHEL-141485]
  - ice: add phase offset monitor for all PPS dpll inputs (Michal Schmidt) [RHEL-141485]
  - ice: add a separate Rx handler for flow director commands (Michal Schmidt) [RHEL-141485]
  - ice: change SMA pins to SDP in PTP API (Michal Schmidt) [RHEL-141485]
  - ice: redesign dpll sma/u.fl pins control (Michal Schmidt) [RHEL-141485]
  - ice: add link_down_events statistic (Michal Schmidt) [RHEL-141485]
  - net: intel: move RSS packet classifier types to libie (Michal Schmidt) [RHEL-141485]
  - net: intel: rename 'hena' to 'hashcfg' for clarity (Michal Schmidt) [RHEL-141485]
  - iavf: extract iavf_watchdog_step() out of iavf_watchdog_task() (Michal Schmidt) [RHEL-141485]
  - iavf: simplify watchdog_task in terms of adminq task scheduling (Michal Schmidt) [RHEL-141485]
  - iavf: centralize watchdog requeueing itself (Michal Schmidt) [RHEL-141485]
  - ice: make const read-only array dflt_rules static (Michal Schmidt) [RHEL-141485]
  - ice: improve error message for insufficient filter space (Michal Schmidt) [RHEL-141485]
  - ice: enable LLDP TX for VFs through tc (Michal Schmidt) [RHEL-141485]
  - ice: remove headers argument from ice_tc_count_lkups (Michal Schmidt) [RHEL-141485]
  - ice: receive LLDP on trusted VFs (Michal Schmidt) [RHEL-141485]
  - ice: do not add LLDP-specific filter if not necessary (Michal Schmidt) [RHEL-141485]
  - ice: fix check for existing switch rule (Michal Schmidt) [RHEL-141485]
  - ice: clear NAPI's IRQ numbers in ice_vsi_clear_napi_queues() (Michal Schmidt) [RHEL-141485]
  - ice: refactor ICE_TC_FLWR_FIELD_ENC_OPTS (Michal Schmidt) [RHEL-141485]
  - Revert "ice: Fix ice VF reset during iavf initialization" (Michal Schmidt) [RHEL-141485]
  - ice: Fix ice VF reset during iavf initialization (Michal Schmidt) [RHEL-141485]
  - net/ena: fix missing lock when update devlink params (Kamal Heib) [RHEL-127326]
  - net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable (Kamal Heib) [RHEL-127326]
  - net: ena: View PHC stats using debugfs (Kamal Heib) [RHEL-127326]
  - net: ena: Add debugfs support to the ENA driver (Kamal Heib) [RHEL-127326]
  - net: ena: Control PHC enable through devlink (Kamal Heib) [RHEL-127326]
  - net: ena: Add devlink port support (Kamal Heib) [RHEL-127326]
  - net: ena: Add device reload capability through devlink (Kamal Heib) [RHEL-127326]
  - net: ena: PHC silent reset (Kamal Heib) [RHEL-127326]
  - net: ena: Add PHC support in the ENA driver (Kamal Heib) [RHEL-127326]
  - net: ena: resolve WARN_ON when freeing IRQs (Kamal Heib) [RHEL-127326]
  - net: ena: use napi's aRFS rmap notifers (Kamal Heib) [RHEL-127326]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-672.el9]
changelog:
  - net: ipv4: convert ip_rcv_options to drop reasons (Antoine Tenart) [RHEL-139236]
  - net: ipv4: simplify drop reason handling in ip_rcv_finish_core (Antoine Tenart) [RHEL-139236]
  - net: ipv4: make udp_v4_early_demux explicitly return drop reason (Antoine Tenart) [RHEL-139236]
  - net/sched: Add precise drop reason for pfifo_fast queue overflows (Antoine Tenart) [RHEL-139236]
  - net: track pfmemalloc drops via SKB_DROP_REASON_PFMEMALLOC (Antoine Tenart) [RHEL-139236]
  - net: arp: use kfree_skb_reason() in arp_rcv() (Antoine Tenart) [RHEL-139236]
  - can: add drop reasons in CAN protocols receive path (Antoine Tenart) [RHEL-139236]
  - can: add drop reasons in the receive path of AF_CAN (Antoine Tenart) [RHEL-139236]
  - net: neigh: use kfree_skb_reason() in neigh_resolve_output() and neigh_connected_output() (Antoine Tenart) [RHEL-139236]
  - net: flush_backlog() small changes (Antoine Tenart) [RHEL-139236]
  - tcp: rstreason: let it work finally in tcp_send_active_reset() (Antoine Tenart) [RHEL-139236]
  - tcp: rstreason: introduce SK_RST_REASON_TCP_DISCONNECT_WITH_DATA for active reset (Antoine Tenart) [RHEL-139236]
  - tcp: rstreason: introduce SK_RST_REASON_TCP_KEEPALIVE_TIMEOUT for active reset (Antoine Tenart) [RHEL-139236]
  - tcp: rstreason: introduce SK_RST_REASON_TCP_STATE for active reset (Antoine Tenart) [RHEL-139236]
  - tcp: rstreason: introduce SK_RST_REASON_TCP_ABORT_ON_MEMORY for active reset (Antoine Tenart) [RHEL-139236]
  - tcp: rstreason: introduce SK_RST_REASON_TCP_ABORT_ON_LINGER for active reset (Antoine Tenart) [RHEL-139236]
  - tcp: rstreason: introduce SK_RST_REASON_TCP_ABORT_ON_CLOSE for active reset (Antoine Tenart) [RHEL-139236]
  - x86/lam: Disable ADDRESS_MASKING in most cases (Rafael Aquini) [RHEL-109600]
  - svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142791] {CVE-2025-68811}
  - mm: Create/affine kswapd to its preferred node (Rafael Aquini) [RHEL-135521]
  - mm: Create/affine kcompactd to its preferred node (Rafael Aquini) [RHEL-135521]
  - mm/vmscan: print err before panic (Rafael Aquini) [RHEL-135521]
  - kthread: Fix return value on kzalloc() failure in kthread_affine_preferred() (Rafael Aquini) [RHEL-135521]
  - kthread: Implement preferred affinity (Rafael Aquini) [RHEL-135521]
  - kthread: Default affine kthread to its preferred NUMA node (Rafael Aquini) [RHEL-135521]
  - kthread: Make sure kthread hasn't started while binding it (Rafael Aquini) [RHEL-135521]
  - sched,arm64: Handle CPU isolation on last resort fallback rq selection (Rafael Aquini) [RHEL-135521]
  - arm64: Exclude nohz_full CPUs from 32bits el0 support (Rafael Aquini) [RHEL-135521]
  - blk-mq: skip CPU offline notify on unmapped hctx (Ming Lei) [RHEL-140714]
  - padata: remove __padata_list_init() (Herbert Xu) [RHEL-127800]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-673.el9]
changelog:
  - s390/cio: Update purge function to unregister the unused subchannels (Mete Durlu) [RHEL-145337]
  - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145338]
  - platform/x86:intel/pmc: Enable SSRAM support for Wildcat Lake (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Remove redundant has_die_c6 variable (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Relocate lpm_req_guid to pmc_reg_map (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Rename PMC index variable to pmc_idx (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Add DMU GUID to Arrow Lake U/H (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Add support for multiple DMU GUIDs (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Update Arrow Lake telemetry GUID (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Replace dev_warn() with dev_dbg() (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Enable SSRAM support for Panther Lake (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Show substate requirement for S0ix blockers (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Improve function to show substate header (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Move telemetry endpoint register handling (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Enable SSRAM support for Lunar Lake (David Arcari) [RHEL-95637]
  - platform/x86/intel/pmc: Add Wildcat Lake support to Intel PMC SSRAM Telemetry (David Arcari) [RHEL-95637]
  - platform/x86/intel/pmc: use kcalloc() instead of kzalloc() (David Arcari) [RHEL-95637]
  - platform/x86/intel/vsec: Add support for Wildcat Lake (David Arcari) [RHEL-95637]
  - platform/x86/amd/hsmp: Replace amd_num_nodes() with topology_max_packages() (David Arcari) [RHEL-122802]
  - tools/power turbostat: Add Wildcat Lake and Nova Lake support (CKI Backport Bot) [RHEL-95677]
  - EDAC/i10nm: Add Intel Clearwater Forest server support (Aristeu Rozanski) [RHEL-45085]
  - ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-97718]
  - ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-97718]
  - ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-97718]
  - ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-97718]
  - ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-97718]
  - ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-97718]
  - ipmi:si: Merge some if statements (Tony Camuso) [RHEL-97718]
  - ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-97718]
  - ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-97718]
  - ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-97718]
  - ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-97718]
  - ipmi: Rework user message limit handling (Tony Camuso) [RHEL-97718]
  - Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-97718]
  - ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-97718]
  - char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-97718]
  - ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-97718]
  - ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-97718]
  - ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-97718]
  - ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-97718]
  - ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-97718]
  - ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-97718]
  - ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-97718]
  - ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-97718]
  - i40e: add rh_phys_port_name mod option to behave like upstream (Michal Schmidt) [RHEL-126034]
  - ice: add rh_phys_port_name mod option to behave like upstream (Michal Schmidt) [RHEL-126034]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-674.el9]
changelog:
  - s390/drivers: Remove unnecessary include <linux/export.h> (Mete Durlu) [RHEL-99995]
  - scsi: zfcp: Simplify workqueue allocation (Mete Durlu) [RHEL-99995]
  - s390/zfcp: Remove outdated email address (Mete Durlu) [RHEL-99995]
  - rcu/nocb: Add Safe checks for access offloaded rdp (Luis Claudio R. Goncalves) [RHEL-144727]
  - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137596] {CVE-2025-38459}
  - drm/amdkfd: Fix improper NULL termination of queue restore SMI event string (José Expósito) [RHEL-135337]
  - drm/amd/display: Fix DP no audio issue (José Expósito) [RHEL-135337]
  - drm/amd/pm: force send pcie parmater on navi1x (José Expósito) [RHEL-135337]
  - drm/amd/pm: fix wrong pcie parameter on navi1x (José Expósito) [RHEL-135337]
  - drm/amd/display: shrink struct members (José Expósito) [RHEL-135337]
  - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] (José Expósito) [RHEL-135337]
  - drm/tidss: Fix enable/disable order (José Expósito) [RHEL-135337]
  - drm/atomic-helper: Export and namespace some functions (José Expósito) [RHEL-135337]
  - drm/amdgpu: Fix query for VPE block_type and ip_count (José Expósito) [RHEL-135337]
  - drm/amd/display: Apply e4479aecf658 to dml (José Expósito) [RHEL-135337]
  - Revert "drm/atomic-helper: Re-order bridge chain pre-enable and post-disable" (José Expósito) [RHEL-135337]
  - nouveau: don't attempt fwsec on sb on newer platforms. (José Expósito) [RHEL-135337]
  - drm/imagination: Disallow exporting of PM/FW protected objects (José Expósito) [RHEL-135337]
  - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb (José Expósito) [RHEL-135337]
  - drm/pagemap, drm/xe: Ensure that the devmem allocation is idle before use (José Expósito) [RHEL-135337]
  - drm/xe/svm: Fix a debug printout (José Expósito) [RHEL-135337]
  - drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer (José Expósito) [RHEL-135337]
  - drm/xe: Drop preempt-fences when destroying imported dma-bufs. (José Expósito) [RHEL-135337]
  - drm/xe: Use usleep_range for accurate long-running workload timeslicing (José Expósito) [RHEL-135337]
  - drm/xe: Adjust long-running workload timeslices to reasonable values (José Expósito) [RHEL-135337]
  - drm/xe/eustall: Disallow 0 EU stall property values (José Expósito) [RHEL-135337]
  - drm/xe/oa: Disallow 0 OA property values (José Expósito) [RHEL-135337]
  - drm/xe/bo: Don't include the CCS metadata in the dma-buf sg-table (José Expósito) [RHEL-135337]
  - drm: Fix object leak in DRM_IOCTL_GEM_CHANGE_HANDLE (José Expósito) [RHEL-135337]
  - drm/mgag200: Fix big-endian support (José Expósito) [RHEL-135337]
  - drm/ttm: Avoid NULL pointer deref for evicted BOs (José Expósito) [RHEL-135337]
  - drm/i915: Fix format string truncation warning (José Expósito) [RHEL-135337]
  - drm/amdkfd: Trap handler support for expert scheduling mode (José Expósito) [RHEL-135337]
  - drm/amdkfd: bump minimum vgpr size for gfx1151 (José Expósito) [RHEL-135337]
  - drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace (José Expósito) [RHEL-135337]
  - drm/nouveau/gsp: Allocate fwsec-sb at boot (José Expósito) [RHEL-135337]
  - drm/bridge: ti-sn65dsi83: ignore PLL_UNLOCK errors (José Expósito) [RHEL-135337]
  - drm/amd: Fix unbind/rebind for VCN 4.0.5 (José Expósito) [RHEL-135337]
  - drm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl() (José Expósito) [RHEL-135337]
  - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() (José Expósito) [RHEL-135337]
  - drm/buddy: Separate clear and dirty free block trees (José Expósito) [RHEL-135337]
  - drm/buddy: Optimize free block management with RB tree (José Expósito) [RHEL-135337]
  - drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling (José Expósito) [RHEL-135337]
  - drm/amdgpu/sdma6: Update SDMA 6.0.3 FW version to include UMQ protected-fence fix (José Expósito) [RHEL-135337]
  - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma (José Expósito) [RHEL-135337]
  - drm/amdgpu: Forward VMID reservation errors (José Expósito) [RHEL-135337]
  - drm/amdgpu/gmc12: add amdgpu_vm_handle_fault() handling (José Expósito) [RHEL-135337]
  - Revert "drm/amd: Skip power ungate during suspend for VPE" (José Expósito) [RHEL-135337]
  - drm/xe/guc: READ/WRITE_ONCE g2h_fence->done (José Expósito) [RHEL-135337]
  - drm/gem-shmem: Fix the MODULE_LICENSE() string (José Expósito) [RHEL-135337]
  - drm/amdgpu: don't attach the tlb fence for SI (José Expósito) [RHEL-135337]
  - drm/displayid: add quirk to ignore DisplayID checksum errors (José Expósito) [RHEL-135337]
  - drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct drm_edid_ident (José Expósito) [RHEL-135337]
  - drm: nova: depend on CONFIG_64BIT (José Expósito) [RHEL-135337]
  - drm/displayid: pass iter to drm_find_displayid_extension() (José Expósito) [RHEL-135337]
  - drm/amd/display: Fix scratch registers offsets for DCN351 (José Expósito) [RHEL-135337]
  - drm/amd/display: Fix scratch registers offsets for DCN35 (José Expósito) [RHEL-135337]
  - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() (José Expósito) [RHEL-135337]
  - Revert "drm/amd/display: Fix pbn to kbps Conversion" (José Expósito) [RHEL-135337]
  - drm/xe/oa: Always set OAG_OAGLBCTXCTRL_COUNTER_RESUME (José Expósito) [RHEL-135337]
  - drm/xe/oa: Limit num_syncs to prevent oversized allocations (José Expósito) [RHEL-135337]
  - drm/xe: Limit num_syncs to prevent oversized allocations (José Expósito) [RHEL-135337]
  - drm/amdgpu: fix a job->pasid access race in gpu recovery (José Expósito) [RHEL-135337]
  - drm/panel: sony-td4353-jdi: Enable prepare_prev_first (José Expósito) [RHEL-135337]
  - drm/xe: Restore engine registers before restarting schedulers after GT reset (José Expósito) [RHEL-135337]
  - drm/xe: Increase TDF timeout (José Expósito) [RHEL-135337]
  - drm/me/gsc: mei interrupt top half should be in irq disabled context (José Expósito) [RHEL-135337]
  - drm/xe: fix drm_gpusvm_init() arguments (José Expósito) [RHEL-135337]
  - drm/xe: Apply Wa_14020316580 in xe_gt_idle_enable_pg() (José Expósito) [RHEL-135337]
  - drm/xe: Fix freq kobject leak on sysfs_create_files failure (José Expósito) [RHEL-135337]
  - drm/tests: Handle EDEADLK in set_up_atomic_state() (José Expósito) [RHEL-135337]
  - drm/tests: Handle EDEADLK in drm_test_check_valid_clones() (José Expósito) [RHEL-135337]
  - drm/tests: hdmi: Handle drm_kunit_helper_enable_crtc_connector() returning EDEADLK (José Expósito) [RHEL-135337]
  - drm/i915/fbdev: Hold runtime PM ref during fbdev BO creation (José Expósito) [RHEL-135337]
  - drm/{i915, xe}/fbdev: deduplicate struct drm_mode_fb_cmd2 init (José Expósito) [RHEL-135337]
  - drm/{i915, xe}/fbdev: pass struct drm_device to intel_fbdev_fb_alloc() (José Expósito) [RHEL-135337]
  - drm/i915/fbdev: make intel_framebuffer_create() error return handling explicit (José Expósito) [RHEL-135337]
  - drm/xe/fbdev: use the same 64-byte stride alignment as i915 (José Expósito) [RHEL-135337]
  - drm/amdkfd: Use huge page size to check split svm range alignment (José Expósito) [RHEL-135337]
  - drm/nouveau: fix circular dep oops from vendored i2c encoder (José Expósito) [RHEL-135337]
  - drm/nouveau: refactor deprecated strcpy (José Expósito) [RHEL-135337]
  - drm/plane: Fix IS_ERR() vs NULL check in drm_plane_create_hotspot_properties() (José Expósito) [RHEL-135337]
  - drm/panel: novatek-nt35560: avoid on-stack device structure (José Expósito) [RHEL-135337]
  - drm/panthor: Prevent potential UAF in group creation (José Expósito) [RHEL-135337]
  - drm/amdkfd: assign AID to uuid in topology for SPX mode (José Expósito) [RHEL-135337]
  - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() (José Expósito) [RHEL-135337]
  - drm/panthor: Avoid adding of kernel BOs to extobj list (José Expósito) [RHEL-135337]
  - drm/nouveau: restrict the flush page to a 32-bit address (José Expósito) [RHEL-135337]
  - drm/tidss: Move OLDI mode validation to OLDI bridge mode_valid hook (José Expósito) [RHEL-135337]
  - drm/tidss: Remove max_pclk_khz and min_pclk_khz from tidss display features (José Expósito) [RHEL-135337]
  - drm/panthor: Fix potential memleak of vma structure (José Expósito) [RHEL-135337]
  - drm/panthor: Fix UAF on kernel BO VA nodes (José Expósito) [RHEL-135337]
  - drm/panthor: Fix race with suspend during unplug (José Expósito) [RHEL-135337]
  - drm/panthor: Fix UAF race between device unplug and FW event processing (José Expósito) [RHEL-135337]
  - drm/panthor: Fix group_free_queue() for partially initialized queues (José Expósito) [RHEL-135337]
  - drm/panthor: Handle errors returned by drm_sched_entity_init() (José Expósito) [RHEL-135337]
  - drm/imagination: Fix reference to devm_platform_get_and_ioremap_resource() (José Expósito) [RHEL-135337]
  - accel/ivpu: Fix race condition when unbinding BOs (José Expósito) [RHEL-135337]
  - drm: nova: select NOVA_CORE (José Expósito) [RHEL-135337]
  - accel/ivpu: Remove skip of dma unmap for imported buffers (José Expósito) [RHEL-135337]
  - drm/rcar-du: dsi: Fix missing parameter in RXSETR_...EN macros (José Expósito) [RHEL-135337]
  - drm/amdgpu/userq: fix SDMA and compute validation (José Expósito) [RHEL-135337]
  - drm/amdgpu: add userq object va track helpers (José Expósito) [RHEL-135337]
  - accel/ivpu: Fix race condition when mapping dmabuf (José Expósito) [RHEL-135337]
  - drm: atmel-hlcdc: fix atmel_xlcdc_plane_setup_scaler() (José Expósito) [RHEL-135337]
  - drm/vgem-fence: Fix potential deadlock on release (José Expósito) [RHEL-135337]
  - accel/ivpu: Fix DCT active percent format (José Expósito) [RHEL-135337]
  - accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context() (José Expósito) [RHEL-135337]
  - accel/ivpu: Rework bind/unbind of imported buffers (José Expósito) [RHEL-135337]
  - drm/panel: visionox-rm69299: Don't clear all mode flags (José Expósito) [RHEL-135337]
  - drm/panel: visionox-rm69299: Fix clock frequency for SHIFT6mq (José Expósito) [RHEL-135337]
  - accel/ivpu: Ensure rpm_runtime_put in case of engine reset/resume fail (José Expósito) [RHEL-135337]
  - Reapply "drm/vkms: convert to use faux_device" (José Expósito) [RHEL-135337]
  - printk: Use console_is_usable on console_unblank (Derek Barbosa) [RHEL-141481]
  - printk: Check CON_SUSPEND when unblanking a console (Derek Barbosa) [RHEL-141481]
  - printk: Avoid irq_work for printk_deferred() on suspend (Derek Barbosa) [RHEL-141481]
  - printk: Avoid scheduling irq_work on suspend (Derek Barbosa) [RHEL-141481]
  - printk: nbcon: Allow reacquire during panic (Derek Barbosa) [RHEL-141481]
  - printk: Allow printk_trigger_flush() to flush all types (Herton R. Krzesinski) [RHEL-141481]
  - printk: nbcon: Use raw_cpu_ptr() instead of open coding (Herton R. Krzesinski) [RHEL-141481]
  - backport "printk: Add helper for flush type logic" and associated changes (Herton R. Krzesinski) [RHEL-141481]
  - printk: Remove redundant deferred check in vprintk() (Herton R. Krzesinski) [RHEL-141481]
  - printk: Introduce force_legacy_kthread() macro (Herton R. Krzesinski) [RHEL-141481]
  - printk: Add is_printk_legacy_deferred() (Herton R. Krzesinski) [RHEL-141481]
  - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132890] {CVE-2023-53034}
  - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138020] {CVE-2025-38415}
  - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138020] {CVE-2025-38415}
  - scsi: qla2xxx: Enable/disable IRQD_NO_BALANCING during reset (Ewan D. Milne) [RHEL-89559]
  - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset (Ewan D. Milne) [RHEL-89559]
  - perf/x86/intel/cstate: Add Clearwater Forest support (Michael Petlan) [RHEL-45067]
  - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-7971]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-675.el9]
changelog:
  - sched: Fix tracepoint called from set_tsk_need_resched() more (Phil Auld) [RHEL-145368]
  - smb: client: fix oops in smbd_post_send_data() (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix UBSAN array-index-out-of-bounds in smb2_copychunk_range (Paulo Alcantara) [RHEL-116058]
  - smb3 client: add missing tracepoint for unsupported ioctls (Paulo Alcantara) [RHEL-116058]
  - cifs: Fix memory and information leak in smb3_reconfigure() (Paulo Alcantara) [RHEL-116058] {CVE-2025-71151}
  - smb: move some SMB1 definitions into common/smb1pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: align durable reconnect v2 context to 8 byte boundary (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.connect.{lock,work} (Paulo Alcantara) [RHEL-116058]
  - smb/client: remove DeviceType Flags and Device Characteristics definitions (Paulo Alcantara) [RHEL-116058]
  - smb: move File Attributes definitions into common/fscc.h (Paulo Alcantara) [RHEL-116058]
  - smb: update struct duplicate_extents_to_file_ex (Paulo Alcantara) [RHEL-116058]
  - smb: move file_notify_information to common/fscc.h (Paulo Alcantara) [RHEL-116058]
  - smb: move SMB2 Notify Action Flags into common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move notify completion filter flags into common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb/client: add parentheses to NT error code definitions containing bitwise OR operator (Paulo Alcantara) [RHEL-116058]
  - smb: add documentation references for smb2 change notify definitions (Paulo Alcantara) [RHEL-116058]
  - smb/client: add 4 NT error code definitions (Paulo Alcantara) [RHEL-116058]
  - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value (Paulo Alcantara) [RHEL-116058]
  - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value (Paulo Alcantara) [RHEL-116058]
  - smb/client: fix NT_STATUS_NO_DATA_DETECTED value (Paulo Alcantara) [RHEL-116058]
  - smb/client: update some SMB2 status strings (Paulo Alcantara) [RHEL-116058]
  - cifs: Remove dead function prototypes (Paulo Alcantara) [RHEL-116058]
  - smb/client: add two elements to smb2_error_map_table array (Paulo Alcantara) [RHEL-116058]
  - smb: rename to STATUS_SMB_NO_PREAUTH_INTEGRITY_HASH_OVERLAP (Paulo Alcantara) [RHEL-116058]
  - smb/client: remove unused elements from smb2_error_map_table array (Paulo Alcantara) [RHEL-116058]
  - smb/client: reduce loop count in map_smb2_to_linux_error() by half (Paulo Alcantara) [RHEL-116058]
  - smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-116058]
  - smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-116058]
  - smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-116058]
  - cifs: client: allow changing multichannel mount options on remount (Paulo Alcantara) [RHEL-116058]
  - cifs: Do some preparation prior to organising the function declarations (Paulo Alcantara) [RHEL-116058]
  - cifs: Don't need state locking in smb2_get_mid_entry() (Paulo Alcantara) [RHEL-116058]
  - cifs: Remove the server pointer from smb_message (Paulo Alcantara) [RHEL-116058]
  - cifs: Fix specification of function pointers (Paulo Alcantara) [RHEL-116058]
  - cifs: Replace SendReceiveBlockingLock() with SendReceive() plus flags (Paulo Alcantara) [RHEL-116058]
  - cifs: Clean up some places where an extra kvec[] was required for rfc1002 (Paulo Alcantara) [RHEL-116058]
  - cifs: Make smb1's SendReceive() wrap cifs_send_recv() (Paulo Alcantara) [RHEL-116058]
  - cifs: Remove the RFC1002 header from smb_hdr (Paulo Alcantara) [RHEL-116058]
  - cifs: client: enforce consistent handling of multichannel and max_channels (Paulo Alcantara) [RHEL-116058]
  - smb: client: show smb lease key in open_dirs output (Paulo Alcantara) [RHEL-116058]
  - smb: client: show smb lease key in open_files output (Paulo Alcantara) [RHEL-116058]
  - smb: client: relax WARN_ON_ONCE(SMBDIRECT_SOCKET_*) checks in recv_done() and smbd_conn_upcall() (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce SMBDIRECT_CHECK_STATUS_{WARN,DISCONNECT}() (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce SMBDIRECT_DEBUG_ERR_PTR() helper (Paulo Alcantara) [RHEL-116058]
  - smb: move FILE_SYSTEM_ATTRIBUTE_INFO to common/fscc.h (Paulo Alcantara) [RHEL-116058]
  - smb: move create_durable_reconn to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: fix some warnings reported by scripts/checkpatch.pl (Paulo Alcantara) [RHEL-116058]
  - smb: do some cleanups (Paulo Alcantara) [RHEL-116058]
  - smb: move FILE_SYSTEM_SIZE_INFO to common/fscc.h (Paulo Alcantara) [RHEL-116058]
  - smb: move some duplicate struct definitions to common/fscc.h (Paulo Alcantara) [RHEL-116058]
  - smb: move list of FileSystemAttributes to common/fscc.h (Paulo Alcantara) [RHEL-116058]
  - smb: move SMB_NEGOTIATE_REQ to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move some duplicate definitions to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move create_durable_rsp_v2 to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move create_durable_handle_reconnect_v2 to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move create_durable_req_v2 to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move MAX_CIFS_SMALL_BUFFER_SIZE to common/smbglob.h (Paulo Alcantara) [RHEL-116058]
  - smb/client: fix CAP_BULK_TRANSFER value (Paulo Alcantara) [RHEL-116058]
  - smb: move resume_key_ioctl_rsp to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move copychunk definitions to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move smb_sockaddr_in and smb_sockaddr_in6 to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move SMB1_PROTO_NUMBER to common/smbglob.h (Paulo Alcantara) [RHEL-116058]
  - smb: move get_rfc1002_len() to common/smbglob.h (Paulo Alcantara) [RHEL-116058]
  - smb: move smb_version_values to common/smbglob.h (Paulo Alcantara) [RHEL-116058]
  - smb: rename common/cifsglob.h to common/smbglob.h (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix memory leak in cifs_construct_tcon() (Paulo Alcantara) [RHEL-116058] {CVE-2025-68295}
  - cifs: fix memory leak in smb3_fs_context_parse_param error path (Paulo Alcantara) [RHEL-116058] {CVE-2025-68219}
  - smb: client: introduce close_cached_dir_locked() (Paulo Alcantara) [RHEL-116058]
  - smb: client: let smbd_disconnect_rdma_connection() turn CREATED into DISCONNECTED (Paulo Alcantara) [RHEL-116058]
  - smb: fix invalid username check in smb3_fs_context_parse_param() (Paulo Alcantara) [RHEL-116058]
  - cifs: client: fix memory leak in smb3_fs_context_parse_param (Paulo Alcantara) [RHEL-116058] {CVE-2025-40268}
  - smb: client: fix cifs_pick_channel when channel needs reconnect (Paulo Alcantara) [RHEL-116058]
  - smb: client: validate change notify buffer before copy (Paulo Alcantara) [RHEL-116058]
  - smb: client: call smbd_destroy() in the same splace as kernel_sock_shutdown()/sock_release() (Paulo Alcantara) [RHEL-116058]
  - cifs: fix typo in enable_gcm_256 module parameter (Paulo Alcantara) [RHEL-116058]
  - cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-116058]
  - cifs: Call the calc_signature functions directly (Paulo Alcantara) [RHEL-116058]
  - cifs: Fix TCP_Server_Info::credits to be signed (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.send_io.lcredits.* (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.send_io.lcredits.* (Paulo Alcantara) [RHEL-116058]
  - smb: client: allocate enough space for MR WRs and ib_drain_qp() (Paulo Alcantara) [RHEL-116058]
  - smb: client: let smbd_destroy() wait for SMBDIRECT_SOCKET_DISCONNECTED (Paulo Alcantara) [RHEL-116058]
  - smb: move some duplicate definitions to common/cifsglob.h (Paulo Alcantara) [RHEL-116058]
  - smb: client: let destroy_mr_list() keep smbdirect_mr_io memory if registered (Paulo Alcantara) [RHEL-116058]
  - smb: client: let destroy_mr_list() call ib_dereg_mr() before ib_dma_unmap_sg() (Paulo Alcantara) [RHEL-116058]
  - smb: client: call ib_dma_unmap_sg if mr->sgt.nents is not 0 (Paulo Alcantara) [RHEL-116058]
  - smb: client: improve logic in smbd_deregister_mr() (Paulo Alcantara) [RHEL-116058]
  - smb: client: improve logic in smbd_register_mr() (Paulo Alcantara) [RHEL-116058]
  - smb: client: improve logic in allocate_mr_list() (Paulo Alcantara) [RHEL-116058]
  - smb: client: let destroy_mr_list() remove locked from the list (Paulo Alcantara) [RHEL-116058]
  - smb: client: let destroy_mr_list() call list_del(&mr->list) (Paulo Alcantara) [RHEL-116058]
  - smb: client: change smbd_deregister_mr() to return void (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_mr_io.{kref,mutex} and SMBDIRECT_MR_DISABLED (Paulo Alcantara) [RHEL-116058]
  - smb: client: Omit one redundant variable assignment in cifs_xattr_set() (Paulo Alcantara) [RHEL-116058]
  - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-116058]
  - cifs: Add comments for DeletePending assignments in open functions (Paulo Alcantara) [RHEL-116058]
  - cifs: Add fallback code path for cifs_mkdir_setinfo() (Paulo Alcantara) [RHEL-116058]
  - cifs: Allow fallback code in smb_set_file_info() also for directories (Paulo Alcantara) [RHEL-116058]
  - cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove redudant assignment in cifs_strict_fsync() (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix race with fallocate(2) and AIO+DIO (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix missing timestamp updates after ftruncate(2) (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix missing timestamp updates with O_TRUNC (Paulo Alcantara) [RHEL-116058]
  - smb: client: batch SRV_COPYCHUNK entries to cut round trips (Paulo Alcantara) [RHEL-116058]
  - smb: client: Omit an if branch in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-116058]
  - smb: client: Return directly after a failed genlmsg_new() in cifs_swn_send_register_message() (Paulo Alcantara) [RHEL-116058]
  - smb: client: Use common code in cifs_do_create() (Paulo Alcantara) [RHEL-116058]
  - smb: client: Improve unlocking of a mutex in cifs_get_swn_reg() (Paulo Alcantara) [RHEL-116058]
  - smb: client: Return a status code only as a constant in cifs_spnego_key_instantiate() (Paulo Alcantara) [RHEL-116058]
  - smb: client: Use common code in cifs_lookup() (Paulo Alcantara) [RHEL-116058]
  - smb: client: Reduce the scopes for a few variables in two functions (Paulo Alcantara) [RHEL-116058]
  - cifs: client: force multichannel=off when max_channels=1 (Paulo Alcantara) [RHEL-116058]
  - smb: client: transport: avoid reconnects triggered by pending task work (Paulo Alcantara) [RHEL-116058]
  - smb: client: add tcon information to smb2_reconnect() debug messages (Paulo Alcantara) [RHEL-116058]
  - smb: client: let smbd_post_send_iter() call ib_dma_map_single() for the header first (Paulo Alcantara) [RHEL-116058]
  - smb: client: defer calling ib_alloc_pd() after we are connected (Paulo Alcantara) [RHEL-116058]
  - smb: client: allocate smbdirect workqueue at the beginning of _smbd_get_connection() (Paulo Alcantara) [RHEL-116058]
  - smb: client: make consitent use of spin_lock_irq{save,restore}() in smbdirect.c (Paulo Alcantara) [RHEL-116058]
  - smb: client: let smbd_{destroy,disconnect_rdma_{work,connection}}() wake up all wait queues (Paulo Alcantara) [RHEL-116058]
  - smb: client: let smbd_disconnect_rdma_connection() disable all work but disconnect_work (Paulo Alcantara) [RHEL-116058]
  - smb: client: fill in smbdirect_socket.first_error on error (Paulo Alcantara) [RHEL-116058]
  - smb: client: let smbd_disconnect_rdma_connection() set SMBDIRECT_SOCKET_ERROR... (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to get_mr() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_negotiate() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_post_send_negotiate_req() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_ia_open() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_create_id() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_qp_async_error_upcall() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_conn_upcall() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_post_send_full_iter() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_post_send_empty() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_post_send_iter() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to manage_keep_alive_before_sending() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_post_send() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to manage_credits_prior_sending() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_post_recv() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_disconnect_rdma_connection() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to {allocate,destroy}_mr_list() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to {enqueue,_get_first}_reassembly() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to {allocate,destroy}_caches_and_workqueue() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to {allocate,destroy}_receive_buffers() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to {get,put}_receive_buffer() (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.mr_io (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket_parameters.max_frmr_depth (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of struct smbdirect_mr_io (Paulo Alcantara) [RHEL-116058]
  - smb: client: add and use smbd_get_parameters() (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.workqueue (Paulo Alcantara) [RHEL-116058]
  - smb: client: move rdma_readwrite_threshold from smbd_connection to TCP_Server_Info (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.statistics (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove unused smbd_connection.count_reassembly_queue (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove unused smbd_connection->protocol (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.idle.{keepalive,immediate_work,timer_work} (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix smbdirect keep alive handling to match the documentation (Paulo Alcantara) [RHEL-116058]
  - smb: client: send empty packets via send_immediate_work (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.rdma.legacy_iwarp (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket_parameters.{initiator_depth,responder_resources} (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket_parameters.{resolve_{addr,route},rdma_connect,negotiate}_timeout_msec (Paulo Alcantara) [RHEL-116058]
  - smb: client: fill smbdirect_socket_parameters at the beginning and use the values from there (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove useless smbd_connection.send_immediate (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.recv_io.{posted,credits} (Paulo Alcantara) [RHEL-116058]
  - smb: client: count the number of posted recv_io messages in order to calculated credits (Paulo Alcantara) [RHEL-116058]
  - smb: client: limit the range of info->receive_credit_target (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove info->wait_receive_queues handling in smbd_destroy() (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of ib_wc_status_msg() and skip IB_WC_WR_FLUSH_ERR logging (Paulo Alcantara) [RHEL-116058]
  - smb: client: queue post_recv_credits_work also if the peer raises the credit target (Paulo Alcantara) [RHEL-116058]
  - smb: client: make sure smbd_disconnect_rdma_work() doesn't run after smbd_destroy() took over (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.send_io.credits.{count,wait_queue} (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.send_io.pending.{count,{dec,zero}_wait_queue} (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.disconnect_work (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket_init() (Paulo Alcantara) [RHEL-116058]
  - smb: client: make only use of wake_up[_all]() in smbdirect.c (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.status_wait (Paulo Alcantara) [RHEL-116058]
  - smb: client: use status_wait and SMBDIRECT_SOCKET_RESOLVE_{ADDR,ROUTE}_RUNNING for completion (Paulo Alcantara) [RHEL-116058]
  - smb: client: use status_wait and SMBDIRECT_SOCKET_NEGOTIATE_RUNNING for completion (Paulo Alcantara) [RHEL-116058]
  - smb: client: adjust smbdirect related output of cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.first_error (Paulo Alcantara) [RHEL-116058]
  - smb: client/smbdirect: introduce SMBDIRECT_SOCKET_ERROR (Paulo Alcantara) [RHEL-116058]
  - smb: client/smbdirect: replace SMBDIRECT_SOCKET_CONNECTING with more detailed states (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix sending the iwrap custom IRD/ORD negotiation messages (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: let smbdirect_socket_init() initialize all [delayed_]work_structs as disabled (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.mr_io.* (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket_parameters.max_frmr_depth (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce struct smbdirect_mr_io (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.workqueue (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.statistics (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.idle.{keepalive,immediate_work,timer_work} (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.rdma.legacy_iwarp (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket_parameters.{initiator_depth,responder_resources} (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket_parameters.{resolve_{addr,route},rdma_connect,negotiate}_timeout_msec (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.{posted,credits} (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce struct smbdirect_rw_io (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.rw_io.credits (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce struct smbdirect_send_batch (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.send_io.credits.{count,wait_queue} (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.send_io.pending.{count,{dec,zero}_wait_queue} (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.disconnect_work (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket_init() (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.status_wait (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket_status_string() (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path (Paulo Alcantara) [RHEL-116058] {CVE-2025-39929}
  - smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work) (Paulo Alcantara) [RHEL-116058] {CVE-2025-39932}
  - smb: client: use disable[_delayed]_work_sync in smbdirect.c (Paulo Alcantara) [RHEL-116058]
  - cifs: prevent NULL pointer dereference in UTF16 conversion (Paulo Alcantara) [RHEL-116058] {CVE-2025-39838}
  - smb: client: fix spellings in comments (Paulo Alcantara) [RHEL-116058]
  - smb3 client: fix return code mapping of remap_file_range (Paulo Alcantara) [RHEL-116058]
  - smb: client: don't wait for info->send_pending == 0 on error (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-116058]
  - cifs: avoid extra calls to strlen() in cifs_get_spnego_key() (Paulo Alcantara) [RHEL-116058]
  - cifs: Fix collect_sample() to handle any iterator type (Paulo Alcantara) [RHEL-116058]
  - smb: client: only use a single wait_queue to monitor smbdirect connection status (Paulo Alcantara) [RHEL-116058]
  - smb: client: don't call init_waitqueue_head(&info->conn_wait) twice in _smbd_get_connection (Paulo Alcantara) [RHEL-116058]
  - smb: client: improve logging in smbd_conn_upcall() (Paulo Alcantara) [RHEL-116058]
  - smb: client: return an error if rdma_connect does not return within 5 seconds (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.{send,recv}_io.mem.{cache,pool} (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: add smbdirect_socket.{send,recv}_io.mem.{cache,pool} (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of struct smbdirect_send_io (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce struct smbdirect_send_io (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of SMBDIRECT_RECV_IO_MAX_SGE (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: add SMBDIRECT_RECV_IO_MAX_SGE (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove unused enum smbd_connection_status (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.recv_io.reassembly.* (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.reassembly.* (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smb: smbdirect_socket.recv_io.free.{list,lock} (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.free.{list,lock} (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of struct smbdirect_recv_io (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce struct smbdirect_recv_io (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket->recv_io.expected (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.expected (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove unused smbd_connection->fragment_reassembly_remaining (Paulo Alcantara) [RHEL-116058]
  - smb: client: let recv_done() avoid touching data_transfer after cleanup/move (Paulo Alcantara) [RHEL-116058]
  - smb: client: let recv_done() cleanup before notifying the callers. (Paulo Alcantara) [RHEL-116058]
  - smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove separate empty_packet_queue (Paulo Alcantara) [RHEL-116058]
  - smb: client: let send_done() cleanup before calling smbd_disconnect_rdma_connection() (Paulo Alcantara) [RHEL-116058]
  - cifs: Move the SMB1 transport code out of transport.c (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-116058]
  - r8152: Advertise software timestamp information. (Jose Ignacio Tornos Martinez) [RHEL-132607]
  - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137684] {CVE-2025-40304}
  - fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136943] {CVE-2025-40322}
  - ixgbe: use EOPNOTSUPP instead of ENOTSUPP in ixgbe_ptp_feature_enable() (Corinna Vinschen) [RHEL-97675]
  - ixgbe: fix memory leak and use-after-free in ixgbe_recovery_probe() (Corinna Vinschen) [RHEL-97675]
  - ixgbe: fix too early devlink_free() in ixgbe_remove() (Corinna Vinschen) [RHEL-97675]
  - ixgbe: handle IXGBE_VF_FEATURES_NEGOTIATE mbox cmd (Corinna Vinschen) [RHEL-97675]
  - ixgbevf: fix mailbox API compatibility by negotiating supported features (Corinna Vinschen) [RHEL-97673]
  - ixgbe: handle IXGBE_VF_GET_PF_LINK_STATE mailbox operation (Corinna Vinschen) [RHEL-97675]
  - ixgbevf: fix getting link speed data for E610 devices (Corinna Vinschen) [RHEL-97673]
  - ixgbe: fix typos and docstring inconsistencies (Corinna Vinschen) [RHEL-97675]
  - ixgbevf: fix proper type for error code in ixgbevf_resume() (Corinna Vinschen) [RHEL-97673]
  - ixgbe: destroy aci.lock later within ixgbe_remove path (Corinna Vinschen) [RHEL-97675]
  - ixgbe: initialize aci.lock before it's used (Corinna Vinschen) [RHEL-97675]
  - ixgbe: fix typo in function comment for ixgbe_get_num_per_func() (Corinna Vinschen) [RHEL-97675]
  - ixgbe: drop unnecessary casts to u16 / int (Corinna Vinschen) [RHEL-97675]
  - ixgbe: reduce number of reads when getting OROM data (Corinna Vinschen) [RHEL-97675]
  - ixgbe: add the 2.5G and 5G speeds in auto-negotiation for E610 (Corinna Vinschen) [RHEL-97675]
  - ixgbe: fix incorrect map used in eee linkmode (Corinna Vinschen) [RHEL-97675]
  - ixgbe: fix ndo_xdp_xmit() workloads (Corinna Vinschen) [RHEL-97675]
  - ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc (Corinna Vinschen) [RHEL-97675]
  - eth: intel: use vmalloc_array() to simplify code [ixgbevf] (Corinna Vinschen) [RHEL-97673]
  - eth: intel: use vmalloc_array() to simplify code [ixgbe] (Corinna Vinschen) [RHEL-97675]
  - net: Fix typos [ixgbevf] (Corinna Vinschen) [RHEL-97673]
  - ixgbevf: remove unused fields from struct ixgbevf_adapter (Corinna Vinschen) [RHEL-97673]
  - ethernet: intel: fix building with large NR_CPUS [ixgbe] (Corinna Vinschen) [RHEL-97675]
  - ixgbe: spelling corrections (Corinna Vinschen) [RHEL-97675]
  - ixgbe: turn off MDD while modifying SRRCTL (Corinna Vinschen) [RHEL-97675]
  - ixgbe: add Tx hang detection unhandled MDD (Corinna Vinschen) [RHEL-97675]
  - ixgbe: check for MDD events (Corinna Vinschen) [RHEL-97675]
  - ixgbe: add MDD support (Corinna Vinschen) [RHEL-97675]
  - ixgbe: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Corinna Vinschen) [RHEL-97675]
  - ixgbe: Fix typos and clarify comments in X550 driver code (Corinna Vinschen) [RHEL-97675]
  - ixgbe: add link_down_events statistic (Corinna Vinschen) [RHEL-97675]
  - ixgbe: devlink: add devlink region support for E610 (Corinna Vinschen) [RHEL-97675]
  - ixgbe: add E610 .set_phys_id() callback implementation (Corinna Vinschen) [RHEL-97675]
  - ixgbe: apply different rules for setting FC on E610 (Corinna Vinschen) [RHEL-97675]
  - ixgbe: add support for ACPI WOL for E610 (Corinna Vinschen) [RHEL-97675]
  - ixgbe: create E610 specific ethtool_ops structure (Corinna Vinschen) [RHEL-97675]
  - ixgbevf: stop attempting IPSEC offload on Mailbox API 1.5 (Corinna Vinschen) [RHEL-97673]
  - ixgbevf: Add support for new mailbox communication between PF and VF (Corinna Vinschen) [RHEL-97673]
  - igc: Reduce TSN TX packet buffer from 7KB to 5KB per queue (Corinna Vinschen) [RHEL-97650]
  - igc: fix race condition in TX timestamp read for register 0 (Corinna Vinschen) [RHEL-97650]
  - igc: Restore default Qbv schedule when changing channels (Corinna Vinschen) [RHEL-97650]
  - igc: extract GRXRINGS from .get_rxnfc (Corinna Vinschen) [RHEL-97650]
  - igc: use EOPNOTSUPP instead of ENOTSUPP in igc_ethtool_get_sset_count() (Corinna Vinschen) [RHEL-97650]
  - igc: power up the PHY before the link test (Corinna Vinschen) [RHEL-97650]
  - igc: don't fail igc_probe() on LED setup error (Corinna Vinschen) [RHEL-97650] {CVE-2025-39956}
  - igc: drop unnecessary constant casts to u16 (Corinna Vinschen) [RHEL-97650]
  - igc: fix disabling L1.2 PCI-E link substate on I226 on init (Corinna Vinschen) [RHEL-97650]
  - eth: intel: use vmalloc_array() to simplify code [igc] (Corinna Vinschen) [RHEL-97650]
  - net: Fix typos [igc] (Corinna Vinschen) [RHEL-97650]
  - igc: Add wildcard rule support to ethtool NFC using Default Queue (Corinna Vinschen) [RHEL-97650]
  - igc: Relocate RSS field definitions to igc_defines.h (Corinna Vinschen) [RHEL-97650]
  - igc: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Corinna Vinschen) [RHEL-97650]
  - igc: disable L1.2 PCI-E link substate to avoid performance issue (Corinna Vinschen) [RHEL-97650]
  - igc: Make the const read-only array supported_sizes static (Corinna Vinschen) [RHEL-97650]
  - igc: add preemptible queue support in mqprio (Corinna Vinschen) [RHEL-97650]
  - igc: add preemptible queue support in taprio (Corinna Vinschen) [RHEL-97650]
  - igc: add private flag to reverse TX queue priority in TSN mode (Corinna Vinschen) [RHEL-97650]
  - igc: assign highest TX queue number as highest priority in mqprio (Corinna Vinschen) [RHEL-97650]
  - igc: refactor TXDCTL macros to use FIELD_PREP and GEN_MASK (Corinna Vinschen) [RHEL-97650]
  - igc: add DCTL prefix to related macros (Corinna Vinschen) [RHEL-97650]
  - igc: move TXDCTL and RXDCTL related macros (Corinna Vinschen) [RHEL-97650]
  - igc: Change Tx mode for MQPRIO offloading (Corinna Vinschen) [RHEL-97650]
  - igc: Limit netdev_tc calls to MQPRIO (Corinna Vinschen) [RHEL-97650]
  - igc: add support to get frame preemption statistics via ethtool (Corinna Vinschen) [RHEL-97650]
  - igc: add support to get MAC Merge data via ethtool (Corinna Vinschen) [RHEL-97650]
  - igc: block setting preemptible traffic class in taprio (Corinna Vinschen) [RHEL-97650]
  - igc: add support to set tx-min-frag-size (Corinna Vinschen) [RHEL-97650]
  - igc: add support for frame preemption verification (Corinna Vinschen) [RHEL-97650]
  - igc: Fix TX drops in XDP ZC (Corinna Vinschen) [RHEL-97650]
  - igc: Add launch time support to XDP ZC (Corinna Vinschen) [RHEL-97650]
  - igc: Refactor empty frame insertion for launch time support (Corinna Vinschen) [RHEL-97650]
  - igc: Switch to use hrtimer_setup() (Corinna Vinschen) [RHEL-97650]
  - igb: extract GRXRINGS from .get_rxnfc (Corinna Vinschen) [RHEL-97672]
  - igbvf: fix misplaced newline in VLAN add warning message (Corinna Vinschen) [RHEL-97690]
  - igb: use EOPNOTSUPP instead of ENOTSUPP in igb_get_sset_count() (Corinna Vinschen) [RHEL-97672]
  - igb: fix link test skipping when interface is admin down (Corinna Vinschen) [RHEL-97672]
  - igb: Fix NULL pointer dereference in ethtool loopback test (Corinna Vinschen) [RHEL-97672]
  - igb: drop unnecessary constant casts to u16 (Corinna Vinschen) [RHEL-97672]
  - igbvf: remove redundant counter rx_long_byte_count from ethtool statistics (Corinna Vinschen) [RHEL-97690]
  - igbvf: add lbtx_packets and lbtx_bytes to ethtool statistics (Corinna Vinschen) [RHEL-97690]
  - eth: intel: use vmalloc_array() to simplify code [igb] (Corinna Vinschen) [RHEL-97672]
  - igbvf: remove unused fields from struct igbvf_adapter (Corinna Vinschen) [RHEL-97690]
  - igbvf: add tx_timeout_count to ethtool statistics (Corinna Vinschen) [RHEL-97690]
  - igbvf: remove unused interrupt counter fields from struct igbvf_adapter (Corinna Vinschen) [RHEL-97690]
  - igb: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Corinna Vinschen) [RHEL-97672]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-676.el9]
changelog:
  - io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths [partial] (Jeff Moyer) [RHEL-141266]
  - io_uring: fix filename leak in __io_openat_prep() (Jeff Moyer) [RHEL-141266]
  - io_uring: fix min_wait wakeups for SQPOLL (Jeff Moyer) [RHEL-141266]
  - io_uring/kbuf: use READ_ONCE() for userspace-mapped memory (Jeff Moyer) [RHEL-141266]
  - io_uring/rsrc: fix lost entries after cloned range (Jeff Moyer) [RHEL-141266]
  - io_uring/poll: correctly handle io_poll_add() return value on update (Jeff Moyer) [RHEL-141266]
  - io_uring: use WRITE_ONCE for user shared memory (Jeff Moyer) [RHEL-141266]
  - io_uring: correct __must_hold annotation in io_install_fixed_file (Jeff Moyer) [RHEL-141266]
  - io_uring/sqpoll: be smarter on when to update the stime usage (Jeff Moyer) [RHEL-141266]
  - io_uring/sqpoll: switch away from getrusage() for CPU accounting (Jeff Moyer) [RHEL-141266]
  - io_uring: fix incorrect io_kiocb reference in io_link_skb (Jeff Moyer) [RHEL-141266]
  - io_uring: include dying ring in task_work "should cancel" state (Jeff Moyer) [RHEL-141266]
  - io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-141266]
  - io_uring: finish IOU_OK -> IOU_COMPLETE transition (Jeff Moyer) [RHEL-141266]
  - io_uring: unify STOP_MULTISHOT with IOU_OK (Jeff Moyer) [RHEL-141266]
  - io_uring: return -EAGAIN to continue multishot (Jeff Moyer) [RHEL-141266]
  - RDMA/efa: Remove possible negative shift (Kamal Heib) [RHEL-140844]
  - RDMA/efa: Extend admin timeout error print (Kamal Heib) [RHEL-140844]
  - RDMA/efa: Add Network HW statistics counters (Kamal Heib) [RHEL-140844]
  - e1000e: Introduce private flag to disable K1 (Corinna Vinschen) [RHEL-134986]
  - e1000e: drop unnecessary constant casts to u16 (Corinna Vinschen) [RHEL-134986]
  - e1000e: ignore uninitialized checksum word on tgp (Corinna Vinschen) [RHEL-134986]
  - e1000e: disregard NVM checksum on tgp when valid checksum bit is not set (Corinna Vinschen) [RHEL-134986]
  - e1000e: set fixed clock frequency indication for Nahum 11 and Nahum 13 (Corinna Vinschen) [RHEL-134986]
  - e1000e: change k1 configuration on MTP and later platforms (Corinna Vinschen) [RHEL-134986]
  - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-129138]
  - x86/microcode: Mark early_parse_cmdline() as __init (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-129138]
  - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-129138]
  - redhat/configs: Add CONFIG_MICROCODE_DBG [=n] (Waiman Long) [RHEL-129138]
  - x86/microcode: Add microcode loader debugging functionality (Waiman Long) [RHEL-129138]
  - x86/microcode: Add microcode= cmdline parsing (Waiman Long) [RHEL-129138]
  - x86/microcode/intel: Refresh the revisions that determine old_microcode (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Do not return error when microcode update is not necessary (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Clean the cache if update did not load microcode (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Make __verify_patch_size() return bool (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Remove bogus comment from parse_container() (Waiman Long) [RHEL-129138]
  - mm: memcg: add NULL check to obj_cgroup_put() (Radostin Stoyanov) [RHEL-113275]
  - mm: memcg: use rstat for non-hierarchical stats (Radostin Stoyanov) [RHEL-113275]
  - mm: memcg: change flush_next_time to flush_last_time (Radostin Stoyanov) [RHEL-113275]
  - zswap: export compression failure stats (Radostin Stoyanov) [RHEL-113275]
  - Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline" (Radostin Stoyanov) [RHEL-113275]
  - cgroup/rstat: Fix forceidle time in cpu.stat (Radostin Stoyanov) [RHEL-113275]
  - memcg: drain obj stock on cpu hotplug teardown (Radostin Stoyanov) [RHEL-113275]
  - memcg: avoid dead loop when setting memory.max (Radostin Stoyanov) [RHEL-113275]
  - cgroup: Add compatibility option for content of /proc/cgroups (Radostin Stoyanov) [RHEL-113275]
  - cgroup: Print message when /proc/cgroups is read on v2-only system (Radostin Stoyanov) [RHEL-113275]
  - cgroup,freezer: fix incomplete freezing when attaching tasks (Radostin Stoyanov) [RHEL-113275]
  - cgroup: add helper for checking when css is cgroup::self (Radostin Stoyanov) [RHEL-113275]
  - include/cgroup: separate {get,put}_cgroup_ns no-op case (Radostin Stoyanov) [RHEL-113275]
  - sched: Factor out cgroup weight conversion functions (Radostin Stoyanov) [RHEL-113275]
  - blk-cgroup: Simplify policy files registration (Radostin Stoyanov) [RHEL-113275]
  - selftests/bpf: Add a test for bpf_cgroup_from_id lookup in non-root cgns (Radostin Stoyanov) [RHEL-113275]
  - bpf: Do not limit bpf_cgroup_from_id to current's namespace (Radostin Stoyanov) [RHEL-113275]
  - mm: cleanup WORKINGSET_NODES in workingset (Radostin Stoyanov) [RHEL-113275]
  - memcg: cleanup __mod_memcg_lruvec_state (Radostin Stoyanov) [RHEL-113275]
  - memcg: reduce memory size of mem_cgroup_events_index (Radostin Stoyanov) [RHEL-113275]
  - sched/headers: Move 'struct sched_param' out of uapi, to work around glibc/musl breakage (Radostin Stoyanov) [RHEL-113275]
  - cgroup/bpf: only cgroup v2 can be attached by bpf programs (Radostin Stoyanov) [RHEL-113275]
  - cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Radostin Stoyanov) [RHEL-113275]
  - Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Radostin Stoyanov) [RHEL-113275]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-677.el9]
changelog:
  - nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference (Ming Lei) [RHEL-142602]
  - scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-138489]
  - evm: Support multiple LSMs providing an xattr (Coiby Xu) [RHEL-140008]
  - evm: Align evm_inode_init_security() definition with LSM infrastructure (Coiby Xu) [RHEL-140008]
  - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-136438]
  - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-136438]
  - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-136438]
  - audit: fix out-of-bounds read in audit_compare_dname_path() (CKI Backport Bot) [RHEL-119177] {CVE-2025-39840}


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-10
changelog:
  - Add conflicts of kernel-srpm-macros with kernel-rpm-macros < 185-9
    as macros.kmp, kmodtool, and rpmsort were moved from the latter
    to the former.


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-11
changelog:
  - Work around a change in type of __crc_* symbols for some kmods printed by nm
    on ppc64le and s390x
  - Resolves: #2055464


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-13
changelog:
  - Handle symvers.xz in kabi.attr (#2209253).
  - Fix indirect __crc_* sumbols parsing in find-provides.ksyms
    and find-requires.ksyms to avoid matching multiple sections
    producing bogus duplicate provides for kmods that have both __kcrctab
    and __kcrctab_gpl sections (#2115811, #2178935).
  - Call "readelf -R" on a correct section in find-requires.ksyms.
  - Rewrite section data extraction in find-provides.ksyms and find-requires.ksyms
    to avoid garbage at the end of extracted sections, causing unnecessary awk
    complaints (#2115811).
  - Perform section parsing inside the awk script in find-provides.ksyms
    and find-requires.ksyms to avoid hitting command line argument limit
    when handling large .rodata sections (#2178935).


author: Tomas Halman <thalman@redhat.com> - 1.3-1
changelog:
  - Rebase to version 1.3
  - Resolves: RHEL-3336 - khci won't work with Quarkus-based Keycloak due to missing /auth path


author: Sergio Correia <scorreia@redhat.com> - 7.3.0-15
changelog:
  - Use TLS on revocation notification webhook
  - Include system installed CA certificates when verifying webhook
     server certificate
  - Include the CA certificates added via configuration file option
    'trusted_server_ca'
    Resolves: RHEL-78057
    Resolves: RHEL-78313
    Resolves: RHEL-78316


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Set supplementary groups when dropping privileges
  - Show more descriptive error messages on missing files errors
  - Create /usr/libexec/keylime directory


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Use classic release instead of autorelease macro
  - Use classic changelog instead of autochangelog macro


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
    Resolves: rhbz#2151513
  - Remove invalid password expiry warning
    Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
    Resolves: rhbz#2063838
  - New upstream version (1.20.1)
    Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
    Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Julien Rische <jrische@redhat.com> - 1.21.1-9
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88704
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88048
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-82647


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.6-1
changelog:
  - Rebase to non-beta version, because upstream says it should to be used
    https://github.com/ksh93/ksh/issues/667#issuecomment-1653665697
  - fix acl test case regression
    Resolves: #2034188


author: Mike FABIAN <mfabian@redhat.com> - 0.0.51-1
changelog:
  - Parse stuff in glibc locale names after @ which is not a script as a variant
  - Add ckb_IQ.UTF-8 locale


author: Mike FABIAN <mfabian@redhat.com> - 0.0.52-1
changelog:
  - Update to 0.0.52
  - add list_common_keyboards() to public api by Sundeep ANAND <suanand@redhat.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.53-1
changelog:
  - Update to 0.0.53
  - Capitalize the return values of language_name() and territory_name()
    (See: https://github.com/rhinstaller/anaconda/pull/2837).
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Mike FABIAN <mfabian@redhat.com> - 0.0.54-1
changelog:
  - Update to 0.0.54
  - add list_common_languages derived from gnome-control-center
    by Sundeep ANAND <suanand@redhat.com>


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-2
changelog:
  - Rebuild with openssl3, presumably in a buildroot with xmlsec1
    linked against openssl3
  - Resolves: rhbz#1962052 - lasso: Port to OpenSSL 3.0


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-4
changelog:
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-5
changelog:
  - Don't run configure twice
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-6
changelog:
  - Resolves: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-9
changelog:
  - Bump the test timeout again
  - Related: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Tomas Halman <thalman@redhat.com> - 2.7.0-12
changelog:
  - Fixing CVE-2025-47151
    Resolves: RHEL-126685 CVE-2025-47151 lasso: Type confusion in Entr'ouvert Lasso


author: Petr Menšík <pemensik@redhat.com> - 1.7.1-2
changelog:
  - Use make_build and make_install macro instead of make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Lescak <rlescak@redhat.com> - 1.7.1-9
changelog:
  - Fix for CVE-2020-19860 ldns: heap overread vulnerability (#2051211)
  - Added also patch for deprecated distutils Python module used in build


author: Matej Matuska <mmatuska@redhat.com> - 0.18.0-4
changelog:
  - Bump leapp-framework to 6.0
  - Bump leapp-framework-dependencies to 6
  - Require python3-PyYAML
  - [Technical preview] Introduce configurability for leapp actors
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-1
changelog:
  - Rebase to new upstream version 0.19.0
  - Add possibility to use a specified execution context for snactor run in an existing leapp.db
  - Increase limits on the number of opened file descriptors and maximum size
    of manipulated files when running leapp
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-2
changelog:
  - Bump leapp-framework to 6.1
  - Create the /var/lib/leapp directory automatically if missing
  - Recognize configuration files with the .yaml suffix only
  - Fix CLI: allow to set falsy values as default for leapp's command options
  - Resolves: RHEL-86225


author: Petr Stodulka <pstodulk@redhat.com> - 0.20.0-2
changelog:
  - Bump leapp-framework to 6.2
  - Add possibility to specify aliases for CLI option
  - Resolves: RHEL-128269


author: Matej Matuska <mmatuska@redhat.com> - 0.21.0-4
changelog:
  - Require leapp-framework 6.0+
  - Update leapp-deps package to satisfy leapp-framework-dependencies 6
  - Add dependency on libdb-utils
  - Enable upgrade for systems with LUKS bound to Clevis with TPM 2.0 token
  - Adjust resource limitations for leapp to be able to perform the upgrade
  - Cap max size of the sparse files to 1TiB for storage with large amount of free space
  - Check that detected Intel CPU microarchitecture is supported on target system
  - Fix the report when handling broken parsing of kernel cmdline
  - Generate proper error message instead of ModelViolationError when parsing invalid repository definition
  - Handle default kernel cmdline when multiple boot entries for the default kernel are defined
  - Migrate Ruby IRB during the upgrade
  - Migrate pam_userdb backend during the upgrade
  - Skip checking of (PKI) `directory-hash` dir to speedup the upgrade process and clean logs
  - Update leapp upgrade data files
  - Resolves: RHEL-57043


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-5
changelog:
  - Obsolete RHEL9 GPG key signed with SHA1
  - Activate LVM VGs with `--sysinit` option to correct the use in the upgrade initramfs
  - Fix output of commands executed inside systemd-nspawn containers
  - Fix pes events scanner crashing when there are duplicate packages in the received instructions
  - Fix pes events scanner not respecting user’s transaction configuration
  - Fix remediation instructions for deprecated NM configuration
  - Fix storage scanner crashing when command outputs contain colon character
  - Minor improvements in preupgrade reports
  - Resolves: RHEL-57043, RHEL-31428, RHEL-33373, RHEL-69829, RHEL-71517


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-6
changelog:
  - Detect XFS file systems with problematic parameters
  - Raise an inhibitor if unsupported target version supplied instead of error
  - Prevent a possible crash with LiveMode when adding the upgrade boot entry on systems with LVM
  - Resolves: RHEL-57043, RHEL-52309, RHEL-60034


author: Petr Stodulka <pstodulk@redhat.com> - 0.22.0-1
changelog:
  - Rebase to new upstream 0.22.0
  - Minor updates in generated reports
  - Cover upgrades for MySQL and PostgreSQL databases
  - Detect OpenSSL engines configured in /etc/pki/tls/openssl.cnf
  - Detect deprecated network-scripts (ifcfg) files
  - Detect whether subscribed systems are using SCA
  - Inform user about Libdb removal if present
  - Check and handle upgrades with custom crypto policies
  - Update checks for SAP HANA
  - Resolves: RHEL-57043, RHEL-35618, RHEL-36661, RHEL-62689, RHEL-68309, RHEL-69831, RHEL-77169, RHEL-78396


author: Petr Stodulka <pstodulk@redhat.com> - 0.22.0-2
changelog:
  - Require leapp-framework >= 6.1
  - Simplified use of the LiveMode experimental feature with additional enhancements
  - Ensure the leapp-upgrade-el9toel10 RPM is not touched during the upgrade transaction
  - Create proper error message when swap of RHUI clients fails
  - Fix the check of deprecated PCI devices and drivers
  - Add RHEL 10.1 product certificates
  - Gracefully handle CentOS OS versioning style
  - Introduced the --enable-experimental-feature to simplify use of experimental features
  - Manage RPM GPG keys during the upgrade respecting used linux distributions
  - Prevent a crach during post-upgrade phases when no custom SELinux modules needs to be migrated
  - Update leapp upgrade data files
  - Minor fixes in reports
  - Resolves: RHEL-49402, RHEL-72544, RHEL-77175, RHEL-80334, RHEL-80335, RHEL-80336, RHEL-80550, RHEL-86689


author: Karolina Kula <kkula@redhat.com> - 0.22.0-3
changelog:
  - Fix parsing of the kernel cmdline
  - Require leapp data with provided_data_streams 4.0+
  - Respect the release_id of the OS when processing DNF repositories to apply correct mapping for CentOS Stream
  - Resolves: RHEL-80336


author: Karolina Kula <kkula@redhat.com> - 0.22.0-4
changelog:
  - Load DNF configuration correctly when using DNF libraries
  - Disable localpkg_gpgcheck during the upgrade if set to allow installation of bundled leapp and leapp-repository deps packages
  - Enable upgrades on systems using RHUI on AWS and Azure
  - Inhibit the upgrade if cgroups v1 are enabled on the system
  - The HybridImage model has been replaced by ConvertGrubenvTask
  - Check the input format of the target version properly
  - Resolves: RHEL-64910, RHEL-64911, RHEL-81212


author: Karolina Kula <kkula@redhat.com> - 0.23.0-1
changelog:
  - Rebase to new upstream 0.23.0
  - Enable in-place upgrades on CentOS Stream systems
  - Inhibit the upgrade on systems using deprecated network-legacy dracut module to prevent kernel panic
  - Introduce leapp-upgrade-el9toel10-fapolicyd subpackage with fapolicyd rules for in-place upgrades
  - Ignore Red Hat subscription-manager actions on non-RHEL distros
  - Add actors to migrate SSSD configuration
  - Update leapp upgrade data files
  - Resolves: RHEL-50847, RHEL-80333, RHEL-86226, RHEL-95975, RHEL-95982, RHEL-102591, RHEL-104389


author: Petr Stodulka <pstodulk@redhat.com> - 0.23.0-2
changelog:
  - Requires leapp-framework 6.2+
  - Modernize the storage initialization when booting to the upgrade environment
  - Fix the upgrade on s390x LPAR when rootfs is on LVM
  - Fix the detection of encrypted Ceph OSD containers
  - Fix unlocking of LUKS devices when applied on non-rootfs file systems
  - Detect potentially harmful third party python modules for the target python version
  - Handle correctly live kernel patching during IPU
  - Inhibit the upgrade if pluginpath is configured explicitly in DNF
  - Introduce `--target-os` option to specify target distribution for possible conversion during the upgrade
  - Introduce the `--target-version` alias for the `--target` option
  - Minor changes in logs and reports
  - Prevent sssdupdate actor from rising errors that could stop the upgrade
  - Respect repomapping on CentOS-like distributions
  - Respect repomapping when converting the system to different Linux distribution
  - Skip empty lines when parsing dumped DNF config to prevent confusing warning log
  - Update the leapp data files
  - Resolves: RHEL-76159, RHEL-95983, RHEL-108025, RHEL-108992, RHEL-110563, RHEL-119546


author: Karolina Kula <kkula@redhat.com> - 0.23.0-3
changelog:
  - Fix handling of LVM during the upgrade
  - Deliver initial improvements for Multipath during the upgrade
  - Fix remediation command to make symlimk in root directory relative
  - Remove RPM GPG keys of the source distribution when converting system
  - Replace distro specific packages during conversion
  - Improve error message when scanning invalid SSHD configuration
  - Update the leapp data files
  - Minor changes in logs and reports
  - Resolves: RHEL-110190, RHEL-110568


author: Michal Ruprich <mruprich@redhat.com> - 4.9.2-8
changelog:
  - Adding a timeout for TLS close
  - Resolves: RHEL-113471 - "cannot seek on data source" in TLS lftp sessions


author: José Expósito <jexposit@redhat.com> - 1.7.0-9
changelog:
  - Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
  - Fix CVE-2023-43786: stack exhaustion from infinite recursion in
    PutSubImage()
  - Fix CVE-2023-43787: integer overflow in XCreateImage() leading to
    a heap overflow


author: RHEL Packaging Agent <jotnar@redhat.com> - 1.8.12-1
changelog:
  - Rebase to version 1.8.12
  - Update license to MIT AND X11 (SPDX migration)
  - Change source format from .tar.bz2 to .tar.xz
  - Add libtool as BuildRequires
  - Remove CVE patches (now included upstream)
  - Add patch to lower autoconf requirement to 2.69
  - Update dont-forward-keycode-0.patch for new codebase
  - Remove NEWS from %doc (file not present in 1.8.12)
  - Resolves: RHEL-111537


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: José Expósito <jexposit@redhat.com> - 3.5.13-9
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Tom Stellard <tstellar@redhat.com> - 2.2.53-6
changelog:
  - Spec file cleanups and build fix
  - Add BuildRequires: perl-FileHandle to fix make check
  - Add BuildRequres: gcc [1]
  - Use make_build [2] and make_install[3] macros
  - [1] https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_buildrequires_and_requires
  - [2] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - [3] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.16-1
changelog:
  - Update to 0.7.15
  - Add UPL short name to SPDX conversion
  - Allow parsing desktop files using as_app_parse_data()
  - Do not preserve restrictive permissions when installing AppStream files
  - Modernize the validation requirements
  - Remove relative path from icon names
  - Support loading YAML from as_store_from_bytes()
  - Update list of allowed metadata licences
  - Update the SPDX license list to v3.5


author: Richard Hughes <richard@hughsie.com> 0.7.17-1
changelog:
  - New upstream release
  - Add "icon-theme" as recognised component type
  - Fix CI by moving 'future' back a bit
  - Make default content rating values match OARS semantics
  - Properly initialize unique_id_mutex


author: Richard Hughes <richard@hughsie.com> 0.7.18-1
changelog:
  - New upstream release
  - Add content rating system APIs from gnome-software
  - Add "validate-version" command
  - Allow timestamp in the future in validate-relax
  - Don't ignore localized strings that are the same as original
  - Fix crash with invalid children of <ul/>
  - Properly initialize mutexes
  - Test launchable tags in validation


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-28856


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.3.0 base"


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base"


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-4
changelog:
  - nvme: Fix namespace identifiers
    Resolves: rhbz#2151535
  - nvme: Avoid sending NVME_IDENTIFY_CNS_NS_DESC_LIST on older devices
    Related: rhbz#2151535


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-5
changelog:
  - Allow resizing of inactive LVs with latest LVM
    Resolves: rhbz#2161181
  - Fix test_swapon_pagesize on systems with 64k pages
    Resolves: rhbz#2168220


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-24
changelog:
  - fix SSH connection too eager reuse still (CVE-2023-27538)
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)
  - fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
  - fix TELNET option IAC injection (CVE-2023-27533)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-26
changelog:
  - unify the upload/method handling (CVE-2023-28322)
  - fix host name wildcard checking (CVE-2023-28321)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-28
changelog:
  - return error if hostname too long for remote resolve (CVE-2023-38545)
  - fix cookie injection with none file (CVE-2023-38546)
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-32
changelog:
  - make up incomplete patch for host name wildcard checking (RHEL-5675)
  - eliminate use of obsolete patch syntax (RHEL-65791)
  - http2: make sure pause is done on HTTP (RHEL-85847)


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: José Expósito <jexposit@redhat.com> - 2.4.123-2
changelog:
  - Revert upstream commit ffaa3ce144be ("2.4.122, Build Intel on all arches")
    libpciaccess is not available in RHEL 9 aarch64, ppc64le and s390x
    Resolves: https://issues.redhat.com/browse/RHEL-53869


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: Vishal Vijayraghavan <vvijayra AT redhat DOT com> - 1:2.1.3-1
changelog:
  - New release of liberation-fonts 2.1.3
  - Resolves:rh#1464310 : Tilded G not works with Liberation Sans and Serif


author: Michal Schmidt <mschmidt@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream release 1.15.1
  - Disable LTO on x86_64 due to memory issues (copied from Fedora)
  - Resolves: rhbz#2040454


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Resolves: rhbz#1963838 restore missing functions
    Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libformula
    didn't use its built-in loaders so libreoffice's database
    report generator didn't show all categories in formula wizard


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-3
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56809
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62935
  - Replace Jansson with json-c
    resolves: RHEL-65292


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-7
changelog:
  - Add --key all:... selector
    resolves: RHEL-19367
  - Add miscellaneous other upstream fixes since 1.50.1


author: Richard W.M. Jones <rjones@redhat.com> - 8.2-1
changelog:
  - Rebuild for RHEL AV 8.2.
  - Include ntfs-3g-system-compression plugin.
    resolves: rhbz#1705234, rhbz#1796073


author: Richard W.M. Jones <rjones@redhat.com> - 9.2-1
changelog:
  - Rebase to ntfs-3g 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789
    resolves: rhbz#2127235 rhbz#2127242
    (also 2127264 2127250 2127257)


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.19.3-6
changelog:
  - Add support for the Wacom Intuos Pro (RHEL-105483)
  - Rename existing patches for better order clarity


author: Keith Seitz <keiths@redhat.com> - 2.0.4-2
changelog:
  - Add support for pre-generated documenation, allowing removal
    of pandoc dependency. (RHBZ 1943531, Keith Seitz)


author: Robert Scheck <robert@fedoraproject.org> 1.5.2-5
changelog:
  - Don't ship API docs twice (devel and doc subpackages)
  - Reworked spec file to build libisoburn1 for RHEL >= 8


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.5.0-3
changelog:
  - Minor fixes for Python 3.12 compatibility
  - Fix Python unit tests to use the right assert methods
  - Explicitly BR python3-setuptools


author: Mohan Boddu <mboddu@redhat.com> - 0.2.10-24
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951286 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951284 replace apache-commons-logging with java.util.logging


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libloader
    didn't use its built-in loaders so libreoffice's database
    report generator didn't work


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Michal Ruprich <mruprich@redhat.com> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Resolves: #1758843 - libmaxminddb-devel i686 can't be installed in parallel to x86_64
  - Fix for CVE-2020-28241


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.6-1
changelog:
  - Rebase to new stable branch version 1.12.6
    resolves: rhbz#2059288
  - New tool: nbddump
  - nbdcopy: Use preferred block size for copying
    related: rhbz#2047660
  - Fix remote TLS failures
    resolves: rhbz#2111524
    (and 2111813)


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: Adrian Reber <areber@redhat.com> - 1.2-5
changelog:
  - Repack tarball to remove problematic license from unused code
  - Apply fixes for warnings found by gcc -fanalyzer


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Adam Borowski <kilobyte@angband.pl> - 1.11-1
changelog:
  - Update to version 1.11.
  - Disable enumerable_thread_specific_access_0_drd
  - Fix internal find in radix_tree


author: Bryan Gurney <bgurney@redhat.com> - 1.12-8
changelog:
  - Apply patch to fix undefined behavior on realloc
  - Also add and apply patch to fix referencing empty array
  - Related: rhbz#2034641


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.37-13
changelog:
  - CVE-2025-64720: buffer overflow (RHEL-131594)
  - CVE-2025-65018: heap buffer overflow (RHEL-131603)
  - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294)


author: Remi Collet <remi@remirepo.net> - 0.11.0-1
changelog:
  - update to 0.11.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/665


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951282 replace apache-commons-logging with java.util.logging


author: Daiki Ueno <dueno@redhat.com> - 4.9-2
changelog:
  - Fix CVE-2023-23009: remote DoS via crafted TS payload with an
    incorrect selector length (rhbz#2173674)


author: Sahana Prasad <sahana@redhat.com> - 4.9-3
changelog:
  - Fix CVE-2023-30570:Malicious IKEv1 Aggressive Mode packets can crash
    libreswan
  - Resolves: rhbz#2187171


author: Sahana Prasad <sahana@redhat.com> - 4.9-5
changelog:
  - Just bumping up the version to include bugs for CVE-2023-2295. There is no
    code fix for it. Fix for it is including the code fix for CVE-2023-30570.
  - Fix CVE-2023-2295 Regression of CVE-2023-30570 fixes in the
    Red Hat Enterprise Linux
  - Resolves: rhbz#2189777, rhbz#2190148


author: Daiki Ueno <dueno@redhat.com> - 4.15-2
changelog:
  - Fix auto=ondemand connection initialization with TCP (RHEL-51879)
  - Make use of Netlink extack for additional error reporting (RHEL-51881)


author: Daiki Ueno <dueno@redhat.com> - 4.15-4
changelog:
  - pluto: fix refcounting of whack FD at CREATE_CHILD_SA request (RHEL-61461)
  - pluto: ignore CREATE_CHILD_SA request if crypto is in progress (RHEL-61461)


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.99.20-1
changelog:
  - 1900160 - sane-airscan-0.99.20 is available
  - 1897935 - Crash on libsane-airscan when trying to activate scanner


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Mohan Boddu <mboddu@redhat.com> - 1.1.2-29
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951281 replace apache-commons-logging with java.util.logging


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.3.1-3
changelog:
  - Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets
    rhbz#1902232


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.4.0-3
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
    Resolves: rhbz#1970826 rhbz#1970839 rhbz#1970857 rhbz#1970847


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.31-6
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985029)


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-9
changelog:
  - Add patches for CVE-2024-52530, CVE-2024-52531, and CVE-2024-52532
    Resolves: RHEL-67069
    Resolves: RHEL-67081


author: Kalev Lember <klember@redhat.com> - 2.72.0-2
changelog:
  - Tighten soname globs
  - Avoid automatic requires on sysprof-devel package
  - Update required glib2 version


author: Kalev Lember <klember@redhat.com> - 2.72.0-5
changelog:
  - Don't try to avoid sysprof dep any more now that sysprof-capture-devel is
    split out to a separate subpackage


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-3
changelog:
  - Enable pkcs11 support
  - Fix broken libsofthsm path on i686
  - Add missing bugzilla references from the rebase commit
  - Related: rhbz#2026449
  - Resolves: rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Pavol Žáčik <pzacik@redhat.com> - 0.10.4-16
changelog:
  - Fix CVE-2025-5987
    Resolves: RHEL-130051
  - Workaround sshd failure rate limiting in tests
    Resolves: RHEL-135506


author: Matej Mužila <mmuzila@redhat.com> 4.4.0-2
changelog:
  - Update to version 4.4.0
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354
    CVE-2022-1355


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Michal Hlavinka <mhlavink@redhat.com> - 4.4.0-14
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.3
changelog:
  - Add -Wno-error=deprecated-declarations, to ignore OpenSSL 3.0 deprecation warnings.
    Fixes: rhbz#1958054


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.5
changelog:
  - Fixes CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM
    Resolves: rhbz#1976814


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.7
changelog:
  - Fixes CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets
    Resolves: rhbz#1999303


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.1-3.20211126git1ff6fe1f43
changelog:
  - Backport "tpm2: Check size of buffer before accessing it" (CVE-2023-1017 & CVE-2023-1018)
    Resolves: rhbz#2173960
    Resolves: rhbz#2173967


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-8
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188916)
  - tests: Use stronger passphrases for LUKS tests (#2188750,#2188752)
  - integration-test: Fix scsi_debug cd drive read-only detection (#2211191)
  - lvm2: Improve uevent processing (#2031673)
  - tests: Mark test_job.UdisksJobTest.test_job as unstable (#2148844)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-4
changelog:
  - Fix a couple of issues found by Coverity (#1938890)
  - Ignore systemd "Extended Boot Loader" GPT partition


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-1
changelog:
  - Version 2.9.4 (#2010363)
  - CVE-2021-3802: Harden the default mount options for ext filesystems (#2004423)
  - Fix double free on daemon exit (unaligned fastbin chunk) (#2001549)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.5-1
changelog:
  - Update license to GPL-2.0 OR MIT
  - Add io_uring_prep_epoll_ctl()
  - Add io_uring_get_probe(), io_uring_get_probe_ring()
  - Add io_uring_register_probe()
  - Add io_uring_{register,unregister}_personality()
  - Add io_uring_prep_{recv,send}()
  - Add io_uring_prep_openat2()
  - Add io_uring_ring_dontfork()
  - Add io_uring_prep_read() and io_uring_prep_write()
  - Documentation fixes and improvements


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.6-1
changelog:
  - add io_uring_prep_splice()
  - add io_uring_prep_provide_buffers()
  - add io_uring_prep_remove_buffers()
  - add io_uring_register_eventfd_async()
  - reinstate io_uring_unregister_eventfd() (it was accidentally removed in 0.4)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.7-1
changelog:
  - Add io_uring_cq_eventfd_toggle() helper for new IORING_CQ_EVENTFD_DISABLED flag
  - Add IORING_OP_TEE
  - Documentation fixes and improvements


author: Jeff Moyer <jmoyer@redhat.com> - 2.12-1.el9
changelog:
  - Rebase to version 2.12.  Follow fedora and get rid of explicit %
    attr for library files
  - Resolves: RHEL-114115


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-10
changelog:
  - esxConnectListAllDomains: Don't propagate failure to lookup a single domain (RHEL-80606)
  - conf: parse interface/source/@dev for all interface types (with backend type='passt') (RHEL-82539)
  - libvirt-host: Clarify/fix description of the CPU frequency field (RHEL-86197)
  - virNodeGetInfo: Improve description of the case when fake data is reported (RHEL-86197)
  - manpages: virsh: Use disclaimer from 'virNodeGetInfo()' for 'virsh nodeinfo' (RHEL-86197)
  - esx: Accept empty "path" URI component same way as "/" (RHEL-86459)
  - qemu: Rename outgoingMigration parameter in various TPM functions (RHEL-86800)
  - qemu: Properly propagate migration state to TPM cleanup code (RHEL-86800)
  - qemuDomainBlockCopyCommon: Don't revoke access to file twice on failure (RHEL-7357)
  - qemuxmlconftest: Drop s390-default-cpu-...ccw-virtio-2.7 test cases (RHEL-72976)
  - tests: add capabilities for QEMU 10.0.0 on s390x (RHEL-72976)
  - qemu: Do NOT autoadd NUMA node for s390 (RHEL-72976)
  - qemu_command: Use qemuBuildVirtioDevProps() to build cmd line for virtio-mem and virtio-pmem (RHEL-72976)
  - qemuxmlconftest: Introduce memory-hotplug-virtio-mem-pci-s390x.xml (RHEL-72976)
  - qemu_caps: Introduce QEMU_CAPS_DEVICE_VIRTIO_MEM_CCW (RHEL-72976)
  - qemu: Validate virtio-mem-ccw (RHEL-72976)
  - qemu: Allow virtio-mem on CCW (RHEL-72976)
  - qemuxmlconftest: Introduce memory-hotplug-virtio-mem-ccw-s390x.xml (RHEL-72976)
  - qemu_domain_address: fix CCW virtio-mem hotplug (RHEL-72976)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-11
changelog:
  - Add load average information type into virDomainGetGuestInfo (RHEL-88447)
  - qemu_agent: Add qemuAgentGetLoadAvg() (RHEL-88447)
  - qemu: Add support for VIR_DOMAIN_GUEST_INFO_LOAD (RHEL-88447)
  - virsh: Add support for VIR_DOMAIN_GUEST_INFO_LOAD (RHEL-88447)
  - qemu_capabilities: Fetch caps for virtio-mem-ccw too (RHEL-87532)
  - cpu_map: Add avx10* CPU features (RHEL-87796)
  - cpu_map: Add GraniteRapids-v2 CPU model (RHEL-87796)
  - cpu_map: Add sha512, sm3, and sm4 CPU features (RHEL-87796)
  - virsh: Introduce new hypervisor-cpu-models command (RHEL-11435)
  - qemu: remove nonsensical sanity check in processNetdevStreamDisconnectedEvent() (RHEL-80169)
  - qemu: make processNetDevStreamDisconnectedEvent() reusable (RHEL-80169)
  - qemu: respond to NETDEV_VHOST_USER_DISCONNECTED event (RHEL-80169)
  - qemu: put vhost-user code that's special for passt in a helper function (RHEL-80169)
  - qemu: make passt+vhostuser reconnect behave identically to passt+user (RHEL-80169)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-12
changelog:
  - qemuMonitorJSONGetCPUModelExpansion: refactor parsing functions (RHEL-89415)
  - qemu: parse deprecated-props from query-cpu-model-expansion response (RHEL-89415)
  - qemu_capabilities: query deprecated features for host-model (RHEL-89415)
  - libvirt-domain: introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_DISABLE_DEPRECATED_FEATURES (RHEL-89415)
  - qemu_capabilities: filter deprecated features if requested (RHEL-89415)
  - virsh: add --disable-deprecated-features flag to domcapabilities (RHEL-89415)
  - conf: add deprecated_features attribute (RHEL-89415)
  - redhat: Restore hunks in tests/qemucapabilitiesdata/caps_10.0.0_s390x.* (RHEL-89415)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-14
changelog:
  - qemu: introduce QEMU_CAPS_AMD_IOMMU (RHEL-50560)
  - qemu: introduce QEMU_CAPS_PCI_ID (RHEL-50560)
  - docs: formatdomain: document intel-only IOMMU attributes (RHEL-50560)
  - qemu: add IOMMU model amd (RHEL-50560)
  - conf: add passthrough and xtsup attributes for IOMMU (RHEL-50560)
  - esx: Allow specifying different CA bundle for remote connections (RHEL-97440)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-15
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-106276)
  - qemu: sanitize blank lines in config file (RHEL-106276)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-106276)


author: Jiri Denemark <jdenemar@redhat.com> - 11.8.0-1
changelog:
  - Rebased to libvirt-11.8.0 (RHEL-118197)
  - The rebase also fixes the following bugs:
      RHEL-15693, RHEL-95397, RHEL-111609, RHEL-116847, RHEL-117774


author: Jiri Denemark <jdenemar@redhat.com> - 11.9.0-1
changelog:
  - Rebased to libvirt-11.9.0 (RHEL-118197)
  - The rebase also fixes the following bugs:
      RHEL-114003


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-1
changelog:
  - Rebased to libvirt-11.10.0 (RHEL-118197)
  - The rebase also fixes the following bugs:
      RHEL-126090, RHEL-128107
  - spec: Fix RPM build when %{fedora} is undefined (RHEL-118197)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-2
changelog:
  - qemu: tpm: Account for possible migration without actually sharing storage (RHEL-108915)
  - tests: Test virFileIsSharedFSOverride (RHEL-135287)
  - util: Fix race condition in virFileIsSharedFSType (RHEL-135287)
  - util: Fix race condition in virFileIsSharedFSOverride (RHEL-135287)
  - util: Rework virFileIsSharedFSOverride using virFileCheckParents (RHEL-135287)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-3
changelog:
  - util: json: Increase JSON nesting limit when parsing to 300 (RHEL-135128)
  - virjsontest: Add test for nesting depth (RHEL-135128)
  - qemu_validate: Drop VIR_DOMAIN_HYPERV_SYNIC dependency on VIR_DOMAIN_HYPERV_VPINDEX (RHEL-138689)
  - qemu_validate: Drop VIR_DOMAIN_HYPERV_STIMER dependency on VIR_DOMAIN_HYPERV_VPINDEX (RHEL-138689)
  - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-134127)
  - esx: URI encode inventory objects twice (RHEL-134127)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-4
changelog:
  - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624)
  - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010)
  - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010)
  - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010)
  - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010)
  - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090)
  - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090)
  - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090)
  - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090)
  - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-7
changelog:
  - qemu_migration: Refactor qemuMigrationSrcRestoreDomainState (RHEL-79168)
  - qemu_migration: Do not automatically resume domain after I/O error (RHEL-79168)
  - qemucapabilitiestest: Add data for the qemu-10.0 dev cycle on x86_64 (RHEL-79095)
  - qemucapabilitiestest: Update 'caps_10.0.0_x86_64' to 'v9.2.0-1636-gffaf7f0376' (RHEL-79095)
  - qemu: capabilies: Introduce QEMU_CAPS_BLOCKDEV_SET_ACTIVE (RHEL-79095)
  - qemu: monitor: Add monitor backend for 'blockdev-set-active' (RHEL-79095)
  - qemu: migration: Reactivate block nodes after migration if VM is left paused (RHEL-79095)
  - conf: change virDomainHostdevInsert() to return void (RHEL-69455)
  - qemu: fix qemu validation to forbid guest-side IP address for type='vdpa' (RHEL-69455)
  - qemu: validate that model is virtio for vhostuser and vdpa interfaces in the same place (RHEL-69455)
  - qemu: automatically set model type='virtio' for interface type='vhostuser' (RHEL-69455)
  - qemu: do all vhostuser attribute validation in qemu driver (RHEL-69455)
  - conf/qemu: make <source> element *almost* optional for type=vhostuser (RHEL-69455)
  - qemu: use switch instead of if in qemuProcessPrepareDomainNetwork() (RHEL-69455)
  - qemu: make qemuPasstCreateSocketPath() public (RHEL-69455)
  - qemu: complete vhostuser + passt support (RHEL-69455)
  - qemu: fail validation if a domain def has vhostuser/passt but no shared mem (RHEL-69455)
  - docs: improve type='user' docs to higlight differences between SLIRP and passt (RHEL-69455)
  - docs: document using passt backend with <interface type='vhostuser'> (RHEL-69455)
  - utils: Canonicalize paths before comparing them (RHEL-79166)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-8
changelog:
  - remote: add sysusers file to create 'libvirt' group (RHEL-81749)
  - qemu: Avoid crash in qemuDomainCheckCPU with unknown host CPU (RHEL-81747)
  - qemu_snapshot: allow reverting to external disk only snapshot (RHEL-21549)
  - qemu: snapshot: error out early when reverting snapshot for VM with non-file disk (RHEL-30971)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-9
changelog:
  - util: introduce object for holding a system inhibitor lock (RHEL-83064)
  - src: convert drivers over to new virInhibitor APIs (RHEL-83064)
  - rpc: remove logind support for virNetDaemon (RHEL-83064)
  - util: fix off-by-1 in inhibitor constants (RHEL-83064)
  - util: don't attempt to acquire logind inhibitor if not requested (RHEL-83064)
  - network: Free inhibitor in networkStateCleanup() (RHEL-83064)
  - conf: introduce support for multiple ACPI tables (RHEL-81041)
  - src: validate permitted ACPI table types in libxl/qemu drivers (RHEL-81041)
  - src: introduce 'raw' and 'rawset' ACPI table types (RHEL-81041)
  - qemu: support 'raw' ACPI table type (RHEL-81041)
  - libxl: support 'rawset' ACPI table type (RHEL-81041)
  - conf: support MSDM ACPI table type (RHEL-81041)
  - qemu: support MSDM ACPI table type (RHEL-81041)
  - qemuxmlconftest: Include shared memory 'net-vhostuser' test cases (RHEL-84133)
  - qemuValidateDomainDeviceDefNetwork: Require shared memory for all vhost-user interfaces (RHEL-84133)
  - qemu: process: Remove un-updated 'qemuProcessStartWarnShmem' (RHEL-84133)


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-2
changelog:
  - Drop libwacom-show-stylus, it's a debugging tool that requires extra
    dependencies that we shouldn't pull in everywhere (#2044710)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-4
changelog:
  - Add support for the Cintiq Pro 27 (RHEL-101886)
  - Add support for the Intuos Pro 3rd Gen series (RHEL-101881)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-5
changelog:
  - Rearrange the OSD buttons for the Intuos Pro 3rd Gen (RHEL-101881)
  - Use separate Ring/Ring2 assignments


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-6
changelog:
  - Add stylus definitions for the propen group (RHEL-122207)
  - Add tablet definitions for the latest Cintiqs (RHEL-122206)
  - Fix the overlap for button assignments in the SVG (RHEL-126355)


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.8-17
changelog:
  - Use make macros, patch by Tom Stellard <tstellar@redhat.com>
    (https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro)
  - Update flags, enable LTO
  - Remove RANDFILE and increase default bits in ssleay.conf


author: Toke Høiland-Jørgensen <toke@redhat.com> 1.5.7-1
changelog:
  - Upstream version bump
  - Add annocheck exceptions for BPF objects (Felix)
  - Re-enable debug builds (Felix)
  - Add libcap-ng-devel to BuildDepends


author: David King <dking@redhat.com> - 2.9.13-10
changelog:
  - Fix CVE-2025-6021 (RHEL-96507)
  - Fix CVE-2025-49794 (RHEL-96405)
  - Fix CVE-2025-49796 (RHEL-96431)


author: Jakub Jelen <jjelen@redhat.com> - 1.1.33-4
changelog:
  - Do not build python bindings even if the python is available
  - Fix CVE-2019-13117 (#1728547)
  - Fix CVE-2019-13118 (#1728542)


author: Simo Sorce <simo@redhat.com> - 1.1.34-3
changelog:
  - Drop crypto dependency.
  - The "cryptography" implemented in exslt is outdated and bad supporting only
    insecure algorithms (RC4, SHA1, MD5, MD4), and should not be used anyway.


author: Michal Ruprich <mruprich@redhat.com> - 1.0.225-3
changelog:
  - Resolves: #1965253 - CVE-2021-28902 libyang: NULL pointer dereference in read_yin_container()
  - Resolves: #1965255 - CVE-2021-28903 libyang: recursive call to lyxml_parse_mem() lead to crash


author: Remi Collet <remi@remirepo.net> - 1.7.2-1
changelog:
  - update to 1.7.2
  - fix installation layout using merged patch from
    https://github.com/nih-at/libzip/pull/190


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "i686-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j40  
    cd -


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "x86_64-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j40  
    cd -


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-6
changelog:
  - add support for VLAN over bond (#2120521)
  - handle EINTR when waiting for transmit timestamp (#2128786)
  - check for unexpected changes in frequency offset (#2150815)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (RHEL-2026 RHEL-2342 RHEL-12182 RHEL-15929)
  - fix ts2phc to handle large NMEA delay (RHEL-23208)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-3
changelog:
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-39387)
  - fix ts2phc to correctly handle leap seconds (RHEL-40216)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-40947)
  - add options to configure multicast IP addresses (RHEL-31178)
  - add holdover support to ts2phc (RHEL-50216)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58213 RHEL-57040)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60027)
  - support static sink clocks in phc2sys automatic mode (RHEL-62864)
  - don't require -O option without -a and -w in phc2sys (RHEL-69138)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-2
changelog:
  - add experimental option for external PPS in ts2phc automatic mode
    (RHEL-72468)
  - add command to set external grandmaster properties (RHEL-90585)
  - refresh link status on faults (RHEL-56168)


author: Vit Mojzis <vmojzis@redhat.com> - 1.0.18-3
changelog:
  - Added a patch to fix netinet/sctp.h not to be installed.
  - Added some fixes for kernel feature detection.
  - Updated to 1.0.18. [1568622]


author: Artem Egorenkov <aegorenk@redhat.com> - 3.6.0-7
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Sérgio Basto <sergio@serjux.com> - 2.14.1-1
changelog:
  - Update to 2.14.1
  - Disable javadoc (#1988896)
  - Build with jansi-2
  - Remove deps on slf4j-ext (no longer available in Fedora 35)


author: Brian C. Lane <bcl@redhat.com> 34.9.16-1
changelog:
  - Makefile: Add local-srpm target to create a .src.rpm from HEAD (bcl)
    Related: rhbz#2088631
  - mkksiso: Fix s390x support (bcl)
    Related: rhbz#2088631
  - mkksiso: Remove use of os.path.join (bcl)
    Related: rhbz#2088631
  - Makefile: Add mkksiso to coverage report (bcl)
    Related: rhbz#2088631
  - setup.py: Install mkksiso to /usr/bin (bcl)
    Related: rhbz#2088631
  - mkksiso: Fix grub2 editing error (bcl)
    Related: rhbz#2088631
  - mkksiso: Rewrite to use xorriso features (bcl)
    Resolves: rhbz#2088631


author: Brian C. Lane <bcl@redhat.com> 34.9.17-1
changelog:
  - minimal.ks: Add include for architecture specific packages (bcl)
    Related: rhbz#2051548
  - livemedia.ks: Add include for architecture specific packages (bcl)
    Resolves: rhbz#2051548
  - tests: Add tests for mkksiso (bcl)
    Related: rhbz#2037015
  - mkksiso: Add kernel cmdline customization support (bcl)
    Resolves: rhbz#2037015
  - mkksiso: Move kickstart to --ks KICKSTART (bcl)
    Related: rhbz#2037015
  - mkksiso: Add helper functions for kernel cmdline modifications (bcl)
    Related: rhbz#2037015
  - lorax.spec: Fix changelog order (bcl)
    Resolves: rhbz#1972099


author: Brian C. Lane <bcl@redhat.com> 34.9.18-1
changelog:
  - mkksiso: Set u+rw permission on extracted files and directories (bcl)
    Related: rhbz#2088631
  - lorax.spec: Fix changelog (bcl)
    Resolves: rhbz#1972099


author: Brian C. Lane <bcl@redhat.com> 34.9.19-1
changelog:
  - mkksiso: Optionally support 3 arguments or --ks (bcl)
    Resolves: rhbz#2037015
  - mkksiso: Add -U to xorriso on ppc64le (bcl)
    Resolves: rhbz#2109665
  - mkksiso: Fix passing -iso-level to xorriso (bcl)
    Related: rhbz#2109665


author: Brian C. Lane <bcl@redhat.com> 34.9.20-1
changelog:
  - templates: Update runtime-* templates (bcl)
    Resolves: rhbz#2042057
  - templates: Update path to license files (bcl)
    Related: rhbz#2042057
  - templates: Update boot timeout to 5s (bcl)
    Related: rhbz#2042057


author: Brian C. Lane <bcl@redhat.com> 34.9.23-1
changelog:
  - rsyslog.conf: Set WorkDirectory to /var/lib/rsyslog (bcl)
    Resolves: rhbz#2158731
  - lorax.spec: fix changelog entry for 2132511 (bcl)
    Related: rhbz#2132511


author: Brian C. Lane <bcl@redhat.com> 34.9.26-1
changelog:
  - monitor: Skip repo errors involving CDROM/file source (bcl) (bcl)
    Resolves: RHEL-4658
  - rsyslog.conf: Update to use current config syntax (bcl) (bcl)
    Resolves: RHEL-46857


author: Brian C. Lane <bcl@redhat.com> 34.9.27-1
changelog:
  - New lorax documentation - 34.9.27 (bcl) (bcl)
    Related: RHEL-83208
  - mkksiso: Update to newer version supporting rebuilding efiboot.img (bcl)
    Resolves: RHEL-83208
  - livemedia-creator: Set 0755 permission on / cpio overlay (bcl) (bcl)
    Resolves: RHEL-83986


author: Brian C. Lane <bcl@redhat.com> 34.9.28-1
changelog:
  - templates.d: Synchronize with lorax-templates-rhel (bcl)
    Related: RHEL-54712
    Resolves: RHEL-69019
  - lorax: Change default rootfs size to 4GiB (bcl)
    Resolves: RHEL-95360


author: Brian C. Lane <bcl@redhat.com> 34.9.29-1
changelog:
  - templates: Synchronize with lorax-templates-rhel (bcl) (bcl)
    Resolves: RHEL-54712
  - Fix tzselect path in runtime-cleanup.tmpl (jikortus) (jikortus)
    Resolves: RHEL-100463
  - lorax.spec: Fix a wrong issue reference (bcl) (bcl)
    Related: RHEL-83986


author: Brian C. Lane <bcl@redhat.com> - 9.0-38
changelog:
  - tools: Add support for Jira RHEL-XXX issues (bcl)
    Related: RHEL-15122
  - Add setpriv as ostree containers dependency (bcl)
    Resolves: RHEL-15122


author: Brian C. Lane <bcl@redhat.com> - 9.6-1
changelog:
  - Bump release version to 9.6 (bcl)
    Related: RHEL-69011
  - runtime-cleanup: Newer glibc installs /usr/sbin/ldconfig (bcl)
    Resolves: RHEL-69011


author: Brian C. Lane <bcl@redhat.com> - 9.7-1
changelog:
  - Bump release version to 9.7 (bcl)
    Related: RHEL-91930
  - Add a boot menu for fips=1 (bcl)
    Resolves: RHEL-91930


author: Brian C. Lane <bcl@redhat.com> - 9.7-3
changelog:
  - live-install.tmpl: Fix broken single item tuple (bcl)
    Related: RHEL-108149
  - libvirt.tmpl: Fix use of xrange (bcl)
    Related: RHEL-108149
  - 80-rhel: Remove unused templates and config files (bcl)
    Resolves: RHEL-108149
  - Fix tzselect path in runtime-cleanup.tmpl (jikortus)
    Resolves: RHEL-101453


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: Tom Callaway <spot@fedoraproject.org> - 33.3.1-17
changelog:
  - hack this ancient beastie to work with lua 5.4
  - maintainer, please update this to the current upstream release at your earliest convenience


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: Miro Hrončok <mhroncok@redhat.com> - 1-3
changelog:
  - Modify several conditionals to support RHEL 9+ and drop ancient Fedora 17
  - Add explicit conflict with older lua-devel
  - Require rpm, not redhat-rpm-config


author: Marian Csontos <mcsontos@redhat.com> - 2.03.21-3
changelog:
  - Fix lvresize fail in case of multiple mountpoints.
  - Fix allocator for RAID LVs allocating multiple legs on single device.
  - Fix device id handling of WWIDs with trailing spaces.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.23-2
changelog:
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-2
changelog:
  - Fix SPDX License identifiers.
  - Fix input units for VDO LV's minimim_io_size.
  - Fix stripe count and validation for RAID LVs.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-5
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-5
changelog:
  - Revert the CMake change regarding the in-source builds for now
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug buildchnages to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers the CMAKE_INSTALL_PREFIX="%{_prefix}" option
  - Default to %cmake commands instead fo %make commands
  - Update the WITH_UNITTEST macro to the one upstream use now
  - Introduce macro to enable / disable testusite (and building of the *-test subpackage)


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-4
changelog:
  - Force the CMake change regarding the in-source builds also to F31 and F32
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug build changes to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers several other options which redudndant specification I removed in this commit
  - Default to %cmake commands instead of %make commands


author: Ondrej Dubaj <odubaj@redhat.com> - 3.0.1-1
changelog:
  - Rebase to new major version 3.0.1 (it's Beta version)
  - Removed documentation/ folder, as it was removed by upstream


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.0.3-1
changelog:
  - Rebase to 3.0.3
  - Temporarily disable generation of -javadoc.rpm, due to missing feature in xmvn,
    which leads to build crash


author: Christopher Tubbs <ctubbsii@fedoraproject.org> - 1:3.6.3-6
changelog:
  - Remove unneeded commons-logging from runtime class path (rhbz#1883751)
  - Also remove redundant commons-codec


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1:3.6.3-22
changelog:
  - Implement new non-conflicting Java bindings
  - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072


author: Alex Williamson <alex.williamson@redhat.com> - 0.57-1
changelog:
  - 13f1322e576c ("Remove systemd support")
  - d84a2737e79c ("Fix device udev tagging")
  - 68c92c7beaca ("Tag before generating spec file")
  - c34c4f1ade60 ("Update mdevctl.spec.in for lsmdev.8")
  - ed86d345aae0 ("Fix systemd UUID escaping")
  - d4e83f08161d ("Merge pull request #13 from cpaelzer/fix-lsmdev-man-page")
  - 3c0d285b75ab ("lsmdev - add the alternative name to the man page")


author: Alex Williamson <alex.williamson@redhat.com> - 0.61-1
changelog:
  - d7dfac5f5bfb ("Merge pull request #15 from cohuck/attr_sanity")
  - 28a9fa17b51e ("validate attribute names")


author: Cornelia Huck <cohuck@redhat.com> - 0.69-1
changelog:
  - a2621934aa37 ("Merge pull request #18 from cohuck/validate")
  - ffbcef5a1c84 ("Merge pull request #25 from etrunko/master")
  - 5ec75a83bf30 ("Remove never used 'available' option")
  - d49b0f0db6b3 ("Merge pull request #23 from eskultety/man-fix")
  - 4cfe37eb2d99 ("man: Point --verbose to the 'list' command rather than 'types'")
  - a0ae49eb7178 ("Merge pull request #17 from cohuck/install_symlinks")
  - 504beba6e8f9 ("Force symlink cretion")
  - 522c5ded00ff ("Fix attribute validation")


author: Alex Williamson <alex.williamson@redhat.com> - 0.78-1
changelog:
  - e029640033d3 ("Automatic version commit for tag 0.78")
  - e32f506656fd ("use standard bash path")
  - 70690b64401f ("avoid other tags spilling into the .spec changelog")
  - 70b89c18cf5b ("Merge pull request #31 from awilliam/20201113.0")
  - 80187bc9ba03 ("Merge pull request #30 from fiuczy/fix-error-cleanup")
  - 97ea8bbeefb7 ("mdevctl: fix cleanup on error when creating and removing mdev")
  - b45d33dfd36c ("version support")
  - 2b1c16ce6fb0 ("Fix attributes getting applied via start-parent-mdevs")
  - 25d5e8d24d57 ("mdevctl: fix cleanup on error when writing to attribute")


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.31-0.1.beta
changelog:
  - New version
    Resolves: rhbz#1758783
  - Dropped no-scp, no-optimization, compile-fix, crash-fix patches (all upstreamed)
  - Dropped fgnu89-inline patch (probably not needed)


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: José Expósito <jexposit@redhat.com> - 24.2.8-2
changelog:
  - AMD Navi4x support
    Backport fixes for radeonsi and disable GFX12 on radv
    Resolves: https://issues.redhat.com/browse/RHEL-53419


author: Anusha Srivatsa <asrivats@redhat.com> - 25.0.7-2
changelog:
  - NV dGFX fix for firefox crashing
    Backport fixes for NV dGFX driver crashing firefox
    Resolves: https://issues.redhat.com/browse/RHEL-93219


author: Sandro Mani <manisandro@gmail.com> - 115-1
changelog:
  - Add -fstack-protector to LDFLAGS (since we carry -D_FORTIFY_SOURCE=2 in cflags, see https://sourceforge.net/p/mingw-w64/bugs/818/)


author: Sandro Mani <manisandro@gmail.com> - 140-1
changelog:
  - Don't unset _PREFIX in mingw-env macro, it leads to ${_PREFIX}
    being empty when evaluated the lines above


author: Konstantin Kostiuk <kkostiuk@redhat.com> 104.0.2
changelog:
  - Set version to 104.0.2
  - BZ#2084608 - Fix mismatched allocation function
  - BZ#2084613 - qga-win: race condition in build


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.1
changelog:
  - Set version to 105.0.1
  - Remove redundant package
  - BZ#2090333 - [mingw-qemu-ga-win] qga command 'guest-get-fsinfo' can't query bus-type of USB


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.2
changelog:
  - Set version to 105.0.2
  - Fix wrong requires
  - Fix missing patch0002
  - Remove extra Summary
  - BZ#2090333 - [mingw-qemu-ga-win] qga command 'guest-get-fsinfo' can't query bus-type of USB


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.3
changelog:
  - Set version to 105.0.3
  - BZ#2090250 - mingw-qemu-ga-win: Add Provides: bundled() to rpm packages [rhel-9]


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.0
changelog:
  - Set version to 106.0.0
  - RHEL-408 - Add provides, obsoletes for mingw-qemu-ga-win
  - RHEL-385 - Rebase mingw-qemu-ga-win to QEMU 8.0


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.1
changelog:
  - Set version to 106.0.1
  - RHELPLAN-147763 - [mingw-qemu-ga-win] VSS DLL: Add logging mechanism
  - RHEL-581 - Use the SPDX vocabulary to specify the license


author: Konstantin Kostiuk <kkostiuk@redhat.com> 109.1.0
changelog:
  - RHEL-57013 - Rebase qemu-ga to 9.1.0
  - RHEL-57012 - guest agent public ssh injection api support for Windows
  - Set version to 109.1.0


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: Jakub Hrozek <jhrozek@redhat.com> - 0.17.0-6
changelog:
  - Related: rhbz#1986806 - CVE-2021-3639 mod_auth_mellon: Open Redirect
                            vulnerability in logout URLs


author: Tomas Halman <thalman@redhat.com> - 0.17.0-9
changelog:
  - Fixing mellon_create_metadata.sh script
    Resolves: RHEL-35898
  - Publishing diagnostic module in CRB repository
    Resolves: RHEL-33585


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-2
changelog:
  - Resolves: rhbz#2153656 - CVE-2022-23527 - Open Redirect in
    oidc_validate_redirect_url() using tab character


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-3
changelog:
  - Resolves: rhbz#2184145 - CVE-2023-28625 NULL pointer dereference
    when OIDCStripCookies is set and a crafted Cookie header is supplied


author: Tomas Halman <thalman@redhat.com> - 2.4.10-1
changelog:
  Rebase to 2.4.10 version improves `state cookies piling up` problem
    Resolves: RHEL-32450 Race condition in mod_auth_openidc filecache
    Resolves: RHEL-25422 mod_auth_openidc: DoS when using
              `OIDCSessionType client-cookie` and manipulating cookies
              (CVE-2024-24814)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.4.9.1-1
changelog:
  - Resolves: rhbz#1987223 - CVE-2021-32792 mod_auth_openidc: XSS when using
                             OIDCPreservePost On [rhel-9.0]
  - Resolves: rhbz#1987217 - CVE-2021-32791 mod_auth_openidc: hardcoded
                             static IV and AAD with a reused key in AES GCM
                             encryption [rhel-9.0]
  - Resolves: rhbz#1987204 - CVE-2021-32786 mod_auth_openidc: open redirect in
                             oidc_validate_redirect_url() [rhel-9.0]


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-1
changelog:
  - Resolves: rhbz#2001852 - CVE-2021-39191 mod_auth_openidc: open redirect
                             by supplying a crafted URL in the target_link_uri
                             parameter


author: Paul Howarth <paul@city-fan.org> - 2.3.9-24
changelog:
  - Drop EL-6 support
    - Use %license unconditionally
    - _httpd_* macros always available
    - Run directory is always /run on tmpfs
    - Assume httpd ≥ 2.4 filesystem layout
    - systemd-units always provided by systemd


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-26
changelog:
  - Resolves: #1958882 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-3
changelog:
  - Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
    in forward proxy configurations


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-5
changelog:
  - Resolves: #2177753 - CVE-2023-25690 httpd: HTTP request splitting with
    mod_rewrite and mod_proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.26-5
changelog:
  - Resolves: RHEL-108706 - CVE-2025-49630 httpd: untrusted input from a client
    causes an assertion to fail in the Apache mod_proxy_http2 module


author: Coty Sutherland <csutherl@redhat.com> - 1.2.48-20
changelog:
  - Cleanup spec file and remove .redhat-N suffix from release
  - Remove ap24 subpackage since we only need to build for one version of httpd


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-1
changelog:
  - Resolves: RHEL-25075 - new version 2.4.26
  - Resolves: RHEL-11838 - [RFE] add support of dns_01 challenge to mod_md
  - Resolves: RHEL-17462 - OCSP response rejected when nextUpdate field not set
  - Resolves: RHEL-17467 - mod_md should trigger the reissue of new pair
    key/certificate when OCSP reports a revoked status


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-2
changelog:
  - Resolves: RHEL-134497 - httpd: Apache HTTP Server: mod_md (ACME), unintended
    retry intervals (CVE-2025-55753)


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-27497 - Rebase to upstream 1.3.20.Final release


author: Fedora Release Engineering <releng@fedoraproject.org> - 2.9.3-10
changelog:
  - Resolves: #1930664 - RFE: Add a feature that can set a mod_security/libcurl
    timeout for retrieving the rules
  - rename mlogc to mod_security-mlogc


author: Luboš Uhliarik <luhliari@redhat.com> - 2.9.6-2
changelog:
  - Resolves: RHEL-93014 - mod_security: ModSecurity Has Possible DoS
    Vulnerability (CVE-2025-47947)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.9.6-3
changelog:
  - Resolves: RHEL-100098 - mod_security: ModSecurity Denial of Service
    Vulnerability (CVE-2025-48866)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.9.6-4
changelog:
  - Resolves: RHEL-30628 - mod_security: httpd doesn't close read side of pipe
    to rotatelogs for SecAuditLog leading to frozen state during graceful restart


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-2
changelog:
  - Resolves: RHEL-16358 - A form data, "会社"(Company in Japanese) is forbade
    with REQUEST-941-APPLICATION-ATTACK-XSS.conf of mod_security_crs


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-3
changelog:
  - Resolves: #RHEL-22733 - mod_security_crs - The rule id:913100 in the
    REQUEST-913-SCANNER-DETECTION.conf blocks requests  with "User-agent:
    urlgrabber/3.10 yum/3.4.3"


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.5-3
changelog:
  - Resolves: RHEL-80178 A form data, "鹿沼市御成橋"(a name of street/city
    in Japanese) is forbade by mod_security_crs-3.3.4-3.el8.noarch


author: Jakub Kadlcik <frostyx@email.cz> 0.5-1
changelog:
  - Release for epel8 as well (frostyx@email.cz)
  - Require createrepo_c for the createrepo_mod package (frostyx@email.cz)
  - modulemd-merge: improve README.md file (frostyx@email.cz)
  - repo2module: improve README.md file (frostyx@email.cz)
  - dir2module: improve README.md file (frostyx@email.cz)
  - Improve README.md file (frostyx@email.cz)
  - createrepo_mod: improve README.md file (frostyx@email.cz)
  - Loosen the python3-libmodulemd dependency to just libmodulemd
    (frostyx@email.cz)
  - createrepo_mod: use just createrepo_c if it has built-in module support
    (frostyx@email.cz)
  - Explicitly depend on python3-setuptools (frostyx@email.cz)
  - createrepo_mod: dump modules.yaml into the correct directory
    (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6-1
changelog:
  - Generate manpages for all tools in this repository 
  - modulemd-generate-macros: add a tool for generating module-build-macros
  - modulemd_tools: add the first pieces of a python library (for internal usage only)


author: Jakub Kadlcik <frostyx@email.cz> 0.7-1
changelog:
  - Generate manpages on the fly
  - Automated test builds incl. Docker/Travis
  - Fix PEP8 in all tools
  - modulemd_tools: temporarily skip some tests on EPEL8 or Fedora
  - Drop libmodulemd dependency in favor of python3-libmodulemd


author: Jakub Kadlcik <frostyx@email.cz> 0.8-1
changelog:
  - modulemd_tools: drop python3-parameterized dependency (frostyx@email.cz)
  - Package modulemd_tools helper lib (fvalder@redhat.com)
  - Add modulemd-merge tests (fvalder@redhat.com)
  - Add createrepo_mod tests (fvalder@redhat.com)
  - Replace master in fedora releaser to rawhide (frostyx@email.cz)


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-4
changelog:
  - Generate profiles section and modulemd-defaults file
    Related: rhbz#1801747
  - Use autosetup to automatically apply patches


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-5
changelog:
  - Don't traceback because of a modular SRPM in the repo
    Related: rhbz#2227436
  - Replace deprecated LooseVersion
  - Fix tests for new libmodulemd version 2.15.0


author: Adam Jackson <ajax@redhat.com> - 2.3.4-25
changelog:
  - Fix invoking autogen/configure so the default CFLAGS actually get applied
    Resolves: rhbz#2044881


author: José Expósito <jexposit@redhat.com> - 2.3.4-28
changelog:
  - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer()
  - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap


author: Olivier Fourdan <ofourdan@redhat.com> - 2.3.4-30
changelog:
  - Keep drop-down menus on the same monitor as the pull-down button with
    Xinerama
    Resolves: RHEL-92832


author: Jan Horak <jhorak@redhat.com> - 1.9-28
changelog:
  - Removed NPAPI from the description, since is no longer supported in Mozilla
    products
    Resolves: rhbz#2041339


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Honggang Li <honli@redhat.com> - 5.7-3
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960479


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2015392


author: Davide Caratti <dcaratti@redhat.com> - 0.7-2
changelog:
  - add a simple sanity test and enable gating. Related: rhbz#1962741
  - don't overwrite global build options. Related: rhbz#1967697
  - fix 'check_conflicts' on multilib. Related: rhbz#1967697


author: Davide Caratti <dcaratti@redhat.com> - 0.8-2
changelog:
  - fix mptcpize to work also when protocol number is 0 (upstream issue #159)
    and when command resides in another file system (upstream issue #161)
    Related: rhbz#2015623


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 0.5.13-6
changelog:
  - updating line in /usr/lib/tmpfiles.d/munge.conf: /var/run/munge → /run/munge
  - add license tag
  - add requires logrotate


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.13-8
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Ray Strode <rstrode@redhat.com> - 40.9-18
changelog:
  - Don't allow applications on other workspaces to steal
    focus, unless their timestamps are pristine
    Resolves: RHEL-29537


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-20
changelog:
  - Fix positioning when using always-on-top windows
    Resolves: RHEL-45998
  - Improve handling of always-on-visible-workspace windows
    Resolves: RHEL-45366


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-22
changelog:
  - Fix crash when moving window while switching workspace
    Resolves: RHEL-62997
  - Improve app discovery for workspace logic
    Resolves: RHEL-63000


author: Olivier Fourdan <ofourdan@redhat.com> - 40.9-31
changelog:
  - Backport linux-dmabuf v4 support to restore hardware acceleration
    in Xwayland 24.1 with Mesa 25.2
    Resolves: RHEL-129832


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.30-1
changelog:
  - Update to MySQL 8.0.30
  - Remove patches now upstream:
    chain certs, OpenSSL 3, s390 and robin hood
  - Add a new plugin


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.34-1
changelog:
  - Update to MySQL 8.0.34
  - Add patch from upstream bug#110569
  - Add patch to fix binlog format issue
  - Use --skip-combinations over --binlog-format=mixed
  - Add alignment patch upstream bug#110752


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Michal Schorm <mschorm@redhat.com> - 1.0.1-1
changelog:
  - Rebase to 1.0.1 release
    This release is just a sync-up with upstream selinux-policy
  - URL changed to a new upstream repository


author: Richard W.M. Jones <rjones@redhat.com> - 1.36.2-1
changelog:
  - Rebase to 1.36.2
    resolves: RHEL-14475
  - partition: Suggest alternate partition-sectorsize
    resolves: RHEL-19815


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-6
changelog:
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85510
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89353


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-10
changelog:
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95814


author: Richard W.M. Jones <rjones@redhat.com> - 1.34.2-1
changelog:
  - Rebase to 1.34.2
    resolves: rhbz#2168629
  - Backport nbdkit-curl-plugin "multi" interface support
    resolves: rhbz#2228131


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-9
changelog:
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141902) and (#2141906)
  - fix memory leak when ipv6 disable set to 1 (#2151540)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-14
changelog:
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26649)


author: Thomas Haller <thaller@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0 release
  - Drop NotShowIn=GNOME
  - Use wireless-security code from libnma
  - Add flatpak build configuration
  - applet: hide unmanaged ethernet devices in nm-applet
  - applet: fix Wi-Fi scan requests with appindicator
  - editor: fix drop down list for connection.secondaries


author: Steve Dickson <steved@redhat.com> 2.5.4-28
changelog:
  -  Makefile.am: allow mount.nfs to be writeable by owner (RHEL-68701)
  -  mount.nfs: retry NFSv3 mount after NFSv4 failure in auto negotiation (RHEL-68574)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-30
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-72823)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-64340)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-31
changelog:
  - nfsdcld: prevent from accessing /var/lib/nfs/nfsdcld in read-only file system during boot (RHEL-78177)
  - Replace functional gating tests with the ones from RHEL10 (RHEL-78110)
  - Add explicit version requirement for libnfsidmap (RHEL-78107)
  - Add --disable-sbin-override for when /sbin is a symlink (RHEL-69771)
  - Move remaining binaries from /sbin to /usr/sbin (RHEL-69771)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Steve Dickson <steved@redhat.com> 2.5.4-35
changelog:
  - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
  - nfsd: allow more than 64 backlogged connections (RHEL-87752)


author: Steve Dickson <steved@redhat.com> 2.5.4-37
changelog:
  - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
  - gssd: do not use krb5_cc_initialize (RHEL-85412)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-16
changelog:
  - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are
    vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-17
changelog:
  - bump package epoch to resolve RHEL-33939
  - Resolves: RHEL-33939 - Update path for nginx broken for existing CS
    installations


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-23
changelog:
  - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER
    at nginx with reverse-proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-24
changelog:
  - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause
    denial of service (CVE-2024-7347)
  - Resolves: RHEL-85556 - nginx: Memory disclosure in the
    ngx_http_mp4_module (CVE-2022-41742)
  - Resolves: RHEL-91446 - nginx: Memory corruption in the
    ngx_http_mp4_module (CVE-2022-41741)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-25
changelog:
  - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log
    is not created when updating system in image mode


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-10
changelog:
  - Resolves: #1975747 - CVE-2021-3618 nginx: ALPACA: Application Layer Protocol
    Confusion - Analyzing and Mitigating Cracks in TLS Authentication


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-1
changelog:
  - Resolves: #2096174 - RFE: add nginx:1.22 module stream
  - switch to pcre2
  - add stream_geoip_module and stream_realip_module
  - enable kTLS support


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-4
changelog:
  - Resolves: #2170808 - Running nginx with systemctl and entering ssl
    private key's pass phrase
  - added new ssl_pass_phrase_dialog directive which enables setting
    external program for entering password for encrypted private key


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-5
changelog:
  - Resolves: RHEL-12737 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Matej Focko <mfocko@redhat.com> - 1.2.14-1
changelog:
  - New release 1.2.14 (Gris Ge)
  - bond: support changing bond mode (Gris Ge)
  - Reorganize the code structure (Gris Ge)
  - CI: Enable VRF and ethool pause test (Gris Ge)
  - CI: Upgrade the version of github action tasks (Gris Ge)
  - test: Fix ethtool link mode test on Ubuntu (Gris Ge)
  - Github CI: Install extra module of running kernel (Gris Ge)
  - macsec: add base_iface property (Fernando Fernandez Mancera)
  - macsec: add MACsec interface support (Fernando Fernandez Mancera)
  - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera)


author: Martin Osvald <mosvald@redhat.com> - 3:7.92-1
changelog:
  - New version 7.92
  - Resolves: #2180330 - Rebase nmap for TLS v1.3 support
  - Resolves: #2164833 - Remove duplicate tests


author: Ana Cabral <acabral@redhat.com> - 2.0.0-0.4.alpha3
changelog:
  - Upgrade to 2.0.0 alpha 3. Resolves: RHBZ#1996575
  - Remove connection renaming behaviour. Resolves: RHBZ#1998222
  - Add prefixes to OVS bridges and interfaces connections. Resolves: RHBZ#1998218
  - Improve OVS bridge start with nmstate. Resolves: RHBZ#1660250


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 2.2.40-1
changelog:
  - Upgrade to 2.2.40
  - Do not deactivate connection when removing routes. RHEL-70138
  - Use specific libnmstate logger. RHEL-72016
  - Do not deactivate connection if mptcp flags didn't change. RHEL-53211


author: Gris Ge <fge@redhat.com> - 2.2.41-1
changelog:
  - Upgrade to 2.2.41
  - Fix the lose of OVS DB system-id. RHEL-78652
  - Support overriding interface config. RHEL-59935


author: Mingyu Shi <mshi@redhat.com> - 2.2.43-1
changelog:
  - Upgrade to 2.2.43
  - Support for vlan-egress-priority-map configuration. RHEL-67631
  - Support FEC. RHEL-80725
  - Support quickack. RHEL-80418


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Refer route next hop interface by MAC. RHEL-32495
  - Support reapply on mac-ref interface. RHEL-87794


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91291
  - Support nmpolicy against down iface. RHEL-88989
  - Support removal VLAN connection with empty ifname. RHEL-93146


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-85787
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784
  - Support matching by PCI adress. RHEL-88993
  - Apply dispatch changes first. RHEL-101742
  - Fix SRIOV VF reference. RHEL-93180


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.49-1
changelog:
  - Upgrade to 2.2.49
  - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526
  - Fix setting DNS only with search or option. RHEL-104797


author: Mingyu Shi <mshi@redhat.com> - 2.2.50-1
changelog:
  - Upgrade to 2.2.50
  - Support MAC referring for VLAN in gen_conf. RHEL-110369
  - Introduce state: ignore for route. RHEL-107130
  - Support PCI address matching in gen_conf. RHEL-110369
  - Support MacSec interface in gen_conf. RHEL-110369


author: Gris Ge <fge@redhat.com> - 2.2.54-1
changelog:
  - Upgrade to 2.2.54.
  - Automatically set HSR port MAC address. RHEL-122171
  - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992


author: Gris Ge <fge@redhat.com> - 2.2.56-1
changelog:
  - Upgrade to 2.2.56
  - Allow using VRF name to specify route table. RHEL-123541
  - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052
  - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731
  - Support rightca ipsec option. RHEL-123542


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.18.1-2
changelog:
  - Add back libs and v8-devel subpackages
  - Related: RHBZ#2121126
  - Record previously fixed CVE
  - Resolves: CVE-2021-44906


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.19.1-1
changelog:
  - Rebase to 16.19.1
  - Resolves: rhbz#2153714
  - Resolves: CVE-2023-23918 CVE-2023-23919 CVE-2023-23936 CVE-2023-24807 CVE-2023-23920
  - Resolves: CVE-2022-25881 CVE-2022-4904


author: Jan Staněk <jstanek@redhat.com> - 1:16.19.1-2
changelog:
  - Update bundled c-ares to 1.19.1
    Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.1-1
changelog:
  - Rebase to 16.20.1
    Resolves: rhbz#2188291
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2177781


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.2-5
changelog:
  - Backport patches for several CVEs.
    Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.7.0-1
changelog:
  - Update to latest release
  - Resolves CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
  - Resolves CVE-2022-29244
  - Resolves: RHBZ#2111009


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.8.0-1
changelog:
  - Update to latest release
  - Resolves: RHBZ#2111009
  - Provide undici and cjs-module-lexer + wasi-sdk sources
  - Resolves: RBHZ#2111861


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.14.2-1
changelog:
  - Rebase to 18.14.2
  - Resolves: #2159389
  - Resolves: CVE-2022-25881, CVE-2022-4904, CVE-2023-23936, CVE-2023-24807
  - Resolves: CVE-2023-23918, CVE-2023-23919, CVE-2023-23920


author: Jan Staněk <jstanek@redhat.com> - 1:18.16.1-1
changelog:
  - Rebase to 18.16.1
    Resolves: rhbz#2188292 rhbz#2187683
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2222285


author: Jan Staněk <jstanek@redhat.com> - 1:18.17.1-1
changelog:
  - Rebase to version 18.17.1
    Resolves: rhbz#2228940
    Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559
  - Specify proper OpenSSL configuration section build
    Related: rhbz#2226726


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:18.19.1-1
changelog:
  - Rebase to version 18.19.1
  - Fixes: CVE-2024-21892 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 (medium)


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:20.11.1-1
changelog:
  - Rebase to version 20.11.1
  - Fixes: CVE-2024-21892 CVE-2024-21896 CVE-2024-22017 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 CVE-2024-21890 CVE-2024-21891 (medium)


author: Jan Staněk <jstanek@redhat.com> - 1:20.12.2-1
changelog:
  - Rebase to version 20.12.0
    Fixes CVE-2024-27983 CVE-2024-27982 CVE-2024-22025 (node)
    Fixes CVE-2024-25629 (c-ares)


author: Andrei Radchenko <aradchen@redhat.com>
changelog:
  - Update to version 20.18.2
    Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76363 RHEL-76554 RHEL-76540


author: Jan Staněk <jstanek@redhat.com> - 1:22.13.1-1
changelog:
  - Update to version 22.13.1
    Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76354


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.13.1-2
changelog:
  - Remove obsolete lua pretransaction script from spec file
    Resolves: RHEL-81119
  - Disable npm update notifications for users
    Resolves: RHEL-81079


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-2
changelog:
  - Build with bootstrap by default due to old versions of dependencies available
  - Resolves: #2042995, #2042970, #2042981, #2042989
  - Resolves: #2029936, #2024890, #2014499, #2014135
  - Resolves: #2013834, #1945299


author: Jan Staněk <jstanek@redhat.com> - 16.16.0-1
changelog:
  - Rebase to version 16.16.0
    Resolves: RHBZ#2106290
    Resolves: CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
    Resolves: CVE-2022-29244


author: Jan Staněk <jstanek@redhat.com> - 2.0.3-6
changelog:
  - Rebase to 2.0.19
    Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469


author: Jan Staněk <jstanek@redhat.com> - 2.0.19-1
changelog:
  - Rebase to 2.0.19
    Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469
    Resolves: CVE-2020-7788


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.15-1
changelog:
  - Resolves: RHBZ#2005419
  - Resolves CVE-2020-28469
  - Rebase to newest version
  - Change source to npmjs.com


author: Stephen Gallagher <sgallagh@redhat.com> - 2021.06-1
changelog:
  - Update to 2021.06-1
  - bundler: Handle archaic license metadata
  - bundler: Warn about bundled dependencies with no license metadata


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-4
changelog:
  - FIPS review changes
  -   add PORT_SafeZero to avoid compiler optimizing a way zeroing memory.
  -   update the indicators for this release
  -   allow hashing of longer than int32 values in a single PKCS #11 call.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-5
changelog:
  - Pick up validated constant time implementations of p256, p384, and p521
    from upsream
  - More Fips indicator changes


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-2
changelog:
  - Fix MD-5 decode issue in pkcs #12
  - turn off policy processing for pkcs12 and smime
  - restore the rhel9 pkcs12 defaults for pk12util


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally remvoed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Andreas Schneider <asn@redhat.com> - 1.1.11-8
changelog:
  - resolves: rhbz#2028819 - Introduce nss_wrapper-libs package to allow install
                             smaller footprint


author: Jan Macku <jamacku@redhat.com> - 1.15-1
changelog:
  - spec: sync specfile with Fedora
  - makefile: Use rpmdev-bumpspec's legacy date option
  - Add feature to generate specfile entry, commit and archive


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jerry James <loganjerry@gmail.com> - 8.0.1-1
changelog:
  - Version 8.0.1
  - Add 0002-Catch-CompileException-in-test.patch to fix compilation of a test
  - Make generate-tarball.sh actually compress the tarball


author: Jindrich Novy <jnovy@redhat.com> - 1.2.5-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.5
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.6-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.6
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.8-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.8
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1.2.9-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.9
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 1.2.10-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.2.11-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.11
  - simplify spec
  - Resolves: RHEL-86603


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.5-1
changelog:
  - apply patch from Matthias Gerstner of the SUSE security team to fix a
    possible race condition in the mkhomedir helper (CVE-2020-10737)
  - only process SELinux contexts if SELinux is not disabled (Alexander Bokovoy)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.6-1
changelog:
  - update license on src/buffer.h
  - change /var/run -> /run in systemd service file (Orion Poplawski)


author: Zuzana Miklankova <zmiklank@redhat.com> - 1.9.0~beta1-1
changelog:
  - Rebase to 1.9-beta1
  - change of licences of ongres-scram and ongres-scram-javadoc to "BSD and MIT and ASL 2.0"


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-2
changelog:
  - ovt-Use-https-instead-of-http-for-documentation-links.patch [bz#2208160]
  - Resolves: bz#2208160
    ([ESXi][RHEL9] URL in service unit files are started from http instead of https)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-3
changelog:
  - ovt-Remove-some-dead-code.patch [bz#2215566]
  - Resolves: bz#2215566
    ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-br-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-1
changelog:
  - Rebaer to open-vm-tools 12.2.5
  - Resolves: bz#2214862
    ([ESXi][RHEL9]open-vm-tools version 12.2.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-2
changelog:
  - ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [bz#2236544]
  - Resolves: bz#2236544
    (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-3
changelog:
  - ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [RHEL-2446]
  - Resolves: RHEL-2446
    ([RHEL9.3][ESXi]Latest version of open-vm-tools breaks VM backups)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-1
changelog:
  - Rebase to 12.3.5-1 [RHEL-15058]
  - Fixed CVE-2023-34058 [RHEL-14653]
  - Fixed CVE-2023-34059 [RHEL-14687]
  - Resolves: RHEL-15058
    ([ESXi][RHEL9]open-vm-tools version 12.3.5 has been released - please rebase)
  - Resolves: RHEL-14653
    (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-9.4.0])
  - Resolves: RHEL-14687
    (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-9.4.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-2
changelog:
  - ovt-Restart-tools-on-failure.patch [RHEL-15346]
  - Resolves: RHEL-15346
    (Add Restart=on-failure to vmtoolsd.service)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-1
changelog:
  - Rebase to 12.4.0 [RHEL-30341
  - Resolves: RHEL-30341
    ([ESXi][RHEL9]open-vm-tools version 12.4.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-2
changelog:
  - ovt-Require-dbus-tools.patch [RHEL-35543]
  - Resolves: RHEL-35543
    ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.5-1
changelog:
  - Rebase to 12.4.5 [RHEL-45547]
  - Resolves: RHEL-45547
    ([ESXi][RHEL9] open-vm-tools version 12.4.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.5.0-1
changelog:
  - Rebase to 12.5.0 [RHEL-63096]
  - Resolves: RHEL-63096
    ([ESXi][RHEL9] open-vm-tools version 12.5.0 has been released - please rebase)


author: Lili Du <ldu@redhat.com> - 13.0.0-1
changelog:
  - Rebase to 13.0.0 [RHEL-99158]
  - Resolves: RHEL-99158 
    ([ESXi][RHEL9] open-vm-tools version 13.0.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 13.0.0-2
changelog:
  - ovt-Address-CVE-2025-41244.patch [RHEL-117392]
  - Resolves: RHEL-117392
    ([CISA Major Incident] CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools [rhel-9.8])


author: Lili Du <ldu@redhat.com> - 13.0.5-1
changelog:
  - Rebase to 13.0.5 [RHEL-118505]
  - Resolves: RHEL-118505
    ([ESXi][RHEL9] open-vm-tools version 13.0.5 has been released - please rebase)


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Milan Crha <mcrha@redhat.com> - 2.3-38
changelog:
  - Related: #2013578 (Add patch to build against samba 4.15)
  - Avoid build time dependencies related to server, when it's not built


author: Karol Herbst <kherbst@redhat.com> - 3.0-0.20200512git5cc337c
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Bump CLHPP version to 2.0.11


author: Karol Herbst <kherbst@redhat.com> - 3.0-1.20200512gitd082d42
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Rework CLHPP handling as file is not downloadable anymore
  - Bump CLHPP version to 2.0.12


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71053)
  - Avoid SSL context cleanup during library destruction (RHEL-56502)


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - Update to 4.1.1
  - Enable psm2 support
  - fbtl-posix: link to common_ompio
  - Revert upstream commit c36d7459b6331c4d
  - Resolve: rhbz#1869443


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-4
changelog:
  - Fix potential invalid scan results in OpenSCAP (rhbz#2109485)
  - Remove oscap-remediate service (rhbz#2111358)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.7-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2159286)
  - Fix error when processing OVAL filters (rhbz#2126883)
  - Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2138884)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2217442)
  - Fix systemd* probes unit enumeration (rhbz#2219532)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-29172)
  - Fix OVAL results file name (RHEL-7050)
  - Add ability to define a limit of collected items (RHEL-4141)
  - Add ability to refine rules in autotailor (RHEL-1477)
  - Improve the formatting of Blueprint remediations (RHEL-1476)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.11-1
changelog:
  - Upgrade to the latest upstream release (RHEL-76355)
  - Introduce "oscap-im", a tool for building hardened bootable container images
  - Fix RPM probes in bootable container images build environment (RHEL-55251)


author: Matthew Burket <mburket@redhat.com> - 1:1.3.13-1
changelog:
  - Upgrade to the latest upstream release (RHEL-133976)
  - Fix Filepath and Pattern Fields inversion (RHEL-104073)
  - Fix verbose flag (RHEL-53859)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-11
changelog:
  - Initialize crypto API only once (rhbz#2020044)
  - Add support for Blueprint remediations (rhbz#2020052)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-12
changelog:
  - Allow using local files instead of remote resources (rhbz#2015518)
  - Add an alternative source of hostname (rhbz#2021509)
  - Lower memory limits and improve their checking (rhbz#2022362)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2041782)
  - Select and exclude groups of rules on the command line (rhbz#2020580, rhbz#2020581)
  - The boot-time remediation service for systemd's Offline Update mode


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-36
changelog:
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Relax OpenSSH build-time checks for OpenSSL version
    Related: RHEL-4734
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-44
changelog:
  - Add extra help information on ssh early failure
    Resolves: RHEL-33809
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-52293
  - Allow duplicate Subsystem directive
    Resolves: RHEL-47112


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-45
changelog:
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465).
    Resolves: RHEL-78700


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-2
changelog:
  - Fix implicit destination path selection when source path ends with ".."
    Resolves: RHEL-119515
  - Canonicalize username when matching a user
    Resolves: RHEL-118372


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-3
changelog:
  - Enable support for DSA keys
    Resolves: RHEL-127624
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-133959
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-133960


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80854


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-7
changelog:
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76756


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
changelog:
  - Rebasing OpenSSL to 3.5
    Resolves: RHEL-80854
    Resolves: RHEL-50208
    Resolves: RHEL-50210
    Resolves: RHEL-50211
    Resolves: RHEL-85954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-2
changelog:
  - OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9
    Resolves: RHEL-88910
  - PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9
    Resolves: RHEL-88912
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-89860
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-89861
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-89862
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-89859
  - Enable sslkeylog support
    Resolves: RHEL-90854


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80854
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-95239


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-104236
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-104856


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-4
changelog:
  - Make openssl speed test signatures without errors
    Resolves: RHEL-95502
  - Build tests in check and without LTO
    Resolves: RHEL-111633


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.5-1
changelog:
  - Rebase to OpenSSL 3.5.5
    Resolves: RHEL-136895
    Resolves: RHEL-142004
    Resolves: RHEL-142012
    Resolves: RHEL-142020
    Resolves: RHEL-142024
    Resolves: RHEL-142028
    Resolves: RHEL-142032
    Resolves: RHEL-142036
    Resolves: RHEL-142040
    Resolves: RHEL-142044
    Resolves: RHEL-142048
    Resolves: RHEL-142052
    Resolves: RHEL-142056


author: Felix Kolwa <fkolwa@redhat.com> - 0.102.1-4
changelog:
  - Fix SELinux policy resource names
  - Use sources for SELinux resources in spec file
  - Bump revision


author: Felix Kolwa <fkolwa@redhat.com> - 0.107.0-1
changelog:
  - Version bump to 0.107.0
  - Reset release to 1
  - Update addresses the following CVEs:
  - CVE-2024-34155
  - CVE-2024-34156
  - CVE-2024-42368


author: Kseniia Nivnia <knivnia@redhat.com> - 0.107.0-2
changelog:
  - Bump revision
  - Update tarball name to match upstream
  - Upgrade the following tarball dependencies:
  - x/sys v0.23.0 to v0.29.0
  - x/crypto v0.26.0 to v0.32.0
  - x/net v0.28.0 to v0.33.0
  - x/sync v0.8.0 to v0.10.0
  - x/term v0.23.0 to v0.28.0
  - x/text v0.17.0 to v0.21.0
  - Update addresses the following CVEs:
  - CVE-2024-45338
  - CVE-2024-45337


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-3
changelog:
  - Bump revision
  - Update tarball golang from 1.21.0 to 1.22.11
  - Update addresses CVE-2024-45336
    Resolves: RHEL-79113


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-4
changelog:
  - Bump revision
  - Add runtime requirements for shadow-utils and util-linux to ensure successful creation of observability user on installation
  - Modify post-uninstallation stage to only delete delete the observability user on full uninstallation to prevent the user being deleted during upgrades
    Resolves: RHEL-81967


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-5
changelog:
  - Bump revision
  - Update Golang v1.22.11 to v1.23.0
  - Add toolchain go1.23.7
  - Update x/oauth2 v0.22.0 to v0.27.0
  - Update addresses CVE-2025-22868
    Resolves: RHEL-81359


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-6
changelog:
  - Bump revision
  - Update expr v1.16.9 to v1.17.0
  - Remove explicit go toolchain dependency
  - Update addresses CVE-2025-29786
    Resolves: RHEL-83841


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-7
changelog:
  - Bump revision
  - Update go-jose v4.0.2 to v4.0.5
  - Update testify v1.9.0 to v1.10.0
  - Update addresses CVE-2025-27144
    Resolves: RHEL-82967


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-8
changelog:
  - Bump revision
  - Update golang-jwt v5.2.1 to v5.2.2
  - Update addresses CVE-2025-30204
    Resolves: RHEL-85033


author: Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-1
changelog:
  - Collector version update
  - Go version update to v1.23.9
  - Update addresses CVE-2025-22871
    Resolves: RHEL-90050


author: Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-2
changelog:
  - Bump revision
  - Go version update to v1.24.4
  - Update addresses CVE-2025-4673
    Resolves: RHEL-105058


author: Kseniia Nivnia <knivnia@redhat.com> - 0.135.0-1
changelog:
  - Version bump to 0.135.0
  - Add systemd-journal group to Requires(pre)
  - Bump go-tpm-keyfiles
    Resolves: RHEL-119812


author: Matej Tyc <matyc@redhat.com> - 2.0.0-5
changelog:
  - Fix handling of content archives
    Resolves: rhbz#1996129
  - Fix handling of content fingerprint
    Resolves: rhbz#1993065
  - Fix crash when a previously selected hardening has been cancelled
    Resolves: rhbz#2014108
  - Pull latest translations


author: Matej Tyc <matyc@redhat.com> - 2.0.0-8
changelog:
  - Introduce unified help support
    Resolves: rhbz#2043512
  - Update translations
    Resolves: rhbz#2017374


author: Matej Tyc <matyc@redhat.com> - 2.0.0-9
changelog:
  - Introduce the firstboot remediation
    Resolves: rhbz#1999587
  - Add better error handling of installation using unsupported installation sources
    Resolves: rhbz#2042334


author: Matej Tyc <matyc@redhat.com> - 2.0.0-12
changelog:
  - Remove the firstboot remediation feature completely.
    We can't have it, while maintaining the standard UX.
    Resolves: rhbz#2065751


author: Matej Tyc <matyc@redhat.com> - 2.0.0-13
changelog:
  - Fix problems with handling multi-datastream archives
    Resolves: rhbz#2129846
  - Fix a crash when compulsively clicking in the GUI
    Resolves: rhbz#2127502


author: Jan Černý <jcerny@redhat.com> - 2.0.0-17
changelog:
  - Update translations (rhbz#2189526)
  - Fix tar file extraction (rhbz#2218875)
  - Fix conflict of tftp package with "network servers" group (rhbz#2172264)


author: Victor Toso <victortoso@redhat.com> - 20221130-1
changelog:
  - Update for new release (v20221130)
    Resolves: rhbz#2135751
  - Add rhel-8.8 and rhel-9.2 prereleases
    Related: rhbz#2135751


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2025.7-1
changelog:
  - Rebase to 2025.7
    Backport https://github.com/ostreedev/ostree/pull/3555
    Resolves: #RHEL-129049


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.2-1
changelog:
  - Update to new upstream release 0.25.2
    Resolves: RHEL-14834
  - Add IBM specific mechanisms and attributes
    Resolves: RHEL-10570


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.3-3
changelog:
  - Fix regression in trust where file creation fails for long cert labels
    Resolves: RHEL-58899
  - Fix usage message in p11-kit list-tokens command
    Resolves: RHEL-31810


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Chris Lumens <clumens@redhat.com> - 2.1.7-2
changelog:
  - Rebase on upstream 2.1.7-rc4 release
  - Use systemd-sysusers to create user/group
  - Pacemaker Remote nodes can validate against later schema versions
  - Related: RHEL-17225
  - Resolves: RHEL-7665


author: Chris Lumens <clumens@redhat.com> - 2.1.7-3
changelog:
  - Rebase on upstream 2.1.7 final release
  - Fix documentation for Pacemaker Remote schema transfers
  - Do not check CIB feature set version when CIB_file is set
  - Consolidate attrd cache handling
  - Avoid duplicating option metadata across daemons
  - Related: RHEL-7665
  - Related: RHEL-13216
  - Resolves: RHEL-7702


author: Chris Lumens <clumens@redhat.com> - 2.1.7-4
changelog:
  - Properly validate attribute set type in pacemaker-attrd
  - Fix `crm_attribute -t nodes --node localhost`
  - Resolves: RHEL-13216
  - Resolves: RHEL-17225
  - Resolves: RHEL-23498


author: Chris Lumens <clumens@redhat.com> - 2.1.8-1
changelog:
  - Rebase on upstream 2.1.8-rc1 release
  - Fix a typo in the help output of pacemaker-fenced
  - Fix escaping characters in XML attribute output
  - Resolves: RHEL-25819
  - Resolves: RHEL-30822


author: Chris Lumens <clumens@redhat.com> - 2.1.8-2
changelog:
  - Rebase on upstream 2.1.8-rc4 release
  - Add ability to immediately shutdown system with PCMK_panic_action=
  - Fix a memory leak in the attribute daemon
  - Add ability to list options and parameters as parseable metadata
  - crm_verify now reports invalid fence level indexes
  - Fix an error in node ID handling in `crm_node -i`
  - Fix regression in attrd_updater output
  - Resolves: RHEL-39057
  - Resolves: RHEL-40117
  - Resolves: RHEL-23401
  - Resolves: RHEL-2996
  - Resolves: RHEL-47249
  - Resolves: RHEL-45935


author: Chris Lumens <clumens@redhat.com> - 2.1.9-1
changelog:
  - Rebase on upstream 2.1.9 final release
  - Use async communication to establish TLS connections
  - Fix regression in adding alerts to CIB
  - Fix a crash in command line tools when stderr is closed
  - Resolves: RHEL-61382
  - Resolves: RHEL-34276
  - Resolves: RHEL-55458
  - Resolves: RHEL-59043


author: Chris Lumens <clumens@redhat.com> - 2.1.10-1
changelog:
  - Rebase on upstream 2.1.10-rc1 release
  - Use dbus to detect completion of systemd resource start/stop actions
  - Add an option for controlling remote node fencing behavior
  - Related: RHEL-89134
  - Resolves: RHEL-86143
  - Resolves: RHEL-84018


author: Chris Lumens <clumens@redhat.com> - 2.1.10-2
changelog:
  - Handle large timeouts correctly in crm_resource --wait
  - Do not try to connect to subdaemons before they're respawned
  - Don't evict IPC clients as long as they're still processing messages
  - Don't overwhelm the FSA queue with repeated CIB queries
  - Resolves: RHEL-45869
  - Resolves: RHEL-87484
  - Resolves: RHEL-114894


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-14
changelog:
  - pam_lastlog: check localtime_r() return value. Resolves: #2130124
  - pam_faillock: clarify missing user faillock files after reboot. Resolves: #2126632
  - pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2126648


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-16
changelog:
  - libpam: use close_range() to close file descriptors. Resolves: RHEL-5099
  - fix formatting of audit messages. Resolves: RHEL-5100


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-18
changelog:
  - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
  - pam_access: handle hostnames in access.conf. Resolves: RHEL-22300


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-19
changelog:
  - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
    situations. CVE-2024-22365. Resolves: RHEL-21244


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-22
changelog:
  - pam_unix: always run the helper to obtain shadow password file entries.
    CVE-2024-10041. Resolves: RHEL-62879
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-23631 and RHEL-39943


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-24
changelog:
  - pam_unix: sync expiry checks with shadow. Resolves: RHEL-70519
  - pam.conf: remove tallylog. Resolves: RHEL-15324


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-26
changelog:
  - pam_unix: sync expiry checks with shadow.
    Resolves: RHEL-70519, RHEL-95475, RHEL-96955 and RHEL-96973
  - pam.conf: remove tallylog. Resolves: RHEL-15324
  - pam_namespace: fix potential privilege escalation.
    Resolves: CVE-2025-6020 and RHEL-96727


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: Peng Wu <pwu@redhat.com> - 1.48.7-3
changelog:
  - Update pango-emoji-table.h for emoji 14 support
  - Add pango-update-emoji.patch
  - Resolves: #2119674


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.42.2-3
changelog:
  - Use pkgconfig to BR the required cairomm API/ABI version 1.0 (vs. 1.16); use
    cairomm1.0, which may be a virtual Provides, in the manual lib Requires


author: RHEL Packaging Agent <jotnar@redhat.com> - 7.2.0-1
changelog:
  - Rebase to papi 7.2.0
  - Update license tag to BSD-3-Clause
  - Remove old patches and add new patches for 7.2.0 compatibility
  - Update configure options and package files
  - Resolves: RHEL-121673


author: Nathan Scott <nathans@redhat.com> - 5.3.5-3
changelog:
  - Resolve failure in the Nvidia metrics agent (BZ 2030123)
  - PMDA indom cache loading performance improvements (BZ 2030122)
  - Consistent user experience for new farm services (BZ 2030138)
  - Resilience improvements for the pmproxy service (BZ 2030141)


author: Nathan Scott <nathans@redhat.com> - 5.3.5-4
changelog:
  - pmdabcc: resolve compilation issues of some bcc PMDA modules on
    aarch64, ppc64le and s390x (BZ 2024982)
  - pmdabpf: support arm and powerpc architectures (BZ 2024980)
  - Further improve pmlogger service startup latency (BZ 1973833)
  - Additional improvements to farm systemd services (BZ 2030138)


author: Nathan Scott <nathans@redhat.com> - 5.3.5-5
changelog:
  - Further improve pmlogger and pmie farm services (BZ 2030138)
  - Resolve a further KVM selinux issue with KVM (BZ 2006430)
  - Rebuild to use latest selinux-policy for el9 (BZ 2041503)


author: Nathan Scott <nathans@redhat.com> - 5.3.5-8
changelog:
  - Fix pcp-zeroconf logger interval override regression (BZ 1991764)
  - Remove warnings from spec setup of PCP systemd units (BZ 2048024)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-3
changelog:
  - Fix remaining issues in the pcp-ss(1) utility (BZ 1981886)
  - Remove benign pmie systemd unit file warning (BZ 2072971)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-5
changelog:
  - Harden pmdapostfix(1) against missing Postfix (BZ 2059463)
  - Fix cgroups failure on non-x86_64 platforms (BZ 2081262)


author: Nathan Scott <nathans@redhat.com> - 6.0.0-1
changelog:
  - Support --top* options in the pcp-dstat(1) utility (BZ 2020988)
  - Performance improvements, fixes in pmseries --load (BZ 2027430)
  - Switch from static pcp useradd to systemd-sysusers (BZ 2095445)
  - Rebase to latest stable version of PCP (BZ 2117074)


author: Lauren Chilton <lchilton@redhat.com> - 6.2.2-4
changelog:
  - Removed excess headers for pcp2openmetrics tool (RHEL-39159)
  - Fix pcp2openmetrics '-s' option (RHEL-39132)
  - Fix pcp2openmetrics timestamps in archive mode (RHEL-32983)
  - Fix pcp2openmetrics output to adhere to prometheus parser (RHEL-39293)


author: Nathan Scott <nathans@redhat.com> - 6.2.2-5
changelog:
  - Add rpm dependency on package providing ps(1) tool (RHEL-39491)
  - Update Java bytecode in pcp-testasuite package (RHEL-40718)


author: Nathan Scott <nathans@redhat.com> - 6.3.1-1
changelog:
  - New pcp-xsos utility for rapid system summaries (RHEL-30590)
  - Fix Upgrade scripts to not rewrite pmcd.conf (RHEL-40631)
  - Add new Hyper-V balloon usage metrics (RHEL-45715)
  - Auto-load pmdaproc in local context (RHEL-50941)
  - Fix a benign potential libpcp buffer overflow (RHEL-58914)
  - Fix pcp-zeroconf pmie.config write permission (RHEL-59366)
  - Rebase to latest stable version of PCP (RHEL-58953)


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Add proc PMDA access control for IO metrics (RHEL-60891)
  - Fix pmdastatsd segfaults within pmdaRehash (RHEL-57717)
  - Multiple hugepage size NUMA metric support (RHEL-45876)
  - Improve pcp-xsos command line diagnostics (RHEL-61597, RHEL-61598)
  - Add pmlogger_farm_check service selinux policy (RHEL-61885)
  - Fix v3 archive replay on big endian machines (RHEL-61501)
  - Rebase to latest stable version of PCP (RHEL-58953)


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039)
  - Fix a multilib regression in PCP header files (RHEL-93186)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories


author: Lauren Chilton <lchilton@redhat.com> - 6.3.7-6
changelog:
  - Backport fix for pmdaopenmetrics metric removal (RHEL-101745)
  - Backport fix for pcp2openmetrics metric hanging (RHEL-106772)
  - Backport fix for atop cpu utilization bug (RHEL-79767)


author: Nathan Scott <nathans@redhat.com> - 5.3.0-1
changelog:
  - Added conditional lockdown policy access by pmdakvm (BZ 1940971)
  - Added spec file dependency on cyrus-sasl-scram (BZ 1942879)
  - Update to latest PCP sources (BZ 1957575)


author: Nathan Scott <nathans@redhat.com> - 5.3.0-2
changelog:
  - Improve pmchart duplicate archive diagnostics (BZ 1615718)
  - Save pmchart users prefered archive locations (BZ 1615742)
  - Remove libvarlink dependency from podman PMDA (BZ 1956608)
  - Correct pcp-testsuite file permissions (BZ 1922040)
  - Resolve pcp-testsuite linkage problems (BZ 1950263)


author: Nathan Scott <nathans@redhat.com> - 5.3.1-3
changelog:
  - Fix pmproxy parallel TLS requests bug (BZ 1947989)
  - Backport pmrep archive creation fix (BZ 1974266)
  - Related: rhbz#1957575


author: Mark Goodwin <mgoodwin@redhat.com> - 5.3.1-4
changelog:
  - Improve pmproxy and libpcp_web scalability (BZ 1975069)
  - Provide a pcp-ss(1) tool in pcp-system-tools (BZ 1879350)


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Petr Pisar <ppisar@redhat.com> - 10.36-4
changelog:
  - Fix a mismatch if \K was involved in a recursion
  - Restore single character repetition optimization in JIT (upstream bug #2698)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.37-1
changelog:
  - Rebase to the 10.37
  - libpcre2-posix.so.2* SONAME bump to libpcre2-posix.so.3*
  - Enable JIT for s390x arch
  - Patches upstreamed: Patch 1,2,3,4
  - Resolves: rhbz#1970765, BZ#1965025


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-28
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951271 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1:0.9.4-23
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951270 replace apache-commons-logging with java.util.logging


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-471
changelog:
  - Make accessing environment by DynaLoader thread-safe
  - Use duplocale() if available
  - Fix fc() in Turkish locale
  - Fix croaking on "my $_" when "use utf8" is in effect (GH#18449)
  - Fix PERL_UNUSED_ARG() definition in XSUB.h
  - Add missing entries to perldiag (GH#18276)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-472
changelog:
  - Protect locale tests from LANGUAGE environment variable
  - Prevent the number of buckets in a hash from getting too large
  - Fix a memory leak when compiling a regular expression (GH#18604)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-474
changelog:
  - Fix dumping a hash entry of PL_strtab type
  - Fix an arithmetic left shift of a minimal integer value (GH#18639)


author: Paul Howarth <paul@city-fan.org> - 1.2000-1
changelog:
  - Update to 1.200
    - New release with no new features, just preparing for a series of bugfix
      releases
  - Specify all build dependencies
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.014-14
changelog:
  - Spec clean-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Use %{make_build} and %{make_install}
    - Fix permissions of installed files


author: Tom Callaway <spot@fedoraproject.org> - 0.44-1
changelog:
  - Update to 0.44
    - Support Perls with COW disabled
    - Bump B::COW requirement for testing
  - Disable tests until B::COW is packaged


author: Tom Stellard <tstellar@redhat.com> - 1.64-4
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Petr Pisar <ppisar@redhat.com> - 1.66-2
changelog:
  - Update DBD-SQLite-1.60-Unbundle-Test-NoWarnings.patch
  - Do not build-require unused Test::FailWarnings
  - Update the description


author: Tom Stellard <tstellar@redhat.com> - 1.642-7
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Paul Howarth <paul@city-fan.org> - 1:0.17029-1
changelog:
  - Update to 0.17029
    - Rebuild for order of 'NAME' and 'VERSION' sections in the generated POD
      documentation (VERSION used to appear before NAME)


author: Paul Howarth <paul@city-fan.org> - 1.002002-1
changelog:
  - Update to 1.002002
    - Fix bug in handling regexps in import lists; Exporter::Tiny allowed regexps
      like /foo/i but not /foo/; having trailing flags is now optional! (GH#6)
    - Tests would fail if 'PERL5OPT=-Mfeature=:5.18' environment variable was set;
      this is because bareword '-default' was being interpreted as the Perl
      'default' keyword (GH#5)
  - Unbundle newly-bundled test modules


author: Paul Howarth <paul@city-fan.org> - 1.16-18
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.72-21
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - IO::Socket::Utils CERT_asHash and CERT_create now support subject and
      issuer with multiple same parts (like multiple OU); in this case an array
      ref instead of a scalar is used as hash value (GH#95)


author: Michal Josef Špaček <mspacek@redhat.com> - 2.070-4
changelog:
  - Remove failing tests in openssl 3.0.0-alpha16. Related: rhbz#1968046
    - Provisional for mass rebuild of openssl3.


author: Paul Howarth <paul@city-fan.org> - 1.26-1
changelog:
  - Update to 1.26
    - BUILD: Update FAIL_POSIX warning message (GH#28)
    - TEST: t/07_taint.t: Use executable name as source of taintedness (GH#21)
    - OTHER: Typographic corrections (CPAN RT#60211, CPAN RT#86403)
    - Add Travis configuration


author: Paul Howarth <paul@city-fan.org> - 1.29-1
changelog:
  - Update to 1.29
    - Improved handling of shell commands on Windows, which should get us closer
      to resolving Win32-related issues; there should be no change of
      functionality on Unix-like platforms
    - Better workaround for bug in perl-5.8.9 (GH#23)
    - Add t/args.t
    - Modify t/win32.t
    - Added Travis and AppVeyor configuration files
    - Eliminated use of Dist::Zilla for build, using older, but more reliable and
      better understood (by maintainer) ExtUtils::MakeMaker-based configuration
    - Move author testing to xt/ directory


author: Emmanuel Seyman <emmanuel@seyman.fr> - 4.03-1
changelog:
  - Update to 4.03
  - Use %{make_install} instead of "make pure_install"
  - Use %{make_build} instead of make
  - Replace calls to %{__perl} with /usr/bin/perl
  - Pass NO_PACKLIST and NO_PERLLOCAL to Makefile.PL


author: Petr Pisar <ppisar@redhat.com> - 1:0.68-3
changelog:
  - Fix resolving localhost on loopback-only machines
    (https://github.com/perl-ldap/perl-ldap/pull/60)


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix failing installation in parallel make (GH#38)
    - Infrastructure improvements and tooling updates, lots of author tests with
      corresponding fixes added
    - Added slide and slideatatime functions
    - Documentation fixes (GH#21, GH#33, GH#34, CPAN RT#126029, CPAN RT#132043,
      CPAN RT#132940)
    - Bump List::MoreUtils::XS requirement to 0.430
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix parts of CPAN RT#123989: more $a/$b/$_ refcounting bugs
      - Since some bugs are simply reported wrong, dealing with them breaks more
        (including running code) than it solves - way too heavy to feel better...
    - Introduce functions slide and slideatatime
    - Toolchain fixes
    - Fix LANG=nb_NO.utf8 related str tests fails (CPAN RT#133128)
    - Fix typo (GH#7)
    - Fix parts of CPAN RT#132043: listcmp misbehave in XS implementation
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.70-1
changelog:
  - Update to 0.70
    - Protect ourselves from Module::Metadata parsing problems (CPAN RT#130939)
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.86-1
changelog:
  - Update to 0.86
    - Update PAUSE and ANDK keys to 2020
    - Update documentation pertaining to SHA1
    - Fix compatibility with Crypt::OpenPGP
  - Use mktemp to create temporary GPG directory


author: Paul Howarth <paul@city-fan.org> - 0.21-26
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.90-1
changelog:
  - Update to 1.90
    - Formalised libssl version support policy: all stable versions of OpenSSL
      in the 0.9.8-1.1.1 branches (with the exception of 0.9.8-0.9.8b) and all
      stable releases of LibreSSL in the 2.0-3.1 series are supported
    - The LibreSSL 3.2 series is not yet fully supported because its TLSv1.3
      implementation is not currently libssl-compatible
    - Added support for LibreSSL on Windows when built with Visual C++
    - Exposed P_X509_CRL_add_extensions, several SSL_CIPHER functions, and
      several stack functions
    - Fixed crashes in the callback functions CTX_set_next_proto_select_cb and
      CTX_set_alpn_select_cb
    - The test suite is now compatible with OpenSSL 1.1.1e onwards, as well as
      OpenSSL security level 2 (the default on many Linux distributions)


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-4
changelog:
  - Fix tests for openssl 3.0.0-alpha16. rhbz#1964854
    - Fix check across alpha1 vs alpha17
    - Change default alg for PEM_get_string_PrivateKey()
    - Different order in CA chain in some versions
    - Changed API of CTX_set_ciphersuites() and set_ciphersuites(), ignore
      unknown ciphers
    - Disable TLSv1 and TLSv1_1 usage in test


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-6
changelog:
  - Fix tests for openssl 3.0.0-beta1. rhbz#1964854
    - Add fix for t/05_passwd_cb.t
    - Update Net-SSLeay-1.90-openssl3.0.0-43_misc_functions.patch to accept beta version
  - Fix tab vs space in spec file
  - Update Net-SSLeay-1.90-openssl3.0.0-39_pkcs12.patch patch to upstream version


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-8
changelog:
  - Fix tests for openssl 3.0.0-beta2. rhbz#1992571
    - Add another fix for t/05_passwd_cb.t, because change in passphrase caching
  - Remove XXX in spec file


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.94-1
changelog:
  - Resolves: RHEL-40758
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list
  - Package tests


author: Paul Howarth <paul@city-fan.org> - 1.106-20
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build requirements
    - Drop support for building with Test::More < 0.88
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Use %license macro


author: Paul Howarth <paul@city-fan.org> - 1:0.38-458
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Tom Stellard <tstellar@redhat.com> - 3:1.54-441
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.29-6
changelog:
  - Spec file cleanups: Use make_build and make_install macros, use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.36-3
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Petr Pisar <ppisar@redhat.com> - 3:1.302177-1
changelog:
  - Update to 1.302177
    - Minor fix to author downstream test
    - No significant changes since the last trial
    - Fix Test::More's $TODO inside intercept (#862)


author: Paul Howarth <paul@city-fan.org> - 3:1.302180-1
changelog:
  - Update to 1.302180
    - Move try_sig_mask to the only module that uses it
    - Inherit warnings bitmask in cmp_ok string eval
    - Update copyright date
    - Improved API for intercept {} and what it returns
    - Bump minimum List::Util version (for uniq)


author: Paul Howarth <paul@city-fan.org> - 3:1.302181-1
changelog:
  - Update to 1.302181
    - Put try_sig_mask back where it goes (and add test to prevent this in the
      future)
    - Drop new List::Util requirement back down


author: Tom Stellard <tstellar@redhat.com> - 1.1-36
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Paul Howarth <paul@city-fan.org> - 1.30-1
changelog:
  - Update to 1.30
    - Breaking Change: Set $YAML::LoadBlessed default to false to make it more
      secure


author: Paul Howarth <paul@city-fan.org> - 1:0.238-1
changelog:
  - Update to 0.238
    - Move the prerequisite Test::More from being a runtime prerequisite to a
      test time / build time prerequisite (GH#11)


author: Peter Jones <pjones@redhat.com> - 113-10
changelog:
  - I really cannot figure out why bkernel01 thinks the certificate nickname
    starts with /CN=, but it does, so I'm gonna stop fighting with the sand.


author: Filip Janus <fjanus@redhat.com> - 1.7.0-1
changelog:
  - Initial import for postgresql 15 module
  - Update to 1.7.0
  - Support postgresql 15
  - Related: #2128410


author: Remi Collet <rcollet@redhat.com> - 8.0.20-1
changelog:
  - rebase to 8.0.20 #2095752
  - clean unneeded dependency on useradd command #2095447
  - add upstream patch to initialize pcre before mbstring
  - retrieve tzdata version from /usr/share/zoneinfo/tzdata.zi


author: Remi Collet <rcollet@redhat.com> - 8.0.30-2
changelog:
  - Fix Leak partial content of the heap through heap buffer over-read
    CVE-2024-8929
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233
  - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
    CVE-2024-8927
  - Fix Logs from childrens may be altered
    CVE-2024-9026
  - Fix Erroneous parsing of multipart form data
    CVE-2024-8925
  - Fix filter bypass in filter_var FILTER_VALIDATE_URL
    CVE-2024-5458
  - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
    CVE-2024-2756
  - Fix password_verify can erroneously return true opening ATO risk
    CVE-2024-3096


author: Remi Collet <rcollet@redhat.com> - 8.0.30-3
changelog:
  - Fix libxml streams use wrong `content-type` header when requesting a redirected resource
    CVE-2025-1219
  - Fix Stream HTTP wrapper header check might omit basic auth header
    CVE-2025-1736
  - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes
    CVE-2025-1861
  - Fix Streams HTTP wrapper does not fail for headers without colon
    CVE-2025-1734
  - Fix Header parser of `http` stream wrapper does not handle folded headers
    CVE-2025-1217


author: Remi Collet <rcollet@redhat.com> - 8.0.30-4
changelog:
  - Fix pgsql extension does not check for errors during escaping
    CVE-2025-1735
  - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix
    CVE-2025-6491
  - Fix Null byte termination in hostnames
    CVE-2025-1220
  - Fix soap memory corruption
  - Fix ldap_set_option() not applied on different ldap connections


author: Remi Collet <rcollet@redhat.com> - 8.0.30-5
changelog:
  - Fix Null byte termination in dns_get_record()
    GHSA-www2-q4fc-65wf
  - Fix Heap buffer overflow in array_merge()
    CVE-2025-14178
  - Fix Information Leak of Memory in getimagesize
    CVE-2025-14177


author: Remi Collet <rcollet@redhat.com> - 8.1.6-2
changelog:
  - add upstream patch to initialize pcre before mbstring
  - add upstream patch to use more sha256 in openssl tests


author: Remi Collet <rcollet@redhat.com> - 8.2.13-1
changelog:
  - rebase to 8.2.13 RHEL-14699
  - add %__phpize and %__phpconfig macros
  - move httpd/nginx wants directives to config files in /etc
  - php-fpm.conf: move include directive after [global] section
    following upstream example, allowing overriding
  - use SPDX license IDs


author: Remi Collet <rcollet@redhat.com> - 8.3.12-1
changelog:
  - rebase to 8.3.12 RHEL-62189
  - enable command history in phpdbg
  - backport Argon2 password hashing in OpenSSL ext
  - build sockets extension statically
  - switch to nikic/php-parser version 5
  - openssl: always warn about missing curve_name


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Jakub Jelen <jjelen@redhat.com> - 1.1.1-2
changelog:
  - Move pinentry-tty to separate subpackage (#1782442)
  - Update the wrapper selecting the appropriate version (#1918969)


author: Neal Gompa <ngompa@centosproject.org> - 0.3.40-1
changelog:
  - Update to version 0.3.40 which drops media-session service for WirePlumber
    Resolves: rhbz#2022694


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 2.11.4-6
changelog:
  - Drop jackson-module-afterburner, jackson-module-guice, jackson-module-mrbean,
    jackson-module-osgi, jackson-module-paranamer, and jackson-module-javadoc


author: Alexander Scheel <ascheel@redhat.com> - 3.0.26-6
changelog:
  - CVE-2020-1695: Improper validation of response header in MediaTypeHeaderDelegate.java class
    Resolves: rh-bz#1845547


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 3.0.26-13
changelog:
  - Replace jboss-annotations-1.2-api with jakarta-annotations
  - Drop log4j dependency
  - Add jakarta-activation dependency


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.30-1
changelog:
  - Resolves: rhbz#1721684 Rebase pki-servlet-engine to 9.0.30
  - Update to JWS 5.3.0 distribution
  - Remove new dependencies that PKI doesn't need (and are not provided by RHEL 8)


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.43-1
changelog:
  - Update to JWS 5.5, and drop jakarta-saaj dependency
  - Updates to javapackages-local removed %add_maven_depmap which broke the build,
    so I removed most of the maven artifacts as they aren't very useful anyway
  - Cleaned up a few unnecessary patches


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.43-2
changelog:
  - Related: rhbz#1977948 Cleanup unused tomcat-juli.jar copy now that the maven artifacts have been removed


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-13.20200306git58a7289
changelog:
  - Add patches fixing crash on monitor hot(un)plug (rhbz#1809681)
  - Add patches fixing delay between gdm telling us to deactivate and
    us telling gdm it is ok to continue
  - Drop plymouth-plugin-throbgress sub-package, the spinfinity theme now
    uses the two-step plugin


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-14.20200306git58a7289
changelog:
  - New upstream git snapshot
  - Add RemainAfterExit=yes to plymouth's systemd service files (rhbz#1807771)
  - Fix the spinner / animation missing on shutdown and reboot


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-1.20210323git8a3c9bb
changelog:
  - Update to 0.9.5 + a bunch of extra fixes from git (new upstream git snapshot)
  - Fixes 1896929 - systemd complains about Unit configured to use KillMode=none


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-2.20210331git1ea1020
changelog:
  - New git snapshot
  - Fixes 1933378 - Bootsplash doesn't always fully clear on boot to console
  - Fixes 1941329 - Flickering plymouth on shutdown/reboot
  - Prune spec-file changelog a bit


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/5e3accd)
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/45c2d1f)
  - fixes "CVE-2025-27144 podman: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-9.7]"
  - Resolves: RHEL-80615


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9d2e54f)
  - fixes "Excessive memory leak due to uncontrolled accumulation of health.log entries in Podman 5.x"
  - Resolves: RHEL-83262


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/a994a04)
  - fixes "podman tests are failing"
  - Resolves: RHEL-86200


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/0ee1d49)
  - fixes "podman tests are failing - [RHEL-10.1.GA]"
  - Resolves: RHEL-88191


author: Jindrich Novy <jnovy@redhat.com> - 5:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 5:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.1.1-rhel
    (https://github.com/containers/podman/commit/fa692a6)
  - Related: #2097694


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-6
changelog:
  - convert catatonit dependency to soft dep as catatonit is
    no longer in Appstream but in CRB
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.2.0
    (https://github.com/containers/podman/commit/7fe5a419cfd2880df2028ad3d7fd9378a88a04f4)
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 2:4.5.1-3
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175074
  - Resolves: #2179966
  - Resolves: #2187322
  - Resolves: #2187383
  - Resolves: #2203702
  - Resolves: #2207522


author: Jindrich Novy <jnovy@redhat.com> - 2:4.5.1-5
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175071
  - Resolves: #2179950
  - Resolves: #2187318
  - Resolves: #2187366
  - Resolves: #2203681
  - Resolves: #2207512


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.0
    (https://github.com/containers/podman/commit/38e6fab9664c6e59b66e73523b307a56130316ae)


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/1b2fadd)
  - Resolves: #2232127


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/8bb0204)
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/ea33dce)
  - Related: #2176063


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-2
changelog:
  - Improve man pages (RHEL-672)
  - Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)


author: Petr Lautrbach <lautrbach@redhat.com> - 3.6-5
changelog:
  - sandbox/seunshare: Replace system() with execv() to prevent shell injection
  - seunshare: fix the frail tmpdir cleanup


author: Jan Rybar <jrybar@redhat.com> - 0.117-13
changelog:
  - session-monitor: watch sessions only
  - PolkitPermission: react on really changed sessions
  - allow polkit-pkla-compat to be uninstalled if no .pkla rules
  - Resolves: RHEL-39063


author: Marek Kasik <mkasik@redhat.com> - 21.01.0-11
changelog:
  - Backport fixes for issues found by Coverity Scan
  - and fix some of the new issues
  - Resolves: #1967967


author: Tomas Korbar <tkorbar@redhat.com> - 2:3.5.9-20
changelog:
  - Backport dns SRV record resolution feature (RFC6186)
    Resolves: rhbz#2134789
  - Fix building in ZUUL CI
    Resolves: rhbz#2193363


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.5.9-14
changelog:
  - Fixed cleanup crash when processing messages with whitespace only fullname
    Resolves: rhbz#1978901


author: Masahiro Matsuya <mmatsuya@redhat.com> - 13.13-1
changelog:
  - Update to 13.13
  - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, and CVE-2023-39417
  - Resolves: RHEL-5567


