# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-653.el9]
changelog:
  - sfc: fix potential memory leak in efx_mae_process_mport() (Izabela Bakollari) [RHEL-97678]
  - sfc: replace min/max nesting with clamp() (Izabela Bakollari) [RHEL-97678]
  - sfc: siena: eliminate xdp_rxq_info_valid using XDP base API (Izabela Bakollari) [RHEL-97678]
  - sfc: eliminate xdp_rxq_info_valid using XDP base API (Izabela Bakollari) [RHEL-97678]
  - HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124606] {CVE-2025-39806}
  - ACPI: CPPC: Perform fast check switch only for online CPUs (Mark Langsdorf) [RHEL-114091]
  - ACPI: MRRM: Check revision of MRRM table (Mark Langsdorf) [RHEL-114091]
  - ACPI: fan: Use platform device for devres-related actions (Mark Langsdorf) [RHEL-114091]
  - ACPI/IORT: Fix memory leak in iort_rmr_alloc_sids() (Mark Langsdorf) [RHEL-114091]
  - ACPI: pfr_update: Fix the driver update version check (Mark Langsdorf) [RHEL-114091]
  - ACPI: EC: Relax sanity check of the ECDT ID string (Mark Langsdorf) [RHEL-114091]
  - ACPI: processor: perflib: Move problematic pr->performance check (Mark Langsdorf) [RHEL-114091]
  - ACPI: Fix typos (Mark Langsdorf) [RHEL-114091]
  - ACPI/PCI: Remove space before newline (Mark Langsdorf) [RHEL-114091]
  - ACPI: processor: throttling: Remove space before newline (Mark Langsdorf) [RHEL-114091]
  - ACPI: processor: perflib: Fix initial _PPC limit application (Mark Langsdorf) [RHEL-114091]
  - ACPI: TAD: Replace sprintf() with sysfs_emit() (Mark Langsdorf) [RHEL-114091]
  - ACPI: fan: Update debug message in fan_get_state_acpi4() (Mark Langsdorf) [RHEL-114091]
  - ACPI: PRM: Reduce unnecessary printing to avoid user confusion (Mark Langsdorf) [RHEL-114091]
  - ACPI: fan: Replace sprintf() with sysfs_emit() (Mark Langsdorf) [RHEL-114091]
  - ACPI: processor: fix acpi_object initialization (Mark Langsdorf) [RHEL-114091]
  - ACPI: LPSS: Remove AudioDSP related ID (Mark Langsdorf) [RHEL-114091]
  - ACPI: fan: Replace sprintf()/scnprintf() with sysfs_emit() in show() functions (Mark Langsdorf) [RHEL-114091]
  - ACPI: PM: Set .detach in acpi_general_pm_domain definition (Mark Langsdorf) [RHEL-114091]
  - ACPI: pfr_update: Add more debug information when firmware update failed (Mark Langsdorf) [RHEL-114091]
  - ACPI: proc: Prefer to use octal permission (Mark Langsdorf) [RHEL-114091]
  - ACPI: proc: Use str_enabled_disabled() helper (Mark Langsdorf) [RHEL-114091]
  - ACPI: proc: Remove unused header (Mark Langsdorf) [RHEL-114091]
  - ACPI: proc: Use correct format specifier and drop casting (Mark Langsdorf) [RHEL-114091]
  - ACPI: wakeup: Drop unneeded casting for sleep_state (Mark Langsdorf) [RHEL-114091]
  - ACPICA: Decrease `AcpiExTracePoint` verbosity (Mark Langsdorf) [RHEL-114091]
  - ACPICA: Refuse to evaluate a method if arguments are missing (Mark Langsdorf) [RHEL-114091]
  - ACPI: Enable CONFIG_ACPI_DEBUG by default (Mark Langsdorf) [RHEL-114091]
  - ACPI: resource: Use IRQ override on MACHENIKE 16P (Mark Langsdorf) [RHEL-114091]
  - ACPI: EC: Ignore ECDT tables with an invalid ID string (Mark Langsdorf) [RHEL-114091]
  - ACPI: CPPC: Fix NULL pointer dereference when nosmp is used (Mark Langsdorf) [RHEL-114091]
  - ACPI: PAD: Update arguments of mwait_idle_with_hints() (Mark Langsdorf) [RHEL-114091]
  - ACPICA: Switch back to using strncpy() in acpi_ut_safe_strncpy() (Mark Langsdorf) [RHEL-114091]
  - ACPI: MRRM: Silence error code static checker warning (Mark Langsdorf) [RHEL-114091]
  - ACPI: MRRM: Fix default max memory region (Mark Langsdorf) [RHEL-114091]
  - ACPI: irq: Introduce acpi_get_gsi_dispatcher() (Mark Langsdorf) [RHEL-114091]
  - ACPI: bus: Bail out if acpi_kobj registration fails (Mark Langsdorf) [RHEL-114091]
  - ACPI: thermal: Execute _SCP before reading trip points (Mark Langsdorf) [RHEL-114091]
  - ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions" (Mark Langsdorf) [RHEL-114091]
  - ACPI: tables: Improve logging around acpi_initialize_tables() (Mark Langsdorf) [RHEL-114091]
  - ACPI: VIOT: Remove (explicitly) unused header (Mark Langsdorf) [RHEL-114091]
  - ACPI: MRRM: Add /sys files to describe memory ranges (Mark Langsdorf) [RHEL-114091]
  - ACPI: MRRM: Minimal parse of ACPI MRRM table (Mark Langsdorf) [RHEL-114091]
  - ACPICA: Update copyright year (Mark Langsdorf) [RHEL-114091]
  - ACPICA: Replace strncpy() with memcpy() (Mark Langsdorf) [RHEL-114091]
  - ACPICA: Utilities: Fix spelling mistake "Incremement" -> "Increment" (Mark Langsdorf) [RHEL-114091]
  - ACPICA: utilities: Fix overflow check in vsnprintf() (Mark Langsdorf) [RHEL-114091]
  - ACPI: EC: Add device to acpi_ec_no_wakeup[] qurik list (Mark Langsdorf) [RHEL-114091]
  - ACPI: PPTT: Fix processor subtable walk (Mark Langsdorf) [RHEL-114091]
  - ACPICA: Apply pack(1) to union aml_resource (Mark Langsdorf) [RHEL-114091]
  - ACPICA: Add support for printing AML arguments when trace point enabled (Mark Langsdorf) [RHEL-114091]
  - ACPI: processor: idle: Remove redundant pr->power.count assignment (Mark Langsdorf) [RHEL-114091]
  - ACPI: processor: idle: Set pr->flags.power unconditionally (Mark Langsdorf) [RHEL-114091]
  - ACPI: battery: Round capacity percengate to closest integer (Mark Langsdorf) [RHEL-114091]
  - ACPICA: exserial: don't forget to handle FFixedHW opregions for reading (Mark Langsdorf) [RHEL-114091]
  - ACPI: processor: idle: Remove obsolete comment (Mark Langsdorf) [RHEL-114091]
  - ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls (Mark Langsdorf) [RHEL-114091]
  - ACPI: EC: Set ec_no_wakeup for Lenovo Go S (Mark Langsdorf) [RHEL-114091]
  - ACPI: button: Only send `KEY_POWER` for `ACPI_BUTTON_NOTIFY_STATUS` (Mark Langsdorf) [RHEL-114091]
  - ACPI: video: Handle fetching EDID as ACPI_TYPE_PACKAGE (Mark Langsdorf) [RHEL-114091]
  - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-114091]
  - ACPI: x86: Extend Lenovo Yoga Tab 3 quirk with skip GPIO event-handlers (Mark Langsdorf) [RHEL-114091]
  - ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP (Mark Langsdorf) [RHEL-114091]
  - ACPI: PNP: Add Intel OC Watchdog IDs to non-PNP device list (Mark Langsdorf) [RHEL-114091]
  - ACPI: NUMA: Use str_enabled_disabled() helper function (Mark Langsdorf) [RHEL-114091]
  - ACPICA: Fix warnings from PR #295 merge (Mark Langsdorf) [RHEL-114091]
  - ACPICA: fix acpi parse and parseext cache leaks (Mark Langsdorf) [RHEL-114091]
  - ACPICA: fix acpi operand cache leak in dswstate.c (Mark Langsdorf) [RHEL-114091]
  - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register (Mark Langsdorf) [RHEL-114091]
  - ACPI: button: Install notifier for system events as well (Mark Langsdorf) [RHEL-114091]
  - acpi: nfit: fix narrowing conversion in acpi_nfit_ctl (Mark Langsdorf) [RHEL-114091]
  - hwmon: (acpi_power_meter) Fix the fake power alarm reporting (Mark Langsdorf) [RHEL-114091]
  - ACPI: fan: Add fan speed reporting for fans with only _FST (Mark Langsdorf) [RHEL-114091]
  - ACPI: HED: Always initialize before evged (Mark Langsdorf) [RHEL-114091]
  - ACPI: video: Use str_yes_no() helper in acpi_video_bus_add() (Mark Langsdorf) [RHEL-114091]
  - ACPI: power: Use str_on_off() helper function (Mark Langsdorf) [RHEL-114091]
  - ACPI: thermal: Fix stale comment regarding trip points (Mark Langsdorf) [RHEL-114091]
  - ACPI: tables: Use string choice helpers (Mark Langsdorf) [RHEL-114091]
  - x86/amd: Use heterogeneous core topology for identifying boost numerator (Mark Langsdorf) [RHEL-114091]
  - ACPI: resource: fix a typo for MECHREVO in irq1_edge_low_force_override[] (Mark Langsdorf) [RHEL-82671]
  - genirq: Unexport nr_irqs (Mark Langsdorf) [RHEL-82671]
  - genirq: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - fs/procfs: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - xen/events: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - serial: ucc_uart: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - serial: cpm_uart: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - serial: amba-pl011: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - serial: amba-pl010: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - serial: 8250: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - serial: core: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - scsi: aha152x: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - net: 3com: 3c59x: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - hpet: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - s390/irq: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - powerpc/cell: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - x86/aperfmperf: Fix deadlock on cpu_hotplug_lock (Mark Langsdorf) [RHEL-82671]
  - ACPI: bus: implement acpi_device_hid when !ACPI (Mark Langsdorf) [RHEL-82671]
  - ACPI: bus: implement for_each_acpi_consumer_dev when !ACPI (Mark Langsdorf) [RHEL-82671]
  - ACPI: header: implement acpi_device_handle when !ACPI (Mark Langsdorf) [RHEL-82671]
  - ACPI: bus: implement for_each_acpi_dev_match when !ACPI (Mark Langsdorf) [RHEL-82671]
  - ACPI: bus: change the prototype for acpi_get_physical_device_location (Mark Langsdorf) [RHEL-82671]
  - ACPI: GTDT: Relax sanity checking on Platform Timers array count (Mark Langsdorf) [RHEL-82671]
  - ACPI: PRM: Remove unnecessary strict handler address checks (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: IRQ override for Eluktronics MECH-17 (Mark Langsdorf) [RHEL-82671]
  - ACPI: property: Fix return value for nval == 0 in acpi_data_prop_read() (Mark Langsdorf) [RHEL-82671]
  - ACPI: x86: Add skip i2c clients quirk for Vexia EDU ATLA 10 tablet 5V (Mark Langsdorf) [RHEL-82671]
  - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices(). (Mark Langsdorf) [RHEL-82671]
  - APEI: GHES: Have GHES honor the panic= setting (Mark Langsdorf) [RHEL-82671]
  - mm/early_ioremap: add null pointer checks to prevent NULL-pointer dereference (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: Fix random crashes due to bad kfree() (Mark Langsdorf) [RHEL-82671]
  - hwmon: (acpi_power_meter) Fix update the power trip points on failure (Mark Langsdorf) [RHEL-82671]
  - hwmon: (acpi_power_meter) Fix uninitialized variables (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: acpi_dev_irq_override(): Check DMI match last (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] (Mark Langsdorf) [RHEL-82671]
  - ACPI: property: Consider data nodes as being available (Mark Langsdorf) [RHEL-82671]
  - ACPI: fan: cleanup resources in the error path of .probe() (Mark Langsdorf) [RHEL-82671]
  - ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: Rename extensions to hook in messages (Mark Langsdorf) [RHEL-82671]
  - ACPI: OSL: Use usleep_range() in acpi_os_sleep() (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Fix memory resource type union access (Mark Langsdorf) [RHEL-82671]
  - ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A (Mark Langsdorf) [RHEL-82671]
  - ACPI: introduce acpi_arch_init() (Mark Langsdorf) [RHEL-82671]
  - ACPI: x86: Clean up Asus entries in acpi_quirk_skip_dmi_ids[] (Mark Langsdorf) [RHEL-82671]
  - ACPI: x86: Add skip i2c clients quirk for Acer Iconia One 8 A1-840 (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor_idle: Use acpi_idle_play_dead() for all C-states (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: force native for Apple MacbookPro11,2 and Air7,2 (Mark Langsdorf) [RHEL-82671]
  - ACPI: CPPC: Fix _CPC register setting issue (Mark Langsdorf) [RHEL-82671]
  - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method (Mark Langsdorf) [RHEL-82671]
  - ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration() (Mark Langsdorf) [RHEL-82671]
  - ACPI: x86: Make UART skip quirks work on PCI UARTs without an UID (Mark Langsdorf) [RHEL-82671]
  - acpi/arm64: remove unnecessary cast (Mark Langsdorf) [RHEL-82671]
  - acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() (Mark Langsdorf) [RHEL-82671]
  - ACPI: allow building without CONFIG_HAS_IOPORT (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor_perflib: extend X86 dependency (Mark Langsdorf) [RHEL-82671]
  - ACPI: scan: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: SBSHC: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: SBS: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: power: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: pci_root: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: pci_link: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: event: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: EC: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: APD: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: thermal: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: Check for error code from devm_mutex_init() call (Mark Langsdorf) [RHEL-82671]
  - ACPI: GTDT: Tighten the check for the array of platform timer structures (Mark Langsdorf) [RHEL-82671]
  - ACPI: CPPC: Make rmw_lock a raw_spin_lock (Mark Langsdorf) [RHEL-82671]
  - ACPI: EC: make EC support compile-time conditional (Mark Langsdorf) [RHEL-82671]
  - redhat/configs: enable CONFIG_ACPI_EC (Mark Langsdorf) [RHEL-82671]
  - ACPI: pfr_telemetry: remove redundant error check on ret (Mark Langsdorf) [RHEL-82671]
  - cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception (Mark Langsdorf) [RHEL-82671]
  - ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[] (Mark Langsdorf) [RHEL-82671]
  - x86/acpi: Switch to irq_get_nr_irqs() and irq_set_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - genirq: Introduce irq_get_nr_irqs() and irq_set_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: Register power supply with power_supply_register() (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Fold Asus ExpertBook B1402C* and B1502C* DMI quirks together (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Make Asus ExpertBook B2502 matches cover more models (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Make Asus ExpertBook B2402 matches cover more models (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: use DEFINE_SIMPLE_DEV_PM_OPS (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: initialize mutexes through devm_ APIs (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: allocate driver data through devm_ APIs (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: check result of register_pm_notifier() (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: Fix possible crash when unregistering a battery hook (Mark Langsdorf) [RHEL-82671]
  - power: supply: core: add wakeup source inhibit by power_supply_config (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: Simplify battery hook locking (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: Add backlight=native quirk for Dell OptiPlex 5480 AIO (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[] (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[] (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Loosen the Asus E1404GAB DMI match to also cover the E1404GA (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Remove duplicate Asus E1504GAB IRQ override (Mark Langsdorf) [RHEL-82671]
  - ACPI: CPPC: Adjust debug messages in amd_set_max_freq_ratio() to warn (Mark Langsdorf) [RHEL-82671]
  - ACPI: CPPC: Drop check for non zero perf ratio (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Add another DMI match for the TongFang GMxXGxx (Mark Langsdorf) [RHEL-82671]
  - ACPI: CPPC: Add support for setting EPP register in FFH (Mark Langsdorf) [RHEL-82671]
  - ACPI: PM: Quirk ASUS ROG M16 to default to S3 sleep (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18 (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: use driver core managed async probing (Mark Langsdorf) [RHEL-82671]
  - ACPI: button: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: bus: Define and use symbols for device and class name lengths (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Skip IRQ override on Asus Vivobook Go E1404GAB (Mark Langsdorf) [RHEL-82671]
  - ACPI: CPPC: Fix MASK_VAL() usage (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Allow for more flexibility in _DSM args (Mark Langsdorf) [RHEL-82671]
  - ACPICA: iasl: handle empty connection_node (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Avoid warning for Dump Functions (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Add support for Windows 11 22H2 _OSI string (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Update integer-to-hex-string conversions (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Add support for supressing leading zeros in hex strings (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Allow for supressing leading zeros when using acpi_ex_convert_to_ascii() (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Fix memory leak if acpi_ps_get_next_field() fails (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Allow PCC Data Type in MCTP resource. (Mark Langsdorf) [RHEL-82671]
  - ACPICA: executer/exsystem: Don't nag user about every Stall() violating the spec (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Implement ACPI_WARNING_ONCE and ACPI_ERROR_ONCE (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Implement the Dword_PCC Resource Descriptor Macro (Mark Langsdorf) [RHEL-82671]
  - ACPICA: haiku: Fix invalid value used for semaphores (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Allow setting waking vector on reduced hardware platforms (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Detect FACS in reduced hardware build (Mark Langsdorf) [RHEL-82671]
  - ACPI: utils: Add rev/func to message when acpi_evaluate_dsm() fails (Mark Langsdorf) [RHEL-82671]
  - ACPI: x86: Make Lenovo Yoga Tab 3 X90F DMI match less strict (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: Make Lenovo Yoga Tab 3 X90F DMI match less strict (Mark Langsdorf) [RHEL-82671]
  - ACPI: scan: Refactor dependency creation (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: force native for Apple MacbookPro9,2 (Mark Langsdorf) [RHEL-82671]
  - ACPI: acpi_processor: Use strscpy instead() of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: AC: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: PAD: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Do IRQ override on MECHREV GM7XG0M (Mark Langsdorf) [RHEL-82671]
  - ACPI: APD: Add AMDI0015 as platform device (Mark Langsdorf) [RHEL-82671]
  - ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11 (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: Add backlight=native quirk for Dell OptiPlex 7760 AIO (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: Add Dell UART backlight controller detection (Mark Langsdorf) [RHEL-82671]
  - ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe() (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor: Reduce the log level of a per-CPU message about idle states (Mark Langsdorf) [RHEL-82671]
  - ACPI: sysfs: remove return value of acpi_device_setup_files() (Mark Langsdorf) [RHEL-82671]
  - ACPI: sysfs: manage sysfs attributes through device core (Mark Langsdorf) [RHEL-82671]
  - ACPI: sysfs: manage attributes as attribute_group (Mark Langsdorf) [RHEL-82671]
  - ACPI: sysfs: evaluate _STR on each sysfs access (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: Remove redundant NULL initalizations (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: EC: Do not release locks during operation region accesses (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Skip IRQ override on Asus Vivobook Pro N6506MJ (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: force native for some T2 macbooks (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: CPPC: Replace ternary operator with umax() (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Skip IRQ override on Asus Vivobook Pro N6506MU (Mark Langsdorf) [RHEL-82671]
  - ACPI: PMIC: Constify struct pmic_table (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: Add support for charge limiting state (Mark Langsdorf) [RHEL-82671]
  - ACPI: bus: Indicate support for battery charge limiting thru _OSC (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: add devm_battery_hook_register() (Mark Langsdorf) [RHEL-82671]
  - ACPI: Add post_eject to struct acpi_scan_handler for cpu hotplug (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor: Register deferred CPUs from acpi_processor_get_info() (Mark Langsdorf) [RHEL-82671]
  - ACPI: scan: switch to flags for acpi_scan_check_and_detach() (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor: Add acpi_get_processor_handle() helper (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor: Move checks and availability of acpi_processor earlier (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor: Drop duplicated check on _STA (enabled + present) (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor: Simplify initial onlining to use same path for cold and hotplug (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor: Fix memory leaks in error paths of processor_add() (Mark Langsdorf) [RHEL-82671]
  - ACPI / amba: Drop unnecessary check for registered amba_dummy_clk (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor: Downgrade Intel _OSC and _PDC messages to debug (Mark Langsdorf) [RHEL-82671]
  - ACPI: NFIT: add missing MODULE_DESCRIPTION() macro (Mark Langsdorf) [RHEL-82671]
  - ACPI: SBS: manage alarm sysfs attribute through psy core (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: use sysfs_emit over sprintf (Mark Langsdorf) [RHEL-82671]
  - ACPI: SBS: constify powersupply properties (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: create alarm sysfs attribute atomically (Mark Langsdorf) [RHEL-82671]
  - ACPI: AC: constify powersupply properties (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: constify powersupply properties (Mark Langsdorf) [RHEL-82671]
  - ACPI: PMIC: Replace open coded be16_to_cpu() (Mark Langsdorf) [RHEL-82671]
  - ACPI: PMIC: Convert pr_*() to dev_*() printing macros (Mark Langsdorf) [RHEL-82671]
  - ACPI: PMIC: Use sizeof() instead of hard coded value (Mark Langsdorf) [RHEL-82671]
  - ACPI: CPPC: add sysfs entry for guaranteed performance (Mark Langsdorf) [RHEL-82671]
  - ACPI: HMAT: Use ACCESS_COORDINATE_CPU when appropriate (Mark Langsdorf) [RHEL-82671]
  - ACPI: acpi_pad: Still evaluate _OST when _PUR evaluation fails (Mark Langsdorf) [RHEL-82671]
  - ACPI: x86: Switch to new Intel CPU model defines (Mark Langsdorf) [RHEL-82671]
  - ACPI: arm64: Sort entries alphabetically (Mark Langsdorf) [RHEL-82671]
  - ACPI: LPSS: Switch to new Intel CPU model defines (Mark Langsdorf) [RHEL-82671]
  - ACPI: fan: Add hwmon support (Mark Langsdorf) [RHEL-82671]
  - PM: sleep: core: Fix runtime PM enabling in device_resume_early() (Mark Langsdorf) [RHEL-109251]
  - drm/amd/pm: fix missing device_attr cleanup in amdgpu_pm_sysfs_init() (Mark Langsdorf) [RHEL-81536]
  - driver core: Drop unneeded 'extern' keyword in fwnode.h (Mark Langsdorf) [RHEL-109251]
  - ucsi_ccg: Disable async suspend in ucsi_ccg_probe() (Mark Langsdorf) [RHEL-109251]
  - soundwire: intel_auxdevice: Fix system suspend/resume handling (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: annotate RCU list iterations (Mark Langsdorf) [RHEL-109251]
  - regmap: irq: Avoid lockdep warnings with nested regmap-irq chips (Mark Langsdorf) [RHEL-109251]
  - regmap: irq: Free the regmap-irq mutex (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Rearrange suspend/resume error handling in the core (Mark Langsdorf) [RHEL-109251]
  - driver core: auxiliary bus: fix OF node leak (Mark Langsdorf) [RHEL-109251]
  - PM: runtime: Take active children into account in pm_runtime_get_if_in_use() (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Update power.completion for all devices on errors (Mark Langsdorf) [RHEL-109251]
  - regmap: get rid of redundant debugfs_file_{get,put}() (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Add strict_midlayer flag to struct dev_pm_info (Mark Langsdorf) [RHEL-109251]
  - PM: runtime: Introduce __rpm_get_driver_callback() (Mark Langsdorf) [RHEL-109251]
  - PM: Check power.needs_force_resume in pm_runtime_force_suspend() (Mark Langsdorf) [RHEL-109251]
  - PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit() (Mark Langsdorf) [RHEL-109251]
  - PM: Make pm_runtime_force_resume() work with DPM_FLAG_SMART_SUSPEND (Mark Langsdorf) [RHEL-109251]
  - PM: Move two sleep-related functions under CONFIG_PM_SLEEP (Mark Langsdorf) [RHEL-109251]
  - PM: Use true/false as power.needs_force_resume values (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Make async suspend handle suppliers like parents (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Make async resume handle consumers like children (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Drop superfluous might_sleep() calls (Mark Langsdorf) [RHEL-109251]
  - regmap: fix potential memory leak of regmap_bus (Mark Langsdorf) [RHEL-109251]
  - driver core: Add device_link_test() for testing device link flags (Mark Langsdorf) [RHEL-109251]
  - driver core: faux: Quiet probe failures (Mark Langsdorf) [RHEL-109251]
  - driver core: faux: Suppress bind attributes (Mark Langsdorf) [RHEL-109251]
  - regmap: kunit: Constify regmap_range_cfg array (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Add locking to dpm_async_resume_children() (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Fix power.is_suspended cleanup for direct-complete devices (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Fix list splicing in device suspend error paths (Mark Langsdorf) [RHEL-109251]
  - regmap-irq: Use dedicated interrupt wake setters (Mark Langsdorf) [RHEL-109251]
  - regmap: Move selecting for REGMAP_MDIO and REGMAP_IRQ (Mark Langsdorf) [RHEL-109251]
  - PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn() (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Introduce pm_sleep_transition_in_progress() (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Print PM debug messages during hibernation (Mark Langsdorf) [RHEL-109251]
  - PM: sysfs: Move debug runtime PM attributes to runtime_attrs[] (Mark Langsdorf) [RHEL-109251]
  - PM: wakeup: Add missing wakeup source attribute relax_count (Mark Langsdorf) [RHEL-109251]
  - firmware_loader: use SHA-256 library API instead of crypto_shash API (Mark Langsdorf) [RHEL-109251]
  - regcache: Use sort()'s default swap() implementation (Mark Langsdorf) [RHEL-109251]
  - PM: runtime: Add new devm functions (Mark Langsdorf) [RHEL-109251]
  - devres: Add devm_is_action_added() helper (Mark Langsdorf) [RHEL-109251]
  - devres: Move devm_*_action*() APIs to devres.h (Mark Langsdorf) [RHEL-109251]
  - devres: rename the first parameter of devm_add_action(_or_reset) (Mark Langsdorf) [RHEL-109251]
  - devres: Pass unique name of the resource to devm_add_action_or_reset() (Mark Langsdorf) [RHEL-109251]
  - PM: wakeup: Do not expose 4 device wakeup source APIs (Mark Langsdorf) [RHEL-109251]
  - driver core: auxiliary bus: Fix IS_ERR() vs NULL mixup in __devm_auxiliary_device_create() (Mark Langsdorf) [RHEL-109251]
  - property: Add functions to iterate named child (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Make suspend of devices more asynchronous (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Suspend async parents after suspending children (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Resume children after resuming the parent (Mark Langsdorf) [RHEL-109251]
  - software node: Correct a OOB check in software_node_get_reference_args() (Mark Langsdorf) [RHEL-109251]
  - drivers/base/memory: Avoid overhead from for_each_present_section_nr() (Mark Langsdorf) [RHEL-109251]
  - drivers/base: Extend documentation with preferred way to use auxbus (Mark Langsdorf) [RHEL-109251]
  - devres: simplify devm_kstrdup() using devm_kmemdup() (Mark Langsdorf) [RHEL-109251]
  - platform: replace magic number with macro PLATFORM_DEVID_NONE (Mark Langsdorf) [RHEL-109251]
  - component: do not try to unbind unbound components (Mark Langsdorf) [RHEL-109251]
  - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-109251]
  - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-109251]
  - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-109251]
  - driver core: auxiliary bus: add device creation helpers (Mark Langsdorf) [RHEL-109251]
  - driver core: faux: Add sysfs groups after probing (Mark Langsdorf) [RHEL-109251]
  - drivers/base/memory: improve add_boot_memory_block() (Mark Langsdorf) [RHEL-109251]
  - drivers/base/memory: simplify outputting of valid_zones_show() (Mark Langsdorf) [RHEL-109251]
  - arch_topology: Support SMT control for OF based system (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Fix handling devices with direct_complete set on errors (Mark Langsdorf) [RHEL-109251]
  - PM: clk: Remove unused pm_clk_remove() (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: core: Fix indentation in dpm_wait_for_children() (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Remove unused pm_generic_ wrappers (Mark Langsdorf) [RHEL-109251]
  - PM: runtime: Unify error handling during suspend and resume (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Rearrange dpm_async_fn() and async state clearing (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Rename power.async_in_progress to power.work_in_progress (Mark Langsdorf) [RHEL-109251]
  - PM: core: Tweak pm_runtime_block_if_disabled() return value (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Update power.smart_suspend under PM spinlock (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Adjust check before setting power.must_resume (Mark Langsdorf) [RHEL-109251]
  - PM: runtime: Drop status check from pm_runtime_force_resume() (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Suppress sleeping parent warning in special case (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Avoid unnecessary checks in device_prepare_smart_suspend() (Mark Langsdorf) [RHEL-109251]
  - driver core: Introduce device_{add,remove}_of_node() (Mark Langsdorf) [RHEL-109251]
  - driver core: faux: only create the device if probe() succeeds (Mark Langsdorf) [RHEL-109251]
  - drivers: base: component: add function to query the bound status (Mark Langsdorf) [RHEL-109251]
  - PM: clk: remove unused of_pm_clk_add_clk() (Mark Langsdorf) [RHEL-109251]
  - drivers: base: component: Add debug message for unbind (Mark Langsdorf) [RHEL-109251]
  - drivers: base: devres: Fix find_group() documentation (Mark Langsdorf) [RHEL-109251]
  - drivers: base: devres: Allow to release group on device release (Mark Langsdorf) [RHEL-109251]
  - devres: Introduce devm_kmemdup_array() (Mark Langsdorf) [RHEL-109251]
  - driver core: Split devres APIs to device/devres.h (Mark Langsdorf) [RHEL-109251]
  - driver core: location: Use str_yes_no() helper function (Mark Langsdorf) [RHEL-109251]
  - drivers: base: component: Allow more space for device name (Mark Langsdorf) [RHEL-109251]
  - drivers/base/bus.c: fix spelling of "subsystem" (Mark Langsdorf) [RHEL-109251]
  - driver core: class: Remove needless return in void API class_remove_file() (Mark Langsdorf) [RHEL-109251]
  - err.h: move IOMEM_ERR_PTR() to err.h (Mark Langsdorf) [RHEL-109251]
  - PM: runtime: Switch to use hrtimer_setup() (Mark Langsdorf) [RHEL-109251]
  - regmap: irq: Use one way of setting all bits in the register (Mark Langsdorf) [RHEL-109251]
  - devtmpfs: replace ->mount with ->get_tree in public instance (Mark Langsdorf) [RHEL-109251]
  - regmap: Reorder 'struct regmap' (Mark Langsdorf) [RHEL-109251]
  - spi: use container_of_cont() for to_spi_device() (Mark Langsdorf) [RHEL-81536]
  - cpumask: align text in comment (Mark Langsdorf) [RHEL-81536]
  - PM: runtime: Convert pm_runtime_blocked() to static inline (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Fix bit masking operation (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Use DPM_FLAG_SMART_SUSPEND conditionally (Mark Langsdorf) [RHEL-81536]
  - PM: runtime: Introduce pm_runtime_blocked() (Mark Langsdorf) [RHEL-81536]
  - PM: Block enabling of runtime PM during system suspend (Mark Langsdorf) [RHEL-81536]
  - PM: Rearrange documentation related to __pm_runtime_disable() (Mark Langsdorf) [RHEL-81536]
  - drivers: core: fix device leak in __fw_devlink_relax_cycles() (Mark Langsdorf) [RHEL-81536]
  - dio: Have dio_bus_match() callback take a const * (Mark Langsdorf) [RHEL-81536]
  - zorro: make match function take a const pointer (Mark Langsdorf) [RHEL-81536]
  - mfd: syscon: Use regmap max_register_is_0 as needed (Mark Langsdorf) [RHEL-81536]
  - driver core: add a faux bus for use when a simple device/bus is needed (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: core: Restrict power.set_active propagation (Mark Langsdorf) [RHEL-81536]
  - regmap-irq: Add missing kfree() (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: core: Synchronize runtime PM status of parents and children (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: wakeirq: Introduce device-managed variant of dev_pm_set_wake_irq() (Mark Langsdorf) [RHEL-81536]
  - devcoredump: Define 'struct bin_attribute' through macro (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Allow configuring the DPM watchdog to warn earlier than panic (Mark Langsdorf) [RHEL-81536]
  - device property: Split property reading bool and presence test ops (Mark Langsdorf) [RHEL-81536]
  - devres: add devm_remove_action_nowarn() (Mark Langsdorf) [RHEL-81536]
  - drivers: core: remove device_link argument from class_compat_[create|remove]_link (Mark Langsdorf) [RHEL-81536]
  - i2c: Remove I2C_COMPAT config symbol and related code (Mark Langsdorf) [RHEL-81536]
  - driver core: Move two simple APIs for finding child device to header (Mark Langsdorf) [RHEL-81536]
  - driver core: Introduce device_iter_t for device iterating APIs (Mark Langsdorf) [RHEL-81536]
  - driver core: Correct API device_for_each_child_reverse_from() prototype (Mark Langsdorf) [RHEL-81536]
  - driver core: Correct parameter check for API device_for_each_child_reverse_from() (Mark Langsdorf) [RHEL-81536]
  - driver core: Move true expression out of if condition in 3 device finding APIs (Mark Langsdorf) [RHEL-81536]
  - driver core: class: Fix wild pointer dereferences in API class_dev_iter_next() (Mark Langsdorf) [RHEL-81536]
  - devcoredump: cleanup some comments (Mark Langsdorf) [RHEL-81536]
  - driver core: Introduce an device matching API device_match_type() (Mark Langsdorf) [RHEL-81536]
  - driver core: Remove match_any() (Mark Langsdorf) [RHEL-81536]
  - driver core: Simplify API device_find_child_by_name() implementation (Mark Langsdorf) [RHEL-81536]
  - driver core: Constify API device_find_child() and adapt for various usages (Mark Langsdorf) [RHEL-81536]
  - driver core: have match() callback in struct bus_type take a const * (Mark Langsdorf) [RHEL-81536]
  - w1: Remove driver match function (Mark Langsdorf) [RHEL-81536]
  - kernel/range: Const-ify range_contains parameters (Mark Langsdorf) [RHEL-81536]
  - drivers: base: test: Add ...find_device_by...(... NULL) tests (Mark Langsdorf) [RHEL-81536]
  - drivers: base: test: Enable device model tests with KUNIT_ALL_TESTS (Mark Langsdorf) [RHEL-81536]
  - drivers: base: Don't match devices with NULL of_node/fwnode/etc (Mark Langsdorf) [RHEL-81536]
  - regmap: regmap_multi_reg_read(): make register list const (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: sysfs: don't include 'pm_wakeup.h' directly (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Update stale comment in device_resume() (Mark Langsdorf) [RHEL-81536]
  - regmap: cache: rbtree: use krealloc_array() to replace krealloc() (Mark Langsdorf) [RHEL-81536]
  - regmap: cache: mapple: use kmalloc_array() to replace kmalloc() (Mark Langsdorf) [RHEL-81536]
  - regmap: place foo / 8 and foo % 8 closer to each other (Mark Langsdorf) [RHEL-81536]
  - regmap: Use BITS_TO_BYTES() (Mark Langsdorf) [RHEL-81536]
  - regmap: cache: Use BITS_TO_BYTES() (Mark Langsdorf) [RHEL-81536]
  - regmap: detach regmap from dev on regmap_exit (Mark Langsdorf) [RHEL-81536]
  - regmap: Use correct format specifier for logging range errors (Mark Langsdorf) [RHEL-81536]
  - firmware_loader: Fix possible resource leak in fw_log_firmware_info() (Mark Langsdorf) [RHEL-81536]
  - drivers: core: fw_devlink: Fix excess parameter description in docstring (Mark Langsdorf) [RHEL-81536]
  - driver core: class: Correct WARN() message in APIs class_(for_each|find)_device() (Mark Langsdorf) [RHEL-81536]
  - cacheinfo: Use of_property_present() for non-boolean properties (Mark Langsdorf) [RHEL-81536]
  - drivers: core: fw_devlink: Make the error message a bit more useful (Mark Langsdorf) [RHEL-81536]
  - driver core: fw_devlink: Stop trying to optimize cycle detection logic (Mark Langsdorf) [RHEL-81536]
  - driver core: constify devlink class (Mark Langsdorf) [RHEL-81536]
  - driver core: Put device attribute @wakeup_last_time_ms and its show() together (Mark Langsdorf) [RHEL-81536]
  - cacheinfo: Don't opencode per_cpu_cacheinfo() (Mark Langsdorf) [RHEL-81536]
  - driver core: auxiliary bus: Spelling s/pecific/specific/ (Mark Langsdorf) [RHEL-81536]
  - regmap: irq: Set lockdep class for hierarchical IRQ domains (Mark Langsdorf) [RHEL-81536]
  - regmap: maple: Provide lockdep (sub)class for maple tree's internal lock (Mark Langsdorf) [RHEL-81536]
  - regmap: kunit: Fix repeated test param (Mark Langsdorf) [RHEL-81536]
  - Revert "driver core: Fix uevent_show() vs driver detach race" (Mark Langsdorf) [RHEL-81536]
  - drivers/base: Remove unused auxiliary_find_device (Mark Langsdorf) [RHEL-81536]
  - firmware_loader: Reorganize kerneldoc parameter names (Mark Langsdorf) [RHEL-81536]
  - PM: domains: Support required OPPs in dev_pm_domain_attach_list() (Mark Langsdorf) [RHEL-81536]
  - OPP: Rework _set_required_devs() to manage a single device per call (Mark Langsdorf) [RHEL-81536]
  - OPP: fix error code in dev_pm_opp_set_config() (Mark Langsdorf) [RHEL-81536]
  - PM: domains: Fix alloc/free in dev_pm_domain_attach|detach_list() (Mark Langsdorf) [RHEL-81536]
  - driver core: Add device probe log helper dev_warn_probe() (Mark Langsdorf) [RHEL-81536]
  - regmap: Specifically test writing 0 as a value to sparse caches (Mark Langsdorf) [RHEL-81536]
  - regmap-irq: Consistently use memset32() in regmap_irq_thread() (Mark Langsdorf) [RHEL-81536]
  - driver core: attribute_container: Remove unused functions (Mark Langsdorf) [RHEL-81536]
  - driver core: Trivially simplify ((struct device_private *)curr)->device->p to @curr (Mark Langsdorf) [RHEL-81536]
  - devres: Correclty strip percpu address space of devm_free_percpu() argument (Mark Langsdorf) [RHEL-81536]
  - driver core: Make parameter check consistent for API cluster device_(for_each|find)_child() (Mark Langsdorf) [RHEL-81536]
  - platform: Make platform_bus_type constant (Mark Langsdorf) [RHEL-81536]
  - driver core: class: Check namespace relevant parameters in class_register() (Mark Langsdorf) [RHEL-81536]
  - driver:base:core: Adding a "Return:" line in comment for device_link_add() (Mark Langsdorf) [RHEL-81536]
  - drivers/base: Introduce device_match_t for device finding APIs (Mark Langsdorf) [RHEL-81536]
  - firmware_loader: Block path traversal (Mark Langsdorf) [RHEL-81536]
  - regmap: kunit: Add coverage of spinlocked regmaps (Mark Langsdorf) [RHEL-81536]
  - regcache: use map->alloc_flags also for allocating cache (Mark Langsdorf) [RHEL-81536]
  - regmap: Use locking during kunit tests (Mark Langsdorf) [RHEL-81536]
  - regmap: Hold the regmap lock when allocating and freeing the cache (Mark Langsdorf) [RHEL-81536]
  - driver core: Use 2-argument strscpy() (Mark Langsdorf) [RHEL-81536]
  - driver core: Make use of returned value of dev_err_probe() (Mark Langsdorf) [RHEL-81536]
  - driver core: Use guards for simple mutex locks (Mark Langsdorf) [RHEL-81536]
  - driver core: Use kasprintf() instead of fixed buffer formatting (Mark Langsdorf) [RHEL-81536]
  - driver core: Sort headers (Mark Langsdorf) [RHEL-81536]
  - PM: domains: add device managed version of dev_pm_domain_attach|detach_list() (Mark Langsdorf) [RHEL-81536]
  - driver core: Fix a potential null-ptr-deref in module_add_driver() (Mark Langsdorf) [RHEL-81536]
  - driver core: bus: Add simple error handling for buses_init() (Mark Langsdorf) [RHEL-81536]
  - driver core: Remove unused parameter for virtual_device_parent() (Mark Langsdorf) [RHEL-81536]
  - driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute (Mark Langsdorf) [RHEL-81536]
  - driver core: Fix error handling in driver API device_rename() (Mark Langsdorf) [RHEL-81536]
  - driver core: Fix size calculation of symlink name for devlink_(add|remove)_symlinks() (Mark Langsdorf) [RHEL-81536]
  - drivers: cacheinfo: use __free attribute instead of of_node_put() (Mark Langsdorf) [RHEL-81536]
  - regmap: maple: work around gcc-14.1 false-positive warning (Mark Langsdorf) [RHEL-81536]
  - regmap: kunit: Add test cases for regmap_multi_reg_(read,write}() (Mark Langsdorf) [RHEL-81536]
  - regmap: Implement regmap_multi_reg_read() (Mark Langsdorf) [RHEL-81536]
  - driver core: module: make module_[add|remove]_driver take a const * (Mark Langsdorf) [RHEL-81536]
  - driver core: make driver_find_device() take a const * (Mark Langsdorf) [RHEL-81536]
  - driver core: make driver_[create|remove]_file take a const * (Mark Langsdorf) [RHEL-81536]
  - regmap-irq: handle const struct regmap_irq_sub_irq_map (Mark Langsdorf) [RHEL-81536]
  - devres: Correct code style for functions that return a pointer type (Mark Langsdorf) [RHEL-81536]
  - devres: Initialize an uninitialized struct member (Mark Langsdorf) [RHEL-81536]
  - devres: Fix devm_krealloc() wasting memory (Mark Langsdorf) [RHEL-81536]
  - cpumask: Add enabled cpumask for present CPUs that can be brought online (Mark Langsdorf) [RHEL-81536]
  - cpu: Do not warn on arch_register_cpu() returning -EPROBE_DEFER (Mark Langsdorf) [RHEL-81536]
  - regmap: add missing MODULE_DESCRIPTION() macros (Mark Langsdorf) [RHEL-81536]
  - driver core: make [device_]driver_attach take a const * (Mark Langsdorf) [RHEL-81536]
  - driver core: Make dev_err_probe() silent for -ENOMEM (Mark Langsdorf) [RHEL-81536]
  - drivers: arch_topology: use __free attribute instead of of_node_put() (Mark Langsdorf) [RHEL-81536]
  - drivers: arch_topology: Refactor do-while loops (Mark Langsdorf) [RHEL-81536]
  - regmap-i2c: add missing MODULE_DESCRIPTION() macro (Mark Langsdorf) [RHEL-81536]
  - regmap: kunit: Use array_size() and sizeof(*ptr) consistently (Mark Langsdorf) [RHEL-81536]
  - regmap: cache: Use correct type of the rb_for_each() parameter (Mark Langsdorf) [RHEL-81536]
  - regmap: spi: Fix potential off-by-one when calculating reserved size (Mark Langsdorf) [RHEL-81536]
  - driver core: remove devm_device_add_groups() (Mark Langsdorf) [RHEL-81536]
  - regmap: kunit: add missing MODULE_DESCRIPTION() (Mark Langsdorf) [RHEL-81536]
  - regmap: kunit: Fix memory leaks in gen_regmap() and gen_raw_regmap() (Mark Langsdorf) [RHEL-81536]
  - regmap-i2c: Subtract reg size from max_write (Mark Langsdorf) [RHEL-81536]
  - driver core: Add device_show_string() helper for sysfs attributes (Mark Langsdorf) [RHEL-81536]
  - module: don't ignore sysfs_create_link() failures (Mark Langsdorf) [RHEL-81536]
  - regmap: spi: Add missing MODULE_DESCRIPTION() (Mark Langsdorf) [RHEL-81536]
  - regmap: Drop capitalisation in MODULE_DESCRIPTION() (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Take advantage of %ps to simplify debug output (Mark Langsdorf) [RHEL-81536]
  - driver core: Remove unused platform_notify, platform_notify_remove (Mark Langsdorf) [RHEL-81536]
  - driver core: Introduce device_link_wait_removal() (Mark Langsdorf) [RHEL-81536]
  - regmap: maple: Remove second semicolon (Mark Langsdorf) [RHEL-81536]
  - device: core: Log warning for devices pending deferred probe on timeout (Mark Langsdorf) [RHEL-81536]
  - driver: core: Use dev_* instead of pr_* so device metadata is added (Mark Langsdorf) [RHEL-81536]
  - driver: core: Log probe failure as error and with device metadata (Mark Langsdorf) [RHEL-81536]
  - driver core: Add FWLINK_FLAG_IGNORE to completely ignore a fwnode link (Mark Langsdorf) [RHEL-81536]
  - driver core: Adds flags param to fwnode_link_add() (Mark Langsdorf) [RHEL-81536]
  - driver core: Move fw_devlink stuff to where it belongs (Mark Langsdorf) [RHEL-81536]
  - firmware_loader: Suppress warning on FW_OPT_NO_WARN flag (Mark Langsdorf) [RHEL-81536]
  - PM: runtime: add tracepoint for runtime_status changes (Mark Langsdorf) [RHEL-81536]
  - regmap: rework ->max_register handling (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Call dpm_async_fn() directly in each suspend phase (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Move devices to new lists earlier in each suspend phase (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Move some assignments from under a lock (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: stats: Log errors right after running suspend callbacks (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: stats: Call dpm_save_failed_step() at most once per phase (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: stats: Define suspend_stats next to the code using it (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: stats: Use an array of step failure counters (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: stats: Use array of suspend step names (Mark Langsdorf) [RHEL-81536]
  - driver core: component: fix spellos (Mark Langsdorf) [RHEL-81536]
  - driver core: cpu: make cpu_subsys const (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Relocate two device PM core functions (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Simplify dpm_suspended_list walk in dpm_resume() (Mark Langsdorf) [RHEL-81536]
  - PM: QoS: Use kcalloc() instead of kzalloc() (Mark Langsdorf) [RHEL-81536]
  - class: fix use-after-free in class_register() (Mark Langsdorf) [RHEL-81536]
  - driver core: class: fix Excess kernel-doc description warning (Mark Langsdorf) [RHEL-81536]
  - driver core: mark remaining local bus_type variables as const (Mark Langsdorf) [RHEL-81536]
  - driver core: container: make container_subsys const (Mark Langsdorf) [RHEL-81536]
  - PM: fix missing rculist.h dependency (Mark Langsdorf) [RHEL-81536]
  - regmap: fix kcalloc() arguments order (Mark Langsdorf) [RHEL-81536]
  - driver core: Better advertise dev_err_probe() (Mark Langsdorf) [RHEL-81536]
  - driver core: Emit reason for pending deferred probe (Mark Langsdorf) [RHEL-81536]
  - driver core: Enable fw_devlink=rpm by default (Mark Langsdorf) [RHEL-81536]
  - device property: fwnode_property_get_reference_args allows NULL args now (Mark Langsdorf) [RHEL-81536]
  - software node: Let args be NULL in software_node_get_reference_args (Mark Langsdorf) [RHEL-81536]
  - software node: Remove usage of the deprecated ida_simple_xx() API (Mark Langsdorf) [RHEL-81536]
  - base: soc: Remove usage of the deprecated ida_simple_xx() API (Mark Langsdorf) [RHEL-81536]
  - drivers: base: Print a warning instead of panic() when register_cpu() fails (Mark Langsdorf) [RHEL-81536]
  - drivers: base: add arch_cpu_is_hotpluggable() (Mark Langsdorf) [RHEL-81536]
  - device property: Add fwnode_name_eq() (Mark Langsdorf) [RHEL-81536]
  - driver core: make device_is_dependent() static (Mark Langsdorf) [RHEL-81536]
  - devcoredump: Send uevent once devcd is ready (Mark Langsdorf) [RHEL-81536]
  - firmware_loader: Expand Firmware upload error codes with firmware invalid error (Mark Langsdorf) [RHEL-81536]
  - regmap: fix regmap_noinc_write() description (Mark Langsdorf) [RHEL-81536]
  - firmware_loader: Abort all upcoming firmware load request once reboot triggered (Mark Langsdorf) [RHEL-81536]
  - firmware_loader: Refactor kill_pending_fw_fallback_reqs() (Mark Langsdorf) [RHEL-81536]
  - driver core: Release all resources during unbind before updating device links (Mark Langsdorf) [RHEL-81536]
  - driver core: class: remove boilerplate code (Mark Langsdorf) [RHEL-81536]
  - dev_printk: add new dev_err_probe() helpers (Mark Langsdorf) [RHEL-109251]
  - driver core: Move dev_err_probe() to where it belogs (Mark Langsdorf) [RHEL-109251]
  - sysfs: Introduce DEFINE_SIMPLE_SYSFS_GROUP_VISIBLE() (Mark Langsdorf) [RHEL-81536]
  - sysfs: Document new "group visible" helpers (Mark Langsdorf) [RHEL-81536]
  - soundwire: sysfs: have the driver core handle the creation of the device groups (Mark Langsdorf) [RHEL-81536]
  - soundwire: sysfs: cleanup the logic for creating the dp0 sysfs attributes (Mark Langsdorf) [RHEL-81536]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-654.el9]
changelog:
  - x86/cpu: Rename and move CPU model entry for Diamond Rapids (David Arcari) [RHEL-129861]
  - x86/CPU/AMD: Prevent reset reasons from being retained across reboot (CKI Backport Bot) [RHEL-129867]
  - selftests/bpf: Clobber a lot of registers in tailcall_bpf2bpf_hierarchy tests (Gregory Bell) [RHEL-102718]
  - s390/bpf: Write back tail call counter for BPF_TRAMP_F_CALL_ORIG (Gregory Bell) [RHEL-102718]
  - s390/bpf: Write back tail call counter for BPF_PSEUDO_CALL (Gregory Bell) [RHEL-102718]
  - s390/bpf: Do not write tail call counter into helper and kfunc frames (Gregory Bell) [RHEL-102718]
  - s390/bpf: Describe the frame using a struct instead of constants (Gregory Bell) [RHEL-102718]
  - s390/bpf: Centralize frame offset calculations (Gregory Bell) [RHEL-102718]
  - s390/bpf: Use kernel's expoline thunks (Gregory Bell) [RHEL-102718]
  - s390/bpf: Add macros for calling external functions (Gregory Bell) [RHEL-102718]
  - bnxt_en: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Shruti Parab) [RHEL-108695]
  - bnxt_en: correct offset handling for IPv6 destination address (Shruti Parab) [RHEL-108695]
  - bnxt_en: Implement ethtool .set_tunable() for ETHTOOL_PFC_PREVENTION_TOUT (Shruti Parab) [RHEL-108695]
  - bnxt_en: Implement ethtool .get_tunable() for ETHTOOL_PFC_PREVENTION_TOUT (Shruti Parab) [RHEL-108695]
  - bnxt_en: Use VLAN_ETH_HLEN when possible (Shruti Parab) [RHEL-108695]
  - bnxt_en: Support for RoCE resources dynamically shared within VFs. (Shruti Parab) [RHEL-108695]
  - bnxt_en: Add err_qpc backing store handling (Shruti Parab) [RHEL-108695]
  - bnxt_en: hsi: Update FW interface to 1.10.3.133 (Shruti Parab) [RHEL-108695]
  - bnxt_en: Add fw log trace support for 5731X/5741X chips (Shruti Parab) [RHEL-108695]
  - bnxt_en: Improve bnxt_backing_store_cfg_v2() (Shruti Parab) [RHEL-108695]
  - bnxt_en: Optimize bnxt_sriov_disable() (Shruti Parab) [RHEL-108695]
  - bnxt_en: Remove unnecessary VF check in bnxt_hwrm_nvm_req() (Shruti Parab) [RHEL-108695]
  - bnxt_en: Drop redundant if block in bnxt_dl_flash_update() (Shruti Parab) [RHEL-108695]
  - bnxt_en: fix incorrect page count in RX aggr ring log (Shruti Parab) [RHEL-108695]
  - bnxt_en: Fix stats context reservation logic (Shruti Parab) [RHEL-108695]
  - bnxt_en: Adjust TX rings if reservation is less than requested (Shruti Parab) [RHEL-108695]
  - bnxt_en: Fix memory corruption when FW resources change during ifdown (Shruti Parab) [RHEL-108695]
  - bnxt_en: Add Hyper-V VF ID (Shruti Parab) [RHEL-108695]
  - bnxt_en: Add pcie_ctx_v2 support for ethtool -d (Shruti Parab) [RHEL-108695]
  - bnxt_en: Add pcie_stat_len to struct bp (Shruti Parab) [RHEL-108695]
  - bnxt_en: Refactor bnxt_get_regs() (Shruti Parab) [RHEL-108695]
  - bnxt: move bnxt_hsi.h to include/linux/bnxt/hsi.h (Shruti Parab) [RHEL-108695]
  - bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT (Shruti Parab) [RHEL-108695]
  - bnxt_en: Fix DCB ETS validation (Shruti Parab) [RHEL-108695]
  - bnxt_en: eliminate the compile warning in bnxt_request_irq due to CONFIG_RFS_ACCEL (Shruti Parab) [RHEL-108695]
  - bnxt: properly flush XDP redirect lists (Shruti Parab) [RHEL-108695]
  - bnxt_en: Improve comment wording and error return code (Shruti Parab) [RHEL-108695]
  - bnxt_en: Update MRU and RSS table of RSS contexts on queue reset (Shruti Parab) [RHEL-108695]
  - bnxt_en: Add a helper function to configure MRU and RSS (Shruti Parab) [RHEL-108695]
  - bnxt_en: Fix double invocation of bnxt_ulp_stop()/bnxt_ulp_start() (Shruti Parab) [RHEL-108695]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-655.el9]
changelog:
  - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137148] {CVE-2025-68287}
  - cpufreq/amd-pstate: Fix a regression leading to EPP 0 after hibernate (David Arcari) [RHEL-129866]
  - cpufreq/amd-pstate: Fix a regression leading to EPP 0 after resume (David Arcari) [RHEL-129866]
  - cpufreq/amd-pstate: Fix setting of CPPC.min_perf in active mode for performance governor (David Arcari) [RHEL-129866]
  - KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134723]
  - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-120685]
  - tick/sched: Limit non-timekeeper CPUs calling jiffies update (Phil Auld) [RHEL-132755]
  - PCI/ACPI: Fix pci_acpi_preserve_config() memory leak (Thilak KN) [RHEL-73305]
  - be2net: pass wrb_params in case of OS2BMC (Mohammad Heib) [RHEL-101842 RHEL-96554 RHEL-97699]
  - be2net: Use correct byte order and format string for TCP seq and ack_seq (Mohammad Heib) [RHEL-101842 RHEL-96554 RHEL-97699]
  - proc: block mounting on top of /proc/<pid>/fdinfo/* (Waiman Long) [RHEL-128728]
  - proc: block mounting on top of /proc/<pid>/fd/* (Waiman Long) [RHEL-128728]
  - proc: block mounting on top of /proc/<pid>/map_files/* (Waiman Long) [RHEL-128728]
  - proc: add proc_splice_unmountable() (Waiman Long) [RHEL-128728]
  - proc: proc_readfdinfo() -> proc_fdinfo_iterate() (Waiman Long) [RHEL-128728]
  - proc: proc_readfd() -> proc_fd_iterate() (Waiman Long) [RHEL-128728]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-656.el9]
changelog:
  - block: don't freeze queue for updating queue limits (Ming Lei) [RHEL-134978]
  - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID (David Arcari) [RHEL-129399]
  - x86/resctrl: Implement resctrl_arch_reset_cntr() and resctrl_arch_cntr_read() (David Arcari) [RHEL-129399]
  - fs/resctrl: Introduce counter ID read, reset calls in mbm_event mode (David Arcari) [RHEL-129399]
  - x86/resctrl: Refactor resctrl_arch_rmid_read() (David Arcari) [RHEL-129399]
  - scsi: lpfc: Update lpfc version to 14.4.0.12 (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Add capability to register Platform Name ID to fabric (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Allow support for BB credit recovery in point-to-point topology (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Modify kref handling for Fabric Controller ndlps (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Ensure unregistration of rpis for received PLOGIs (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb() (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Revise discovery related function headers and comments (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Update various NPIV diagnostic log messaging (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Copyright updates for 14.4.0.11 patches (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Update lpfc version to 14.4.0.11 (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Clean up extraneous phba dentries (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Use switch case statements in DIF debugfs handlers (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Define size of debugfs entry for xri rebalancing (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Use int type to store negative error codes (Paul Ely) [RHEL-127902]
  - scsi: lpfc: use min() to improve code (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Fix wrong function reference in a comment (Paul Ely) [RHEL-127902]
  - lpfc: don't use file->f_path.dentry for comparisons (Paul Ely) [RHEL-127902]
  - nvmet-auth: update sc_c in target host hash calculation (Chris Leech) [RHEL-127047]
  - nvmet-auth: update sc_c in host response (Chris Leech) [RHEL-127047]
  - nvme/tcp: handle tls partially sent records in write_space() (Chris Leech) [RHEL-127047]
  - nvme-auth: update sc_c in host response (Chris Leech) [RHEL-127047]
  - nvme-auth: use hkdf_expand_label() (Chris Leech) [RHEL-127047]
  - nvme-auth: add hkdf_expand_label() (Chris Leech) [RHEL-127047]
  - nvme-tcp: send only permitted commands for secure concat (Chris Leech) [RHEL-127047]
  - nvme-auth: update bi_directional flag (Chris Leech) [RHEL-127047]
  - nvme-auth: remove unneeded semicolon (Chris Leech) [RHEL-127047]
  - nvme-tcp: log TLS handshake failures at error level (Chris Leech) [RHEL-127047]
  - nvme-tcp: fix signedness bug in nvme_tcp_init_connection() (Chris Leech) [RHEL-127047]
  - nvme-tcp: fix connect failure on receiving partial ICResp PDU (Chris Leech) [RHEL-127047]
  - fbcon: Fix OOB access in font allocation (Jocelyn Falempe) [RHEL-107476]
  - fbcon: fix integer overflow in fbcon_do_set_font (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (Jocelyn Falempe) [RHEL-107476]
  - fbcon: Use 'bool' where appopriate (Jocelyn Falempe) [RHEL-107476]
  - fbcon: Introduce get_{fg,bg}_color() (Jocelyn Falempe) [RHEL-107476]
  - fbcon: fbcon_is_inactive() -> fbcon_is_active() (Jocelyn Falempe) [RHEL-107476]
  - fbcon: fbcon_cursor_noblink -> fbcon_cursor_blink (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Fix typo in Kconfig text for FB_DEVICE (Jocelyn Falempe) [RHEL-107476]
  - fbdev: svgalib: Clean up coding style (Jocelyn Falempe) [RHEL-107476]
  - fbdev: fix potential buffer overflow in do_register_framebuffer() (Jocelyn Falempe) [RHEL-107476]
  - fbcon: Fix outdated registered_fb reference in comment (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Include <linux/export.h> (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Remove trailing whitespaces (Jocelyn Falempe) [RHEL-107476]
  - video: screen_info: Relocate framebuffers behind PCI bridges (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var (Jocelyn Falempe) [RHEL-107476]
  - fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() (Jocelyn Falempe) [RHEL-107476]
  - fbcon: Make sure modelist not set on unregistered console (Jocelyn Falempe) [RHEL-107476]
  - dummycon: Trigger redraw when switching consoles with deferred takeover (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Send old blank state in FB_EVENT_BLANK (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Track display blanking state (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Rework fb_blank() (Jocelyn Falempe) [RHEL-107476]
  - fbcon: Use static attribute groups for sysfs entries (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Refactoring the fbcon packed pixel drawing routines (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Register sysfs groups through device_add_group (Jocelyn Falempe) [RHEL-107476]
  - mdacon: rework dependency list (Jocelyn Falempe) [RHEL-107476]
  - dummycon: fix default rows/cols (Jocelyn Falempe) [RHEL-107476]
  - dummycon: only build module if there are users (Jocelyn Falempe) [RHEL-107476]
  - fbcon: Use correct erase colour for clearing in fbcon (Jocelyn Falempe) [RHEL-107476]
  - fbdev: core: tileblit: Implement missing margin clearing for tileblit (Jocelyn Falempe) [RHEL-107476]
  - genirq/irqdesc: Prevent use-after-free in irq_find_at_or_after() (Aristeu Rozanski) [RHEL-114221]
  - genirq: Initialize resend_node hlist for all interrupt descriptors (Aristeu Rozanski) [RHEL-114221]
  - xen/events: avoid using info_for_irq() in xen_send_IPI_one() (Aristeu Rozanski) [RHEL-114221]
  - genirq: Fix software resend lockup and nested resend (Aristeu Rozanski) [RHEL-114221]
  - genirq: Use a maple tree for interrupt descriptor management (Aristeu Rozanski) [RHEL-114221]
  - genirq: Encapsulate sparse bitmap handling (Aristeu Rozanski) [RHEL-114221]
  - genirq: Use hlist for managing resend handlers (Aristeu Rozanski) [RHEL-114221]
  - Revert "arm64-64k: Increase max NR_IRQS from 64+8192 to 2^^19" (Aristeu Rozanski) [RHEL-114221]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-657.el9]
changelog:
  - powerpc/kexec: Enable SMT before waking offline CPUs (Mamatha Inamdar) [RHEL-137134]
  - dpll: zl3073x: Allow to configure phase offset averaging factor (CKI Backport Bot) [RHEL-118666]
  - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134429] {CVE-2025-40277}
  - PM: hibernate: shrink shmem pages after dev_pm_ops.prepare() (José Expósito) [RHEL-120786]
  - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (David Thompson) [RHEL-103900]
  - mlxbf-bootctl: Support sysfs entries for RTC battery status (David Thompson) [RHEL-103900]
  - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (David Thompson) [RHEL-103900]
  - gpio: mlxbf3: use platform_get_irq_optional() (David Thompson) [RHEL-103874]
  - gpio: mlxbf3: Support shutdown() function (David Thompson) [RHEL-103874]
  - pinctrl: mlxbf3: Fix return value check for devm_platform_ioremap_resource (David Thompson) [RHEL-104059]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-658.el9]
changelog:
  - powerpc/64s/slb: Fix SLB multihit issue during SLB preload (Mamatha Inamdar) [RHEL-104980]
  - KVM: arm64: Guard PMSCR_EL1 initialization with SPE presence check (Cornelia Huck) [RHEL-131243]
  - KVM: arm64: nv: Don't advance PC when pending an SVE exception (Cornelia Huck) [RHEL-131243]
  - KVM: arm64: Don't access ICC_SRE_EL2 if GICv3 doesn't support v2 compatibility (Cornelia Huck) [RHEL-131243]
  - KVM: arm64: Fix kvm_vcpu_{set,is}_be() to deal with EL2 state (Cornelia Huck) [RHEL-131243]
  - rtla/timerlat_bpf: Stop tracing on user latency (Tomas Glozar) [RHEL-125445]
  - cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() (David Arcari) [RHEL-129862]
  - dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-129505]
  - dlm: check for undefined release_option values (Alexander Aring) [RHEL-127940]
  - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-127940]
  - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-127940]
  - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-127940]
  - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-127940]
  - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-127940]
  - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-127940]
  - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-127940]
  - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-127940]
  - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-127940] {CVE-2025-23131}
  - bits: introduce fixed-type BIT_U*() (José Expósito) [RHEL-125803]
  - bits: introduce fixed-type GENMASK_U*() (José Expósito) [RHEL-125803]
  - bits: add comments and newlines to #if, #else and #endif directives (José Expósito) [RHEL-125803]
  - linux/bits.h: simplify GENMASK_INPUT_CHECK() (José Expósito) [RHEL-125803]
  - compiler.h: add const_true() (José Expósito) [RHEL-125803]
  - iopoll: Generalize read_poll_timeout() into poll_timeout_us() (José Expósito) [RHEL-125803]
  - PM: hibernate: Fix pm_hibernation_mode_is_suspend() build breakage (José Expósito) [RHEL-125803]
  - PM: hibernate: Add pm_hibernation_mode_is_suspend() (José Expósito) [RHEL-125803]
  - overflow: add range_overflows() and range_end_overflows() (José Expósito) [RHEL-125803]
  - list: add list_last_entry_or_null() (José Expósito) [RHEL-125803]
  - redhat: Temporary stop adding 'kernel' component to SBAT (Li Tian) [RHEL-124584]
  - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Li Tian) [RHEL-124584]
  - redhat: Add SBAT information to Linux kernel (Li Tian) [RHEL-124584]
  - x86/efi: Implement support for embedding SBAT data for x86 (Li Tian) [RHEL-124584]
  - efi: Fix .data section size calculations when .sbat is present (Li Tian) [RHEL-124584]
  - efi: Drop preprocessor directives from zboot.lds (Li Tian) [RHEL-124584]
  - efi: zboot specific mechanism for embedding SBAT section (Li Tian) [RHEL-124584]
  - mlxbf_gige: return EPROBE_DEFER if PHY IRQ is not available (David Thompson) [RHEL-104015]
  - mlxbf_gige: emit messages during open and probe failures (David Thompson) [RHEL-104015]
  - mlxbf_gige: disable RX filters until RX path initialized (David Thompson) [RHEL-104015]
  - mlxbf_gige: add support to display pause frame counters (David Thompson) [RHEL-104015]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-659.el9]
changelog:
  - mm: hugetlb: avoid soft lockup when mprotect to large memory area (Luiz Capitulino) [RHEL-139899]
  - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139488] {CVE-2025-68301}
  - block: fix race between wbt_enable_default and IO submission (Ming Lei) [RHEL-137734]
  - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137401] {CVE-2025-68285}
  - block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock (Ming Lei) [RHEL-136168]
  - net: mana: Handle hardware recovery events when probing the device (Maxim Levitsky) [RHEL-132184]
  - net: mana: Drop TX skb on post_work_request failure and unmap resources (Maxim Levitsky) [RHEL-132184]
  - net: mana: Handle SKB if TX SGEs exceed hardware limit (Maxim Levitsky) [RHEL-132184]
  - net: mana: Add standard counter rx_missed_errors (Maxim Levitsky) [RHEL-132184]
  - net: mana: Move hardware counter stats from per-port to per-VF context (Maxim Levitsky) [RHEL-132184]
  - net: mana: Support HW link state events (Maxim Levitsky) [RHEL-132184]
  - RDMA/mana_ib: Extend modify QP (Maxim Levitsky) [RHEL-132184]
  - net: mana: Reduce waiting time if HWC not responding (Maxim Levitsky) [RHEL-132184]
  - net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Maxim Levitsky) [RHEL-132184]
  - RDMA/mana_ib: Drain send wrs of GSI QP (Maxim Levitsky) [RHEL-132184]
  - net: hv_netvsc: fix loss of early receive events from host during channel open. (Maxim Levitsky) [RHEL-132184]
  - rv: Update RHEL kconfigs for 6.17 upstream code (Gabriele Monaco) [RHEL-114755]
  - redhat/configs: Move CONFIG_RV_PER_TASK_MONITORS to common/generic (Gabriele Monaco) [RHEL-114755]
  - New configs in kernel/trace (Gabriele Monaco) [RHEL-114755]
  - rv: Make rtapp/pagefault monitor depends on CONFIG_MMU (Gabriele Monaco) [RHEL-114755]
  - rv: Fully convert enabled_monitors to use list_head as iterator (Gabriele Monaco) [RHEL-114755]
  - rv: Fix missing mutex unlock in rv_register_monitor() (Gabriele Monaco) [RHEL-114755]
  - include/linux/rv.h: remove redundant include file (Gabriele Monaco) [RHEL-114755]
  - rv: Fix wrong type cast in enabled_monitors_next() (Gabriele Monaco) [RHEL-114755]
  - rv: Support systems with time64-only syscalls (Gabriele Monaco) [RHEL-114755]
  - Documentation/rv: Fix minor typo in monitor_synthesis page (Gabriele Monaco) [RHEL-114755]
  - rv: Add opid per-cpu monitor (Gabriele Monaco) [RHEL-114755]
  - rv: Add nrp and sssw per-task monitors (Gabriele Monaco) [RHEL-114755]
  - rv: Replace tss and sncid monitors with more complete sts (Gabriele Monaco) [RHEL-114755]
  - sched: Adapt sched tracepoints for RV task model (Gabriele Monaco) [RHEL-114755]
  - rv: Retry when da monitor detects race conditions (Gabriele Monaco) [RHEL-114755]
  - rv: Adjust monitor dependencies (Gabriele Monaco) [RHEL-114755]
  - rv: Use strings in da monitors tracepoints (Gabriele Monaco) [RHEL-114755]
  - rv: Remove trailing whitespace from tracepoint string (Gabriele Monaco) [RHEL-114755]
  - rv: Add da_handle_start_run_event_ to per-task monitors (Gabriele Monaco) [RHEL-114755]
  - rv: Fix wrong type cast in reactors_show() and monitor_reactor_show() (Gabriele Monaco) [RHEL-114755]
  - rv: Fix wrong type cast in monitors_show() (Gabriele Monaco) [RHEL-114755]
  - rv: Remove struct rv_monitor::reacting (Gabriele Monaco) [RHEL-114755]
  - rv: Remove rv_reactor's reference counter (Gabriele Monaco) [RHEL-114755]
  - rv: Merge struct rv_reactor_def into struct rv_reactor (Gabriele Monaco) [RHEL-114755]
  - rv: Merge struct rv_monitor_def into struct rv_monitor (Gabriele Monaco) [RHEL-114755]
  - rv: Remove unused field in struct rv_monitor_def (Gabriele Monaco) [RHEL-114755]
  - rv: Return init error when registering monitors (Gabriele Monaco) [RHEL-114755]
  - verification/rvgen: Organise Kconfig entries for nested monitors (Gabriele Monaco) [RHEL-114755]
  - tools/dot2c: Fix generated files going over 100 column limit (Gabriele Monaco) [RHEL-114755]
  - tools/rv: Stop gracefully also on SIGTERM (Gabriele Monaco) [RHEL-114755]
  - tools/rv: Do not skip idle in trace (Gabriele Monaco) [RHEL-114755]
  - verification/rvgen: Do not generate unused variables (Gabriele Monaco) [RHEL-114755]
  - verification/rvgen: Generate each variable definition only once (Gabriele Monaco) [RHEL-114755]
  - rv/ltl: Do not execute the Buchi automaton twice on start condition (Gabriele Monaco) [RHEL-114755]
  - verification/rvgen: Support the 'next' operator (Gabriele Monaco) [RHEL-114755]
  - panic: Fix up description of vpanic() (Gabriele Monaco) [RHEL-114755]
  - Documentation/rv: Add documentation for linear temporal logic monitors (Gabriele Monaco) [RHEL-114755]
  - verification/rvgen: Add support for linear temporal logic (Gabriele Monaco) [RHEL-114755]
  - verification/rvgen: Restructure the classes to prepare for LTL inclusion (Gabriele Monaco) [RHEL-114755]
  - verification/rvgen: Restructure the templates files (Gabriele Monaco) [RHEL-114755]
  - Documentation/rv: Prepare monitor synthesis document for LTL inclusion (Gabriele Monaco) [RHEL-114755]
  - verification/dot2k: Prepare the frontend for LTL inclusion (Gabriele Monaco) [RHEL-114755]
  - verification/dot2k: Replace is_container() hack with subparsers (Gabriele Monaco) [RHEL-114755]
  - verification/dot2k: Remove __buff_to_string() (Gabriele Monaco) [RHEL-114755]
  - verification/dot2k: Make a separate dot2k_templates/Kconfig_container (Gabriele Monaco) [RHEL-114755]
  - tracing: Remove pointless memory barriers (Gabriele Monaco) [RHEL-114755]
  - rv: Allow to configure the number of per-task monitor (Gabriele Monaco) [RHEL-114755]
  - rv: Add documentation for rtapp monitor (Gabriele Monaco) [RHEL-114755]
  - rv: Add rtapp_sleep monitor (Gabriele Monaco) [RHEL-114755]
  - rv: Add rtapp_pagefault monitor (Gabriele Monaco) [RHEL-114755]
  - riscv: mm: Add page fault trace points (Gabriele Monaco) [RHEL-114755]
  - x86/tracing, x86/mm: Move page fault tracepoints to generic (Gabriele Monaco) [RHEL-114755]
  - x86/tracing, x86/mm: Remove redundant trace_pagefault_key (Gabriele Monaco) [RHEL-114755]
  - rv: Add rtapp container monitor (Gabriele Monaco) [RHEL-114755]
  - rv: Add support for LTL monitors (Gabriele Monaco) [RHEL-114755]
  - rv: rename CONFIG_DA_MON_EVENTS to CONFIG_RV_MON_EVENTS (Gabriele Monaco) [RHEL-114755]
  - rv: Let the reactors take care of buffers (Gabriele Monaco) [RHEL-114755]
  - panic: Add vpanic() (Gabriele Monaco) [RHEL-114755]
  - kernel/panic.c: format kernel-doc comments (Gabriele Monaco) [RHEL-114755]
  - printk: Make vprintk_deferred() public (Gabriele Monaco) [RHEL-114755]
  - rv: Add #undef TRACE_INCLUDE_FILE (Gabriele Monaco) [RHEL-114755]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-660.el9]
changelog:
  - bpf, arm64: Do not audit capability check in do_jit() (CKI Backport Bot) [RHEL-126125]
  - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139285] {CVE-2025-40248}
  - x86/sev: Guard sev_evict_cache() with CONFIG_AMD_MEM_ENCRYPT (Paolo Bonzini) [RHEL-32892]
  - x86/sev: Evict cache lines during SNP memory validation (Paolo Bonzini) [RHEL-32892]
  - HID: intel-ish-hid: Fix -Wcast-function-type-strict in devm_ishtp_alloc_workqueue() (Tony Camuso) [RHEL-136560]
  - HID: intel-ish-hid: ipc: Separate hibernate callbacks in dev_pm_ops (Tony Camuso) [RHEL-136560]
  - HID: intel-ish-hid: Use IPC RESET instead of void message in ish_wakeup() (Tony Camuso) [RHEL-136560]
  - HID: intel-ish-hid: ipc: Always schedule FW reset work on RESET_NOTIFY/ACK (Tony Camuso) [RHEL-136560]
  - HID: intel-ish-ipc: Reset clients state on resume from D3 (Tony Camuso) [RHEL-136560]
  - HID: intel-ishtp-hid: Clear suspended flag only after connected on resume (Tony Camuso) [RHEL-136560]
  - HID: intel-ish-hid: Add ishtp_get_connection_state() interface (Tony Camuso) [RHEL-136560]
  - HID: intel-ish-hid: Use dedicated unbound workqueues to prevent resume blocking (Tony Camuso) [RHEL-136560]
  - HID: intel-ish-ipc: Remove redundant ready check after timeout function (Tony Camuso) [RHEL-136560]
  - HID: intel-ish-hid: Increase ISHTP resume ack timeout to 300ms (Tony Camuso) [RHEL-136560]
  - HID: intel-ish-hid: ipc: Add Wildcat Lake PCI device ID (Tony Camuso) [RHEL-136560]
  - hid: intel-ish-hid: Use PCI_DEVICE_DATA() macro for ISH device table (Tony Camuso) [RHEL-136560]
  - cifs: Fix deadlock in cifs_writepages during reconnect (Paulo Alcantara) [RHEL-132486]
  - irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131972] {CVE-2025-37819}
  - time/timecounter: Fix the lie that struct cyclecounter is const (Ivan Vecera) [RHEL-127559]
  - Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128894] {CVE-2025-40141}
  - ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128470] {CVE-2025-40185}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-661.el9]
changelog:
  - iavf: avoid deadlock by cancelling work without netdev lock in remove path (Mohammad Heib) [RHEL-130117]
  - tools/power turbostat: Validate APERF access for VMWARE (David Arcari) [RHEL-127044]
  - workqueue: Initialize wq_isolated_cpumask in workqueue_init_early() (Waiman Long) [RHEL-120441]
  - workqueue: add printf attribute to __alloc_workqueue() (Waiman Long) [RHEL-120441]
  - workqueue: Increase worker desc's length to 32 (Waiman Long) [RHEL-120441]
  - workqueue: Refactor worker ID formatting and make wq_worker_comm() use full ID string (Waiman Long) [RHEL-120441]
  - Revert "Drivers: hv: Add CONFIG_HYPERV_VMBUS option" (José Expósito) [RHEL-125801]
  - Reapply "drm/amdgpu: fix incorrect vm flags to map bo" (José Expósito) [RHEL-125801]
  - Reapply "drm/i915: Convert REG_GENMASK*() to fixed-width GENMASK_U*()" (José Expósito) [RHEL-125801]
  - drm/amd/display: Do not use CC_FLAGS_FPU/CC_FLAGS_NO_FPU (José Expósito) [RHEL-125801]
  - dma-buf: dma-heap: Do not use string literal in EXPORT_SYMBOL_NS_GPL (José Expósito) [RHEL-125801]
  - Revert "drm/sysfb: Find screen_info format with helpers" (José Expósito) [RHEL-125801]
  - Revert "change the calling conventions for vfs_parse_fs_string()" (José Expósito) [RHEL-125801]
  - drm/pagemap: Add missing parameter to vma_alloc_folio() (José Expósito) [RHEL-125801]
  - drm: Use previous includes (José Expósito) [RHEL-125801]
  - Revert "mm: make folio page count functions return unsigned" (José Expósito) [RHEL-125801]
  - redhat/configs: Add new configs from DRM 6.18 backport (José Expósito) [RHEL-125801]
  - Merge DRM changes from upstream v6.18-rc7..v6.18 (José Expósito) [RHEL-125801]
  - Merge DRM changes from upstream v6.18-rc6..v6.18-rc7 (José Expósito) [RHEL-125801]
  - Merge DRM changes from upstream v6.18-rc5..v6.18-rc6 (José Expósito) [RHEL-125801]
  - Merge DRM changes from upstream v6.18-rc4..v6.18-rc5 (José Expósito) [RHEL-125801]
  - Merge DRM changes from upstream v6.17..v6.18-rc4 (José Expósito) [RHEL-125801]
  - efi/x86: Memory protection on EfiGcdMemoryTypeMoreReliable (Lenny Szubowicz) [RHEL-95228]
  - mmc: dw_mmc: add exynos7870 DW MMC support (Steve Dunnagan) [RHEL-104061]
  - mmc: dw_mmc-bluefield: Add support for eMMC HW reset (Steve Dunnagan) [RHEL-104061]
  - mmc: dw_mmc: Use devm_mmc_alloc_host() helper (Steve Dunnagan) [RHEL-104061]
  - mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves (Steve Dunnagan) [RHEL-104061]
  - mmc: host: Fix typos in comments across various files (Steve Dunnagan) [RHEL-104061]
  - mmc: dw_mmc: allow biu and ciu clocks to defer (Steve Dunnagan) [RHEL-104061]
  - mmc: dw_mmc: Add support for platform specific eMMC HW reset (Steve Dunnagan) [RHEL-104061]
  - mmc: Convert from tasklet to BH workqueue (Steve Dunnagan) [RHEL-104061]
  - mmc: dw_mmc: Remove unused of_gpio.h (Steve Dunnagan) [RHEL-104061]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-662.el9]
changelog:
  - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139463] {CVE-2025-68305}
  - Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6 (Guillaume Nault) [RHEL-138491]
  - net: ethtool: update set_rxfh_indir to use ethtool_get_rx_ring_count helper (Ivan Vecera) [RHEL-132646]
  - net: ethtool: update set_rxfh to use ethtool_get_rx_ring_count helper (Ivan Vecera) [RHEL-132646]
  - net: ethtool: add get_rx_ring_count callback to optimize RX ring queries (Ivan Vecera) [RHEL-132646]
  - net: ethtool: remove the duplicated handling from ethtool_get_rxrings (Ivan Vecera) [RHEL-132646]
  - net: ethtool: add support for ETHTOOL_GRXRINGS ioctl (Ivan Vecera) [RHEL-132646]
  - net: ethtool: pass the num of RX rings directly to ethtool_copy_validate_indir (Ivan Vecera) [RHEL-132646]
  - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy (Adrian Moreno) [RHEL-137482]
  - powercap: intel_rapl: Add support for Wildcat Lake platform (CKI Backport Bot) [RHEL-95625]
  - Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136967] {CVE-2025-40294}
  - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136823] {CVE-2025-38568}
  - net/handshake: Fix memory leak in tls_handshake_accept() (Olga Kornievskaia) [RHEL-134735]
  - NFSv4: Fix an incorrect parameter when calling nfs4_call_sync() (Olga Kornievskaia) [RHEL-134735]
  - NFS: sysfs: fix leak when nfs_client kobject add fails (Olga Kornievskaia) [RHEL-134735]
  - pnfs: Set transport security policy to RPC_XPRTSEC_NONE unless using TLS (Olga Kornievskaia) [RHEL-134735]
  - pnfs: Fix TLS logic in _nfs4_pnfs_v4_ds_connect() (Olga Kornievskaia) [RHEL-134735]
  - NFSD: Never cache a COMPOUND when the SEQUENCE operation fails (Olga Kornievskaia) [RHEL-134735]
  - NFSD: Skip close replay processing if XDR encoding fails (Olga Kornievskaia) [RHEL-134735]
  - NFSD: Encode COMPOUND operation status on page boundaries (Olga Kornievskaia) [RHEL-134735]
  - NFSD: free copynotify stateid in nfs4_free_ol_stateid() (Olga Kornievskaia) [RHEL-134735]
  - NFSD: Fix crash in nfsd4_read_release() (Olga Kornievskaia) [RHEL-134735]
  - NFSD: Define a proc_layoutcommit for the FlexFiles layout type (Olga Kornievskaia) [RHEL-134735]
  - NFSv4.1: fix backchannel max_resp_sz verification check (Olga Kornievskaia) [RHEL-134735]
  - NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul() (Olga Kornievskaia) [RHEL-134735]
  - sunrpc: fix null pointer dereference on zero-length checksum (Olga Kornievskaia) [RHEL-134735]
  - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136257] {CVE-2025-40318}
  - net: vlan: sync VLAN features with lower device (CKI Backport Bot) [RHEL-80409]
  - mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134449] {CVE-2025-40258}
  - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134005] {CVE-2025-40240}
  - inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-116117]
  - inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-116117]
  - inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-116117]
  - inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-116117]
  - ipv4/route: avoid unused-but-set-variable warning (Guillaume Nault) [RHEL-116117]
  - net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133365]
  - openvswitch: Stricter validation for the userspace action (Paolo Valerio) [RHEL-115648]
  - openvswitch: Fix unsafe attribute parsing in output_userspace() (Paolo Valerio) [RHEL-115648]
  - net: openvswitch: fix nested key length validation in the set() action (Paolo Valerio) [RHEL-115648]
  - openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (Paolo Valerio) [RHEL-115648]
  - openvswitch: fix lockup on tx to unregistering netdev with carrier (Paolo Valerio) [RHEL-115648]
  - ethtool: Don't check for RXFH fields conflict when no input_xfrm is requested (Ivan Vecera) [RHEL-127561]
  - net: ethtool: don't mux RXFH via rxnfc callbacks (Ivan Vecera) [RHEL-127561]
  - eth: hns3: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: hinic: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: nfp: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: mlx5: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: qede: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: benet: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: sfc: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: sfc: siena: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: sfc: falcon: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: sxgbe: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: dpaa2: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: dpaa: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: niu: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: otx2: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: thunder: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: ena: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: bnxt: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: bnx2x: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: iavf: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: ice: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: i40e: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: fm10k: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: ixgbe: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: igc: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: igb: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: e1000e: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: lan743x: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: cxgb4: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: cisco: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: gianfar: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - net: drv: hyperv: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - net: drv: virtio: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - net: drv: vmxnet3: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: remove empty RXFH handling from drivers (Ivan Vecera) [RHEL-127561]
  - net: ethtool: add dedicated callbacks for getting and setting rxfh fields (Ivan Vecera) [RHEL-127561]
  - net: ethtool: require drivers to opt into the per-RSS ctx RXFH (Ivan Vecera) [RHEL-127561]
  - net: ethtool: remove the duplicated handling from rxfh and rxnfc (Ivan Vecera) [RHEL-127561]
  - net: ethtool: copy the rxfh flow handling (Ivan Vecera) [RHEL-127561]
  - net: ethtool: mm: reset verification status when link is down (Ivan Vecera) [RHEL-127569]
  - net: ethtool: mm: extract stmmac verification logic into common library (Ivan Vecera) [RHEL-127569]
  - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129085] {CVE-2025-40170}
  - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-129085]
  - net: ipv4: Consolidate ipv4_mtu and ip_dst_mtu_maybe_forward (Hangbin Liu) [RHEL-129085]
  - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129022] {CVE-2025-40135}
  - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128985] {CVE-2025-40158}
  - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128985]
  - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128985]
  - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128985]
  - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128985]
  - bpf: Fix mismatched RCU unlock flavour in bpf_out_neigh_v6 (Hangbin Liu) [RHEL-128985]
  - vrf: Fix lockdep splat in output path (Hangbin Liu) [RHEL-128985]
  - ipv6: remove nexthop_fib6_nh_bh() (Hangbin Liu) [RHEL-128985]
  - net: remove rcu_dereference_bh_rtnl() (Hangbin Liu) [RHEL-128985]
  - neighbour: switch to standard rcu, instead of rcu_bh (Hangbin Liu) [RHEL-128985]
  - ipv6: flowlabel: do not disable BH where not needed (Hangbin Liu) [RHEL-128985]
  - ipv6: remove one read_lock()/read_unlock() pair in rt6_check_neigh() (Hangbin Liu) [RHEL-128985]
  - neigh: introduce neigh_confirm() helper function (Hangbin Liu) [RHEL-128985]
  - net: Prevent use after free in netif_napi_set_irq_locked() (Petr Oros) [RHEL-83023]
  - net: move aRFS rmap management and CPU affinity to core (Petr Oros) [RHEL-83023]
  - xfrm: Check inner packet family directly from skb_dst (Hangbin Liu) [RHEL-95005]
  - xfrm: fix offloading of cross-family tunnels (Hangbin Liu) [RHEL-95005]
  - udp: also consider secpath when evaluating ipsec use for checksumming (Hangbin Liu) [RHEL-95005]
  - xfrm: restore GSO for SW crypto (Hangbin Liu) [RHEL-95005]
  - xfrm: always initialize offload path (Hangbin Liu) [RHEL-95005]
  - xfrm: check for PMTU in tunnel mode for packet offload (Hangbin Liu) [RHEL-95005]
  - xfrm: provide common xdo_dev_offload_ok callback implementation (Hangbin Liu) [RHEL-95005]
  - xfrm: rely on XFRM offload (Hangbin Liu) [RHEL-95005]
  - xfrm: simplify SA initialization routine (Hangbin Liu) [RHEL-95005]
  - xfrm: delay initialization of offload path till its actually requested (Hangbin Liu) [RHEL-95005]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-663.el9]
changelog:
  - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout (Michal Rábek) [RHEL-58952]
  - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140261] {CVE-2025-68349}
  - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131389] {CVE-2025-39933}
  - redhat/kernel.spec.template: Let kernel-modules installation rebuild initrd in UKI system (Li Tian) [RHEL-135721]
  - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129113] {CVE-2025-40154}
  - xfrm: bring back device check in validate_xmit_xfrm (Hangbin Liu) [RHEL-116770]
  - bonding: Fix multiple long standing offload races (Hangbin Liu) [RHEL-116770]
  - bonding: Mark active offloaded xfrm_states (Hangbin Liu) [RHEL-116770]
  - xfrm: Add explicit dev to .xdo_dev_state_{add,delete,free} (Hangbin Liu) [RHEL-116770]
  - xfrm: Remove unneeded device check from validate_xmit_xfrm (Hangbin Liu) [RHEL-116770]
  - xfrm: Use xdo.dev instead of xdo.real_dev (Hangbin Liu) [RHEL-116770]
  - net/mlx5: Avoid using xso.real_dev unnecessarily (Hangbin Liu) [RHEL-116770]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-664.el9]
changelog:
  - nvme: fix PCIe subsystem reset controller state transition (John Meneghini) [RHEL-137435]
  - powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling (John Meneghini) [RHEL-137435]
  - powerpc/eeh: Make EEH driver device hotplug safe (John Meneghini) [RHEL-137435] {CVE-2025-38576}
  - objtool: Fix standalone --hacks=jump_label (Rado Vrbovsky) [RHEL-114923]
  - objtool: Fix weak symbol detection (Rado Vrbovsky) [RHEL-114923]
  - objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq() (Rado Vrbovsky) [RHEL-114923]
  - bus: mhi: host: pci_generic: Set DMA mask for VFs (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: core: Improve mhi_sync_power_up handling for SYS_ERR state (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: host: pci_generic: Reset QDU100 while the MHI driver is removed (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: host: pci_generic: Add SRIOV support (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: host: pci_generic: Read SUBSYSTEM_VENDOR_ID for VF's to check status (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: host: Add support for separate controller configurations for VF and PF (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: ep: Fix chained transfer handling in read path (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: host: Notify EE change via uevent (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup() (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: host: pci_generic: Add support for all Foxconn T99W696 SKU variants (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135362]
  - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135362]
  - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135362]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-665.el9]
changelog:
  - sched: Fix build for modules using set_tsk_need_resched() (Gabriele Monaco) [RHEL-141542]
  - sched: Export hidden tracepoints to modules (Gabriele Monaco) [RHEL-141542]
  - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-138326]
  - devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (Petr Oros) [RHEL-121722]
  - devlink: Introduce switchdev_inactive eswitch mode (Petr Oros) [RHEL-121722]
  - devlink: Add new "max_mac_per_vf" generic device param (Petr Oros) [RHEL-121722]
  - devlink: region: correct port region lookup to use port_ops (Petr Oros) [RHEL-121722]
  - devlink rate: Remove unnecessary 'static' from a couple places (Petr Oros) [RHEL-121722]
  - devlink: Add a 'num_doorbells' driverinit param (Petr Oros) [RHEL-121722]
  - devlink: Add 'total_vfs' generic device param (Petr Oros) [RHEL-121722]
  - devlink: Make health reporter burst period configurable (Petr Oros) [RHEL-121722]
  - devlink: Introduce burst period for health reporter (Petr Oros) [RHEL-121722]
  - devlink: Move health reporter recovery abort logic to a separate function (Petr Oros) [RHEL-121722]
  - devlink: Move graceful period parameter to reporter ops (Petr Oros) [RHEL-121722]
  - devlink/port: Check attributes early and constify (Petr Oros) [RHEL-121722]
  - devlink/port: Simplify return checks (Petr Oros) [RHEL-121722]
  - netdevsim: add fw_update_flash_chunk_time_ms debugfs knobs (Petr Oros) [RHEL-121722]
  - devlink: Fix excessive stack usage in rate TC bandwidth parsing (Petr Oros) [RHEL-121722]
  - selftest: netdevsim: Add devlink rate tc-bw test (Petr Oros) [RHEL-121722]
  - devlink: Extend devlink rate API with traffic classes bandwidth management (Petr Oros) [RHEL-121722]
  - netlink: introduce type-checking attribute iteration for nlmsg (Petr Oros) [RHEL-121722]
  - docs: netdevsim: fixe typo in netdevsim documentation (Petr Oros) [RHEL-121722]
  - selftests: drv-net: import things in lib one by one (Petr Oros) [RHEL-121722]
  - documentation: networking: devlink: Fix a typo in devlink-trap.rst (Petr Oros) [RHEL-121722]
  - devlink: add value check to devlink_info_version_put() (Petr Oros) [RHEL-121722]
  - x86/bugs: Report correct retbleed mitigation status (Waiman Long) [RHEL-119225]
  - x86/bugs: Fix reporting of LFENCE retpoline (Waiman Long) [RHEL-119225]
  - x86/bugs: Fix spectre_v2 forcing (Waiman Long) [RHEL-119225]
  - x86/bugs: Remove uses of cpu_mitigations_off() (Waiman Long) [RHEL-119225]
  - x86/bugs: Simplify SSB cmdline parsing (Waiman Long) [RHEL-119225]
  - x86/bugs: Use early_param() for spectre_v2 (Waiman Long) [RHEL-119225]
  - x86/bugs: Use early_param() for spectre_v2_user (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for VMSCAPE (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for SSB (Waiman Long) [RHEL-119225]
  - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-119225]
  - x86/bugs: Fix GDS mitigation selecting when mitigation is off (Waiman Long) [RHEL-119225]
  - x86/bugs: Select best SRSO mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Print enabled attack vectors (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for TSA (Waiman Long) [RHEL-119225]
  - x86/pti: Add attack vector controls for PTI (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for ITS (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for SRSO (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for L1TF (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for spectre_v2 (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for BHI (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for spectre_v2_user (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for retbleed (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for spectre_v1 (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for GDS (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for SRBDS (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for RFDS (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for MMIO (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for TAA (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for MDS (Waiman Long) [RHEL-119225]
  - x86/bugs: Define attack vectors relevant for each bug (Waiman Long) [RHEL-119225]
  - x86/Kconfig: Add arch attack vector support (Waiman Long) [RHEL-119225]
  - cpu: Define attack vectors (Waiman Long) [RHEL-119225]
  - Documentation/x86: Document new attack vector controls (Waiman Long) [RHEL-119225]
  - x86/bugs: Clean up SRSO microcode handling (Waiman Long) [RHEL-119225]
  - x86/bugs: Use IBPB for retbleed if used by SRSO (Waiman Long) [RHEL-119225]
  - x86/bugs: Add SRSO_MITIGATION_NOSMT (Waiman Long) [RHEL-119225]
  - x86/bugs: Allow ITS stuffing in eIBRS+retpoline mode also (Waiman Long) [RHEL-119225]
  - x86/bugs: Remove its=stuff dependency on retbleed (Waiman Long) [RHEL-119225]
  - x86/bugs: Introduce cdt_possible() (Waiman Long) [RHEL-119225]
  - x86/bugs: Use switch/case in its_apply_mitigation() (Waiman Long) [RHEL-119225]
  - x86/bugs: Avoid warning when overriding return thunk (Waiman Long) [RHEL-119225]
  - x86/bugs: Simplify the retbleed=stuff checks (Waiman Long) [RHEL-119225]
  - x86/bugs: Avoid AUTO after the select step in the retbleed mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Fix spectre_v2 mitigation default on Intel (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure ITS mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Fix SRSO reporting on Zen1/2 with SMT disabled (Waiman Long) [RHEL-119225]
  - x86/cpu: Add "Old Microcode" docs to hw-vuln toctree (Waiman Long) [RHEL-119225]
  - x86/cpu: Help users notice when running old Intel microcode (Waiman Long) [RHEL-119225]
  - x86/cpufeatures: Shorten X86_FEATURE_CLEAR_BHB_LOOP_ON_VMEXIT (Waiman Long) [RHEL-119225]
  - x86/bugs: Remove X86_BUG_MMIO_UNKNOWN (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure SRSO mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure L1TF mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure SSB mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure spectre_v2 mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure BHI mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure spectre_v2_user mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure retbleed mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Allow retbleed=stuff only on Intel (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure spectre_v1 mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure GDS mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure SRBDS mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Remove md_clear_*_mitigation() (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure RFDS mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure MMIO mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure TAA mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure MDS mitigation (Waiman Long) [RHEL-119225]
  - KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 <=> 1 VM count transitions (Waiman Long) [RHEL-119225]
  - Documentation/x86: Update the naming of CPU features for /proc/cpuinfo (Waiman Long) [RHEL-119225]
  - redhat/configs: Enable CONFIG_CPU_MITIGATIONS (Waiman Long) [RHEL-119225]
  - cpu: Ignore "mitigations" kernel parameter if CPU_MITIGATIONS=n (Waiman Long) [RHEL-119225]
  - cpu: Re-enable CPU mitigations by default for !X86 architectures (Waiman Long) [RHEL-119225]
  - x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n (Waiman Long) [RHEL-119225]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-666.el9]
changelog:
  - wifi: rtw88: limit indirect IO under powered off for RTL8822CS (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: Fix firmware version handling (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Move mt76_abort_scan out of mt76_reset_device() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: hw_scan: Don't let the operating channel be last (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: always take beacon ies in link grading (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mvm: fix beacon template/fixed rate (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: fix aux ROC time event iterator usage (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211_hwsim: Fix possible NULL dereference (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: skip rate verification for not captured PSDUs (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: reject address change while connecting (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath11k: zero init info->status in wmi_process_mgmt_tx_comp() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211_hwsim: Limit destroy_on_close radio removal to netgroup (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - Revert "wifi: ath12k: Fix missing station power save configuration" (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: use wiphy_hrtimer_work for csa.switch_work (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: use wiphy_hrtimer_work for ml_reconf_work (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: use wiphy_hrtimer_work for ttlm_work (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: add an hrtimer based delayed work item (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - Revert "wifi: ath10k: avoid unnecessary wait for service ready message" (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: fix key tailroom accounting leak (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode (Jose Ignacio Tornos Martinez) [RHEL-132587] {CVE-2025-40321}
  - wifi: mac80211: reset FILS discovery and unsol probe resp intervals (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: fix potential use after free in iwl_mld_remove_link() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: free skb during idr cleanup callback (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath10k: Fix memory leak on unsupported WMI command (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: enforce CPU endian format for all QMI data (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Use 1KB Cache Flush Command for QoS TID Descriptors (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Fix flush cache failure during RX queue update (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Add Retry Mechanism for REO RX Queue Update Failures (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Refactor REO command to use ath12k_dp_rx_tid_rxq (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Refactor RX TID buffer cleanup into helper function (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Refactor RX TID deletion handling into helper function (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Increase DP_REO_CMD_RING_SIZE to 256 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: remove IEEE80211_CHAN_{1,2,4,8,16}MHZ flags (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: fix Rx packet handling when pubsta information is not available (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: remove ieee80211_s1g_channel_width (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: correctly initialise S1G chandef for STA (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: correctly implement and validate S1G chandef (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: remove tx_handlers_drop debugfs stats (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Remove redundant rcu_read_lock/unlock() in spin_lock (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211_hwsim: Add simulation support for NAN device (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Extend support for changing NAN configuration (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Export an API to check if NAN is started (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Get the correct interface for non-netdev skb status (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Track NAN interface start/stop (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Accept management frames on NAN interface (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Support Tx of action frame for NAN (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: Store the NAN cluster ID (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: Support Tx/Rx of action frame for NAN (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: Advertise supported NAN capabilities (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: nl80211: Add more NAN capabilities (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: Add cluster joined notification APIs (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: nl80211: Add NAN Discovery Window (DW) notification (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: nl80211: Add more configuration options for NAN commands (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Extend beacon miss handling for MLO non-AP STA (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Add support to handle reason inactivity STA kickout event for QCN9274/IPQ5332 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: enhance the WMI_PEER_STA_KICKOUT event with reasons and RSSI reporting (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: report station mode per-chain signal strength (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath10k: Fix connection after GTK rekeying (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath10k: avoid unnecessary wait for service ready message (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load() (Jose Ignacio Tornos Martinez) [RHEL-132587] {CVE-2025-39991}
  - wifi: ath10k: remove gpio number assignment (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath11k: Remove redundant semicolon (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: downgrade log level for CE buffer enqueue failure (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: fix wrong logging ID used for CE (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath11k: downgrade log level for CE buffer enqueue failure (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Add fallback for invalid channel number in PHY metadata (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: fix the fetching of combined rssi (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: fix HAL_PHYRX_COMMON_USER_INFO handling in monitor mode (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: fix signal in radiotap for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Add support to set per-radio RTS threshold (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: wow: enable TKIP related feature (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8922a: add TAS feature support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: open C2H event waiting window first before sending H2C command (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: renew a completion for each H2C command waiting C2H event (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852b: enable beacon tracking support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: debug: support SER L0 simulation (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: phy: initialize AFE by firmware element table (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: obtain RX path from ppdu status IE00 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: disable RTW89_PHYSTS_IE09_FTR_0 for ppdu status (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: use ieee80211_tx_info::driver_data to store driver TX info (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: chan: allow callers to check if a link has no managed chanctx (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: abort scan/roc on hw restart (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: improve phy reset on hw restart (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: fill User Priority in skb->priority for rx packets (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: set VTA in txwi (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: remove the mem_total field of STA_REC_BF command (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: disable promiscuous mode by default (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: use altx queue for offchannel tx on connac+ (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: fix updating beacon protection with beacons enabled (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: fix key add/remove imbalance (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: delete vif keys when requested (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: fix memory leak on mt7996_mcu_sta_key_tlv error (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: fix setting beacon protection keys (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: decrease timeout for commonly issued MCU commands (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: improve hardware restart reliability (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: remove redundant per-phy mac80211 calls during restart (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7921u: Add VID/PID for Netgear A7500 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt76_eeprom_override to int (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: support writing MAC TXD for AddBA Request (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7925: refine the txpower initialization flow (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7915: fix mt7981 pre-calibration (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Add mt76_dma_get_rxdmad_c_buf utility routione (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Decouple RRO logic from WED support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Add rx_queue_init callback (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Introduce RRO MSDU callbacks (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Convert mt7996_wed_rro_addr to LE (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Fix RX packets configuration for primary WED device (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Fix tx-queues initialization for second phy on mt7996 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Introduce the capability to reset MT7992 WED device (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Enable HW RRO for MT7992 chipset (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Initial DMA configuration for MT7992 WED support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Do not always enable NAPIs for WED RRO queues (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Differentiate between RRO data and RRO MSDU queues (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Remove q->ndesc check in mt76_dma_rx_fill() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Add reset_idx to reset_q mt76_queue_ops signature. (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Enable MLO support for client interfaces (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Set EML capabilities for AP interface (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Export MLO AP capabilities to mac80211 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Temporarily disable EPCS (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Implement MLD address translation for EAPOL (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Add all active links to poll list in mt7996_mac_tx_free() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Fix mt7996_reverse_frag0_hdr_trans for MLO (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Use proper link info in mt7996_mcu_add_group (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7921: Add 160MHz beamformee capability for mt7922 device (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7925: add pci restore for hibernate (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Check phy before init msta_link in mt7996_mac_sta_add_links() (Jose Ignacio Tornos Martinez) [RHEL-132587] {CVE-2025-40066}
  - wifi: mt76: mt7996: Use proper link_id in link_sta_rc_update callback (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Remove dead code in mt76_scan_work (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Use deflink for AMPDU rx reordering (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7921: add MBSSID support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: fix potential memory leak in mt76_wmac_probe() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7925: add MBSSID support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7925u: Add VID/PID for Netgear A9000 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Set proper link destination address in mt7996_tx() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Set def_wcid pointer in mt7996_mac_sta_init_link() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Fix mt7996_mcu_bss_mld_tlv routine (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Fix mt7996_mcu_sta_ba wcid configuration (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Overwrite unspecified link_id in mt7996_tx() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mwifiex: fix endianness handling in mwifiex_send_rgpower_table (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: Remove the redundant wiphy_dev (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: fix incorrect comment (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: update the time stamps in hidden ssid (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Fix HE capabilities element check (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: add tx_handlers_drop statistics to ethtool (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: CHANNEL_SURVEY_NOTIF is always supported (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: remove support of iwl_esr_mode_notif version 1 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: remove support from of sta cmd version 1 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: remove support of roc cmd version 5 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: remove support of mac cmd ver 2 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: don't consider phy cmd version 5 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: implement wowlan status notification API update (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: fw: Add ASUS to PPAG and TAS list (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: add kunit tests for nvm parse (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: api: add a flag to iwl_link_ctx_modify_flags (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: pcie: move ltr_enabled to the specific transport (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: pcie: move pm_support to the specific transport (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: rename iwl_finish_nic_init (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: replace SUPPRESS_CMD_ERROR_ONCE status bit with a boolean (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: add STATUS_FW_ERROR API (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: Add USB ID 2001:3327 for D-Link AX18U rev. A1 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: Add USB ID 2001:332a for D-Link AX9U rev. A1 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtl8xxxu: expose efuse via debugfs (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: Fix dentry reference leak in iwl_mld_add_link_debugfs (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mei: Remove unused flexible-array member in struct iwl_sap_hdr (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: Remove redundant header files (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: Remove duplicated include in trans.c (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mwifiex: fix double free in mwifiex_send_rgpower_table() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Fix 6 GHz Band capabilities element advertisement in lower bands (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: reduce the scope of rts_threshold (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: reduce the scope of link_id (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: brcmfmac: support AP isolation to restrict reachability between stations (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: nl80211: strict checking attributes for NL80211_CMD_SET_BSS (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: drivers: indicate support for attributes in NL80211_CMD_SET_BSS (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: nl80211: allow drivers to support subset of NL80211_CMD_SET_BSS (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: nl80211: Add EHT fixed Tx rate support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: kunit: add kunit tests for S1G PVB decoding (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: support parsing S1G TIM PVB (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: support block bitmap S1G TIM encoding (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: brcmfmac: fix 43752 SDIO FWVID incorrectly labelled as Cypress (CYW) (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mwifiex: send world regulatory domain to driver (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mwifiex: add rgpower table loading support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: brcmfmac: avoid assignment in if/else-if conditions in NVRAM load path (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: count reg connection element in the size (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: Remove unused tracepoints (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852bt: Remove redundant off_reverse variables (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: use int type to store negative error codes (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: add getting function of DMA channel v1 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: abstract getting function of DMA channel (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: add RPP parser v1 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: abstract RPP parser (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: add group BD address design (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: define TX/RX buffer descriptor pool (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: add struct rtw89_{tx,rx}_rings to put related fields (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: use RDU status of R_BE_PCIE_DMA_IMR_0_V1 instead for 8922DE (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: prepare interrupt related registers and functions for 8922DE (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: move chip ISR definition out from chip generation (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtl8xxxu: Remove TL-WN722N V2 (0x2357: 0x010c) from untested devices (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: don't support WH a step (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: remove a TODO (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: carefully select the PNVM source (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: make iwl_mld_rm_vif void (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: pcie: remember when interrupts are disabled (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: support TLC command version 5 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: gen1_2: move gen specific code to a function (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: gen1_2: rename iwl_trans_pcie_op_mode_enter (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: really remove hw_wfpm_id (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: remove unneeded jacket indication (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: don't publish TWT capabilities (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: trans: move dev_cmd_pool to trans specific (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: remove .pnvm files from module info (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: acpi: make iwl_guid static (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: uefi: remove runtime check of constant values (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: refactor iwl_pnvm_get_from_fs (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: iwl-config: include module.h (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: don't modify trans state where not needed (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: simplify iwl_trans_pcie_d3_resume (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: trans: remove STATUS_SUSPENDED (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: trans: remove d3 test code (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: remove dump file name extension support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mvm: remove d3 test code (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: add a new FW file numbering scheme (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: add few missing hcmd/notif names (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: Add debug log for second link (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: simplify iwl_poll_prph_bit return value (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: pcie: relocate finish_nic_init logic to gen1_2 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: trigger mlo scan only when not in EMLSR (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: don't check the cipher on resume (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: don't validate keys state on resume (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: rename iwl_mld_set_key_rx_seq (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: refactor iwl_mld_add_all_rekeys (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: don't consider old versions of PPAG (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: make ppag versioning clear (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - Reapply "wifi: iwlwifi: remove support of several iwl_ppag_table_cmd versions" (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: bump MIN API in HR/GF/BZ/SC/DR (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mvm: remove a function declaration (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld/mvm: set beacon protection capability in wowlan config (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mvm/mld: correctly retrieve the keyidx from the beacon (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: track BIGTK per link (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: support MLO rekey on resume (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mvm: cleanup cipher lookup in resume (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: cleanup cipher lookup in resume (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mvm: remove MLO code (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw88: Use led->brightness_set_blocking for PCI too (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: coex: Limit Wi-Fi scan slot cost to avoid A2DP glitch (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852c: update firmware crash trigger type for newer firmware (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852a: report average RSSI to avoid unnecessary scanning (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852a: report per-channel noise level by get_survey ops (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852bt: Simplify unnecessary if-else conditions in _dpk_onoff() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtl8xxxu: Don't claim USB ID 07b8:8188 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: fix group frames loss when connected to non-transmitted BSSID (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: fix BSSID comparison for non-transmitted BSSID (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852c: check LPS H2C command complete by C2H reg instead of done ack (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8851b: rfk: update TX wideband IQK (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8851b: rfk: update IQK TIA setting (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: wow: remove notify during WoWLAN net-detect (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: debug: add beacon_info debugfs (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: introduce beacon tracking to improve connection stability (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852bt: Use standard helper for string choice (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: add dummy C2H handlers for BCN resend and update done (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: print just once for unknown C2H events (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw88: Lock rtwdev->mutex before setting the LED (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw88: sdio: use indirect IO for device registers before power-on (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - ktime: Add us_to_ktime() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - net: convert to nla_get_*_default() [wireless] (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138032] {CVE-2025-38349}
  - blk-mq: Abort suspend when wakeup events are pending (Ming Lei) [RHEL-137855]
  - fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137099] {CVE-2025-40271}
  - idpf: set mac type when adding and removing MAC filters (Michal Schmidt) [RHEL-82234 RHEL-91991 RHEL-92017]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-667.el9]
changelog:
  - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() (Maurizio Lombardi) [RHEL-87800]
  - ata: libata-scsi: Fix system suspend for a security locked drive (Tomas Henzl) [RHEL-106827]
  - ata: ahci: Use correct DMI identifier for ASUSPRO-D840SA LPM quirk (Tomas Henzl) [RHEL-106827]
  - ata: libata-scsi: Fix ata_to_sense_error() status handling (Tomas Henzl) [RHEL-106827]
  - ata: ahci: Disallow LPM for Asus B550-F motherboard (Tomas Henzl) [RHEL-106827]
  - ata: ahci: Disallow LPM for ASUSPRO-D840SA motherboard (Tomas Henzl) [RHEL-106827]
  - ata: libata-scsi: Fix offsets for the fixed format sense data (Tomas Henzl) [RHEL-106827]
  - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137065] {CVE-2025-38024}
  - scsi: qla2xxx: Update version to 10.02.10.100-k (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Fix bsg_done() causing double free (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Query FW again before proceeding with login (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Validate sp before freeing associated memory (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Free sp in error path to fix system crash (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Delay module unload while fabric scan in progress (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Allow recovery for tape devices (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Add bsg interface to support firmware img validation (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Validate MCU signature before executing MBC 03h (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Add load flash firmware mailbox support for 28xxx (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Add support for 64G SFP speed (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Add Speed in SFP print information (Nilesh Javali) [RHEL-136530]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-668.el9]
changelog:
  - bonding: don't set oif to bond dev when getting NS target destination (CKI Backport Bot) [RHEL-128764]
  - thunderbolt: Add support for Intel Wildcat Lake (Desnes Nunes) [RHEL-95661]
  - crypto: seqiv - Do not use req->iv after crypto_aead_encrypt (Xin Long) [RHEL-118175]
  - redhat: hsr: Remove tech preview tainting (Felix Maurer) [RHEL-100941]
  - redhat: Package net/hsr selftests (Felix Maurer) [RHEL-127796]
  - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (Felix Maurer) [RHEL-127794]
  - hsr: Follow standard for HSRv0 supervision frames (Felix Maurer) [RHEL-127794]
  - hsr: Fix supervision frame sending on HSRv0 (Felix Maurer) [RHEL-127794]
  - net: hsr: prevent creation of HSR device with slaves from another netns (Felix Maurer) [RHEL-127794]
  - net/hsr: add interlink to fill_info output (Felix Maurer) [RHEL-127764 RHEL-127794]
  - net/hsr: add protocol version to fill_info output (Felix Maurer) [RHEL-127764 RHEL-127794]
  - hsr: hold rcu and dev lock for hsr_get_port_ndev (Felix Maurer) [RHEL-127794]
  - hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr (Felix Maurer) [RHEL-127794]
  - hsr: use rtnl lock when iterating over ports (Felix Maurer) [RHEL-127794]
  - hsr: use netdev_master_upper_dev_link() when linking lower ports (Felix Maurer) [RHEL-127794]
  - net, hsr: reject HSR frame if skb can't hold tag (Felix Maurer) [RHEL-127794] {CVE-2025-39703}
  - net: hsr: sync hw addr of slave2 according to slave1 hw addr on PRP (Felix Maurer) [RHEL-127794 RHEL-130474]
  - redhat: hsr: Enable KUnit test for PRP duplicate discard (Felix Maurer) [RHEL-127794]
  - net: hsr: Add KUnit test for PRP (Felix Maurer) [RHEL-127794]
  - net: hsr: Fix PRP duplicate detection (Felix Maurer) [RHEL-127794]
  - net: hsr: Create and export hsr_get_port_ndev() (Felix Maurer) [RHEL-127794]
  - net: hsr: remove synchronize_rcu() from hsr_add_port() (Felix Maurer) [RHEL-127794]
  - net: hsr: remove one synchronize_rcu() from hsr_del_port() (Felix Maurer) [RHEL-127794]
  - net: hsr: must allocate more bytes for RedBox support (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Add test for VLAN (Felix Maurer) [RHEL-127794 RHEL-130476]
  - net: hsr: Add VLAN CTAG filter support (Felix Maurer) [RHEL-127794 RHEL-130476]
  - net: hsr: Add VLAN support (Felix Maurer) [RHEL-127794 RHEL-130476]
  - tests: hsr: Increase timeout to 50 seconds (Felix Maurer) [RHEL-127794]
  - net: hsr: convert to use new timer APIs (Felix Maurer) [RHEL-127794]
  - net: hsr: Remove interlink_sequence_nr. (Felix Maurer) [RHEL-127794]
  - net: hsr: Use the seqnr lock for frames received via interlink port. (Felix Maurer) [RHEL-127794]
  - net: hsr: prevent NULL pointer dereference in hsr_proxy_announce() (Felix Maurer) [RHEL-127794]
  - net: hsr: cosmetic: Remove extra white space (Felix Maurer) [RHEL-127794]
  - treewide, timers: Rename from_timer() to timer_container_of() (Felix Maurer) [RHEL-100940 RHEL-127794]
  - net: hsr: Send supervisory frames to HSR network with ProxyNodeTable data (Felix Maurer) [RHEL-100940 RHEL-127794]
  - selftests: hsr: Extend the hsr_ping.sh test to use fixed MAC addresses (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Extend the hsr_redbox.sh test to use fixed MAC addresses (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Fix "File exists" errors for hsr_ping (Felix Maurer) [RHEL-127794]
  - test: hsr: Extend the hsr_redbox.sh to have more SAN devices connected (Felix Maurer) [RHEL-127794]
  - test: hsr: Call cleanup_all_ns when hsr_redbox.sh script exits (Felix Maurer) [RHEL-100940 RHEL-127794]
  - net: hsr: init prune_proxy_timer sooner (Felix Maurer) [RHEL-100940 RHEL-127794]
  - test: hsr: Add test for HSR RedBOX (HSR-SAN) mode of operation (Felix Maurer) [RHEL-100940 RHEL-127794]
  - test: hsr: Extract version agnostic information from ping command output (Felix Maurer) [RHEL-100940 RHEL-127794]
  - test: hsr: Move common code to hsr_common.sh file (Felix Maurer) [RHEL-100940 RHEL-127794]
  - test: hsr: Remove script code already implemented in lib.sh (Felix Maurer) [RHEL-100940 RHEL-127794]
  - net: hsr: Provide RedBox support (HSR-SAN) (Felix Maurer) [RHEL-100940 RHEL-127794]
  - net: hsr: Use full string description when opening HSR network device (Felix Maurer) [RHEL-127794]
  - net: hsr: Fix typo in the hsr_forward_do() function comment (Felix Maurer) [RHEL-127794]
  - net: hsr: constify the struct device_type usage (Felix Maurer) [RHEL-127794]
  - net: fill in MODULE_DESCRIPTION()s for HSR (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Extend the testsuite to also cover HSRv1. (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Reorder the testsuite. (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Use `let' properly. (Felix Maurer) [RHEL-127794]
  - net/hsr: Remove unused function declarations (Felix Maurer) [RHEL-127794]
  - net: ionic: map SKB after pseudo-header checksum prep (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: add dma_wmb() before ringing TX doorbell (Jakub Ramaseuski) [RHEL-127815]
  - ionic: convert to ndo_hwtstamp API (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Fix memory leak of admin q_wr (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Use ether_addr_copy instead of memcpy (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Fix build failure on SPARC due to xchg() operand size (Jakub Ramaseuski) [RHEL-127815]
  - ionic: use int type for err in ionic_get_module_eeprom_by_page (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Add Makefile/Kconfig to kernel build environment (Jakub Ramaseuski) [RHEL-127815]
  - RDMA: Add IONIC to rdma_driver_id definition (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Implement device stats ops (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Register device ops for miscellaneous functionality (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Register device ops for datapath (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Register device ops for control path (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Create device queues to support admin operations (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Register auxiliary module for ionic ethernet adapter (Jakub Ramaseuski) [RHEL-127815]
  - redhat/configs: Disable CONFIG_INFINIBAND_IONIC in generic (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Provide doorbell and CMB region information (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Provide interrupt allocation support for the RDMA driver (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Provide RDMA reset support for the RDMA driver (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Export the APIs from net driver to support device commands (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Update LIF identity with additional RDMA capabilities (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Create an auxiliary device for rdma driver (Jakub Ramaseuski) [RHEL-127815]
  - ethernet: ionic: Fix DMA mapping tests (Jakub Ramaseuski) [RHEL-127815]
  - ionic: cancel delayed work earlier in remove (Jakub Ramaseuski) [RHEL-127815]
  - ionic: clean dbpage in de-init (Jakub Ramaseuski) [RHEL-127815]
  - ionic: print firmware heartbeat as unsigned (Jakub Ramaseuski) [RHEL-127815]
  - ionic: Prevent driver/fw getting out of sync on devcmd(s) (Jakub Ramaseuski) [RHEL-127815]
  - redhat: enable TDX host config (Paolo Bonzini) [RHEL-115482]
  - KVM: TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-115482]
  - x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-115482]
  - x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-115482]
  - x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-115482]
  - x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-115482]
  - x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-115482]
  - x86/virt/tdx: Avoid indirect calls to TDX assembly functions (Paolo Bonzini) [RHEL-115482]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-669.el9]
changelog:
  - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144333] {CVE-2026-22998}
  - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-141483]
  - virtio-net: remove unused delayed refill worker (Laurent Vivier) [RHEL-139819]
  - virtio-net: don't schedule delayed refill worker (Laurent Vivier) [RHEL-139819]
  - virtio-net: don't re-enable refill work too early when NAPI is disabled (Laurent Vivier) [RHEL-139819]
  - virtio-net: disable delayed refill when pausing rx (Laurent Vivier) [RHEL-139819]
  - virtio-net: Refactor napi_disable paths (Laurent Vivier) [RHEL-139819]
  - virtio-net: Refactor napi_enable paths (Laurent Vivier) [RHEL-139819]
  - virtio_net: separate virtnet_tx_resize() (Laurent Vivier) [RHEL-139819]
  - virtio_net: separate virtnet_rx_resize() (Laurent Vivier) [RHEL-139819]
  - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137698] {CVE-2025-38403}
  - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Mamatha Inamdar) [RHEL-14156]
  - ftrace: Fix BPF fexit with livepatch (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/modules: replace stub allocation sentinel with an explicit counter (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: ensure ftrace record ops are always set for NOPs (Mamatha Inamdar) [RHEL-14156]
  - redhat: Add CONFIG_PPC_FTRACE_OUT_OF_LINE_NUM_RESERVE (Mamatha Inamdar) [RHEL-14156]
  - ftrace: fix incorrect hash size in register_ftrace_direct() (Mamatha Inamdar) [RHEL-14156]
  - kbuild: dummy-tools: pretend we understand -fpatchable-function-entry (Mamatha Inamdar) [RHEL-14156]
  - ftrace: Fix modification of direct_function hash while in use (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/ftrace: fix module loading without patchable function entries (Mamatha Inamdar) [RHEL-14156]
  - powerpc: Replace kretprobe code with rethook on powerpc (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/ftrace: fix clobbered r15 during livepatching (Mamatha Inamdar) [RHEL-14156]
  - powerpc/bpf: fix JIT code size calculation of bpf trampoline (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Fix ftrace bug with KASAN=y (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/bpf: Add support for bpf trampolines (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add support for DYNAMIC_FTRACE_WITH_DIRECT_CALLS (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add support for DYNAMIC_FTRACE_WITH_CALL_OPS (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/ftrace: Support .text larger than 32MB with out-of-line stubs (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/ftrace: Move ftrace sequence out of line (Mamatha Inamdar) [RHEL-14156]
  - kbuild: Add generic hook for architectures to use before the final vmlinux link (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add a postlink script to validate function tracer (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/bpf: Fold bpf_jit_emit_func_call_hlp() into bpf_jit_emit_func_call_rel() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Move ftrace stub used for init text before _einittext (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Skip instruction patching if the instructions are the same (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Remove pointer to struct module from dyn_arch_ftrace (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/ftrace: Nop out additional 'std' instruction emitted by gcc v5.x (Mamatha Inamdar) [RHEL-14156]
  - powerpc/kprobes: Use ftrace to determine if a probe is at function entry (Mamatha Inamdar) [RHEL-14156]
  - powerpc/trace: Account for -fpatchable-function-entry support by toolchain (Mamatha Inamdar) [RHEL-14156]
  - kbuild: move vmlinux.o rule to the top Makefile (Mamatha Inamdar) [RHEL-14156]
  - powerpc/code-patching: Use dedicated memory routines for patching (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Ignore ftrace locations in exit text sections (Mamatha Inamdar) [RHEL-14156]
  - powerpc: Fix build issue with LD_DEAD_CODE_DATA_ELIMINATION and FTRACE_MCOUNT_USE_PATCHABLE_FUNCTION_ENTRY (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add support for -fpatchable-function-entry (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Implement ftrace_replace_code() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Replace use of ftrace_call_replace() with ftrace_create_branch_inst() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Simplify ftrace_modify_call() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Simplify ftrace_make_call() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Simplify ftrace_make_nop() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add separate ftrace_init_nop() with additional validation (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Stop re-purposing linker generated long branches for ftrace (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Refactor ftrace_modify_code() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Simplify function_graph support in ftrace.c (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Use patch_instruction() return directly (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Refactor prepare_ftrace_return() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Have arch_ftrace_get_regs() return NULL unless FL_SAVE_REGS is set (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add recursion protection in prepare_ftrace_return() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Also save r1 in ftrace_caller() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: directly call of function graph tracer by ftrace caller (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Refactor ftrace_{en/dis}able_ftrace_graph_caller (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Implement CONFIG_DYNAMIC_FTRACE_WITH_ARGS (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Prepare PPC64's ftrace_caller() for CONFIG_DYNAMIC_FTRACE_WITH_ARGS (Mamatha Inamdar) [RHEL-14156]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-670.el9]
changelog:
  - memblock: Accept allocated memory before use in memblock_double_array() (Aristeu Rozanski) [RHEL-140475]
  - Reapply "Bluetooth: revert TX timestamping" for kernel v6.18 rebase. (David Marlin) [RHEL-141499]
  - Bluetooth: hci_sync: enable PA Sync Lost event (David Marlin) [RHEL-141499]
  - Bluetooth: SMP: Fix not generating mackey and ltk when repairing (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: mediatek: Avoid btusb_mtk_claim_iso_intf() NULL deref (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: lookup hci_conn on RX path on protocol side (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: Fix triggering cmd_timer for HCI_OP_NOP (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interface (David Marlin) [RHEL-141499]
  - Bluetooth: btrtl: Avoid loading the config file on security chips (David Marlin) [RHEL-141499]
  - Bluetooth: hci_event: Fix not handling PA Sync Lost event (David Marlin) [RHEL-141499]
  - Bluetooth: hci_conn: Fix not cleaning up PA_LINK connections (David Marlin) [RHEL-141499]
  - Bluetooth: 6lowpan: add missing l2cap_chan_lock() (David Marlin) [RHEL-141499]
  - Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions (David Marlin) [RHEL-141499]
  - Bluetooth: L2CAP: export l2cap_chan_hold for modules (David Marlin) [RHEL-141499]
  - Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion (David Marlin) [RHEL-141499]
  - Bluetooth: 6lowpan: reset link-local header on ipv6 recv path (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-141499]
  - Bluetooth: MGMT: cancel mesh send timer when hdev removed (David Marlin) [RHEL-141499]
  - Bluetooth: btrtl: Fix memory leak in rtlbt_parse_firmware_v2() (David Marlin) [RHEL-141499]
  - Bluetooth: hci_event: validate skb length for unknown CC opcode (David Marlin) [RHEL-141499]
  - Bluetooth: rfcomm: fix modem control handling (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: Fix tracking of periodic advertisement (David Marlin) [RHEL-141499]
  - Bluetooth: hci_conn: Fix connection cleanup with BIG with 2 or more BIS (David Marlin) [RHEL-141499]
  - Bluetooth: fix corruption in h4_recv_buf() after cleanup (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Fix event packet loss issue (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: Fix another instance of dst_type handling (David Marlin) [RHEL-141499]
  - Bluetooth: btmtksdio: Add pmctrl handling for BT closed state during reset (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: Fix BIS connection dst_type handling (David Marlin) [RHEL-141499]
  - Bluetooth: Avoid a couple dozen -Wflex-array-member-not-at-end warnings (David Marlin) [RHEL-141499]
  - Bluetooth: hci_sync: Fix using random address for BIG/PA advertisements (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: don't leak skb in ISO_CONT RX (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: free rx_skb if not consumed (David Marlin) [RHEL-141499]
  - Bluetooth: SCO: Fix UAF on sco_conn_free (David Marlin) [RHEL-141499]
  - Bluetooth: bcsp: receive data only if registered (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: Add new VID/PID 13d3/3633 for MT7922 (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: Add new VID/PID 13d3/3627 for MT7925 (David Marlin) [RHEL-141499]
  - Bluetooth: remove duplicate h4_recv_buf() in header (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: Check for unexpected bytes when defragmenting HCI frames (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: Print information of hcon on hci_low_sent (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: Print number of packets in conn->data_q (David Marlin) [RHEL-141499]
  - Bluetooth: Add function and line information to bt_dbg (David Marlin) [RHEL-141499]
  - Bluetooth: MGMT: Fix not exposing debug UUID on MGMT_OP_READ_EXP_FEATURES_INFO (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: Detect if an ISO link has stalled (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: Use sk_sndtimeo as conn_timeout (David Marlin) [RHEL-141499]
  - Bluetooth: HCI: Fix using LE/ACL buffers for ISO packets (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: Don't initiate CIS connections if there are no buffers (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Refactor Device Coredump (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Use strscpy() instead of strscpy_pad() (David Marlin) [RHEL-141499]
  - Bluetooth: Annotate struct hci_drv_rp_read_info with __counted_by_le() (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Define hdev->wakeup() callback (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: Add USB ID 2001:332a for D-Link AX9U rev. A1 (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Move model comment before its definition (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Add id of Scorpious, Panther Lake-H484 (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Add Bluetooth core/platform as comments (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Add support for _suspend() / _resume() (David Marlin) [RHEL-141499]
  - Bluetooth: btintel: Add support for BlazarIW core (David Marlin) [RHEL-141499]
  - Revert "Bluetooth: revert TX timestamping" (David Marlin) [RHEL-141499]
  - dm log-writes: Add missing set_freezable() for freezable kthread (Benjamin Marzinski) [RHEL-136400]
  - dm-raid: fix possible NULL dereference with undefined raid type (Benjamin Marzinski) [RHEL-136400]
  - dm-snapshot: fix 'scheduling while atomic' on real-time kernels (Benjamin Marzinski) [RHEL-136400]
  - dm-verity: fix unreliable memory allocation (Benjamin Marzinski) [RHEL-136400]
  - perf jitdump: Add sym/str-tables to build-ID generation (Michael Petlan) [RHEL-139923]
  - perf genelf: Fix NO_LIBDW=1 build (Michael Petlan) [RHEL-139923]
  - perf genelf: Remove libcrypto dependency and use built-in sha1() (Michael Petlan) [RHEL-139923]
  - perf util: add a basic SHA-1 implementation (Michael Petlan) [RHEL-139923]
  - dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-139700]
  - net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-131711]
  - net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-131711]
  - net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-131711]
  - gfs2: Clean up quotad timeout handling (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: Minor cosmetic remote delete cleanups (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: fix remote evict for read-only filesystems (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: fix freeze error handling (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129403]
  - redhat/configs: Add CONFIG_CRYPTO_DEV_QAT_6XXX (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix warning on adf_pfvf_pf_proto.c (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add bank state save and restore for qat_420xx (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix parameter order used in ICP_QAT_FW_COMN_FLAGS_BUILD (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix duplicate restarting msg during AER error (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add WQ_PERCPU to alloc_workqueue users (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - use simple_strtoull to improve qat_uclo_parse_num (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - Return pointer directly in adf_ctl_alloc_resources (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - Replace kzalloc() + copy_from_user() with memdup_user() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - use kcalloc() in qat_uclo_map_objs_from_mof() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add command queue telemetry counters for GEN6 (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add ring buffer idle telemetry counter for GEN6 (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - make adf_dev_autoreset() static (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - refactor ring-related debug functions (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix seq_file position update in adf_ring_next() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix DMA direction for compression on GEN2 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - flush misc workqueue during device shutdown (Vladislav Dronov) [RHEL-94929] {CVE-2025-39721}
  - crypto: qat - enable rate limiting feature for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add compression slice count for rate limiting (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add get_svc_slice_cnt() in device data structure (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add adf_rl_get_num_svc_aes() in rate limiting (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - relocate service related functions (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - consolidate service enums (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add decompression service for rate limiting (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - validate service in rate limiting sysfs api (Vladislav Dronov) [RHEL-94929]
  - Documentation: qat: update debugfs-driver-qat_telemetry for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - enable telemetry for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add decompression service to telemetry (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - enable power management debugfs for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - relocate power management debugfs helper APIs (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix virtual channel configuration for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add live migration enablers for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - relocate and rename bank state structure definition (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - relocate bank state helper functions (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - replace CHECK_STAT macro with static inline function (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - use pr_fmt() in adf_gen4_hw_data.c (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - disable ZUC-256 capability for QAT GEN5 (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - restore ASYM service support for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - remove duplicate masking for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - lower priority for skcipher and aead algorithms (Vladislav Dronov) [RHEL-94929]
  - Documentation: qat: update sysfs-driver-qat for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add support for decompression service to GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix state restore for banks with exceptions (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - allow enabling VFs in the absence of IOMMU (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - use unmanaged allocation for dc_data (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add missing header inclusion (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - enable reporting of error counters for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - enable RAS support for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat/qat_6xxx - Fix NULL vs IS_ERR() check in adf_probe() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add qat_6xxx driver (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add firmware headers for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - update firmware api (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - export adf_init_admin_pm() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - expose configuration functions (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - export adf_get_service_mask() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add GEN6 firmware loader (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - refactor FW signing algorithm (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - use pr_fmt() in qat uclo.c (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - refactor compression template logic (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - rename and relocate timer logic (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - include qat_common in top Makefile (Vladislav Dronov) [RHEL-94929]
  - workqueue: Add new WQ_PERCPU flag (Vladislav Dronov) [RHEL-94929]
  - bitfield: Add FIELD_MODIFY() helper (Vladislav Dronov) [RHEL-94929]
  - sprintf.h requires stdarg.h (Vladislav Dronov) [RHEL-94929]
  - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (CKI Backport Bot) [RHEL-130018] {CVE-2025-40168}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-671.el9]
changelog:
  - ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-137910]
  - ice: fix devlink reload call trace (Michal Schmidt) [RHEL-141485]
  - ice: add missing ice_deinit_hw() in devlink reinit path (Michal Schmidt) [RHEL-141485]
  - ice: Fix persistent failure in ice_get_rxfh (Michal Schmidt) [RHEL-141485]
  - ice: Fix incorrect timeout ice_release_res() (Michal Schmidt) [RHEL-141485]
  - ice: Avoid detrimental cleanup for bond during interface stop (Michal Schmidt) [RHEL-141485]
  - ice: initialize ring_stats->syncp (Michal Schmidt) [RHEL-141485]
  - ice: remove duplicate call to ice_deinit_hw() on error paths (Michal Schmidt) [RHEL-141485]
  - ice: move ice_deinit_dev() to the end of deinit paths (Michal Schmidt) [RHEL-141485]
  - ice: extract ice_init_dev() from ice_init() (Michal Schmidt) [RHEL-141485]
  - ice: move ice_init_pf() out of ice_init_dev() (Michal Schmidt) [RHEL-141485]
  - ice: move udp_tunnel_nic and misc IRQ setup into ice_init_pf() (Michal Schmidt) [RHEL-141485]
  - iavf: add RSS support for GTP protocol via ethtool (Michal Schmidt) [RHEL-141485]
  - ice: implement GTP RSS context tracking and configuration (Michal Schmidt) [RHEL-141485]
  - ice: add virtchnl definitions and static data for GTP RSS (Michal Schmidt) [RHEL-141485]
  - ice: ice_init_pf: destroy mutexes and xarrays on memory alloc failure (Michal Schmidt) [RHEL-141485]
  - ice: refactor to use helpers (Michal Schmidt) [RHEL-141485]
  - ice: add E830 Earliest TxTime First Offload support (Michal Schmidt) [RHEL-141485]
  - ice, libie: move fwlog code to libie (Michal Schmidt) [RHEL-141485]
  - ice: support egress drop rules on PF (Michal Schmidt) [RHEL-141485]
  - iavf: fix off-by-one issues in iavf_config_rss_reg() (Michal Schmidt) [RHEL-141485] {CVE-2025-71087}
  - iavf: clarify VLAN add/delete log messages and lower log level (Michal Schmidt) [RHEL-141485]
  - ice: fix comment typo and correct module format string (Michal Schmidt) [RHEL-141485]
  - iavf: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-141485] {CVE-2025-68752}
  - ice: fix PTP cleanup on driver removal in error path (Michal Schmidt) [RHEL-141485] {CVE-2025-68215}
  - ice: Extend PTYPE bitmap coverage for GTP encapsulated flows (Michal Schmidt) [RHEL-141485]
  - ice: improve TCAM priority handling for RSS profiles (Michal Schmidt) [RHEL-141485]
  - ice: add flow parsing for GTP and new protocol field support (Michal Schmidt) [RHEL-141485]
  - ice: Allow 100M speed for E825C SGMII device (Michal Schmidt) [RHEL-141485]
  - ice: fix usage of logical PF id (Michal Schmidt) [RHEL-141485]
  - ice: fix destination CGU for dual complex E825 (Michal Schmidt) [RHEL-141485]
  - ice: fix lane number calculation (Michal Schmidt) [RHEL-141485]
  - ice: move ice_init_interrupt_scheme() prior ice_init_pf() (Michal Schmidt) [RHEL-141485]
  - ice: move service task start out of ice_init_pf() (Michal Schmidt) [RHEL-141485]
  - ice: enforce RTNL assumption of queue NAPI manipulation (Michal Schmidt) [RHEL-141485]
  - ice: implement transmit hardware timestamp statistics (Michal Schmidt) [RHEL-141485]
  - ice: add tracking of good transmit timestamps (Michal Schmidt) [RHEL-141485]
  - ice: implement ethtool standard stats (Michal Schmidt) [RHEL-141485]
  - libie: fix string names for AQ error codes (Michal Schmidt) [RHEL-141485]
  - iavf: fix proper type for error code in iavf_resume() (Michal Schmidt) [RHEL-141485]
  - ice: Remove deprecated ice_lag_move_new_vf_nodes() call (Michal Schmidt) [RHEL-141485]
  - ice: move ice_qp_[ena|dis] for reuse (Michal Schmidt) [RHEL-141485]
  - ice: reregister fwlog after driver reinit (Michal Schmidt) [RHEL-141485]
  - ice: prepare for moving file to libie (Michal Schmidt) [RHEL-141485]
  - ice: move debugfs code to fwlog (Michal Schmidt) [RHEL-141485]
  - libie, ice: move fwlog admin queue to libie (Michal Schmidt) [RHEL-141485]
  - ice: drop driver specific structure from fwlog code (Michal Schmidt) [RHEL-141485]
  - ice: check for PF number outside the fwlog code (Michal Schmidt) [RHEL-141485]
  - ice: move out debugfs init from fwlog (Michal Schmidt) [RHEL-141485]
  - ice: allow calling custom send function in fwlog (Michal Schmidt) [RHEL-141485]
  - ice: add pdev into fwlog structure and use it for logging (Michal Schmidt) [RHEL-141485]
  - ice: introduce ice_fwlog structure (Michal Schmidt) [RHEL-141485]
  - ice: drop ice_pf_fwlog_update_module() (Michal Schmidt) [RHEL-141485]
  - ice: move get_fwlog_data() to fwlog file (Michal Schmidt) [RHEL-141485]
  - ice: make fwlog functions static (Michal Schmidt) [RHEL-141485]
  - ice: finish virtchnl.c split into rss.c (Michal Schmidt) [RHEL-141485]
  - ice: extract virt/rss.c: cleanup - p2 (Michal Schmidt) [RHEL-141485]
  - ice: extract virt/rss.c: cleanup - p1 (Michal Schmidt) [RHEL-141485]
  - ice: split RSS stuff out of virtchnl.c - copy back (Michal Schmidt) [RHEL-141485]
  - ice: split RSS stuff out of virtchnl.c - tmp rename (Michal Schmidt) [RHEL-141485]
  - ice: finish virtchnl.c split into queues.c (Michal Schmidt) [RHEL-141485]
  - ice: extract virt/queues.c: cleanup - p3 (Michal Schmidt) [RHEL-141485]
  - ice: extract virt/queues.c: cleanup - p2 (Michal Schmidt) [RHEL-141485]
  - ice: extract virt/queues.c: cleanup - p1 (Michal Schmidt) [RHEL-141485]
  - ice: split queue stuff out of virtchnl.c - copy back (Michal Schmidt) [RHEL-141485]
  - ice: split queue stuff out of virtchnl.c - tmp rename (Michal Schmidt) [RHEL-141485]
  - ice: fix incorrect counter for buffer allocation failures (Michal Schmidt) [RHEL-141485]
  - ice: add virt/ and move ice_virtchnl* files there (Michal Schmidt) [RHEL-141485]
  - ice: Implement support for SRIOV VFs across Active/Active bonds (Michal Schmidt) [RHEL-141485]
  - ice: cleanup capabilities evaluation (Michal Schmidt) [RHEL-141485]
  - ice: Cleanup variable initialization in LAG code (Michal Schmidt) [RHEL-141485]
  - ice: move LAG function in code to prepare for Active-Active (Michal Schmidt) [RHEL-141485]
  - ice: Add driver specific prefix to LAG defines (Michal Schmidt) [RHEL-141485]
  - ice: replace u8 elements with bool where appropriate (Michal Schmidt) [RHEL-141485]
  - ice: Remove casts on void pointers in LAG code (Michal Schmidt) [RHEL-141485]
  - ice: Don't use %pK through printk or tracepoints (Michal Schmidt) [RHEL-141485]
  - net: Fix typos [partial:ice] (Michal Schmidt) [RHEL-141485]
  - iavf: use libie_aq_str (Michal Schmidt) [RHEL-141485]
  - ice: use libie_aq_str (Michal Schmidt) [RHEL-141485]
  - libie: add adminq helper for converting err to str (Michal Schmidt) [RHEL-141485]
  - iavf: use libie adminq descriptors (Michal Schmidt) [RHEL-141485]
  - i40e: use libie adminq descriptors [partial:ice,libie] (Michal Schmidt) [RHEL-141485]
  - ixgbe: use libie adminq descriptors [partial:libie] (Michal Schmidt) [RHEL-141485]
  - ice, libie: move generic adminq descriptors to lib (Michal Schmidt) [RHEL-141485]
  - ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (Michal Schmidt) [RHEL-141485] {CVE-2025-38664}
  - ice: breakout common LAG code into helpers (Michal Schmidt) [RHEL-141485]
  - ice: convert ice_add_prof() to bitmap (Michal Schmidt) [RHEL-141485]
  - ice: add E835 device IDs (Michal Schmidt) [RHEL-141485]
  - ice: add 40G speed to Admin Command GET PORT OPTION (Michal Schmidt) [RHEL-141485]
  - ice: check correct pointer in fwlog debugfs (Michal Schmidt) [RHEL-141485]
  - ice: add NULL check in eswitch lag check (Michal Schmidt) [RHEL-141485] {CVE-2025-38526}
  - ice: introduce ice_get_vf_by_dev() wrapper (Michal Schmidt) [RHEL-141485]
  - ice: avoid rebuilding if MSI-X vector count is unchanged (Michal Schmidt) [RHEL-141485]
  - ice: use pci_iov_vf_id() to get VF ID (Michal Schmidt) [RHEL-141485]
  - ice: expose VF functions used by live migration (Michal Schmidt) [RHEL-141485]
  - ice: move ice_vsi_update_l2tsel to ice_lib.c (Michal Schmidt) [RHEL-141485]
  - ice: save RSS hash configuration for migration (Michal Schmidt) [RHEL-141485]
  - ice: add functions to get and set Tx queue context (Michal Schmidt) [RHEL-141485]
  - ice: add support for reading and unpacking Rx queue context (Michal Schmidt) [RHEL-141485]
  - eth: ice: drop the dead code related to rss_contexts (Michal Schmidt) [RHEL-141485]
  - ice: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Michal Schmidt) [RHEL-141485]
  - ice: add ref-sync dpll pins (Michal Schmidt) [RHEL-141485]
  - net: ice: Perform accurate aRFS flow match (Michal Schmidt) [RHEL-141485]
  - ice: add phase offset monitor for all PPS dpll inputs (Michal Schmidt) [RHEL-141485]
  - ice: add a separate Rx handler for flow director commands (Michal Schmidt) [RHEL-141485]
  - ice: change SMA pins to SDP in PTP API (Michal Schmidt) [RHEL-141485]
  - ice: redesign dpll sma/u.fl pins control (Michal Schmidt) [RHEL-141485]
  - ice: add link_down_events statistic (Michal Schmidt) [RHEL-141485]
  - net: intel: move RSS packet classifier types to libie (Michal Schmidt) [RHEL-141485]
  - net: intel: rename 'hena' to 'hashcfg' for clarity (Michal Schmidt) [RHEL-141485]
  - iavf: extract iavf_watchdog_step() out of iavf_watchdog_task() (Michal Schmidt) [RHEL-141485]
  - iavf: simplify watchdog_task in terms of adminq task scheduling (Michal Schmidt) [RHEL-141485]
  - iavf: centralize watchdog requeueing itself (Michal Schmidt) [RHEL-141485]
  - ice: make const read-only array dflt_rules static (Michal Schmidt) [RHEL-141485]
  - ice: improve error message for insufficient filter space (Michal Schmidt) [RHEL-141485]
  - ice: enable LLDP TX for VFs through tc (Michal Schmidt) [RHEL-141485]
  - ice: remove headers argument from ice_tc_count_lkups (Michal Schmidt) [RHEL-141485]
  - ice: receive LLDP on trusted VFs (Michal Schmidt) [RHEL-141485]
  - ice: do not add LLDP-specific filter if not necessary (Michal Schmidt) [RHEL-141485]
  - ice: fix check for existing switch rule (Michal Schmidt) [RHEL-141485]
  - ice: clear NAPI's IRQ numbers in ice_vsi_clear_napi_queues() (Michal Schmidt) [RHEL-141485]
  - ice: refactor ICE_TC_FLWR_FIELD_ENC_OPTS (Michal Schmidt) [RHEL-141485]
  - Revert "ice: Fix ice VF reset during iavf initialization" (Michal Schmidt) [RHEL-141485]
  - ice: Fix ice VF reset during iavf initialization (Michal Schmidt) [RHEL-141485]
  - net/ena: fix missing lock when update devlink params (Kamal Heib) [RHEL-127326]
  - net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable (Kamal Heib) [RHEL-127326]
  - net: ena: View PHC stats using debugfs (Kamal Heib) [RHEL-127326]
  - net: ena: Add debugfs support to the ENA driver (Kamal Heib) [RHEL-127326]
  - net: ena: Control PHC enable through devlink (Kamal Heib) [RHEL-127326]
  - net: ena: Add devlink port support (Kamal Heib) [RHEL-127326]
  - net: ena: Add device reload capability through devlink (Kamal Heib) [RHEL-127326]
  - net: ena: PHC silent reset (Kamal Heib) [RHEL-127326]
  - net: ena: Add PHC support in the ENA driver (Kamal Heib) [RHEL-127326]
  - net: ena: resolve WARN_ON when freeing IRQs (Kamal Heib) [RHEL-127326]
  - net: ena: use napi's aRFS rmap notifers (Kamal Heib) [RHEL-127326]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-672.el9]
changelog:
  - net: ipv4: convert ip_rcv_options to drop reasons (Antoine Tenart) [RHEL-139236]
  - net: ipv4: simplify drop reason handling in ip_rcv_finish_core (Antoine Tenart) [RHEL-139236]
  - net: ipv4: make udp_v4_early_demux explicitly return drop reason (Antoine Tenart) [RHEL-139236]
  - net/sched: Add precise drop reason for pfifo_fast queue overflows (Antoine Tenart) [RHEL-139236]
  - net: track pfmemalloc drops via SKB_DROP_REASON_PFMEMALLOC (Antoine Tenart) [RHEL-139236]
  - net: arp: use kfree_skb_reason() in arp_rcv() (Antoine Tenart) [RHEL-139236]
  - can: add drop reasons in CAN protocols receive path (Antoine Tenart) [RHEL-139236]
  - can: add drop reasons in the receive path of AF_CAN (Antoine Tenart) [RHEL-139236]
  - net: neigh: use kfree_skb_reason() in neigh_resolve_output() and neigh_connected_output() (Antoine Tenart) [RHEL-139236]
  - net: flush_backlog() small changes (Antoine Tenart) [RHEL-139236]
  - tcp: rstreason: let it work finally in tcp_send_active_reset() (Antoine Tenart) [RHEL-139236]
  - tcp: rstreason: introduce SK_RST_REASON_TCP_DISCONNECT_WITH_DATA for active reset (Antoine Tenart) [RHEL-139236]
  - tcp: rstreason: introduce SK_RST_REASON_TCP_KEEPALIVE_TIMEOUT for active reset (Antoine Tenart) [RHEL-139236]
  - tcp: rstreason: introduce SK_RST_REASON_TCP_STATE for active reset (Antoine Tenart) [RHEL-139236]
  - tcp: rstreason: introduce SK_RST_REASON_TCP_ABORT_ON_MEMORY for active reset (Antoine Tenart) [RHEL-139236]
  - tcp: rstreason: introduce SK_RST_REASON_TCP_ABORT_ON_LINGER for active reset (Antoine Tenart) [RHEL-139236]
  - tcp: rstreason: introduce SK_RST_REASON_TCP_ABORT_ON_CLOSE for active reset (Antoine Tenart) [RHEL-139236]
  - x86/lam: Disable ADDRESS_MASKING in most cases (Rafael Aquini) [RHEL-109600]
  - svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142791] {CVE-2025-68811}
  - mm: Create/affine kswapd to its preferred node (Rafael Aquini) [RHEL-135521]
  - mm: Create/affine kcompactd to its preferred node (Rafael Aquini) [RHEL-135521]
  - mm/vmscan: print err before panic (Rafael Aquini) [RHEL-135521]
  - kthread: Fix return value on kzalloc() failure in kthread_affine_preferred() (Rafael Aquini) [RHEL-135521]
  - kthread: Implement preferred affinity (Rafael Aquini) [RHEL-135521]
  - kthread: Default affine kthread to its preferred NUMA node (Rafael Aquini) [RHEL-135521]
  - kthread: Make sure kthread hasn't started while binding it (Rafael Aquini) [RHEL-135521]
  - sched,arm64: Handle CPU isolation on last resort fallback rq selection (Rafael Aquini) [RHEL-135521]
  - arm64: Exclude nohz_full CPUs from 32bits el0 support (Rafael Aquini) [RHEL-135521]
  - blk-mq: skip CPU offline notify on unmapped hctx (Ming Lei) [RHEL-140714]
  - padata: remove __padata_list_init() (Herbert Xu) [RHEL-127800]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-673.el9]
changelog:
  - s390/cio: Update purge function to unregister the unused subchannels (Mete Durlu) [RHEL-145337]
  - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145338]
  - platform/x86:intel/pmc: Enable SSRAM support for Wildcat Lake (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Remove redundant has_die_c6 variable (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Relocate lpm_req_guid to pmc_reg_map (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Rename PMC index variable to pmc_idx (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Add DMU GUID to Arrow Lake U/H (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Add support for multiple DMU GUIDs (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Update Arrow Lake telemetry GUID (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Replace dev_warn() with dev_dbg() (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Enable SSRAM support for Panther Lake (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Show substate requirement for S0ix blockers (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Improve function to show substate header (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Move telemetry endpoint register handling (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Enable SSRAM support for Lunar Lake (David Arcari) [RHEL-95637]
  - platform/x86/intel/pmc: Add Wildcat Lake support to Intel PMC SSRAM Telemetry (David Arcari) [RHEL-95637]
  - platform/x86/intel/pmc: use kcalloc() instead of kzalloc() (David Arcari) [RHEL-95637]
  - platform/x86/intel/vsec: Add support for Wildcat Lake (David Arcari) [RHEL-95637]
  - platform/x86/amd/hsmp: Replace amd_num_nodes() with topology_max_packages() (David Arcari) [RHEL-122802]
  - tools/power turbostat: Add Wildcat Lake and Nova Lake support (CKI Backport Bot) [RHEL-95677]
  - EDAC/i10nm: Add Intel Clearwater Forest server support (Aristeu Rozanski) [RHEL-45085]
  - ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-97718]
  - ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-97718]
  - ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-97718]
  - ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-97718]
  - ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-97718]
  - ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-97718]
  - ipmi:si: Merge some if statements (Tony Camuso) [RHEL-97718]
  - ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-97718]
  - ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-97718]
  - ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-97718]
  - ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-97718]
  - ipmi: Rework user message limit handling (Tony Camuso) [RHEL-97718]
  - Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-97718]
  - ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-97718]
  - char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-97718]
  - ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-97718]
  - ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-97718]
  - ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-97718]
  - ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-97718]
  - ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-97718]
  - ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-97718]
  - ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-97718]
  - ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-97718]
  - i40e: add rh_phys_port_name mod option to behave like upstream (Michal Schmidt) [RHEL-126034]
  - ice: add rh_phys_port_name mod option to behave like upstream (Michal Schmidt) [RHEL-126034]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-674.el9]
changelog:
  - s390/drivers: Remove unnecessary include <linux/export.h> (Mete Durlu) [RHEL-99995]
  - scsi: zfcp: Simplify workqueue allocation (Mete Durlu) [RHEL-99995]
  - s390/zfcp: Remove outdated email address (Mete Durlu) [RHEL-99995]
  - rcu/nocb: Add Safe checks for access offloaded rdp (Luis Claudio R. Goncalves) [RHEL-144727]
  - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137596] {CVE-2025-38459}
  - drm/amdkfd: Fix improper NULL termination of queue restore SMI event string (José Expósito) [RHEL-135337]
  - drm/amd/display: Fix DP no audio issue (José Expósito) [RHEL-135337]
  - drm/amd/pm: force send pcie parmater on navi1x (José Expósito) [RHEL-135337]
  - drm/amd/pm: fix wrong pcie parameter on navi1x (José Expósito) [RHEL-135337]
  - drm/amd/display: shrink struct members (José Expósito) [RHEL-135337]
  - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] (José Expósito) [RHEL-135337]
  - drm/tidss: Fix enable/disable order (José Expósito) [RHEL-135337]
  - drm/atomic-helper: Export and namespace some functions (José Expósito) [RHEL-135337]
  - drm/amdgpu: Fix query for VPE block_type and ip_count (José Expósito) [RHEL-135337]
  - drm/amd/display: Apply e4479aecf658 to dml (José Expósito) [RHEL-135337]
  - Revert "drm/atomic-helper: Re-order bridge chain pre-enable and post-disable" (José Expósito) [RHEL-135337]
  - nouveau: don't attempt fwsec on sb on newer platforms. (José Expósito) [RHEL-135337]
  - drm/imagination: Disallow exporting of PM/FW protected objects (José Expósito) [RHEL-135337]
  - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb (José Expósito) [RHEL-135337]
  - drm/pagemap, drm/xe: Ensure that the devmem allocation is idle before use (José Expósito) [RHEL-135337]
  - drm/xe/svm: Fix a debug printout (José Expósito) [RHEL-135337]
  - drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer (José Expósito) [RHEL-135337]
  - drm/xe: Drop preempt-fences when destroying imported dma-bufs. (José Expósito) [RHEL-135337]
  - drm/xe: Use usleep_range for accurate long-running workload timeslicing (José Expósito) [RHEL-135337]
  - drm/xe: Adjust long-running workload timeslices to reasonable values (José Expósito) [RHEL-135337]
  - drm/xe/eustall: Disallow 0 EU stall property values (José Expósito) [RHEL-135337]
  - drm/xe/oa: Disallow 0 OA property values (José Expósito) [RHEL-135337]
  - drm/xe/bo: Don't include the CCS metadata in the dma-buf sg-table (José Expósito) [RHEL-135337]
  - drm: Fix object leak in DRM_IOCTL_GEM_CHANGE_HANDLE (José Expósito) [RHEL-135337]
  - drm/mgag200: Fix big-endian support (José Expósito) [RHEL-135337]
  - drm/ttm: Avoid NULL pointer deref for evicted BOs (José Expósito) [RHEL-135337]
  - drm/i915: Fix format string truncation warning (José Expósito) [RHEL-135337]
  - drm/amdkfd: Trap handler support for expert scheduling mode (José Expósito) [RHEL-135337]
  - drm/amdkfd: bump minimum vgpr size for gfx1151 (José Expósito) [RHEL-135337]
  - drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace (José Expósito) [RHEL-135337]
  - drm/nouveau/gsp: Allocate fwsec-sb at boot (José Expósito) [RHEL-135337]
  - drm/bridge: ti-sn65dsi83: ignore PLL_UNLOCK errors (José Expósito) [RHEL-135337]
  - drm/amd: Fix unbind/rebind for VCN 4.0.5 (José Expósito) [RHEL-135337]
  - drm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl() (José Expósito) [RHEL-135337]
  - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() (José Expósito) [RHEL-135337]
  - drm/buddy: Separate clear and dirty free block trees (José Expósito) [RHEL-135337]
  - drm/buddy: Optimize free block management with RB tree (José Expósito) [RHEL-135337]
  - drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling (José Expósito) [RHEL-135337]
  - drm/amdgpu/sdma6: Update SDMA 6.0.3 FW version to include UMQ protected-fence fix (José Expósito) [RHEL-135337]
  - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma (José Expósito) [RHEL-135337]
  - drm/amdgpu: Forward VMID reservation errors (José Expósito) [RHEL-135337]
  - drm/amdgpu/gmc12: add amdgpu_vm_handle_fault() handling (José Expósito) [RHEL-135337]
  - Revert "drm/amd: Skip power ungate during suspend for VPE" (José Expósito) [RHEL-135337]
  - drm/xe/guc: READ/WRITE_ONCE g2h_fence->done (José Expósito) [RHEL-135337]
  - drm/gem-shmem: Fix the MODULE_LICENSE() string (José Expósito) [RHEL-135337]
  - drm/amdgpu: don't attach the tlb fence for SI (José Expósito) [RHEL-135337]
  - drm/displayid: add quirk to ignore DisplayID checksum errors (José Expósito) [RHEL-135337]
  - drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct drm_edid_ident (José Expósito) [RHEL-135337]
  - drm: nova: depend on CONFIG_64BIT (José Expósito) [RHEL-135337]
  - drm/displayid: pass iter to drm_find_displayid_extension() (José Expósito) [RHEL-135337]
  - drm/amd/display: Fix scratch registers offsets for DCN351 (José Expósito) [RHEL-135337]
  - drm/amd/display: Fix scratch registers offsets for DCN35 (José Expósito) [RHEL-135337]
  - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() (José Expósito) [RHEL-135337]
  - Revert "drm/amd/display: Fix pbn to kbps Conversion" (José Expósito) [RHEL-135337]
  - drm/xe/oa: Always set OAG_OAGLBCTXCTRL_COUNTER_RESUME (José Expósito) [RHEL-135337]
  - drm/xe/oa: Limit num_syncs to prevent oversized allocations (José Expósito) [RHEL-135337]
  - drm/xe: Limit num_syncs to prevent oversized allocations (José Expósito) [RHEL-135337]
  - drm/amdgpu: fix a job->pasid access race in gpu recovery (José Expósito) [RHEL-135337]
  - drm/panel: sony-td4353-jdi: Enable prepare_prev_first (José Expósito) [RHEL-135337]
  - drm/xe: Restore engine registers before restarting schedulers after GT reset (José Expósito) [RHEL-135337]
  - drm/xe: Increase TDF timeout (José Expósito) [RHEL-135337]
  - drm/me/gsc: mei interrupt top half should be in irq disabled context (José Expósito) [RHEL-135337]
  - drm/xe: fix drm_gpusvm_init() arguments (José Expósito) [RHEL-135337]
  - drm/xe: Apply Wa_14020316580 in xe_gt_idle_enable_pg() (José Expósito) [RHEL-135337]
  - drm/xe: Fix freq kobject leak on sysfs_create_files failure (José Expósito) [RHEL-135337]
  - drm/tests: Handle EDEADLK in set_up_atomic_state() (José Expósito) [RHEL-135337]
  - drm/tests: Handle EDEADLK in drm_test_check_valid_clones() (José Expósito) [RHEL-135337]
  - drm/tests: hdmi: Handle drm_kunit_helper_enable_crtc_connector() returning EDEADLK (José Expósito) [RHEL-135337]
  - drm/i915/fbdev: Hold runtime PM ref during fbdev BO creation (José Expósito) [RHEL-135337]
  - drm/{i915, xe}/fbdev: deduplicate struct drm_mode_fb_cmd2 init (José Expósito) [RHEL-135337]
  - drm/{i915, xe}/fbdev: pass struct drm_device to intel_fbdev_fb_alloc() (José Expósito) [RHEL-135337]
  - drm/i915/fbdev: make intel_framebuffer_create() error return handling explicit (José Expósito) [RHEL-135337]
  - drm/xe/fbdev: use the same 64-byte stride alignment as i915 (José Expósito) [RHEL-135337]
  - drm/amdkfd: Use huge page size to check split svm range alignment (José Expósito) [RHEL-135337]
  - drm/nouveau: fix circular dep oops from vendored i2c encoder (José Expósito) [RHEL-135337]
  - drm/nouveau: refactor deprecated strcpy (José Expósito) [RHEL-135337]
  - drm/plane: Fix IS_ERR() vs NULL check in drm_plane_create_hotspot_properties() (José Expósito) [RHEL-135337]
  - drm/panel: novatek-nt35560: avoid on-stack device structure (José Expósito) [RHEL-135337]
  - drm/panthor: Prevent potential UAF in group creation (José Expósito) [RHEL-135337]
  - drm/amdkfd: assign AID to uuid in topology for SPX mode (José Expósito) [RHEL-135337]
  - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() (José Expósito) [RHEL-135337]
  - drm/panthor: Avoid adding of kernel BOs to extobj list (José Expósito) [RHEL-135337]
  - drm/nouveau: restrict the flush page to a 32-bit address (José Expósito) [RHEL-135337]
  - drm/tidss: Move OLDI mode validation to OLDI bridge mode_valid hook (José Expósito) [RHEL-135337]
  - drm/tidss: Remove max_pclk_khz and min_pclk_khz from tidss display features (José Expósito) [RHEL-135337]
  - drm/panthor: Fix potential memleak of vma structure (José Expósito) [RHEL-135337]
  - drm/panthor: Fix UAF on kernel BO VA nodes (José Expósito) [RHEL-135337]
  - drm/panthor: Fix race with suspend during unplug (José Expósito) [RHEL-135337]
  - drm/panthor: Fix UAF race between device unplug and FW event processing (José Expósito) [RHEL-135337]
  - drm/panthor: Fix group_free_queue() for partially initialized queues (José Expósito) [RHEL-135337]
  - drm/panthor: Handle errors returned by drm_sched_entity_init() (José Expósito) [RHEL-135337]
  - drm/imagination: Fix reference to devm_platform_get_and_ioremap_resource() (José Expósito) [RHEL-135337]
  - accel/ivpu: Fix race condition when unbinding BOs (José Expósito) [RHEL-135337]
  - drm: nova: select NOVA_CORE (José Expósito) [RHEL-135337]
  - accel/ivpu: Remove skip of dma unmap for imported buffers (José Expósito) [RHEL-135337]
  - drm/rcar-du: dsi: Fix missing parameter in RXSETR_...EN macros (José Expósito) [RHEL-135337]
  - drm/amdgpu/userq: fix SDMA and compute validation (José Expósito) [RHEL-135337]
  - drm/amdgpu: add userq object va track helpers (José Expósito) [RHEL-135337]
  - accel/ivpu: Fix race condition when mapping dmabuf (José Expósito) [RHEL-135337]
  - drm: atmel-hlcdc: fix atmel_xlcdc_plane_setup_scaler() (José Expósito) [RHEL-135337]
  - drm/vgem-fence: Fix potential deadlock on release (José Expósito) [RHEL-135337]
  - accel/ivpu: Fix DCT active percent format (José Expósito) [RHEL-135337]
  - accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context() (José Expósito) [RHEL-135337]
  - accel/ivpu: Rework bind/unbind of imported buffers (José Expósito) [RHEL-135337]
  - drm/panel: visionox-rm69299: Don't clear all mode flags (José Expósito) [RHEL-135337]
  - drm/panel: visionox-rm69299: Fix clock frequency for SHIFT6mq (José Expósito) [RHEL-135337]
  - accel/ivpu: Ensure rpm_runtime_put in case of engine reset/resume fail (José Expósito) [RHEL-135337]
  - Reapply "drm/vkms: convert to use faux_device" (José Expósito) [RHEL-135337]
  - printk: Use console_is_usable on console_unblank (Derek Barbosa) [RHEL-141481]
  - printk: Check CON_SUSPEND when unblanking a console (Derek Barbosa) [RHEL-141481]
  - printk: Avoid irq_work for printk_deferred() on suspend (Derek Barbosa) [RHEL-141481]
  - printk: Avoid scheduling irq_work on suspend (Derek Barbosa) [RHEL-141481]
  - printk: nbcon: Allow reacquire during panic (Derek Barbosa) [RHEL-141481]
  - printk: Allow printk_trigger_flush() to flush all types (Herton R. Krzesinski) [RHEL-141481]
  - printk: nbcon: Use raw_cpu_ptr() instead of open coding (Herton R. Krzesinski) [RHEL-141481]
  - backport "printk: Add helper for flush type logic" and associated changes (Herton R. Krzesinski) [RHEL-141481]
  - printk: Remove redundant deferred check in vprintk() (Herton R. Krzesinski) [RHEL-141481]
  - printk: Introduce force_legacy_kthread() macro (Herton R. Krzesinski) [RHEL-141481]
  - printk: Add is_printk_legacy_deferred() (Herton R. Krzesinski) [RHEL-141481]
  - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132890] {CVE-2023-53034}
  - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138020] {CVE-2025-38415}
  - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138020] {CVE-2025-38415}
  - scsi: qla2xxx: Enable/disable IRQD_NO_BALANCING during reset (Ewan D. Milne) [RHEL-89559]
  - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset (Ewan D. Milne) [RHEL-89559]
  - perf/x86/intel/cstate: Add Clearwater Forest support (Michael Petlan) [RHEL-45067]
  - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-7971]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-675.el9]
changelog:
  - sched: Fix tracepoint called from set_tsk_need_resched() more (Phil Auld) [RHEL-145368]
  - smb: client: fix oops in smbd_post_send_data() (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix UBSAN array-index-out-of-bounds in smb2_copychunk_range (Paulo Alcantara) [RHEL-116058]
  - smb3 client: add missing tracepoint for unsupported ioctls (Paulo Alcantara) [RHEL-116058]
  - cifs: Fix memory and information leak in smb3_reconfigure() (Paulo Alcantara) [RHEL-116058] {CVE-2025-71151}
  - smb: move some SMB1 definitions into common/smb1pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: align durable reconnect v2 context to 8 byte boundary (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.connect.{lock,work} (Paulo Alcantara) [RHEL-116058]
  - smb/client: remove DeviceType Flags and Device Characteristics definitions (Paulo Alcantara) [RHEL-116058]
  - smb: move File Attributes definitions into common/fscc.h (Paulo Alcantara) [RHEL-116058]
  - smb: update struct duplicate_extents_to_file_ex (Paulo Alcantara) [RHEL-116058]
  - smb: move file_notify_information to common/fscc.h (Paulo Alcantara) [RHEL-116058]
  - smb: move SMB2 Notify Action Flags into common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move notify completion filter flags into common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb/client: add parentheses to NT error code definitions containing bitwise OR operator (Paulo Alcantara) [RHEL-116058]
  - smb: add documentation references for smb2 change notify definitions (Paulo Alcantara) [RHEL-116058]
  - smb/client: add 4 NT error code definitions (Paulo Alcantara) [RHEL-116058]
  - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value (Paulo Alcantara) [RHEL-116058]
  - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value (Paulo Alcantara) [RHEL-116058]
  - smb/client: fix NT_STATUS_NO_DATA_DETECTED value (Paulo Alcantara) [RHEL-116058]
  - smb/client: update some SMB2 status strings (Paulo Alcantara) [RHEL-116058]
  - cifs: Remove dead function prototypes (Paulo Alcantara) [RHEL-116058]
  - smb/client: add two elements to smb2_error_map_table array (Paulo Alcantara) [RHEL-116058]
  - smb: rename to STATUS_SMB_NO_PREAUTH_INTEGRITY_HASH_OVERLAP (Paulo Alcantara) [RHEL-116058]
  - smb/client: remove unused elements from smb2_error_map_table array (Paulo Alcantara) [RHEL-116058]
  - smb/client: reduce loop count in map_smb2_to_linux_error() by half (Paulo Alcantara) [RHEL-116058]
  - smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-116058]
  - smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-116058]
  - smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-116058]
  - cifs: client: allow changing multichannel mount options on remount (Paulo Alcantara) [RHEL-116058]
  - cifs: Do some preparation prior to organising the function declarations (Paulo Alcantara) [RHEL-116058]
  - cifs: Don't need state locking in smb2_get_mid_entry() (Paulo Alcantara) [RHEL-116058]
  - cifs: Remove the server pointer from smb_message (Paulo Alcantara) [RHEL-116058]
  - cifs: Fix specification of function pointers (Paulo Alcantara) [RHEL-116058]
  - cifs: Replace SendReceiveBlockingLock() with SendReceive() plus flags (Paulo Alcantara) [RHEL-116058]
  - cifs: Clean up some places where an extra kvec[] was required for rfc1002 (Paulo Alcantara) [RHEL-116058]
  - cifs: Make smb1's SendReceive() wrap cifs_send_recv() (Paulo Alcantara) [RHEL-116058]
  - cifs: Remove the RFC1002 header from smb_hdr (Paulo Alcantara) [RHEL-116058]
  - cifs: client: enforce consistent handling of multichannel and max_channels (Paulo Alcantara) [RHEL-116058]
  - smb: client: show smb lease key in open_dirs output (Paulo Alcantara) [RHEL-116058]
  - smb: client: show smb lease key in open_files output (Paulo Alcantara) [RHEL-116058]
  - smb: client: relax WARN_ON_ONCE(SMBDIRECT_SOCKET_*) checks in recv_done() and smbd_conn_upcall() (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce SMBDIRECT_CHECK_STATUS_{WARN,DISCONNECT}() (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce SMBDIRECT_DEBUG_ERR_PTR() helper (Paulo Alcantara) [RHEL-116058]
  - smb: move FILE_SYSTEM_ATTRIBUTE_INFO to common/fscc.h (Paulo Alcantara) [RHEL-116058]
  - smb: move create_durable_reconn to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: fix some warnings reported by scripts/checkpatch.pl (Paulo Alcantara) [RHEL-116058]
  - smb: do some cleanups (Paulo Alcantara) [RHEL-116058]
  - smb: move FILE_SYSTEM_SIZE_INFO to common/fscc.h (Paulo Alcantara) [RHEL-116058]
  - smb: move some duplicate struct definitions to common/fscc.h (Paulo Alcantara) [RHEL-116058]
  - smb: move list of FileSystemAttributes to common/fscc.h (Paulo Alcantara) [RHEL-116058]
  - smb: move SMB_NEGOTIATE_REQ to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move some duplicate definitions to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move create_durable_rsp_v2 to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move create_durable_handle_reconnect_v2 to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move create_durable_req_v2 to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move MAX_CIFS_SMALL_BUFFER_SIZE to common/smbglob.h (Paulo Alcantara) [RHEL-116058]
  - smb/client: fix CAP_BULK_TRANSFER value (Paulo Alcantara) [RHEL-116058]
  - smb: move resume_key_ioctl_rsp to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move copychunk definitions to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move smb_sockaddr_in and smb_sockaddr_in6 to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move SMB1_PROTO_NUMBER to common/smbglob.h (Paulo Alcantara) [RHEL-116058]
  - smb: move get_rfc1002_len() to common/smbglob.h (Paulo Alcantara) [RHEL-116058]
  - smb: move smb_version_values to common/smbglob.h (Paulo Alcantara) [RHEL-116058]
  - smb: rename common/cifsglob.h to common/smbglob.h (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix memory leak in cifs_construct_tcon() (Paulo Alcantara) [RHEL-116058] {CVE-2025-68295}
  - cifs: fix memory leak in smb3_fs_context_parse_param error path (Paulo Alcantara) [RHEL-116058] {CVE-2025-68219}
  - smb: client: introduce close_cached_dir_locked() (Paulo Alcantara) [RHEL-116058]
  - smb: client: let smbd_disconnect_rdma_connection() turn CREATED into DISCONNECTED (Paulo Alcantara) [RHEL-116058]
  - smb: fix invalid username check in smb3_fs_context_parse_param() (Paulo Alcantara) [RHEL-116058]
  - cifs: client: fix memory leak in smb3_fs_context_parse_param (Paulo Alcantara) [RHEL-116058] {CVE-2025-40268}
  - smb: client: fix cifs_pick_channel when channel needs reconnect (Paulo Alcantara) [RHEL-116058]
  - smb: client: validate change notify buffer before copy (Paulo Alcantara) [RHEL-116058]
  - smb: client: call smbd_destroy() in the same splace as kernel_sock_shutdown()/sock_release() (Paulo Alcantara) [RHEL-116058]
  - cifs: fix typo in enable_gcm_256 module parameter (Paulo Alcantara) [RHEL-116058]
  - cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-116058]
  - cifs: Call the calc_signature functions directly (Paulo Alcantara) [RHEL-116058]
  - cifs: Fix TCP_Server_Info::credits to be signed (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.send_io.lcredits.* (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.send_io.lcredits.* (Paulo Alcantara) [RHEL-116058]
  - smb: client: allocate enough space for MR WRs and ib_drain_qp() (Paulo Alcantara) [RHEL-116058]
  - smb: client: let smbd_destroy() wait for SMBDIRECT_SOCKET_DISCONNECTED (Paulo Alcantara) [RHEL-116058]
  - smb: move some duplicate definitions to common/cifsglob.h (Paulo Alcantara) [RHEL-116058]
  - smb: client: let destroy_mr_list() keep smbdirect_mr_io memory if registered (Paulo Alcantara) [RHEL-116058]
  - smb: client: let destroy_mr_list() call ib_dereg_mr() before ib_dma_unmap_sg() (Paulo Alcantara) [RHEL-116058]
  - smb: client: call ib_dma_unmap_sg if mr->sgt.nents is not 0 (Paulo Alcantara) [RHEL-116058]
  - smb: client: improve logic in smbd_deregister_mr() (Paulo Alcantara) [RHEL-116058]
  - smb: client: improve logic in smbd_register_mr() (Paulo Alcantara) [RHEL-116058]
  - smb: client: improve logic in allocate_mr_list() (Paulo Alcantara) [RHEL-116058]
  - smb: client: let destroy_mr_list() remove locked from the list (Paulo Alcantara) [RHEL-116058]
  - smb: client: let destroy_mr_list() call list_del(&mr->list) (Paulo Alcantara) [RHEL-116058]
  - smb: client: change smbd_deregister_mr() to return void (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_mr_io.{kref,mutex} and SMBDIRECT_MR_DISABLED (Paulo Alcantara) [RHEL-116058]
  - smb: client: Omit one redundant variable assignment in cifs_xattr_set() (Paulo Alcantara) [RHEL-116058]
  - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-116058]
  - cifs: Add comments for DeletePending assignments in open functions (Paulo Alcantara) [RHEL-116058]
  - cifs: Add fallback code path for cifs_mkdir_setinfo() (Paulo Alcantara) [RHEL-116058]
  - cifs: Allow fallback code in smb_set_file_info() also for directories (Paulo Alcantara) [RHEL-116058]
  - cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove redudant assignment in cifs_strict_fsync() (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix race with fallocate(2) and AIO+DIO (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix missing timestamp updates after ftruncate(2) (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix missing timestamp updates with O_TRUNC (Paulo Alcantara) [RHEL-116058]
  - smb: client: batch SRV_COPYCHUNK entries to cut round trips (Paulo Alcantara) [RHEL-116058]
  - smb: client: Omit an if branch in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-116058]
  - smb: client: Return directly after a failed genlmsg_new() in cifs_swn_send_register_message() (Paulo Alcantara) [RHEL-116058]
  - smb: client: Use common code in cifs_do_create() (Paulo Alcantara) [RHEL-116058]
  - smb: client: Improve unlocking of a mutex in cifs_get_swn_reg() (Paulo Alcantara) [RHEL-116058]
  - smb: client: Return a status code only as a constant in cifs_spnego_key_instantiate() (Paulo Alcantara) [RHEL-116058]
  - smb: client: Use common code in cifs_lookup() (Paulo Alcantara) [RHEL-116058]
  - smb: client: Reduce the scopes for a few variables in two functions (Paulo Alcantara) [RHEL-116058]
  - cifs: client: force multichannel=off when max_channels=1 (Paulo Alcantara) [RHEL-116058]
  - smb: client: transport: avoid reconnects triggered by pending task work (Paulo Alcantara) [RHEL-116058]
  - smb: client: add tcon information to smb2_reconnect() debug messages (Paulo Alcantara) [RHEL-116058]
  - smb: client: let smbd_post_send_iter() call ib_dma_map_single() for the header first (Paulo Alcantara) [RHEL-116058]
  - smb: client: defer calling ib_alloc_pd() after we are connected (Paulo Alcantara) [RHEL-116058]
  - smb: client: allocate smbdirect workqueue at the beginning of _smbd_get_connection() (Paulo Alcantara) [RHEL-116058]
  - smb: client: make consitent use of spin_lock_irq{save,restore}() in smbdirect.c (Paulo Alcantara) [RHEL-116058]
  - smb: client: let smbd_{destroy,disconnect_rdma_{work,connection}}() wake up all wait queues (Paulo Alcantara) [RHEL-116058]
  - smb: client: let smbd_disconnect_rdma_connection() disable all work but disconnect_work (Paulo Alcantara) [RHEL-116058]
  - smb: client: fill in smbdirect_socket.first_error on error (Paulo Alcantara) [RHEL-116058]
  - smb: client: let smbd_disconnect_rdma_connection() set SMBDIRECT_SOCKET_ERROR... (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to get_mr() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_negotiate() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_post_send_negotiate_req() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_ia_open() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_create_id() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_qp_async_error_upcall() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_conn_upcall() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_post_send_full_iter() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_post_send_empty() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_post_send_iter() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to manage_keep_alive_before_sending() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_post_send() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to manage_credits_prior_sending() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_post_recv() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_disconnect_rdma_connection() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to {allocate,destroy}_mr_list() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to {enqueue,_get_first}_reassembly() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to {allocate,destroy}_caches_and_workqueue() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to {allocate,destroy}_receive_buffers() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to {get,put}_receive_buffer() (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.mr_io (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket_parameters.max_frmr_depth (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of struct smbdirect_mr_io (Paulo Alcantara) [RHEL-116058]
  - smb: client: add and use smbd_get_parameters() (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.workqueue (Paulo Alcantara) [RHEL-116058]
  - smb: client: move rdma_readwrite_threshold from smbd_connection to TCP_Server_Info (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.statistics (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove unused smbd_connection.count_reassembly_queue (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove unused smbd_connection->protocol (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.idle.{keepalive,immediate_work,timer_work} (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix smbdirect keep alive handling to match the documentation (Paulo Alcantara) [RHEL-116058]
  - smb: client: send empty packets via send_immediate_work (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.rdma.legacy_iwarp (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket_parameters.{initiator_depth,responder_resources} (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket_parameters.{resolve_{addr,route},rdma_connect,negotiate}_timeout_msec (Paulo Alcantara) [RHEL-116058]
  - smb: client: fill smbdirect_socket_parameters at the beginning and use the values from there (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove useless smbd_connection.send_immediate (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.recv_io.{posted,credits} (Paulo Alcantara) [RHEL-116058]
  - smb: client: count the number of posted recv_io messages in order to calculated credits (Paulo Alcantara) [RHEL-116058]
  - smb: client: limit the range of info->receive_credit_target (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove info->wait_receive_queues handling in smbd_destroy() (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of ib_wc_status_msg() and skip IB_WC_WR_FLUSH_ERR logging (Paulo Alcantara) [RHEL-116058]
  - smb: client: queue post_recv_credits_work also if the peer raises the credit target (Paulo Alcantara) [RHEL-116058]
  - smb: client: make sure smbd_disconnect_rdma_work() doesn't run after smbd_destroy() took over (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.send_io.credits.{count,wait_queue} (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.send_io.pending.{count,{dec,zero}_wait_queue} (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.disconnect_work (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket_init() (Paulo Alcantara) [RHEL-116058]
  - smb: client: make only use of wake_up[_all]() in smbdirect.c (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.status_wait (Paulo Alcantara) [RHEL-116058]
  - smb: client: use status_wait and SMBDIRECT_SOCKET_RESOLVE_{ADDR,ROUTE}_RUNNING for completion (Paulo Alcantara) [RHEL-116058]
  - smb: client: use status_wait and SMBDIRECT_SOCKET_NEGOTIATE_RUNNING for completion (Paulo Alcantara) [RHEL-116058]
  - smb: client: adjust smbdirect related output of cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.first_error (Paulo Alcantara) [RHEL-116058]
  - smb: client/smbdirect: introduce SMBDIRECT_SOCKET_ERROR (Paulo Alcantara) [RHEL-116058]
  - smb: client/smbdirect: replace SMBDIRECT_SOCKET_CONNECTING with more detailed states (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix sending the iwrap custom IRD/ORD negotiation messages (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: let smbdirect_socket_init() initialize all [delayed_]work_structs as disabled (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.mr_io.* (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket_parameters.max_frmr_depth (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce struct smbdirect_mr_io (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.workqueue (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.statistics (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.idle.{keepalive,immediate_work,timer_work} (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.rdma.legacy_iwarp (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket_parameters.{initiator_depth,responder_resources} (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket_parameters.{resolve_{addr,route},rdma_connect,negotiate}_timeout_msec (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.{posted,credits} (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce struct smbdirect_rw_io (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.rw_io.credits (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce struct smbdirect_send_batch (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.send_io.credits.{count,wait_queue} (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.send_io.pending.{count,{dec,zero}_wait_queue} (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.disconnect_work (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket_init() (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.status_wait (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket_status_string() (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path (Paulo Alcantara) [RHEL-116058] {CVE-2025-39929}
  - smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work) (Paulo Alcantara) [RHEL-116058] {CVE-2025-39932}
  - smb: client: use disable[_delayed]_work_sync in smbdirect.c (Paulo Alcantara) [RHEL-116058]
  - cifs: prevent NULL pointer dereference in UTF16 conversion (Paulo Alcantara) [RHEL-116058] {CVE-2025-39838}
  - smb: client: fix spellings in comments (Paulo Alcantara) [RHEL-116058]
  - smb3 client: fix return code mapping of remap_file_range (Paulo Alcantara) [RHEL-116058]
  - smb: client: don't wait for info->send_pending == 0 on error (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-116058]
  - cifs: avoid extra calls to strlen() in cifs_get_spnego_key() (Paulo Alcantara) [RHEL-116058]
  - cifs: Fix collect_sample() to handle any iterator type (Paulo Alcantara) [RHEL-116058]
  - smb: client: only use a single wait_queue to monitor smbdirect connection status (Paulo Alcantara) [RHEL-116058]
  - smb: client: don't call init_waitqueue_head(&info->conn_wait) twice in _smbd_get_connection (Paulo Alcantara) [RHEL-116058]
  - smb: client: improve logging in smbd_conn_upcall() (Paulo Alcantara) [RHEL-116058]
  - smb: client: return an error if rdma_connect does not return within 5 seconds (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.{send,recv}_io.mem.{cache,pool} (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: add smbdirect_socket.{send,recv}_io.mem.{cache,pool} (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of struct smbdirect_send_io (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce struct smbdirect_send_io (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of SMBDIRECT_RECV_IO_MAX_SGE (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: add SMBDIRECT_RECV_IO_MAX_SGE (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove unused enum smbd_connection_status (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.recv_io.reassembly.* (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.reassembly.* (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smb: smbdirect_socket.recv_io.free.{list,lock} (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.free.{list,lock} (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of struct smbdirect_recv_io (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce struct smbdirect_recv_io (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket->recv_io.expected (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.expected (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove unused smbd_connection->fragment_reassembly_remaining (Paulo Alcantara) [RHEL-116058]
  - smb: client: let recv_done() avoid touching data_transfer after cleanup/move (Paulo Alcantara) [RHEL-116058]
  - smb: client: let recv_done() cleanup before notifying the callers. (Paulo Alcantara) [RHEL-116058]
  - smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove separate empty_packet_queue (Paulo Alcantara) [RHEL-116058]
  - smb: client: let send_done() cleanup before calling smbd_disconnect_rdma_connection() (Paulo Alcantara) [RHEL-116058]
  - cifs: Move the SMB1 transport code out of transport.c (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-116058]
  - r8152: Advertise software timestamp information. (Jose Ignacio Tornos Martinez) [RHEL-132607]
  - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137684] {CVE-2025-40304}
  - fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136943] {CVE-2025-40322}
  - ixgbe: use EOPNOTSUPP instead of ENOTSUPP in ixgbe_ptp_feature_enable() (Corinna Vinschen) [RHEL-97675]
  - ixgbe: fix memory leak and use-after-free in ixgbe_recovery_probe() (Corinna Vinschen) [RHEL-97675]
  - ixgbe: fix too early devlink_free() in ixgbe_remove() (Corinna Vinschen) [RHEL-97675]
  - ixgbe: handle IXGBE_VF_FEATURES_NEGOTIATE mbox cmd (Corinna Vinschen) [RHEL-97675]
  - ixgbevf: fix mailbox API compatibility by negotiating supported features (Corinna Vinschen) [RHEL-97673]
  - ixgbe: handle IXGBE_VF_GET_PF_LINK_STATE mailbox operation (Corinna Vinschen) [RHEL-97675]
  - ixgbevf: fix getting link speed data for E610 devices (Corinna Vinschen) [RHEL-97673]
  - ixgbe: fix typos and docstring inconsistencies (Corinna Vinschen) [RHEL-97675]
  - ixgbevf: fix proper type for error code in ixgbevf_resume() (Corinna Vinschen) [RHEL-97673]
  - ixgbe: destroy aci.lock later within ixgbe_remove path (Corinna Vinschen) [RHEL-97675]
  - ixgbe: initialize aci.lock before it's used (Corinna Vinschen) [RHEL-97675]
  - ixgbe: fix typo in function comment for ixgbe_get_num_per_func() (Corinna Vinschen) [RHEL-97675]
  - ixgbe: drop unnecessary casts to u16 / int (Corinna Vinschen) [RHEL-97675]
  - ixgbe: reduce number of reads when getting OROM data (Corinna Vinschen) [RHEL-97675]
  - ixgbe: add the 2.5G and 5G speeds in auto-negotiation for E610 (Corinna Vinschen) [RHEL-97675]
  - ixgbe: fix incorrect map used in eee linkmode (Corinna Vinschen) [RHEL-97675]
  - ixgbe: fix ndo_xdp_xmit() workloads (Corinna Vinschen) [RHEL-97675]
  - ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc (Corinna Vinschen) [RHEL-97675]
  - eth: intel: use vmalloc_array() to simplify code [ixgbevf] (Corinna Vinschen) [RHEL-97673]
  - eth: intel: use vmalloc_array() to simplify code [ixgbe] (Corinna Vinschen) [RHEL-97675]
  - net: Fix typos [ixgbevf] (Corinna Vinschen) [RHEL-97673]
  - ixgbevf: remove unused fields from struct ixgbevf_adapter (Corinna Vinschen) [RHEL-97673]
  - ethernet: intel: fix building with large NR_CPUS [ixgbe] (Corinna Vinschen) [RHEL-97675]
  - ixgbe: spelling corrections (Corinna Vinschen) [RHEL-97675]
  - ixgbe: turn off MDD while modifying SRRCTL (Corinna Vinschen) [RHEL-97675]
  - ixgbe: add Tx hang detection unhandled MDD (Corinna Vinschen) [RHEL-97675]
  - ixgbe: check for MDD events (Corinna Vinschen) [RHEL-97675]
  - ixgbe: add MDD support (Corinna Vinschen) [RHEL-97675]
  - ixgbe: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Corinna Vinschen) [RHEL-97675]
  - ixgbe: Fix typos and clarify comments in X550 driver code (Corinna Vinschen) [RHEL-97675]
  - ixgbe: add link_down_events statistic (Corinna Vinschen) [RHEL-97675]
  - ixgbe: devlink: add devlink region support for E610 (Corinna Vinschen) [RHEL-97675]
  - ixgbe: add E610 .set_phys_id() callback implementation (Corinna Vinschen) [RHEL-97675]
  - ixgbe: apply different rules for setting FC on E610 (Corinna Vinschen) [RHEL-97675]
  - ixgbe: add support for ACPI WOL for E610 (Corinna Vinschen) [RHEL-97675]
  - ixgbe: create E610 specific ethtool_ops structure (Corinna Vinschen) [RHEL-97675]
  - ixgbevf: stop attempting IPSEC offload on Mailbox API 1.5 (Corinna Vinschen) [RHEL-97673]
  - ixgbevf: Add support for new mailbox communication between PF and VF (Corinna Vinschen) [RHEL-97673]
  - igc: Reduce TSN TX packet buffer from 7KB to 5KB per queue (Corinna Vinschen) [RHEL-97650]
  - igc: fix race condition in TX timestamp read for register 0 (Corinna Vinschen) [RHEL-97650]
  - igc: Restore default Qbv schedule when changing channels (Corinna Vinschen) [RHEL-97650]
  - igc: extract GRXRINGS from .get_rxnfc (Corinna Vinschen) [RHEL-97650]
  - igc: use EOPNOTSUPP instead of ENOTSUPP in igc_ethtool_get_sset_count() (Corinna Vinschen) [RHEL-97650]
  - igc: power up the PHY before the link test (Corinna Vinschen) [RHEL-97650]
  - igc: don't fail igc_probe() on LED setup error (Corinna Vinschen) [RHEL-97650] {CVE-2025-39956}
  - igc: drop unnecessary constant casts to u16 (Corinna Vinschen) [RHEL-97650]
  - igc: fix disabling L1.2 PCI-E link substate on I226 on init (Corinna Vinschen) [RHEL-97650]
  - eth: intel: use vmalloc_array() to simplify code [igc] (Corinna Vinschen) [RHEL-97650]
  - net: Fix typos [igc] (Corinna Vinschen) [RHEL-97650]
  - igc: Add wildcard rule support to ethtool NFC using Default Queue (Corinna Vinschen) [RHEL-97650]
  - igc: Relocate RSS field definitions to igc_defines.h (Corinna Vinschen) [RHEL-97650]
  - igc: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Corinna Vinschen) [RHEL-97650]
  - igc: disable L1.2 PCI-E link substate to avoid performance issue (Corinna Vinschen) [RHEL-97650]
  - igc: Make the const read-only array supported_sizes static (Corinna Vinschen) [RHEL-97650]
  - igc: add preemptible queue support in mqprio (Corinna Vinschen) [RHEL-97650]
  - igc: add preemptible queue support in taprio (Corinna Vinschen) [RHEL-97650]
  - igc: add private flag to reverse TX queue priority in TSN mode (Corinna Vinschen) [RHEL-97650]
  - igc: assign highest TX queue number as highest priority in mqprio (Corinna Vinschen) [RHEL-97650]
  - igc: refactor TXDCTL macros to use FIELD_PREP and GEN_MASK (Corinna Vinschen) [RHEL-97650]
  - igc: add DCTL prefix to related macros (Corinna Vinschen) [RHEL-97650]
  - igc: move TXDCTL and RXDCTL related macros (Corinna Vinschen) [RHEL-97650]
  - igc: Change Tx mode for MQPRIO offloading (Corinna Vinschen) [RHEL-97650]
  - igc: Limit netdev_tc calls to MQPRIO (Corinna Vinschen) [RHEL-97650]
  - igc: add support to get frame preemption statistics via ethtool (Corinna Vinschen) [RHEL-97650]
  - igc: add support to get MAC Merge data via ethtool (Corinna Vinschen) [RHEL-97650]
  - igc: block setting preemptible traffic class in taprio (Corinna Vinschen) [RHEL-97650]
  - igc: add support to set tx-min-frag-size (Corinna Vinschen) [RHEL-97650]
  - igc: add support for frame preemption verification (Corinna Vinschen) [RHEL-97650]
  - igc: Fix TX drops in XDP ZC (Corinna Vinschen) [RHEL-97650]
  - igc: Add launch time support to XDP ZC (Corinna Vinschen) [RHEL-97650]
  - igc: Refactor empty frame insertion for launch time support (Corinna Vinschen) [RHEL-97650]
  - igc: Switch to use hrtimer_setup() (Corinna Vinschen) [RHEL-97650]
  - igb: extract GRXRINGS from .get_rxnfc (Corinna Vinschen) [RHEL-97672]
  - igbvf: fix misplaced newline in VLAN add warning message (Corinna Vinschen) [RHEL-97690]
  - igb: use EOPNOTSUPP instead of ENOTSUPP in igb_get_sset_count() (Corinna Vinschen) [RHEL-97672]
  - igb: fix link test skipping when interface is admin down (Corinna Vinschen) [RHEL-97672]
  - igb: Fix NULL pointer dereference in ethtool loopback test (Corinna Vinschen) [RHEL-97672]
  - igb: drop unnecessary constant casts to u16 (Corinna Vinschen) [RHEL-97672]
  - igbvf: remove redundant counter rx_long_byte_count from ethtool statistics (Corinna Vinschen) [RHEL-97690]
  - igbvf: add lbtx_packets and lbtx_bytes to ethtool statistics (Corinna Vinschen) [RHEL-97690]
  - eth: intel: use vmalloc_array() to simplify code [igb] (Corinna Vinschen) [RHEL-97672]
  - igbvf: remove unused fields from struct igbvf_adapter (Corinna Vinschen) [RHEL-97690]
  - igbvf: add tx_timeout_count to ethtool statistics (Corinna Vinschen) [RHEL-97690]
  - igbvf: remove unused interrupt counter fields from struct igbvf_adapter (Corinna Vinschen) [RHEL-97690]
  - igb: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Corinna Vinschen) [RHEL-97672]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-676.el9]
changelog:
  - io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths [partial] (Jeff Moyer) [RHEL-141266]
  - io_uring: fix filename leak in __io_openat_prep() (Jeff Moyer) [RHEL-141266]
  - io_uring: fix min_wait wakeups for SQPOLL (Jeff Moyer) [RHEL-141266]
  - io_uring/kbuf: use READ_ONCE() for userspace-mapped memory (Jeff Moyer) [RHEL-141266]
  - io_uring/rsrc: fix lost entries after cloned range (Jeff Moyer) [RHEL-141266]
  - io_uring/poll: correctly handle io_poll_add() return value on update (Jeff Moyer) [RHEL-141266]
  - io_uring: use WRITE_ONCE for user shared memory (Jeff Moyer) [RHEL-141266]
  - io_uring: correct __must_hold annotation in io_install_fixed_file (Jeff Moyer) [RHEL-141266]
  - io_uring/sqpoll: be smarter on when to update the stime usage (Jeff Moyer) [RHEL-141266]
  - io_uring/sqpoll: switch away from getrusage() for CPU accounting (Jeff Moyer) [RHEL-141266]
  - io_uring: fix incorrect io_kiocb reference in io_link_skb (Jeff Moyer) [RHEL-141266]
  - io_uring: include dying ring in task_work "should cancel" state (Jeff Moyer) [RHEL-141266]
  - io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-141266]
  - io_uring: finish IOU_OK -> IOU_COMPLETE transition (Jeff Moyer) [RHEL-141266]
  - io_uring: unify STOP_MULTISHOT with IOU_OK (Jeff Moyer) [RHEL-141266]
  - io_uring: return -EAGAIN to continue multishot (Jeff Moyer) [RHEL-141266]
  - RDMA/efa: Remove possible negative shift (Kamal Heib) [RHEL-140844]
  - RDMA/efa: Extend admin timeout error print (Kamal Heib) [RHEL-140844]
  - RDMA/efa: Add Network HW statistics counters (Kamal Heib) [RHEL-140844]
  - e1000e: Introduce private flag to disable K1 (Corinna Vinschen) [RHEL-134986]
  - e1000e: drop unnecessary constant casts to u16 (Corinna Vinschen) [RHEL-134986]
  - e1000e: ignore uninitialized checksum word on tgp (Corinna Vinschen) [RHEL-134986]
  - e1000e: disregard NVM checksum on tgp when valid checksum bit is not set (Corinna Vinschen) [RHEL-134986]
  - e1000e: set fixed clock frequency indication for Nahum 11 and Nahum 13 (Corinna Vinschen) [RHEL-134986]
  - e1000e: change k1 configuration on MTP and later platforms (Corinna Vinschen) [RHEL-134986]
  - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-129138]
  - x86/microcode: Mark early_parse_cmdline() as __init (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-129138]
  - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-129138]
  - redhat/configs: Add CONFIG_MICROCODE_DBG [=n] (Waiman Long) [RHEL-129138]
  - x86/microcode: Add microcode loader debugging functionality (Waiman Long) [RHEL-129138]
  - x86/microcode: Add microcode= cmdline parsing (Waiman Long) [RHEL-129138]
  - x86/microcode/intel: Refresh the revisions that determine old_microcode (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Do not return error when microcode update is not necessary (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Clean the cache if update did not load microcode (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Make __verify_patch_size() return bool (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Remove bogus comment from parse_container() (Waiman Long) [RHEL-129138]
  - mm: memcg: add NULL check to obj_cgroup_put() (Radostin Stoyanov) [RHEL-113275]
  - mm: memcg: use rstat for non-hierarchical stats (Radostin Stoyanov) [RHEL-113275]
  - mm: memcg: change flush_next_time to flush_last_time (Radostin Stoyanov) [RHEL-113275]
  - zswap: export compression failure stats (Radostin Stoyanov) [RHEL-113275]
  - Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline" (Radostin Stoyanov) [RHEL-113275]
  - cgroup/rstat: Fix forceidle time in cpu.stat (Radostin Stoyanov) [RHEL-113275]
  - memcg: drain obj stock on cpu hotplug teardown (Radostin Stoyanov) [RHEL-113275]
  - memcg: avoid dead loop when setting memory.max (Radostin Stoyanov) [RHEL-113275]
  - cgroup: Add compatibility option for content of /proc/cgroups (Radostin Stoyanov) [RHEL-113275]
  - cgroup: Print message when /proc/cgroups is read on v2-only system (Radostin Stoyanov) [RHEL-113275]
  - cgroup,freezer: fix incomplete freezing when attaching tasks (Radostin Stoyanov) [RHEL-113275]
  - cgroup: add helper for checking when css is cgroup::self (Radostin Stoyanov) [RHEL-113275]
  - include/cgroup: separate {get,put}_cgroup_ns no-op case (Radostin Stoyanov) [RHEL-113275]
  - sched: Factor out cgroup weight conversion functions (Radostin Stoyanov) [RHEL-113275]
  - blk-cgroup: Simplify policy files registration (Radostin Stoyanov) [RHEL-113275]
  - selftests/bpf: Add a test for bpf_cgroup_from_id lookup in non-root cgns (Radostin Stoyanov) [RHEL-113275]
  - bpf: Do not limit bpf_cgroup_from_id to current's namespace (Radostin Stoyanov) [RHEL-113275]
  - mm: cleanup WORKINGSET_NODES in workingset (Radostin Stoyanov) [RHEL-113275]
  - memcg: cleanup __mod_memcg_lruvec_state (Radostin Stoyanov) [RHEL-113275]
  - memcg: reduce memory size of mem_cgroup_events_index (Radostin Stoyanov) [RHEL-113275]
  - sched/headers: Move 'struct sched_param' out of uapi, to work around glibc/musl breakage (Radostin Stoyanov) [RHEL-113275]
  - cgroup/bpf: only cgroup v2 can be attached by bpf programs (Radostin Stoyanov) [RHEL-113275]
  - cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Radostin Stoyanov) [RHEL-113275]
  - Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Radostin Stoyanov) [RHEL-113275]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-677.el9]
changelog:
  - nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference (Ming Lei) [RHEL-142602]
  - scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-138489]
  - evm: Support multiple LSMs providing an xattr (Coiby Xu) [RHEL-140008]
  - evm: Align evm_inode_init_security() definition with LSM infrastructure (Coiby Xu) [RHEL-140008]
  - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-136438]
  - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-136438]
  - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-136438]
  - audit: fix out-of-bounds read in audit_compare_dname_path() (CKI Backport Bot) [RHEL-119177] {CVE-2025-39840}


author: Tao Liu <ltao@redhat.com> - 2.0.29-2
changelog:
  - Re-introduce vmcore creation notification to kdump
  - Revert "Introduce vmcore creation notification to kdump"
  - Add kdump dracut config
  - kdump-lib-initramfs: Improve mount point retrieval logic


author: Tao Liu <ltao@redhat.com> - 2.0.29-3
changelog:
  - fadump: fix passing additional parameters for capture kernel
  - fadump: pass additional parameters for capture kernel


author: Tao Liu <ltao@redhat.com> - 2.0.29-6
changelog:
  - 99-kdump.conf: Omit rdma module
  - Fallback to get NIC driver by /sys/class/net/NIC/device/driver/module
  - Note user-specified crashkernel value will be overwritten by default value


author: Tao Liu <ltao@redhat.com> - 2.0.29-7
changelog:
  - 99-kdump.conf: Omit clevis related dracut modules
  - kdump-lib.sh: rounded up the total_mem to 128M in get_system_size
  - kdump-lib.sh: Adjust default crashkernel reservation for x86_64 and s390x
  - doc/kdump.conf: correctly align the options


author: Tao Liu <ltao@redhat.com> - 2.0.29-8
changelog:
  - kdumpctl: check and generate /etc/vconsole.conf
  - kdump-lib.sh: Reserve crashkernel by default for systems with 1G-2G memory


author: Tao Liu <ltao@redhat.com> - 2.0.29-12
changelog:
  - Allow "sudo kdumpctl" for LUKS dump target
  - Restore SELinux label of crypttab file
  - Allow kdump.service to access LUKS volume keys
  - Wait for LUKS configfs API to be ready
  - Change LUKS volume key prefix to kdump-cryptsetup:vk-
  - Remove unused LUKS volume keys from keyring
  - Limit LUKS support to x86_64
  - Add kdumpctl setup-crypttab subcommand
  - Return LUKS devices in the form of UUIDs directly
  - Fix SC2181 issues in kdump-udev-throttler
  - LUKS: make /usr writable
  - Address CPU/memory hot plugging for kdump LUKS support
  - shfmt kdump-udev-throttler
  - Use cryptsetup --link-vk-to-keyring to save volume keys
  - Support dumping to a LUKS-encrypted target
  - Add a helper function to get uuid by MAJ:MIN


author: Pingfan Liu <piliu@redhat.com> - 2.0.29-14
changelog:
  - powerpc: Set nr_cpus=16 for kdump kernel
  - powerpc: consider CPU count while calculating crashkernel value
  - Use all available CPUs to collect dump


author: Lichen Liu <lichliu@redhat.com> - 2.0.29-15
changelog:
  - sysconfig: use initramfs_options to reduce memory usage
  - kdump-lib-initramfs: rewrite kdump_get_conf_val
  - kdump-lib-initramfs: Fix performance regression in kdump_get_conf_val


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
    Resolves: rhbz#2151513
  - Remove invalid password expiry warning
    Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
    Resolves: rhbz#2063838
  - New upstream version (1.20.1)
    Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
    Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Julien Rische <jrische@redhat.com> - 1.21.1-9
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88704
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88048
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-82647


author: Steve Dickson <steved@redhat.com> 0.10-0
changelog:
  - Initial package
  - Upstream contributions by:
      - Chuck Lever <chuck.lever@oracle.com>
      - Hannes Reinecke <hare@suse.de>
      - Jeff Layton <jlayton@kernel.org>
      - Benjamin Coddington <bcodding@redhat.com>
      - David Härdeman <david@hardeman.nu>
      - Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
      - Moritz "WanzenBug" Wanzenböck <moritz.wanzenboeck@linbit.com>


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-5
changelog:
  - resolves: RHEL-101761 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-4.el9)


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-1
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114548 - Update to version 4.23.4
  - resolves: RHEL-132995 - Fix Time Machine backup
  - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-1
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-143401 - Fix winbind group resolution
  - resolves: RHEL-141027 - Fix winbind crash


author: Honza Horak <hhorak@redhat.com> - 590-1
changelog:
  - Update to the version 590
  - Also solves the "message overlay" in the terminal
    Resolves: #2062188


author: Marek Polacek <polacek@redhat.com> 11.5.0-2
changelog:
  - fix TARGET_CPU_DEFAULT (PR target/105157, RHEL-50037)
  - libstdc++: Workaround kernel-headers on s390x-linux (RHEL-50054)
  - fix wrong code with memcpy from _Complex (PR tree-optimization/116034)


author: Florian Weimer <fweimer@redhat.com> - 11.5.0-10
changelog:
  - Exception handling performance improvements (RHEL-105072)
  - libgcc: Use _dl_find_object to find DWARF data in unwinder
  - libgcc: Use lock-free data structures for run-time unwinder registration


author: David Malcolm <dmalcolm@redhat.com> - 11.5.0-14
changelog:
  - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
    branches and calls to gcov output, but not conditions (RHEL-105416).


author: Marek Polacek <polacek@redhat.com> 11.4.1-2
changelog:
  - update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release
    - PRs bootstrap/90543, c++/53932, c++/69410, c++/92752, c++/98056,
  	c++/98821, c++/100295, c++/100474, c++/101118, c++/101869,
  	c++/102780, c++/103871, c++/104527, c++/105406, c++/105996,
  	c++/106188, c++/106675, c++/106713, c++/106740, c++/107065,
  	c++/107163, c++/107179, c++/107558, c++/107579, c++/107864,
  	c++/108138, c++/108180, c++/108365, c++/108468, c++/108474,
  	c++/108607, c++/108975, c++/108998, c++/109096, c++/109164, c/107127,
  	c/107465, c/109151, d/107592, d/108050, d/108877, d/109108,
  	debug/106719, debug/108573, debug/108716, debug/108967, driver/106624,
  	fortran/85877, fortran/95107, fortran/96024, fortran/96025,
  	fortran/99036, fortran/103259, fortran/104332, fortran/106209,
  	fortran/106945, fortran/107576, fortran/107872, fortran/108131,
  	fortran/108349, fortran/108420, fortran/108421, fortran/108451,
  	fortran/108453, fortran/108501, fortran/108502, fortran/108527,
  	fortran/108529, fortran/108609, fortran/108937, fortran/109186,
  	fortran/109511, fortran/109846, ipa/105685, ipa/106124, ipa/107944,
  	libquadmath/87204, libquadmath/94756, libstdc++/91456,
  	libstdc++/103934, libstdc++/104866, libstdc++/104875,
  	libstdc++/105844, libstdc++/106183, libstdc++/107801,
  	libstdc++/107814, libstdc++/108030, libstdc++/108118,
  	libstdc++/108265, libstdc++/108636, libstdc++/108856,
  	libstdc++/108952, libstdc++/109064, libstdc++/109261,
  	libstdc++/109949, lto/109263, middle-end/104450, middle-end/104464,
  	middle-end/106190, middle-end/107317, middle-end/108237,
  	middle-end/108264, middle-end/108435, middle-end/108459,
  	middle-end/108546, middle-end/108625, middle-end/108685,
  	middle-end/108854, other/108560, other/109306,
  	rtl-optimization/106751, rtl-optimization/107482,
  	rtl-optimization/108193, rtl-optimization/108596,
  	rtl-optimization/109585, target/70243, target/90458, target/96373,
  	target/98776, target/100758, target/104871, target/104921,
  	target/105554, target/105599, target/106736, target/106875,
  	target/107568, target/107714, target/107863, target/108272,
  	target/108348, target/108589, target/108699, target/108807,
  	target/108812, target/108881, target/109067, target/109140,
  	target/109276, testsuite/47334, testsuite/103823, testsuite/108151,
  	testsuite/108973, testsuite/108985, tree-optimization/105484,
  	tree-optimization/106809, tree-optimization/107107,
  	tree-optimization/107212, tree-optimization/107254,
  	tree-optimization/107323, tree-optimization/107451,
  	tree-optimization/107554, tree-optimization/107898,
  	tree-optimization/107997, tree-optimization/108068,
  	tree-optimization/108076, tree-optimization/108095,
  	tree-optimization/108199, tree-optimization/108498,
  	tree-optimization/108688, tree-optimization/108692,
  	tree-optimization/108821, tree-optimization/108950,
  	tree-optimization/109176, tree-optimization/109410,
  	tree-optimization/109473, tree-optimization/109491,
  	tree-optimization/109502, tree-optimization/109573,
  	tree-optimization/109724, tree-optimization/109778
    - PRs fortran/100607, libstdc++/109822, target/109954,
  	tree-optimization/109505


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Marek Polacek <polacek@redhat.com> 11.5.0-1
changelog:
  - update from releases/gcc-11 branch (RHEL-35635)
    - GCC 11.5 release
    - PRs ada/113893, ada/113979, analyzer/104042, c/113262, c/114007, c/114493,
  	c++/89224, c++/92145, c++/92407, c++/97990, c++/99710, c++/100667,
  	c++/100772, c++/101765, c++/103185, c++/104051, c++/111485,
  	c++/111529, c++/113598, c++/113674, c++/114537, c++/114561,
  	c++/114562, c++/114572, c++/114634, c++/114691, d/113125, d/113758,
  	d/114171, debug/111080, debug/112718, driver/115440, fortran/50410,
  	fortran/103715, fortran/104908, fortran/107426, fortran/114474,
  	fortran/114825, gcov-profile/114115, libfortran/110651,
  	libgomp/113192, libquadmath/114533, libstdc++/104259,
  	libstdc++/104606, libstdc++/105417, libstdc++/110054,
  	libstdc++/113250, libstdc++/114147, libstdc++/114401,
  	libstdc++/114750, libstdc++/114803, libstdc++/115269,
  	libstdc++/115454, libstdc++/115575, middle-end/90348,
  	middle-end/95351, middle-end/107385, middle-end/108789,
  	middle-end/110027, middle-end/110115, middle-end/110176,
  	middle-end/111422, middle-end/111632, middle-end/112732,
  	middle-end/113907, middle-end/113921, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/115527,
  	middle-end/115836, objc/101666, objc/101718, preprocessor/105608,
  	rtl-optimization/100303, rtl-optimization/108086,
  	rtl-optimization/110079, rtl-optimization/114768,
  	rtl-optimization/114902, rtl-optimization/115092, sanitizer/97696,
  	sanitizer/111736, sanitizer/114956, sanitizer/115172, target/88309,
  	target/101737, target/101865, target/105522, target/108120,
  	target/108743, target/110411, target/111610, target/111677,
  	target/112397, target/113122, target/113281, target/114049,
  	target/114098, target/114130, target/114184, target/114310,
  	target/114837, target/114846, target/115253, target/115297,
  	target/115360, target/115457, target/115475, target/115611,
  	target/115691, testsuite/113175, testsuite/114034, testsuite/114036,
  	tree-optimization/110386, tree-optimization/110422,
  	tree-optimization/111039, tree-optimization/111070,
  	tree-optimization/111331, tree-optimization/111407,
  	tree-optimization/111445, tree-optimization/111736,
  	tree-optimization/112495, tree-optimization/112505,
  	tree-optimization/112793, tree-optimization/113372,
  	tree-optimization/113552, tree-optimization/113603,
  	tree-optimization/114027, tree-optimization/114115,
  	tree-optimization/114566, tree-optimization/114876,
  	tree-optimization/115192, tree-optimization/115337,
  	tree-optimization/115843
  - fix FLUSH IOSTAT value (PR libfortran/101255, RHEL-32536)
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960)


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Jaroslav Rohel <jrohel@redhat.com> - 0.69.0-7
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-12123)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279, RHEL-6304)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-12124)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-9
changelog:
  - Grow memory if applying a query after increasing a number of available
    packages (RHEL-27657)
  - Fix a memory leak in get_best_solution() (RHEL-26226)
  - Fix destructing libdnf::TransactionItem from a base class (RHEL-26240)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-11
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-1454)


author: Evan Goode <egoode@redhat.com> - 0.69.0-16
changelog:
  - Introduce $releasever_major, $releasever_minor variables, shell-style
    variable substitution (RHEL-95006)


author: Pino Toscano <ptoscano@redhat.com> 1.29.35-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Clean up tests using Cloud What detectors properly (mhorky@redhat.com)
  - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Typo fixes (ptoscano@redhat.com)
  - Avoid string puzzle (ptoscano@redhat.com)
  - Properly use ungettext for plural forms (ptoscano@redhat.com)
  - 2189664: cache: fix SyspurposeComplianceStatusCache on failed load
    (ptoscano@redhat.com)
  - dbus: don't catch exceptions in DomainSocketServer.run()
    (ptoscano@redhat.com)
  - cli: directly exit on InvalidCLIOptionError (ptoscano@redhat.com)
  - Revert "ENT-5549: Fix return code handling of CLI" (ptoscano@redhat.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - Update .git-blame-ignore-revs (mhorky@redhat.com)
  - Format code with black==23.3.0 (mhorky@redhat.com)
  - ENT-5535: Update black to version 23.3.0 (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.36-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ENT-5581: Update messaging around the "container mode" (mhorky@redhat.com)
  - Remove 'dbus' marker for pytest (mhorky@redhat.com)
  - Rewrite D-Bus tests to be testable without pytest-forked (mhorky@redhat.com)
  - Drop further ethtool dependency mentions (mhorky@redhat.com)
  - tests: fix test_file_monitor without pyinotify (ptoscano@redhat.com)
  - tests: switch from imp to importlib (ptoscano@redhat.com)
  - Fix the order of user env var checking for translations.
    (tkuratom@redhat.com)
  - 2215974: Collect network facts using 'ip' (mhorky@redhat.com)
  - ENT-5582: Remove container detection envvar overwrite (mhorky@redhat.com)
  - ENT-5603: Explicitly check for provided entitlement certificates
    (mhorky@redhat.com)
  - fix test case (chambrid@redhat.com)
  - Collect GCP Project information as cloud facts (chambrid@redhat.com)
  - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com)
  - ENT-5580: Disable the proper container detection (mhorky@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - 2093291: Make reading of cache file more reliable (jhnidek@redhat.com)
  - 2093291: Make code of DNF plugins testable (jhnidek@redhat.com)
  - spec: change subscription-manager dnf dep (ptoscano@redhat.com)
  - spec: update libdnf-plugin-subscription-manager deps (ptoscano@redhat.com)
  - tests: repair attach cases in SCA mode (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.37-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - 2225446: Hotfix of D-Bus policy (jhnidek@redhat.com)
  - TESTING: Update testing requirements (mhorky@redhat.com)
  - Use Fedora registry to pull container images (mhorky@redhat.com)
  - 2232316: dbus: check "force" again from the registration option
    (ptoscano@redhat.com)
  - dbus: run EntCertActionInvoker on PoolAttach (ptoscano@redhat.com)
  - ENT-5624: Properly translate error strings (mhorky@redhat.com)
  - Mock IOError for Insights fact collection tests (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.38-1
changelog:
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ENT-5603: Fix a typo in a comment (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.39-1
changelog:
  - tito: drop bz requirement (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)
  - RHEL-7206: Small change of message printed by dnf plugin (jhnidek@redhat.com)
  - CCT-118: Fix flake8 error E721 (mhorky@redhat.com)
  - Fix type hint in rhsm (mhorky@redhat.com)
  - Simplify autoregistration test setup (mhorky@redhat.com)
  - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com)
  - Fixed inappropriate logical expression (ataf@openrefactory.com)
  - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com)
  - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com)
  - RPM: Avoid needless runtime requirement on python3-setuptools
    (miro@hroncok.cz)
  - cli: normalize hostname in error message (ptoscano@redhat.com)
  - connection: normalize hostname in ConnectionOSErrorException
    (ptoscano@redhat.com)
  - Improved printing of addresses and URLs (jhnidek@redhat.com)
  - Use username and password from --proxy=URL (jhnidek@redhat.com)
  - Use parse_url() from utils.py for parsing URL, when --proxy is used.
    (jhnidek@redhat.com)
  - 2225403: Parse URL properly (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.40-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
    (mariocanfly@hotmail.com)
  - spec: Add missing GLib dependency when building without DNF
    (debarshir@gnome.org)
  - Remove deprecated `locale.*()` functions (mhorky@redhat.com)
  - Remove version constraint of pytest (mhorky@redhat.com)
  - RHEL-15110: RegisterServer is stopped, when not needed (jhnidek@redhat.com)
  - RHEL-15110: Fix issue with registration using gsd-subman (jhnidek@redhat.com)
  - Fix an error in debug logging of cloud-what (mhorky@redhat.com)
  - ci: bump actions/upload-artifact from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Improve debug logging to make it faster to understand (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.41-1
changelog:
  - feat: update man page with deprecation notices (jajerome@redhat.com)
  - feat: Disable anonymous cloud registration temporarily (mhorky@redhat.com)
  - feat: Deprecate 'syspurpose addons' (mhorky@redhat.com)
  - fix: make SyspurposeComplianceStatusCache.get_overall_status() always usable
    (ptoscano@redhat.com)
  - fix: Change order of checks (jhnidek@redhat.com)
  - fix: Cache shouldn't try to get data from server without UUID
    (jhnidek@redhat.com)
  - feat: Deprecate import command (zpetrace@redhat.com)
  - fix: 1.29 modify section about remove command in man page
    (jhnidek@redhat.com)
  - feat: 1.29 Deprecate redeem sub-command (jhnidek@redhat.com)
  - fix: Reformated man page of subscription-manager (jhnidek@redhat.com)
  - fix: [1.29] Remove command should not be primary command (jhnidek@redhat.com)
  - feat: deprecate autosubscribe/auto-attach register options
    (jajerome@redhat.com)
  - feat: deprecate attach/auto-attach modules (jajerome@redhat.com)
  - docs: deprecate attach/auto-attach in man page (jajerome@redhat.com)
  - fix: Hide subscription management "errors" in container mode
    (mhorky@redhat.com)
  - feat: 1.29 Deprecate remove sub-command (jhnidek@redhat.com)
  - fix: 1.29 Do not try to test this branch for Fedora latest
    (jhnidek@redhat.com)
  - fix: 1.29 Do not try to test this branch for Fedora rawhide
    (jhnidek@redhat.com)
  - fix(test): Properly stop method mock (mhorky@redhat.com)
  - feat: Azure: added extended location and type of location fact
    (jhnidek@redhat.com)
  - fix: Update version of Azure metadata (jhnidek@redhat.com)
  - feat: Added Azure location to facts (jhnidek@redhat.com)
  - feat: Added zone GCP fact (jhnidek@redhat.com)
  - feat: Added more AWS cloud facts (jhnidek@redhat.com)
  - fix: Change type hint according returned value. (jhnidek@redhat.com)
  - feat: Add warning message about release version to dnf plugin
    (jhnidek@redhat.com)
  - Bump black from 23.3.0 to 24.3.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Format code with black==24.3.0 (ptoscano@redhat.com)
  - Fix memory leaks in test-productdb.c (jhnidek@redhat.com)
  - Fix memory leaks in productdb.c (jhnidek@redhat.com)
  - fix: Function prototype without declaration is deprecated
    (jhnidek@redhat.com)
  - Removed unused includes of .h files (jhnidek@redhat.com)
  - libdnf: switch from g_error_free() to g_clear_error() in tests
    (ptoscano@redhat.com)
  - libdnf: do not build test code in plugin (ptoscano@redhat.com)
  - Change handling of deprecated `datetime.datetime.utcnow()`
    (mhorky@redhat.com)
  - CCT-66: Update identity reporting in DNF plugin during autoregistration
    (mhorky@redhat.com)
  - Remove automatic registration delay for rhsmcertd (mhorky@redhat.com)
  - Remove API endpoint for automatic cloud registration v1 (mhorky@redhat.com)
  - CCT-67: Use automatic registration v2 (mhorky@redhat.com)
  - IdentityUpdateAction: Improve logging for updating identity certificates
    (mhorky@redhat.com)
  - Identity: Add method to extract current owner (mhorky@redhat.com)
  - rhsmcertd: Define exit codes (mhorky@redhat.com)
  - rhsmcertd: Use module-level logger (mhorky@redhat.com)
  - Add AnonymousCertificateManager (mhorky@redhat.com)
  - Add CloudTokenCache for Candlepin JWT (mhorky@redhat.com)
  - Implement API endpoints for Automatic registration v2 (mhorky@redhat.com)
  - Update documentation for one API call in connection.py (mhorky@redhat.com)
  - Fix type hint of RegisterService.register() (mhorky@redhat.com)
  - rhsmcertd: Drop D-Bus loop code (mhorky@redhat.com)
  - rhsmcertd: Add type hints (mhorky@redhat.com)
  - rhsmcertd: Remove forgotten old comment (mhorky@redhat.com)
  - Stop logging full lscpu output (mhorky@redhat.com)
  - Prevent double-logging of syspurpose cache log statement (mhorky@redhat.com)
  - Update the log message containing response time statistics
    (mhorky@redhat.com)
  - CCT-266: Update TLS flags (mhorky@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.43-1
changelog:
  - [1.29] feat/cct-868: Subset of list command options marked as deprecated *
    Options --available, --all, --ondate, --servicelevel --no-overlap --match-
    install, --pool-only, --afterdate were marked as deprecated in ListCommand
    definition of their help string. (mgrunwal@redhat.com)
  - fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
  - feat: Better automatic registration logging (mhorky@redhat.com)
  - fix: perform autoreg waiting when performing standard autoreg
    (ptoscano@redhat.com)
  - chore: move autoreg waiting code in own function (ptoscano@redhat.com)
  - docs: update proxy details in man page (jvlcek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.44-1
changelog:
  - Revert "feat: Disable anonymous cloud registration temporarily"
    (ptoscano@redhat.com)
  - Revert "feat: forcefully switch automatic cloud registration to v1"
    (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.45-1
changelog:
  - fix: Do not upload profile from DNF, when it is disabled in conf
    (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - feat: Enable register with environment names and environment types
    (jhnidek@redhat.com)
  - feat: support registering specifying environments with activation keys
    (ryanverdile@gmail.com)
  - chore: Remove auto-assign CI job (mhorky@redhat.com)
  - feat: [1.29] Added basic configuration for Packit (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.46-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Italian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (mhorky@redhat.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Update translation files (noreply@weblate.org)
  - fix: Handle improperly closed connections (mhorky@redhat.com)
  - ci: use the right distro for coverage reporting (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - tests: fix mocking of get_terminal_width() in TestColumnize
    (ptoscano@redhat.com)
  - feat: print compliance errors & syspurpose status only in entitlement mode
    (ptoscano@redhat.com)
  - feat: print "registered" as status when using SCA (ptoscano@redhat.com)
  - feat: print "not registered" on status when not registered
    (ptoscano@redhat.com)
  - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
  - refactor: move determination of content access mode in own method
    (ptoscano@redhat.com)
  - tests: move StubIdentity to stubs (ptoscano@redhat.com)
  - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
  - chore: move banner printing to its own function (ptoscano@redhat.com)
  - fix: Append two additional facts to the graylist (pkoprda@redhat.com)
  - refactor: Use class constant instead of variable graylist
    (pkoprda@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.47-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Spanish) (jsefler@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - fix: [1.29] Wait random time before reaching IMDS server (jhnidek@redhat.com)
  - feat: [1.29] Call random.seed() at begining of auto-register
    (jhnidek@redhat.com)
  - feat: [1.29] Better control over auto-reg waiting game (jhnidek@redhat.com)
  - fix: [1.29] Enable content during auto-registration v2 (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.48-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ci: bump actions/upload-artifact from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - feat: [1.29] Added dnf4 warning about skewed clock (jhnidek@redhat.com)
  - fix: [1.29] Require findutils in .spec file (jhnidek@redhat.com)
  - ci: bump actions/checkout from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.49-1
changelog:
  - RHEL-126157: Update GCP to Google Cloud in log messages (crag@redhat.com)
  - fix: Update user-facing GCP refrences to Google Cloud (crag@redhat.com)
  - feat: check if --set arg is empty when the environments module is called
    (manuelcanorojo@gmail.com)
  - feat: Added more debug prints to cloud-what (jhnidek@redhat.com)
  - fix(test): Fix unit test of aws (jhnidek@redhat.com)
  - fix: Fix getting AWS IMDSv2 signature (jhnidek@redhat.com)
  - chore: Make new black happy again (jhnidek@redhat.com)
  - chore: Increased log level of messages (jhnidek@redhat.com)
  - fix: Use IMDSv2 for signature first (jhnidek@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Added translation using Weblate (Finnish) (noreply-addon-
    languages@weblate.org)
  - fix: TypeError in _get_tls_handshake_info type hinting (macano@redhat.com)
  - feat: added signature type log in TLS handshake (macano@redhat.com)
  - feat: added internal method to get tls handshake info
    (manuelcanorojo@gmail.com)
  - ci: bump actions/upload-artifact from 5 to 6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Fix profile upload because of missing self.cp (suttner@atix.de)
  - Fix upload profile if rhsmcertd is not running at all (suttner@atix.de)
  - ci: bump actions/checkout from 5 to 6
    (49699333+dependabot[bot]@users.noreply.github.com)


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Richard Hughes <richard@hughsie.com> 0.3.2-1
changelog:
  - New upstream version
  - Do not use deprecated libusb API
  - Use a 1ms timeout in the Windows event thread


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Kamal Heib <kheib@redhat.com> - 46.0-1
changelog:
  - Rebase to upstream release v46.0
  - Resolves: rhbz#2159650, rhbz#2167513, rhbz#2170367, rhbz#2189721 rhbz#2209688


author: Kamal Heib <kheib@redhat.com> - 57.0-1
changelog:
  - Rebase to upstream release v57.0
  - Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449


author: Kamal Heib <kheib@redhat.com> - 60.0-1
changelog:
  - Rebase to upstream release v60.0
  - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331


author: Kamal Heib <kheib@redhat.com> - 60.0-2
changelog:
  - bump release to rebuild in sidetag
  - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331


author: Kamal Heib <kheib@redhat.com> - 60.0-3
changelog:
  - bump release to rebuild in sidetag
  - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331


author: Kamal Heib <kheib@redhat.com> - 61.0-1
changelog:
  - Rebase to upstream release v61.0
  - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331


author: Dan Horák <dhorak@redhat.com> - 4.2.3-1
changelog:
  - updated to 4.2.3 (RHEL-11415)
  - fix selfcheck in FIPS mode (RHEL-9918)
  - Resolves: RHEL-11415 RHEL-9918


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4.1
changelog:
  - Resolves: RHEL-59876 - EL9/CentOS Stream 9 lost offline smart card authentication
  - Resolves: RHEL-50912 - possible regression of rhbz#2196521


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.6-1
changelog:
  - Resolves: RHEL-70189 - Rebase SSSD for RHEL 9.6
  - Resolves: RHEL-67670 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-9]
  - Resolves: RHEL-68369 - sssd backend process segfaults when krb5.conf is invalid
  - Resolves: RHEL-66266 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-1
changelog:
  - Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
  - Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
  - Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
  - Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
  - Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-3
changelog:
  - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  - Resolves: RHEL-103434 - cache_credentials = true not working


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-4
changelog:
  - Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Tomas Halman <thalman@redhat.com> - 2.9.8-1
changelog:
  - Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
  - Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
  - Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
  - Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
  - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Sahana Prasad <sahana@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream version 1.2.1
  - Remove patch fix MSG_MORE uasge as it is added upstream
  - Remove cppcheck dependency for rhel bz#1931518
  - Add a patch to fix fuzz tests


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5367
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2405
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15112
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15298


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15298
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2405


author: Wen Liang <wenliang@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved from the main package
    to the utils sub package causing a file conflict on multilib systems between the
    old 32 bit main package and the new 64 bit utils sub package.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Hangbin Liu <haliu@redhat.com> - 1.8-1
changelog:
  - 1.8 release (rhbz#1958933)
  - libndp,ndptool: use poll() instead of select()
  - libndp: avoid static buffer for debug string in ndp_sock_recv()
  - ndptool: avoid static buffer for string in ndptool
  - libndp: use thread local variables for static return arguments
  - ndptool: don't use static variable for local context in msgrcv_handler_func()
  - ndptool: fix printing dnssl lifetime in ndptool
  - ndptool: fix potential memory leak caused by strdup
  - ndptool: add -D dest support
  - libndp: fix nd_msg typo when setting target address
  - libndp: close sockfd after using to avoid handle leak
  - ndptool: fix target parameter typo
  - ndptool: add -T target support


author: Phil Sutter <psutter@redhat.com> - 1.0.9-1
changelog:
  - expect/conntrack: Avoid spurious covscan overrun warning
  - conntrack: fix build with kernel 5.15 and musl
  - New version 1.0.9


author: Steve Dickson <steved@redhat.com> 2.5.4-28
changelog:
  -  Makefile.am: allow mount.nfs to be writeable by owner (RHEL-68701)
  -  mount.nfs: retry NFSv3 mount after NFSv4 failure in auto negotiation (RHEL-68574)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-30
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-72823)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-64340)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-31
changelog:
  - nfsdcld: prevent from accessing /var/lib/nfs/nfsdcld in read-only file system during boot (RHEL-78177)
  - Replace functional gating tests with the ones from RHEL10 (RHEL-78110)
  - Add explicit version requirement for libnfsidmap (RHEL-78107)
  - Add --disable-sbin-override for when /sbin is a symlink (RHEL-69771)
  - Move remaining binaries from /sbin to /usr/sbin (RHEL-69771)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Steve Dickson <steved@redhat.com> 2.5.4-35
changelog:
  - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
  - nfsd: allow more than 64 backlogged connections (RHEL-87752)


author: Steve Dickson <steved@redhat.com> 2.5.4-37
changelog:
  - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
  - gssd: do not use krb5_cc_initialize (RHEL-85412)


author: Phil Sutter <psutter@redhat.com> [1.2.6-1.el9]
changelog:
  - set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
  - Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]


author: Phil Sutter <psutter@redhat.com> [1.2.6-3.el9]
changelog:
  - tests: Fix objref test case (Phil Sutter) [RHEL-28515]
  - expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
  - obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
  - obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
  - obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - obj: Return value on setters (Phil Sutter) [RHEL-28515]
  - object: getters take const struct (Phil Sutter) [RHEL-28515]
  - utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
  - obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
  - obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
  - set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
  - obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
  - flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
  - chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
  - expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
  - expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
  - expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
  - expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
  - obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
  - set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
  - set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
  - expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Return "calculated" checksum if requested w/caching
  - Fixed memory leaks and segfault


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.5-1
changelog:
  - Update to 1.14.5
  - Detailed error message when using non-existing TMPDIR (RhBug:2019993)
  - Make error messages about repodata and rpm mismatch more user friendly


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-8
changelog:
  - Correct a License tag to LGPLv2+ (RHEL-16103)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-3
changelog:
  - Enable pkcs11 support
  - Fix broken libsofthsm path on i686
  - Add missing bugzilla references from the rebase commit
  - Related: rhbz#2026449
  - Resolves: rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Pavol Žáčik <pzacik@redhat.com> - 0.10.4-16
changelog:
  - Fix CVE-2025-5987
    Resolves: RHEL-130051
  - Workaround sshd failure rate limiting in tests
    Resolves: RHEL-135506


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Jiri Pirko <jiri@resnulli.us> - 1.31-1
changelog:
  1.31 release
  utils/bond2team: remove TYPE in ifcfg file
  utils/bond2team: keep delivering config to file if stdout not supplied
  teamd/lacp: silence ignore none LACP frames
  teamd: fix ctx->hwaddr value assignment
  Send LACP PDU right after the Actor state has been changed
  Skip setting the same hwaddr to a lag port if not needed
  Make all netlink socket RCVBUF sizes configurable
  Don't return an error when timerfd socket return 0
  Fix ifinfo_link_with_port race condition with newlink
  teamd: fix possible race in master ifname callback


author: Hangbin Liu <haliu@redhat.com> - 1.31-8
changelog:
  - Build util team2bond in teamd rpm [1986788]
  - Add some cautions to util team2bond [1986788]
  - Add team2bond man doc [1986788]


author: Long Xin <lxin@redhat.com> - 1.31-16
changelog:
  - fix the Requires package name for teamd-devel
  - teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Tomas Halman <thalman@redhat.com> - 0.63-5
changelog:
  - Enable audit library in the build
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: David King <dking@redhat.com> - 2.9.13-10
changelog:
  - Fix CVE-2025-6021 (RHEL-96507)
  - Fix CVE-2025-49794 (RHEL-96405)
  - Fix CVE-2025-49796 (RHEL-96431)


author: Richard Hughes <richard@hughsie.com> 0.1.14-1
changelog:
  - New upstream release
  - Do not use libuuid
  - Ignore adaptors added with xb_builder_source_add_converter()


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream release
  - Add xb_builder_source_add_simple_adapter()
  - Allow reversing the query results


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release which breaks API and ABI
  - Add the missing TEXT:INTE XPath support
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag
  - Allow specifying the node cache behaviour for the query
  - Avoid recursion when setting flags if possible
  - Avoid using weak pointers when building the silo
  - Do not allocate opcodes individually
  - Do not show a critical warning for invalid XML
  - Do not unconditionally create GTimer objects
  - Do not use the node cache when building indexes
  - Lazy load more arrays to reduce RSS usage


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Do not assume g_content_type_guess() always returns valid results
  - Fix getting translated results in gnome-software
  - Update the header location to reflect the new API


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: RHEL Packaging Agent <jotnar@redhat.com> - 0.3.24-1
changelog:
  - Rebase to 0.3.24
  - Add missing libzstd-devel BuildRequires
  - Add missing files to the %files tests section
  - Resolves: RHEL-116442


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Dan Horák <dan[at]danny.cz> - 2.2.0-10
changelog:
  - build with libzfcphbaapi as standalone library to avoid dependency on obsolete libhbaapi (#1922413)


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Vit Mojzis <vmojzis@redhat.com> - 1.0.18-3
changelog:
  - Added a patch to fix netinet/sctp.h not to be installed.
  - Added some fixes for kernel feature detection.
  - Updated to 1.0.18. [1568622]


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-1.gitf1dd9eb
changelog:
  - Rebase to 1.1.1
  - Fix program segfaults after entering the quit command (RHEL-5814)
  - Fix setting interface status not survive reboot (RHEL-5824)
  - Fix some other bugs


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-3.gitf1dd9eb
changelog:
  - Rebase to latest upstream code
  - Remove interface configure if the interface deleted (RHEL-13242)
  - Fix strdup is not freed (RHEL-37524)
  - Fix using uninitialized value (RHEL-37548)
  - Fix copy past error (RHEL-37679)
  - Fix resource leak (RHEL-37685)


author: Konrad Kleine <kkleine@redhat.com> - 19.1.5-1
changelog:
  - Update to 19.1.5
  - Enable LLVM_ENABLE_ZSTD (rhbz#2321848)
  - Remove HTML documentation
  - Add lldb man pages
  - Fix profiling after a binutils NOTE change (rhbz#2322754)
  - Install i386 config files on x86_64


author: Kamil Dudka <kdudka@redhat.com> - 3.18.0-4
changelog:
  - make `renamecopy` and `copytruncate` override each other (#1934601)
  - unify documentation of copy/copytruncate/renamecopy (#1934629)
  - fix resource leaks reported by Coverity


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: DJ Delorie <dj@redhat.com> - 1:4.3-5
changelog:
  - Allow users to build with or without guile support as desired.
  - Allow derivative downstreams to default to disabling guile support.


author: Patsy Griffin <patsy@redhat.com> - 6.04-4
changelog:
  - Activate previously added patch to improve mktime documentation and
    add 3 related upstream patches including an example.
    Related: RHEL-58342


author: Patsy Griffin <patsy@redhat.com> - 6.04-7
changelog:
  - Break up man-pages-additional-20140218.tar.xz
  - Add rtas.2, swapcontext.2 and cons.saver.8 man pages as a patch.
    Resolves: RHEL-101596


author: Xiao Ni <xni@redhat.com> - 4.2-7
changelog:
  - Update to latest upstream and keep udev rule close to upstream
  - Resolves rhbz#2107147, rhbz#2129087, rhbz#2126428


author: Xiao Ni <xni@redhat.com> - 4.2-8
changelog:
  - Update to latest upstream
  - Resolves rhbz#2127101, rhbz#2139789, rhbz#2149292, rhbz#2151209, rhbz#2148945


author: Xiao Ni <xni@redhat.com> - 4.2-9
changelog:
  - Update to latest upstream and fix mdcheck service bug
  - Resolves rhbz#2159923, rhbz#2150865, rhbz#2124071, rhbz#2203859


author: Nicola Sella <nsella@redhat.com> - 3.5.0-1
changelog:
  - Update to 3.5.0
  - Add module enable and disable commands
  - Add reports of module changes
  - Add "module enable" command
  - Add subcommands support
  - Print info about obsoleted packages before transaction (RhBug:1855542)


author: Nicola Sella <nsella@redhat.com> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - spec: Sync summary and description from openSUSE
  - Add support for setting a platform module ID
  - Add dependency for DNF configurations skeleton
  - Add support for setting allow_vendor_change


author: Nicola Sella <nsella@redhat.com> - 3.7.1-1
changelog:
  - Update to 3.7.1
  - [download] fix: unwanted dependency on newer glib 
  - [download] Support for "--resolve" and "--alldeps" arguments 
  - [download] New get_packages_query function
  - Support "--setopt=keepcache=0/1"
  - [download] Support "--archlist=" argument
  - [download] Move package download code to "download_packages" function
  - [download] several optimizations
  - Don't set default value of "assumeyes" to TRUE 
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Extend "--setopt" to support repository options 
  - Added alias "update" to "upgrade" command
  - Command "update" renamed to "upgrade"
  - Add support for command aliases
  - dnf-data requirement only for Fedora and future RHEL
  - Relicense to GPLv2+ [errata corrige: not in 3.5.1-1]
  - Sync summary and description from openSUSE [errata corrige: not in 3.6.0-1]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - distrosync: Fix style issues and plugin build with Meson 
  - Add distro-sync subcommand
  - Add "makecache" command


author: Lukas Hrazky <lhrazky@redhat.com> - 3.9.1-1
changelog:
  - Update to 3.9.1
  - leaves: Treat recommends as dependencies when install_weak_deps=True
  - Add leaves command
  - Remove non-breaking space from "Size" column (RhBug:2010676)


author: Nicola Sella <nsella@redhat.com> - 3.9.1-2
changelog:
  - Revert: leaves: Treat recommends as dependencies when install_weak_deps=True
  - Revert: Add leaves command


author: Tomas Popela <tpopela@redhat.com> - 0.26-27
changelog:
  - Don't prune bind mounts on ostree based systems, prune the deployments folder
    there to avoid duplications.
  - Fixes: https://github.com/fedora-silverblue/issue-tracker/issues/76


author: Pavel Cahyna <pcahyna@redhat.com> - 4.0.26-4
changelog:
  - Add dependency on glibc-gconv-extra
    mtools need codepage 850, which was split from glibc into a subpackage.
    (Fedora bug #2021637, RHEL bug #2073843)


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Phil Sutter <psutter@redhat.com> [1.0.4-8.el9]
changelog:
  - monitor: Sanitize startup race condition (Phil Sutter) [2130721]
  - evaluate: set eval ctx for add/update statements with integer constants (Phil Sutter) [2094894]
  - src: allow anon set concatenation with ether and vlan (Phil Sutter) [2094887]
  - evaluate: search stacked header list for matching payload dep (Phil Sutter) [2094887]
  - netlink_delinearize: also postprocess OP_AND in set element context (Phil Sutter) [2094887]
  - tests: add a test case for ether and vlan listing (Phil Sutter) [2094887]
  - debug: dump the l2 protocol stack (Phil Sutter) [2094887]
  - proto: track full stack of seen l2 protocols, not just cumulative offset (Phil Sutter) [2094887]
  - netlink_delinearize: postprocess binary ands in concatenations (Phil Sutter) [2094887]
  - netlink_delinearize: allow postprocessing on concatenated elements (Phil Sutter) [2094887]
  - intervals: check for EXPR_F_REMOVE in case of element mismatch (Phil Sutter) [2115627]
  - intervals: fix crash when trying to remove element in empty set (Phil Sutter) [2115627]
  - scanner: don't pop active flex scanner scope (Phil Sutter) [2113874]
  - parser: add missing synproxy scope closure (Phil Sutter) [2113874]
  - tests/py: Add a test for failing ipsec after counter (Phil Sutter) [2113874]
  - doc: Document limitations of ipsec expression with xfrm_interface (Phil Sutter) [1806431]


author: Phil Sutter <psutter@redhat.com> [1.0.4-9.el9]
changelog:
  - tests: add a test case for map update from packet path with concat (Phil Sutter) [2094894]
  - netlink_linearize: fix timeout with map updates (Phil Sutter) [2094894]
  - netlink_delinearize: fix decoding of concat data element (Phil Sutter) [2094894]


author: Phil Sutter <psutter@redhat.com> [1.0.4-10.el9]
changelog:
  - netlink_delinearize: Sanitize concat data element decoding (Phil Sutter) [2160049]
  - optimize: Clarify chain_optimize() array allocations (Phil Sutter) [2160049]
  - optimize: Do not return garbage from stack (Phil Sutter) [2160049]
  - netlink: Fix for potential NULL-pointer deref (Phil Sutter) [2160049]
  - meta: parse_iso_date() returns boolean (Phil Sutter) [2160049]
  - mnl: dump_nf_hooks() leaks memory in error path (Phil Sutter) [2160049]
  - owner: Fix potential array out of bounds access (Phil Sutter) [2160049]


author: Phil Sutter <psutter@redhat.com> [1.0.4-11.el9]
changelog:
  - rule: check address family in set collapse (Phil Sutter) [RHEL-5908]
  - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL]


author: Phil Sutter <psutter@redhat.com> [1.0.9-1.el9]
changelog:
  - spec: Utilize pyproject-rpm-macros for the python sub-package (Phil Sutter) [RHEL-14191]
  - Rebase onto version 1.0.9 (Phil Sutter) [RHEL-14191]


author: Phil Sutter <psutter@redhat.com> [1.0.9-4.el9]
changelog:
  - parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
  - json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]


author: Phil Sutter <psutter@redhat.com> [1.0.9-5.el9]
changelog:
  - tests: py: missing json output in never merge across non-expression statements (Phil Sutter) [RHEL-114095]
  - tests: py: add missing json.output data (Phil Sutter) [RHEL-114095]
  - tests: py: remove huge-limit test cases (Phil Sutter) [RHEL-114095]
  - datatype: rt_symbol_table_init() to search for iproute2 configs (Phil Sutter) [RHEL-114095]
  - tests: shell: connect chains to hook point (Phil Sutter) [RHEL-114095]
  - tests: shell: Fix sets/reset_command_0 for current kernels (Phil Sutter) [RHEL-114095]


author: Phil Sutter <psutter@redhat.com> [1.0.9-6.el9]
changelog:
  - Revert doc/ part of "exthdr: add boolean DCCP option matching" (Phil Sutter) [RHEL-126817]
  - Revert doc/ part of "meta: introduce meta broute support" (Phil Sutter) [RHEL-126817]
  - Revert doc/ part of "src: add tcp option reset support" (Phil Sutter) [RHEL-126817]
  - spec: Update expected test suite results (Phil Sutter) [RHEL-126817]


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.1-6
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: Than Ngo <than@redhat.com> - 3.22.0-2
changelog:
  - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
  Resolves: RHEL-22792


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - Resolves: RHEL-23671, ep11 token: support protected keys for extractable keys
  - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys
  - Resolves: RHEL-23673, update to 3.23.0


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-50064, update to 3.24.0
  - Resolves: RHEL-50063, opencryptoki CCA Token support for x86_64 and ppc64le
  - Resolves: RHEL-50058, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-50056, openCryptoki cca token SHA3 support
  - Resolves: RHEL-50057, openCryptoki cca token RSA OAEP v2.1 support


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-73344, upgrade openCryptoki
  - Resolves: RHEL-90590, basic support of AES-GCM
  - Resolves: RHEL-72965, cca token support cipher keys
  - Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75762, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
  - Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104602


author: Than Ngo <than@redhat.com> - 3.25.0-4
changelog:
  - Fix pkcsslotd fails to start in FIPS
  - Drop tier1 test as it mostly provides duplicate results
  - Enable ci test for FIPS mode
    Resolves: RHEL-109050


author: Than Ngo <than@redhat.com> - 3.26.0-1
changelog:
  - Resolves: RHEL-75139, ep11 token BLS support
  - Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
  - Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
  - Resolves: RHEL-100059, openCryptoki 3.26.0


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71053)
  - Avoid SSL context cleanup during library destruction (RHEL-56502)


author: Jakub Jelen <jjelen@redhat.com> - 0.22.0-2
changelog:
  - Unbreak detection of unentrolled smart cards (#2007029)
  - Enable file caching by default except for pkcs15-init (#2000626)


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-1
changelog:
  - Rebase to latest 0.23.0 release (#2100409)
  - Use separate OpenSSL context to work better from inside of OpenSSL providers


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-2
changelog:
  - Fix regression in handling OpenPGP cards
  - Fix CVE-2023-2977: buffer overrun in pkcs15init for cardos


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-3
changelog:
  - Fix file caching with different offsets (RHEL-4079)
  - Fix CVE-2023-40660: Potential PIN bypass
  - Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init
  - Fix CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption using symmetric keys
  - Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-36
changelog:
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Relax OpenSSH build-time checks for OpenSSL version
    Related: RHEL-4734
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-44
changelog:
  - Add extra help information on ssh early failure
    Resolves: RHEL-33809
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-52293
  - Allow duplicate Subsystem directive
    Resolves: RHEL-47112


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-45
changelog:
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465).
    Resolves: RHEL-78700


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-2
changelog:
  - Fix implicit destination path selection when source path ends with ".."
    Resolves: RHEL-119515
  - Canonicalize username when matching a user
    Resolves: RHEL-118372


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-3
changelog:
  - Enable support for DSA keys
    Resolves: RHEL-127624
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-133959
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-133960


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80854


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-7
changelog:
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76756


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
changelog:
  - Rebasing OpenSSL to 3.5
    Resolves: RHEL-80854
    Resolves: RHEL-50208
    Resolves: RHEL-50210
    Resolves: RHEL-50211
    Resolves: RHEL-85954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-2
changelog:
  - OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9
    Resolves: RHEL-88910
  - PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9
    Resolves: RHEL-88912
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-89860
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-89861
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-89862
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-89859
  - Enable sslkeylog support
    Resolves: RHEL-90854


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80854
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-95239


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-104236
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-104856


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-4
changelog:
  - Make openssl speed test signatures without errors
    Resolves: RHEL-95502
  - Build tests in check and without LTO
    Resolves: RHEL-111633


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.5-1
changelog:
  - Rebase to OpenSSL 3.5.5
    Resolves: RHEL-136895
    Resolves: RHEL-142004
    Resolves: RHEL-142012
    Resolves: RHEL-142020
    Resolves: RHEL-142024
    Resolves: RHEL-142028
    Resolves: RHEL-142032
    Resolves: RHEL-142036
    Resolves: RHEL-142040
    Resolves: RHEL-142044
    Resolves: RHEL-142048
    Resolves: RHEL-142052
    Resolves: RHEL-142056


author: Dan Horák <dhorak@redhat.com> - 2.3.0-1
changelog:
  - updated to 2.3.0 (#2044177)
  - add provider for openssl 3.x (#2044185)
  - Resolves: #2044177 #2044185


author: Dan Horák <dhorak@redhat.com> - 2.4.0-2
changelog:
  - engine: Only register those algos specified with default_algorithms (#2221894)
  - Resolves: #2221894


author: Dan Horák <dhorak@redhat.com> - 2.4.0-4
changelog:
  - provider: RSA: Fix get_params to retrieve max-size, bits, and security-bits (#2222878 #2224568)
  - provider: Default debug directory to /tmp but make it configurable (#2160084)
  - Resolves: #2222878 #2160084 #2224568


author: Jakub Jelen <jjelen@redhat.com> - 0.4.11-8
changelog:
  - Fix sending parameters for RSA-OAEP operations (#2063378)
  - Improve logging and fix selection of expired certificates (#2029834)


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.2-1
changelog:
  - Update to new upstream release 0.25.2
    Resolves: RHEL-14834
  - Add IBM specific mechanisms and attributes
    Resolves: RHEL-10570


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.3-3
changelog:
  - Fix regression in trust where file creation fails for long cert labels
    Resolves: RHEL-58899
  - Fix usage message in p11-kit list-tokens command
    Resolves: RHEL-31810


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-14
changelog:
  - pam_lastlog: check localtime_r() return value. Resolves: #2130124
  - pam_faillock: clarify missing user faillock files after reboot. Resolves: #2126632
  - pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2126648


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-16
changelog:
  - libpam: use close_range() to close file descriptors. Resolves: RHEL-5099
  - fix formatting of audit messages. Resolves: RHEL-5100


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-18
changelog:
  - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
  - pam_access: handle hostnames in access.conf. Resolves: RHEL-22300


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-19
changelog:
  - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
    situations. CVE-2024-22365. Resolves: RHEL-21244


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-22
changelog:
  - pam_unix: always run the helper to obtain shadow password file entries.
    CVE-2024-10041. Resolves: RHEL-62879
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-23631 and RHEL-39943


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-24
changelog:
  - pam_unix: sync expiry checks with shadow. Resolves: RHEL-70519
  - pam.conf: remove tallylog. Resolves: RHEL-15324


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-26
changelog:
  - pam_unix: sync expiry checks with shadow.
    Resolves: RHEL-70519, RHEL-95475, RHEL-96955 and RHEL-96973
  - pam.conf: remove tallylog. Resolves: RHEL-15324
  - pam_namespace: fix potential privilege escalation.
    Resolves: CVE-2025-6020 and RHEL-96727


author: Brian C. Lane <bcl@redhat.com> - 3.4-4
changelog:
  - Fix issues that covscan classifies as important
    Resolves: rhbz#1938836
  - Work around a mkswap bug


author: Brian C. Lane <bcl@redhat.com> - 3.5-1
changelog:
  - Rebase to upstream release 3.5
  - Drop patches included in new upstream tar
  - Add upstream patches for new type command
  - Add upstream patch for swap flag on DASD
    Resolves: rhbz#1999333


author: Brian C. Lane <bcl@redhat.com> - 3.5-3
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73217
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73217
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73217
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73217


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Petr Pisar <ppisar@redhat.com> - 10.36-4
changelog:
  - Fix a mismatch if \K was involved in a recursion
  - Restore single character repetition optimization in JIT (upstream bug #2698)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.37-1
changelog:
  - Rebase to the 10.37
  - libpcre2-posix.so.2* SONAME bump to libpcre2-posix.so.3*
  - Enable JIT for s390x arch
  - Patches upstreamed: Patch 1,2,3,4
  - Resolves: rhbz#1970765, BZ#1965025


author: Jakub Jelen <jjelen@redhat.com> - 1.9.4-1
changelog:
  - Rebase to current version from Fedora (#2017828)
  - Use of upstrea polkit policy preventing unneeded prompts


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-2
changelog:
  - Improve man pages (RHEL-672)
  - Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)


author: Petr Lautrbach <lautrbach@redhat.com> - 3.6-5
changelog:
  - sandbox/seunshare: Replace system() with execv() to prevent shell injection
  - seunshare: fix the frail tmpdir cleanup


author: Jan Rybar <jrybar@redhat.com> - 0.117-13
changelog:
  - session-monitor: watch sessions only
  - PolkitPermission: react on really changed sessions
  - allow polkit-pkla-compat to be uninstalled if no .pkla rules
  - Resolves: RHEL-39063


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-6
changelog:
  - free: backport new 'used' calculation
  - sysctl: backport support of systemd glob patterns
  - Resolves: rhbz#2003033
  - Resolves: rhbz#2052536


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-7
changelog:
  - sysctl: backport - keys with dots instead of slashes again
  - Resolves: rhbz#2116977
  - Related: rhbz#2052536


author: Miro Hrončok <mhroncok@redhat.com> - 21.0.1-2
changelog:
  - python-pip-wheel: Remove bundled provides and libcrypt recommends for Python 2
    (The wheel is Python 3 only for a while)


author: Tomas Orsava <torsava@redhat.com> - 21.0.1-5
changelog:
  - Provide the platform-python-pip name for backwards compatibility
    with RHEL 8
  - Related: rhbz#1891487


author: Miro Hrončok <mhroncok@redhat.com> - 51.1.1-1
changelog:
  - Update to 51.1.1
  - Fixes test failures with pip 20.3 as well as with pytest 6.2+
  - Fixes: rhbz#1909575


author: Miro Hrončok <mhroncok@redhat.com> - 51.1.2-1
changelog:
  - Update to 51.1.2
  - Removes tests from the wheel
  - https://setuptools.readthedocs.io/en/latest/history.html#v51-1-2
  - Fixes: rhbz#1914481


author: Miro Hrončok <mhroncok@redhat.com> - 53.0.0-1
changelog:
  - Update to 53.0.0
  - https://setuptools.readthedocs.io/en/latest/history.html#v53-0-0
  - Fixes: rhbz#1923249


author: Tomas Orsava <torsava@redhat.com> - 53.0.0-5
changelog:
  - Provide the platform-python-setuptools name for backwards compatibility
    with RHEL 8
  - Related: rhbz#1891487


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.21-1
changelog:
  - Update to 3.9.21
  - Security fix for CVE-2024-11168 and CVE-2024-9287
  Resolves: RHEL-64889
  Resolves: RHEL-69942


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.23-1
changelog:
  - Update to 3.9.23
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98051, RHEL-98024, RHEL-98242, RHEL-98193, RHEL-98218


author: Tomas Orsava <torsava@redhat.com> - 1.14.5-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Miro Hrončok <mhroncok@redhat.com> - 3.0.4-14
changelog:
  - Subpackage python2-chardet has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 3.4.7-1
changelog:
  - Update to 3.4.7
  - Remove dependency on python-cryptography-vectors package and use vectors
    directly from Github source tar ball. Related: rhbz#1952343


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-6
changelog:
  - Rebase to 36.0.1, related: rhbz#2059630, rhbz#2060787
  - OpenSSL 3.0 FIPS mode is now detected correctly, related: rhbz#2054785
  - Fix error check from EVP_PKEY_CTX_set_signature_md, related: rhbz#2060343
  - Block 3DES in FIPS mode, related: rhbz#2055209
  - Disable DSA tests in FIPS mode
  - Enable SHA1 signatures in test suite
  - Fix serialization of keyusage ext with no bits
  - Re-enable tests that are passing again


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-3
changelog:
  - Fix CVE-2023-23931: Don't allow update_into to mutate immutable objects, resolves rhbz#2172399
  - Fix FTBFS due to failing test_load_invalid_ec_key_from_pem and test_decrypt_invalid_decrypt


author: Miro Hrončok <mhroncok@redhat.com> - 1:2.8.0-7
changelog:
  - Subpackage python2-dateutil has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.8-9
changelog:
  - Subpackage python2-dbus has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 4.4.0-5
changelog:
  - Subpackage python2-decorator has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Christian Heimes <cheimes@redhat.com> - 2.1.0-3
changelog:
  - Add bconds for extras require trio, curio, and doh
  - Move trio and curio backend modules into extras subpackages
  - Enable python3-dns+curio meta package
  - Skip failing test testCanonicalNameDangling


author: Rafael Jeffman <rjeffman@redhat.com> - 2.2.1-1
changelog:
  - Rebase to version 2.2.1
    Resolves: rhbz#2088661
  - Disable DNSSEC tests using SHA1 due to crypto policies
    Resolves: rhbz#2107651


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Miro Hrončok <mhroncok@redhat.com> - 2.8-5
changelog:
  - Subpackage python2-idna has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.4-39
changelog:
  - Subpackage python2-iniparse has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 0.9.6-19
changelog:
  - Subpackages python2-inotify, python2-inotify-examples have been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: John Kacur <jkacur@redhat.com> - 0.6.3-5
changelog:
  - various clean-ups including using 'with' context managers in try-except
  - Fix to ignore UnicodeDecodeError when it occurs
  Resolves: rhbz#2031717


author: John Kacur <jkacur@redhat.com> - 0.7.3-1
changelog:
  - Rebase to upstream python-linux-procfs-0.7.3
  - This rebase removes upstream spec files and
  - syncs the git tag with version
  Resolves: RHEL-7614


author: John Kacur <jkacur@redhat.com> - 0.7.4-2
changelog:
  - Update setup.py for older distributions
  - Use explicit setup.py build commands
  Resolves: RHEL-119895


author: Thomas Moschny <thomas.moschny@gmx.de> - 3.3.4-2
changelog:
  - Apply PR6 by Igor Raits <ignatenkobrain@fedoraproject.org>: Support
    for building on EPEL8 + upstream tests invocation.
  - Remove unused BR on python3-tidy (we'd need pytidylib instead, which
    doesn't seem to be packaged).


author: Dan Radez <dradez@redhat.com> - 4.8.0-6
changelog:
  - adding workaround for https://bugzilla.redhat.com/show_bug.cgi?id=1914843
  - while we wait for upstream fix: https://github.com/pexpect/pexpect/issues/669


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-4
changelog:
  - Make the python-pip-wheel subpackage versioned (python3-pip-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-5
changelog:
  - Conflict with old Python versions that use the old unversioned wheel location
  - Resolves: rhbz#1982668


author: Miro Hrončok <mhroncok@redhat.com> - 0.6.0-8
changelog:
  - Subpackage python2-ptyprocess has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.7.1-3
changelog:
  - Subpackage python2-pysocks has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 5.4.1-6
changelog:
  - Remove some outdated Obsoletes and Provides,
    but keep providing python3-yaml and python3-PyYAML for users
  - Related: rhbz#1990421


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-27
changelog:
  - Fix short circuiting of version strings in expressions (RHEL-15688)
  - Fix description of whatconflicts in the man page (RHEL-6303)
  - Expose and document rpmdb --verifydb operation (RHEL-14591)
  - Fixes to the file handling backport


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-29
changelog:
  - Actually add --verifydb to the man page (RHEL-14591)
  - Don't warn about missing user/group on skipped files (RHEL-18037)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-30
changelog:
  - Don't segfault on missing priority tag (RHEL-35249)
  - Use unsigned integers for buildtime too for Y2K38 safety (RHEL-22602)
  - Rebuild against libimaevm.so.4 (RHEL-32505)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-31
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-22604)
  - Fix potential use of uninitialized pgp struct (RHEL-22605)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)
  - Add SourceLicense tag to spec syntax (RHEL-28798)
  - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-33
changelog:
  - Fix root relocation regression (RHEL-28967)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-35
changelog:
  - Fix %patch N applying Patch0 implicitly (RHEL-6294)
  - Issue deprecation warning for number-less %patch (RHEL-6294)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-37
changelog:
  - Allow parametric macros to opt out of option processing (RHEL-67161)
  - Report unsafe symlinks during installation as a specific case (RHEL-33393)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-38
changelog:
  - Add support for spec local file attributes and generators (RHEL-52772)
  - Store configurable digest(s) on packages in rpmdb (RHEL-35619)
  - Fix a hard link race condition in brp-strip (RHEL-74011)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-40
changelog:
  - Improve error handling on keystore load (RHEL-114837)
  - Sort files before passing to file attr dependency generators (RHEL-95376)


author: Petr Lautrbach <plautrba@redhat.com> - 4.4.0-0.1.20201102git05e90ee
changelog:
  - Update to 05e90ee
  - Add /usr/bin/sechecker
  - Adapt to new libsepol filename transition structures
  - Rebuild with libsepol.so.2


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.3-1
changelog:
  - SETools 4.4.3 release
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Tomas Orsava <torsava@redhat.com> - 53.0.0-7
changelog:
  - Make the python-setuptools-wheel subpackage versioned (python3-setuptools-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Miro Hrončok <mhroncok@redhat.com> - 234-11
changelog:
  - Subpackage python2-systemd has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.25.10-3
changelog:
  - Drop redundant BuildRequires for nose
  - Instead of the mock backport, use unittest.mock from the standard library


author: Karolina Surma <ksurma@redhat.com> - 1.26.5-1
changelog:
  - Update to 1.26.5
  - Fix for CVE-2021-33503 Catastrophic backtracking in URL authority parser
  Resolves: rhbz#1972639


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.26.5-6
changelog:
  - Security fix for CVE-2024-37891
  - Backport upstream patch to fix TypeError for http connection if the PoolManager
  - is instantiated with server_hostname
  Resolves: RHEL-43172
  Resolves: RHEL-39285


author: Miro Hrončok <mhroncok@redhat.com> - 1.26.5-7
changelog:
  - Security fix for CVE-2025-66471
  - Security fix for CVE-2025-66418
  - Security fix for CVE-2026-21441
  Resolves: RHEL-142750, RHEL-139398, RHEL-142767


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: Pavel Reichl <preichl@redhat.com> - 1:4.09-1
changelog:
  - Update to new upstream version
  - Add tmpfs quota support
  - Remove rhel-only patches that were merged upstream


author: Sumit Bose <sbose@redhat.com> - 0.17.0-8
changelog:
  - LDAP socket timeout, fix duplicated logs and new Samba command line options
    Resolves: rhbz#2038260
    Resolves: rhbz#2038268
    Resolves: rhbz#2028530


author: Sumit Bose <sbose@redhat.com>
changelog:
  - Use make macros https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - migrated to SPDX license
  - allow multiple names and _srv_ ad_server option
    Resolves: jira#RHEL-12112
  - fix ccache handling for leave operation
    Resolves: jira#RHEL-5104


author: Fedora Release Engineering <releng@fedoraproject.org> - 1:0.4-0.44.b46
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
  - Use standard make_build and make_install macros in spec file.


author: Jeff Makey <jeff@makey.net> - 1:0.4-0.46.b47
changelog:
  - New upstream release 0.4b47
  - Update main URL.
  - Drop dump-glibc_xattr patch, now applied upstream.
  - Drop documentation conversion from ISO-8859-1 to UTF-8, now applied upstream.
  - Print correct name of archive table of contents file (#1727392).


author: Josef Ridky <jridky@redhat.com> - 1:0.4-0.51.b47
changelog:
  - rename spec file to restore
  - add gating.yaml
  - changes between .47 and .51 had to be stripped due of wrong sync
    between centos and dist-git


author: systemd maintenance team <systemd-maint@redhat.com> - 252-44
changelog:
  - Revert "udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT" (RHEL-50103)
  - fundamental: share constants for confidential virt detection (RHEL-50651)
  - efi: add helper API for detecting confidential virtualization (RHEL-50651)
  - efi: don't pull kernel cmdline from SMBIOS in a confidential VM (RHEL-50651)
  - Fix detection of TDX confidential VM on Azure platform (RHEL-50651)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-49
changelog:
  - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-24340)
  - Fix configuration for Packit 1.0.0 (RHEL-70884)
  - udev/net_id: introduce naming scheme for RHEL-9.6 (RHEL-25515)
  - hwdb: Fix accelerometer mount matrix for ASUS T100TAS (RHEL-49810)
  - hwdb.d/60-keyboard.hwdb: add Clevo mic mute quirk for V5x dGPU (RHEL-49810)
  - hwdb: add entry for Dell AlpsPS/2 ALPS DualPoint TouchPad (RHEL-49810)
  - hwdb: Mark Apple Wireless keyboards as not having NumLock LED (RHEL-49810)
  - update keyboard hwdb to add acer Predator PHN16-72 (RHEL-49810)
  - hwdb: death to tabs! (RHEL-49810)
  -  hwdb.d/60-keyboard.hwdb: add Clevo mic mute quirk for V5x iGPU, NV41PZ (RHEL-49810)
  - Add ACCEL_MOUNT_MATRIX for Chuwi Hi10 Max. (RHEL-49810)
  - Add HUAWEI MateBook D 15 AMD ACCEL properties (RHEL-49810)
  - hwdb: add Kensington SlimBlade Pro trackball (Bluetooth mode) (RHEL-49810)
  - hwdb: Add accel orientation quirk for the IdeaPad Duet 3 10IGL5-LTE (RHEL-49810)
  - hwdb: add keymaps for Acer Nitro 5 AN515-47 (#34493) (RHEL-49810)
  - hwdb: make key map match comment for one laptop (RHEL-49810)
  - hwdb: there's KEY_BRIGHTNESS_AUTO these days, hence hook it up where a FIXME suggests that (RHEL-49810)
  - hwdb: use KEY_ROTATE_DISPLAY for various cases of display rotation keys (RHEL-49810)
  - hwbd: use newer KEY_PICKUP_PHONE, KEY_HANGUP_PHONE, KEY_SELECTIVE_SCREENSHOT, KEY_NOTIFICATION_CENTER keycodes where appropriate (RHEL-49810)
  - hwdb: add SCAI SKU prefix for Samsung keyboard mapping (#34648) (RHEL-49810)
  - tree-wide: drop doubled empty lines (RHEL-49810)
  - hwdb: move key 66/65 handling from specific to generic HP laptop coverage (RHEL-49810)
  - hwdb: fix key toggle touchpad and programmable buttom for Positivo V142N (#34725) (RHEL-49810)
  - hwdb: add Stream Deck Neo (#34903) (RHEL-49810)
  - hwdb: update autosuspend rules (RHEL-49810)
  - hwdb: import newest autosuspend rules from chromeos (RHEL-49810)
  - update hwdb (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: fix broken numpad paren keys on Lenovo Thinkbook 16 G6+ 2024 (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: add new Cube Mix Plus (i18D) rotation info (RHEL-49810)
  - hwdb: Add quirk for Logitech MX Keys for Mac (RHEL-49810)
  - hwdb: add support for PineTab2 to 60-sensor.hwdb (#35304) (RHEL-49810)
  - hwdb: add entry for Chuwi Hi10 X1 (#35331) (RHEL-49810)
  - hwdb: update (RHEL-49810)
  - hwdb: Make 3D mice work out-of-the-box (RHEL-49810)
  - hwdb: Add Chuwi MiniBook X trackpad fuzz (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: disable inclusion of the PCI domain in MANA network interface naming (RHEL-49810)
  - hwdb: move down touchpad toggle section from generic to product specific (RHEL-49810)
  - hwdb: add scancodes for HP Elitebook 2170p runnning coreboot (RHEL-49810)
  - hwdb: Make remote controllable lights work out-of-the-box (RHEL-49810)
  - hwdb: fix key toggle touchpad for VAIO VJFH52 (#35645) (RHEL-49810)
  - hwdb: comment out the entry for Logitech MX Keys for Mac (RHEL-49810)
  - 60-sensor.hwdb: Loosen model mask to include entire series (RHEL-49810)
  - Correct ACCEL_MOUNT_MATRIX for Chuwi Hi10 Max (RHEL-49810)
  - hwdb: Add macro keys for HP 430 Programmable Wireless Keypad (RHEL-49810)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-50
changelog:
  - journal: again create user journals for users with high uids (RHEL-70103)
  - install: don't translate unit instances to paths when reenabling them (RHEL-5956)
  - test-systemctl-enable: fix typo (RHEL-5956)
  - udev: Handle PTP device symlink properly on udev action 'change' (RHEL-59088)
  - systemctl: print warning about missing /proc only as debug message (RHEL-3906)
  - repart: avoid use of uninitialized TPM2B_PUBLIC data (RHEL-56793)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-51
changelog:
  - ci: use ubuntu 22:04 for deploy of man pages (RHEL-70884)
  - man/tmpfiles: fix off-by-one in example (RHEL-74015)
  - test: drop removed SCSI passthrough feature (RHEL-70884)
  - nspawn: call json_dispatch() with a correct pointer (RHEL-55266)
  - varlink,json: introduce new varlink_dispatch() helper (RHEL-55266)
  - json: add json_dispatch_const_user_group_name() (RHEL-55266)
  - sd-varlink: add new sd_varlink_error_is_invalid_parameter() helper (RHEL-55266)
  - userdb: return ESRCH if userdb service refuses a user/group name as invalid (RHEL-55266)
  - test: rename assert.sh to util.sh (RHEL-55301)
  - core: Don't GC unit if it is in cgroup_empty_queue (RHEL-55301)
  - core: Handle cgroup pruning in on_cgroup_empty_event (RHEL-55301)
  - Fix failing test (RHEL-55301)
  - unit: don't gc unit in oom queue (RHEL-55301)
  - core: do not GC units/jobs that are in the D-Bus queue (RHEL-55301)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-52
changelog:
  - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-15051)
  - unit: always return 1 in log_kill (RHEL-78170)
  - ci: enable mkosi workflow for z-stream branches (RHEL-79977)
  - ci(mkosi): bump fedora version from 39 to 41 (RHEL-79977)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-53
changelog:
  - man: mention that rhel-9.0 net naming scheme is the same as v251 (RHEL-86891)
  - backlight: Drop support for actual_brightness (RHEL-86714)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-54
changelog:
  - unit: add conditions and deps to make oomd.socket and .service consistent (RHEL-90417)
  - udev/net_id: introduce naming scheme for RHEL-9.7 (RHEL-25516)
  - Add a set of assertion macros to tests.h (ASSERT_OK(), ASSERT_EQ(), ASSERT_GE(), ASSERT_LE()) that log the failed condition before crashing and convert test-gpt.c test file to use them (RHEL-103753)
  - Follow up with the PR #31819 (RHEL-103753)
  - Added more ASSERT macro and also make some test file to use them (RHEL-103753)
  - sd-event: drop inotify event from buffer when no event source is triggered (RHEL-103753)
  - test: add test case for issue #38265 (RHEL-103753)
  - test: answer 2nd mdadm --create question for compat with new version (RHEL-79977)
  - sysusers: cross-check user and group names too (RHEL-72572)
  - test-sysusers: check group creation with matching user entry (RHEL-72572)
  - user-sessions: do not remove /etc/nologin (RHEL-85467)
  - hwdb: f20 → micmute (RHEL-72697)
  - hwdb: f21 → touchpad_toggle (RHEL-72697)
  - hwdb: f22 → touchpad_on (RHEL-72697)
  - hwdb: f23 → touchpad_off (RHEL-72697)
  - hwdb: drop some now redundant mappings (RHEL-72697)
  - hwdb: Add micmute for System76 (RHEL-72697)
  - hwdb: Add newer System76 Pangolins (RHEL-72697)
  - hwdb: WALTOP International Corp. Slim Tablet Stylus (RHEL-72697)
  - hwdb: add MSI Claw 8 AT Keyboard Scancodes (#36180) (RHEL-72697)
  - Adds asus T103HAF rotation matrix to 60-sensor.hwdb (#36177) (RHEL-72697)
  - hwdb: fix screen rotation for EXO Wings 2in1 w1125 (#36283) (RHEL-72697)
  - hwdb: XBox Series Elite controller modalias entry has been added. (#36305) (RHEL-72697)
  - hwdb: add front button support for MSI Claw 7 AI+ A2VM (RHEL-72697)
  - hwdb: add accel orientation and location for the BMAX Y14 (RHEL-72697)
  - hwdb.d: add support for Akoya P15645 (RHEL-72697)
  - hwdb.d: add ANP09 Intel n100 tablet sensor configuration (#36390) (RHEL-72697)
  - hwdb: add axis range corrections for the Lenovo Yoga Slim 7 14ARE05 (RHEL-72697)
  - hwdb: add GOLD WARRIOR SIM PhoenixRC 10411R (RHEL-72697)
  - hwdb: add Code Mercenaries Hard- und Software GmbH Virtual RC USB (RHEL-72697)
  - hwdb: Add accel orientation quirk for the GPD Pocket 4 (RHEL-72697)
  - hwdb: add rotation profile matrix for Rog Ally X (2024) (#36591) (RHEL-72697)
  - hwdb: fix backspace not working on HP Pavilion laptop (#36777) (RHEL-72697)
  - hwdb/keyboard: Map FN key on TUXEDO NB02 devices (RHEL-72697)
  - hwdb: add G-Mode key support (#37175) (RHEL-72697)
  - hwdb/keyboard: Map FN key on TUXEDO InfinityFlex 14 Gen1 (RHEL-72697)
  - hwdb: add HP 150 Wired Mouse (#37341) (RHEL-72697)
  - Add emulated release to G-Mode key (RHEL-72697)
  - hwdb: keyboard: Add Alienware special keys (RHEL-72697)
  - hwdb: add bladeRF SDR devices (RHEL-72697)
  - hwdb: append ID_SOFTWARE_RADIO to hwdb parser (RHEL-72697)
  - hwdb.d: reword and simplify boilerplate texts (RHEL-72697)
  - hwdb.d: update/expand boilerplate on various hwdb files (RHEL-72697)
  - hwdb: say that settings can be also set to 0 (RHEL-72697)
  - hwdb: add Analog Devices PLUTO SDR (RHEL-72697)
  -  hwdb: append ID_MM_DEVICE_IGNORE to hwdb parser (RHEL-72697)
  - hwdb: run "update-hwdb" (RHEL-72697)
  - hwdb: run "update-hwdb-autosuspend" (RHEL-72697)
  - hwdb: add missing PLUTO SDR vendor name (RHEL-72697)
  - hwdb: add Ettus Research SDR devices (RHEL-72697)
  - hwdb: add RTL-SDR devices (RHEL-72697)
  - hwdb: merge entries for Ettus Research B200 (RHEL-72697)
  - hwdb: make Saitek PLC Pro Flight Rudder Pedals a joystick (#37601) (RHEL-72697)
  - hwdb: fix touchpad for ASUS X1504ZA (#37696) (RHEL-72697)
  - hwdb: add support for Loupedeck devices (RHEL-72697)
  - hwdb: Acer Nitro ANV15-51 Mic Toggle (RHEL-72697)
  - hwdb: Added Beacn and TC-Helicon Audio controllers (#37798) (RHEL-72697)
  - hwdb: Add support for Lenovo IdeaPad Slim 5 series (RHEL-72697)
  - hwdb: Add hwbd definitions for maker tools (RHEL-72697)
  - hwdb: Add accel orientation quirk for the Microtech e-tab Pro (RHEL-72697)
  - hwdb: add 70-maker-tools.hwdb to meson.build (RHEL-72697)
  - hwdb: fix typo in 70-maker-tools.hwdb (RHEL-72697)
  - hwdb: update (RHEL-72697)
  - Fix Positivo K116J search key and www shortcut (RHEL-72697)
  - hwdb: Acer Nitro ANV15-51 Nitro Sense Toggle (RHEL-72697)
  - hwdb: several cleanups (RHEL-72697)
  - hwdb: disable Asus ROG keyboards sending poweroff (RHEL-72697)
  - hwdb: update (RHEL-72697)
  - hwdb: update autosuspend rules (RHEL-72697)
  - hwdb: set touchpad resolution for ThinkPad T14 Gen2a (RHEL-72697)
  - Revert "hwdb: disable Asus ROG keyboards sending poweroff" (RHEL-72697)
  - hwdb: Add launch emoji keyboard mapping for Asus M1607KA (RHEL-72697)
  - Enable KEY_PERFORMANCE key present on Linux 6.17 (RHEL-72697)
  - flush_ports: flush POSIX message queues properly (RHEL-90860)
  - kernel-install: add --entry-type=type1|type2 option to kernel-install (RHEL-83932)
  - kernel-install: add --entry-type=type1|type2 option to kernel-install.in (RHEL-83932)
  - kernel-install: do not mix || and && (RHEL-83932)
  - man/kernel-install: mention --entry-type= option in the man page (RHEL-83932)
  - cgroup: add support for memory.peak (RHEL-95797)
  - core: include peak memory in unit_log_resources() (RHEL-95797)
  - run: include peak memory in output (RHEL-95797)
  - core: ensure init.scope is realized after drop-ins have been loaded (RHEL-103488)
  - core: add possibility to not track certain unit types (RHEL-89796)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-55
changelog:
  - tree-wide: check more log message format in log_struct() and friends (RHEL-100353)
  - build: add some coloring to --version output (RHEL-100353)
  - core: output log cycle path in one log message, not many (RHEL-100353)
  - core: make log cycle messages recognizable via message IDs (RHEL-100353)
  - core: change ordering cycle log message log levels (RHEL-100353)
  - core: cast log_oom() got void (RHEL-100353)
  - core: when removing a job from a transaction, include in structured log message which (RHEL-100353)
  - catalog: add entries for the order cycle log messages (RHEL-100353)
  - tree-wide: check more log message format in log_struct() and friends (RHEL-100353)
  - core/transaction: do not attempt to log "n/a" as a journal field (RHEL-100353)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-57
changelog:
  - Revert "boot: Use EFI_BOOT_MANAGER_POLICY_PROTOCOL to connect console devices" (RHEL-108596)
  - boot: Use correct memory type for allocations (RHEL-108555)
  - meson: /etc/systemd/network is also used by udevd (RHEL-109096)
  - sd-bus: make bus_add_match_full accept timeout (RHEL-31756)
  - core/unit: add get_timeout_start_usec in UnitVTable and define it for service (RHEL-31756)
  - core/unit: increase the NameOwnerChanged/GetNameOwner timeout to the unit's start timeout (RHEL-31756)
  - core,sd-bus: drop empty lines between function call and error check (RHEL-31756)
  - core: do not disconnect from bus when failed to install signal match (RHEL-31756)
  - dbus: stash the subscriber list when we disconenct from the bus (RHEL-31756)
  - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-31756)
  - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-31756)
  - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-31756)
  - core/manager: drop duplicate bus track deserialization (RHEL-31756)
  - sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-31756)
  - shell completion: add kernel-identify/inspect verbs for bootctl (RHEL-108576)
  - test: add tests for format_timestamp() and parse_timestamp() with various timezone (RHEL-109488)
  - test-time-util: disable failing tests (RHEL-109488)
  - test: test parse_timestamp() in various timezone (RHEL-109488)
  - systemctl: logind: add missing asserts (RHEL-109488)
  - systemctl: logind: make logind_schedule_shutdown accept action as param (RHEL-109488)
  - systemctl: add option --when for scheduled shutdown (RHEL-109488)
  - test-time-util: add test cases to invalidate "show" and "cancel" (RHEL-109488)
  - Introduce RET_GATHER and use it in src/shared/ (RHEL-108598)
  - fd-util: don't eat up errors in fd_cloexec_many (RHEL-108598)
  - sd-bus: refuse to send messages with an invalid string (RHEL-108584)
  - test: check if we correctly handle invalid UTF-8 in mount stuff (RHEL-108584)
  - test: fix a typo in the cleanup stuff (RHEL-108584)
  - test: explicitly specify a UTF-8 locale for UTF-8 shenanigans (RHEL-108584)
  - test: use the correct file name when restoring the original fstab (RHEL-108584)
  - core: escape UTF-8 in mount unit Where field before sending to clients (RHEL-108584)
  - Revert "test-time-util: disable failing tests" (RHEL-109488)
  - test: use get_timezones() to iterate all known timezones (RHEL-109488)
  - test-time-util: do not fail on DST change (RHEL-109488)
  - test-time-util: suppress timestamp conversion failures for Africa/Khartoum timezone (RHEL-109488)
  - test-time-util: do more suppression of time zone checks (RHEL-109488)
  - test-time-util: fix truncation of usec to sec (RHEL-109488)
  - test: unset TZ before timezone-sensitive unit tests are run (RHEL-109488)
  - meson: extend timeout for test-time-util (RHEL-109488)
  - time-util: use DEFINE_STRING_TABLE_LOOKUP_TO_STRING() macro (RHEL-109488)
  - time-util: align string table (RHEL-109488)
  - time-util: rename variables (RHEL-109488)
  - time-util: add assertions (RHEL-109488)
  - time-util: drop redundant else (RHEL-109488)
  - time-util: do not use strdupa() (RHEL-109488)
  - time-util: use result from startswith_no_case() (RHEL-109488)
  - time-util: use usec_add() and usec_sub_unsigned() (RHEL-109488)
  - time-util: shorten code a bit (RHEL-109488)
  - time-util: rename variables (RHEL-109488)
  - time-util: drop unnecessary assignment of timezone name (RHEL-109488)
  - time-util: make parse_timestamp() use the RFC-822/ISO 8601 standard timezone spec (RHEL-109488)
  - time-util: fix typo (RHEL-109488)
  - ci: bump the tools tree to F42 (RHEL-109488)
  - journald: extend STDOUT_STREAMS_MAX to 64k (RHEL-111065)
  - Revert "Revert "udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT"" (RHEL-50103)
  - udev-builtin-net_id: ignore firmware_node/sun == 0 (RHEL-50103)
  - fundamental: fix compile check for explicit_bzero (RHEL-108568)
  - time-util: make USEC_TIMESTAMP_FORMATTABLE_MAX for 32bit system off by one day (RHEL-109488)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-59
changelog:
  - test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118215)
  - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118215)
  - test: check the next elapse timer timestamp after deserialization (RHEL-118215)
  - timer: don't run service immediately after restart of a timer (RHEL-118215)
  - test: store and compare just the property value (RHEL-118215)
  - test: make test-fd-util more lenient when using fd_move_above_stdio() (RHEL-114974)
  - basic: add PIDFS magic (#31709) (RHEL-114974)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-60
changelog:
  - man: fix a missing word (RHEL-115182)
  - cryptsetup: Add optional support for linking volume key in keyring. (RHEL-97175)
  - cryptsetup: fix typo (RHEL-97175)
  - cryptsetup: HAVE_CRYPT_SET_KEYRING_TO_LINK is always defined (RHEL-97175)
  - coredump: make check that all argv[] meta data fields are passed strict (RHEL-104138)
  - coredump: restore compatibility with older patterns (RHEL-104138)
  - coredump: use %d in kernel core pattern (RHEL-104138)
  - pidref: add structure that can reference a pid via both pidfd and pid_t (RHEL-104138)
  - fd-util: introduce parse_fd() (RHEL-104138)
  - coredump: add support for new %F PIDFD specifier (RHEL-104138)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-61
changelog:
  - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
  - strv: introduce string_strv_hashmap_remove() (RHEL-14112)
  - unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
  - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
  - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
  - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-62
changelog:
  - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
  - timer: rebase last_trigger timestamp if needed (RHEL-118215)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-63
changelog:
  - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
  - cryptsetup-generator: continue parsing after error (RHEL-127859)
  - cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
  - cryptsetup-generator: always process cmdline devices (RHEL-127859)
  - logind: add "background-light" session class (RHEL-109833)
  - pam_systemd: honor session class provided via PAM environment (RHEL-109833)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-64
changelog:
  - core: fix array size in unit_log_resources() (RHEL-131338)
  - pid1: add env var to override default mount rate limit burst (RHEL-129153)
  - pid1: add env var to override default mount rate limit interval (RHEL-129153)


author: Jiri Hnidek <jhnidek@redhat.com> 4-1
changelog:
  * Tue Jul 26 2022 Jiri Hnidek <jhnidek@redhat.com> 3-1
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - test: drop unused reference-image file (ptoscano@redhat.com)
  - Drop the static npm-shrinkwrap.json (ptoscano@redhat.com)
  - Bump cockpit test API to 273 + run-tests scheduler fix (martin@piware.de)
  - spec: suggest insights-client on RHEL (ptoscano@redhat.com)
  - tito: remove autogenerated spec file before tagging (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 5-1
changelog:
  - Translated using Weblate (French) (vincent.lefebvre59@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - 2077759: invoke cockpit.translate() after document loading
    (ptoscano@redhat.com)
  - test: Drop outdated copy of packagelib.py (martin@piware.de)
  - Added missing keys to react components (jhnidek@redhat.com)
  - Fix the issue, when it is not possible to install insights-client
    (jhnidek@redhat.com)
  - test: Sync packagelib.py with cockpit main (martin@piware.de)
  - New target and added one project directory to .gitignore (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 6-1
changelog:
  - Translated using Weblate (Kannada) (jsefler@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - 2169976: insights: fix spawn_error_to_string in more cases
    (ptoscano@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> - 1.6-1
changelog:
  - new upstream release
  - drop WITH_SELINUX knob and selinux patches, there's built-in support now
  - drop several patches which were incorporated upstream, except for
    changewarnSegv patch (did not apply, and not needed nowadays)


author: Vladis Dronov <vdronov@redhat.com> - 6.13-1
changelog:
  - Update the sources to 6.13
  - Add important fixes from the upstream
  - Remove Provides: jitterentropy-rngd as it was retired in f29.


author: Vladis Dronov <vdronov@redhat.com> - 6.13-3
changelog:
  - Adjust rngd-wake-threshold.service and post section so udevadm
    is not run in a container (bz 1965318)


author: Vladis Dronov <vdronov@redhat.com> - 6.13-4.git.d207e0b6
changelog:
  - Update to the upstream v6.13 + tip of origin/master + onecpu
    branch + revert of 2ce93190 (bz 1965318)
  - Rebuild rng-tools against the latest jitterentropy library
    3.0.2-2.git.409828cf with fixes for an important issue
  - Adjust Source0 to a more proper one


author: Vladis Dronov <vdronov@redhat.com> - 6.15-1
changelog:
  - Update to the upstream v6.15 @ 172bf0e3 (bz 2075977)
  - Allow rngd process to drop privileges with "-D user:group"
  - Fix an error building with jitterentropy-3.4.0
  - Add a requirement for selinux-policy of a certain version
  - Fix a build failure on ppc64
  - Small edits in test scripts


author: Vladis Dronov <vdronov@redhat.com> - 6.15-2
changelog:
  - Update to the upstream v6.15 + tip of origin/master @ 6dcc9ec2 (bz 2124605)
  - Do not require selinux-policy if it is not present


author: Vladis Dronov <vdronov@redhat.com> - 6.15-3
changelog:
  - Update to the upstream v6.15 + tip of origin/master @ cb8cc624 (bz 2156554)
  - Fix a number of issues found by covscan code scanner
  - Add a jitter init timeout for tests
  - Add a start condition for the FIPS mode (bz 2154804)


author: Vladis Dronov <vdronov@redhat.com> - 6.16-1
changelog:
  - Update to the upstream v6.16 + tip of origin/master @ 0e560296 (bz 2174916)
  - Get rid of text relocations in -fPIE build
  - Add a hint for opensc package (bz 1845854)


author: Vladis Dronov <vdronov@redhat.com> - 6.16-7
changelog:
  - Update to the upstream v6.16 + tip of origin/master @ 98cf8d63 (RHEL-30953)
  - Use proper SPDX license identifiers
  - Fix a test failure


author: Vladis Dronov <vdronov@redhat.com> - 6.17-1
changelog:
  - Add Intel CET IBT instrumentation to assembly code
  - Update to the upstream v6.17 @ ac43f912 (RHEL-64951)


author: Till Maas <opensource@till.name> - 8.1-26
changelog:
  - Sync in current files from bash package:
    https://src.fedoraproject.org/rpms/bash/c/739b272e5f5d10cf27a847a44d09eb7f4b6ec89b?branch=master
    https://src.fedoraproject.org/rpms/bash/c/329df36f8bbc303be618f06562ec2c4eebfd1d29?branch=master
    https://src.fedoraproject.org/rpms/bash/c/e3b3cd9cec4a3bd12a792536c0ea131f5ba5bd72?branch=master


author: Steve Dickson <steved@redhat.com> - 1.2.6-1
changelog:
  - Use sysconfig variable in service file (bz 1972094)
  - Make sure policycoreutils is installed before using it (bz 1972133)
  - Make sure /var/lib/rpcbind exists (bz 1972133)
  - Corrected the URL reference (bz 1972117)


author: Steve Dickson <steved@redhat.com> - 1.2.6-4
changelog:
  - Use 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-double-free.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-envfile.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-tmpfiles.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-runstatdir.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-systemd-service.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-systemd-rundir.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-17
changelog:
  - Resolves: #2116669 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-21
changelog:
  - Resolves: RHEL-70265 - Rebase rsync to 3.2.5
  - Resolves: RHEL-67142 - Wrong progress reported by rsync when using copy-devices
  - Resolves: RHEL-29340 - Slowness in rsync due to extra validation steps.
  - Resolves: RHEL-18216 - rysnc script /usr/share/doc/rsync/support/rrsync is unsecure


author: Michal Ruprich <mruprich@redhat.com> - 3.2.5-2
changelog:
  - Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70208 - Path traversal vulnerability in rsync
  - Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71657 - Race Condition in rsync Handling Symbolic Links


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-1
changelog:
  - rebased to 2.29.0 (RHEL-11408)
  - KVM: Support AP Bindings in SE Header (RHEL-10572)
  - KVM: Userspace Tool for IBK Request Generation and Insertion (RHEL-10578)
  - zkey: support for key type PKEY_TYPE_EP11_AES (RHEL-11440)
  - vmur: fix handling of option -t (RHEL-11480)
  - dbginfo.sh: global original Input Field Separator (IFS) (RHEL-16527)
  - enable multi-arch build (RHEL-10567)
  - Resolves: RHEL-11408 RHEL-10572 RHEL-10578 RHEL-11440 RHEL-11480 RHEL-16527 RHEL-10567


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-3
changelog:
  - add s390utils-se-data as a noarch subpackage with Secure Execution data files
  - Resolves: RHEL-10567


author: Dan Horák <dhorak@redhat.com> - 2:2.33.1-1
changelog:
  - rebased to 2.33.1 (RHEL-23704)
  - dbginfo.sh: missing data of new ROCE cards (RHEL-24109)
  - SE-tooling: New IBM host-key subject locality (RHEL-30273)
  - Fix disk type detection when running under QEMU (RHEL-40358)
  - Resolves: RHEL-23704 RHEL-24109 RHEL-30273 RHEL-40358


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-50026)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-50030)
  - Resolves: RHEL-50026 RHEL-50030


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-50026)
  - cpacfinfo: new tool to provide CPACF information (RHEL-50020)
  - chpstat: Additional Channel Measurements (RHEL-50023)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-50024)
  - KVM: Support extended attestation for Secure Execution (RHEL-50009)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-50008)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64705)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70853)
  - KVM: Rewrite genprotimg in Rust (RHEL-72023)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71819)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-50019)
  - zkey key support for dm-crypt with XTS keys (RHEL-50010)
  - Resolves: RHEL-50026 RHEL-50020 RHEL-50023 RHEL-50024 RHEL-50009 RHEL-50008 RHEL-64705 RHEL-70853 RHEL-72023 RHEL-71819 RHEL-50019 RHEL-50010


author: Dan Horák <dhorak@redhat.com> - 2:2.38.0-1
changelog:
  - rebased to 2.38.0 (RHEL-73342)
  - LPAR level power consumption reporting (RHEL-72675)
  - Provide Topology-Map information to userspace (RHEL-72682)
  - Add CCK secret type for updating the Customer Communication Key (RHEL-73021)
  - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85390)
  - Resolves: RHEL-73342 RHEL-72675 RHEL-72682 RHEL-73021 RHEL-85390


author: Dan Horák <dhorak@redhat.com> - 2:2.39.0-1
changelog:
  - rebased to 2.39.0 (RHEL-100439)
  - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126743)
  - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126745)
  - zipl: makedumpfile is required for ngdump support (RHEL-114663)
  - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114885)
  - chpstat: Fix DPU utilization scaling in reports (RHEL-109215)
  - Resolves: RHEL-100439 RHEL-126743 RHEL-126745 RHEL-114663 RHEL-114885 RHEL-109215


author: Dan Horák <dhorak@redhat.com> - 2:2.40.0-1
changelog:
  - rebased to 2.40.0 (RHEL-100439)
  - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent
  - Secure Execution: Add tool to verify host-key documents (RHEL-136796)
  - Resolves: RHEL-100439 RHEL-136796


author: Andreas Schneider <asn@redhat.com> - 4.19.4-100
changelog:
  - related: RHEL-16476 - Update to version 4.19.4
  - resolves: RHEL-2109 - Add support for certificate auto enrollment
  - resolves: RHEL-20761 - Add missing requirements for samba-gpupdate
  - resolves: RHEL-19566 - Fix smbget interactive authentication
  - resolves: RHEL-21001 - Fix samba-gpupdate paths for RHEL


author: Andreas Schneider <asn@redhat.com> - 4.19.4-102
changelog:
  - resolves: RHEL-22157 - Don't require NDES for samba-gpupdate
  - resolves: RHEL-20897 - Fix site name fetching for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.0-102
changelog:
  - resolves: RHEL-2109  - Support Certificate Auto Enrollment in Samba
  - resolves: RHEL-22157 - Fix root cert import for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.1-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.1
  - resolves: RHEL-26337 - Fix site lookup for samba-gpupdate
  - resolves: RHEL-5846 - Fix warning messages while upgrading libwbclient


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.2-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.2
  - resolves: RHEL-45841 - Fix KDC IP address lookup in case of trusted domain
  - resolves: RHEL-23814 - Fix smbclient to enumerate the printers


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.59-1
changelog:
  - virt: allow QEMU use of the qgs daemon for attestation
  Resolves: RHEL-87744
  - qgs: add contrib module for TDX "qgs" daemon
  Resolves: RHEL-87744
  - kernel: add interfaces for using SGX enclaves
  Resolves: RHEL-87744
  - Allow coreos-installer search sssd library directory
  Resolves: RHEL-95689
  - Label /dev/diag as diagnostic_device_t
  Resolves: RHEL-95342
  - Allow irqbalance execute shell if irqbalance_run_unconfined is on
  Resolves: RHEL-1556


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.60-1
changelog:
  - Allow irqbalance execute shell if irqbalance_run_unconfined is on
  Resolves: RHEL-1556
  - Update irqbalance policy for using unconfined scripts
  Resolves: RHEL-1556


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.61-1
changelog:
  - Fix incorrect /run and /usr/bin file context entries
  Resolves: SELINUX-4392
  - Dontaudit irqbalance read sssd public files
  Resolves: RHEL-1556
  - Update sssd_dontaudit_read_public_files()
  Resolves: RHEL-1556
  - Allow insights-client file transition for files in /var/tmp
  Resolves: SELINUX-4392
  - Add the virt_exec_virsh() interface
  Resolves: SELINUX-4392
  - Add the ssh_exec_sshd() interface
  Resolves: SELINUX-4392
  - Add rhsmcertd interfaces
  Resolves: SELINUX-4392
  - Add the bind_exec_named_checkconf() interface
  Resolves: SELINUX-4392
  - Add the auth_write_motd_var_run_files() interface
  Resolves: SELINUX-4392
  - Add the gpg_domtrans_agent() interface
  Resolves: SELINUX-4392
  - Add the gpg_read_user_secrets() interface
  Resolves: SELINUX-4392
  - Add policy for insights-core
  Resolves: SELINUX-4392


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.62-1
changelog:
  - Allow "hostapd_cli ping" run as a systemd service
  Resolves: RHEL-59683
  - Allow systemd-timedated start/stop timemaster services
  Resolves: RHEL-95690
  - Allow lldpd connect to systemd-machined over a unix socket
  Resolves: RHEL-96167
  - Allow power-profiles-daemon get attributes of filesystems with extended attributes
  Resolves: RHEL-100718
  - Allow tuned-ppd watch_reads sysfs directories
  Resolves: RHEL-101687
  - Allow tuned-ppd watch sysfs directories
  Resolves: RHEL-101687


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.63-1
changelog:
  - Allow samba-dcerpcd send sigkills to passwd
  Resolves: RHEL-100032
  - Allow power-profiles-daemon watch sysfs directories
  Resolves: RHEL-100718
  - Allow power-profiles-daemon write sysfs files
  Resolves: RHEL-100718
  - Allow hostapd write to socket files in /tmp
  Resolves: RHEL-59683
  - Allow irqbalance search sssd lib directories
  Resolves: RHEL-1556
  - Add insights_client_delete_lib_dirs() interface
  Related: RHEL-59145


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.64-1
changelog:
  - Add insights_core and insights_client interfaces
  Related: RHEL-59145
  - Label /usr/libexec/postfix/tlsproxy with postfix_smtp_exec_t
  Resolves: RHEL-77101
  - Remove "minimum" as a SELINUXTYPE from /etc/selinux/config
  Resolves: RHEL-101140


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.65-1
changelog:
  - Revert "Add policy for insights-core"
  Resolves: RHEL-110650
  - Revert "Add insights_core interfaces"
  Resolves: RHEL-110650


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.66-1
changelog:
  - Reapply "Add insights_core interfaces"
  Resolves: RHEL-112367
  - Reapply "Add policy for insights-core"
  Resolves: RHEL-112367


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.67-1
changelog:
  - Allow login_userdomain dbus chat with tuned-ppd
  Resolves: RHEL-113906
  - selinux-policy: add allow rule for tuned_ppd_t
  Resolves: RHEL-113906
  - Add ppd_base_profile to file transition to get tuned_rw_etc_t type
  Resolves: RHEL-113906
  - Allow tuned-ppd manage tuned log files
  Resolves: RHEL-113906
  - Allow tuned-ppd connect to sssd over a unix stream socket
  Resolves: RHEL-113906
  - Allow tuned-ppd create ppd_base_profile with a file transition
  Resolves: RHEL-113906
  - Allow init create and use vsock socket
  Resolves: RHEL-113647
  - Add Valkey rules to Redis module
  Resolves: RHEL-108982
  - Allow ras-mc-ctl write to sysfs files
  Resolves: RHEL-103975
  - Allow kdump search kdumpctl_tmp_t directories
  Resolves: RHEL-66119


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.68-1
changelog:
  - Allow insights-client manage /etc symlinks
  Resolves: RHEL-108826
  - Allow insights-client get attributes of the rpm executable
  Resolves: RHEL-127329
  - Allow ras-mc-ctl get attributes of the kmod executable
  Resolves: RHEL-103975
  - Fix files_delete_boot_symlinks() to contain delete_lnk_files_pattern
  Resolves: RHEL-101155
  - Allow bootupd delete symlinks in the /boot directory
  Resolves: RHEL-101155
  - Update policy for bootupd
  Resolves: RHEL-101155
  - Allow create kerberos files in postgresql db home
  Resolves: RHEL-123225


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.69-1
changelog:
  - Allow sysadm access to TPM
  Resolves: RHEL-119055
  - Update policy for dhcpc_hook_t
  Resolves: RHEL-113941
  - Allow stap server read virtual memory sysctls
  Resolves: RHEL-114157
  - Allow login_userdomain watch /home and /var directories
  Resolves: RHEL-119686
  - Allow login_userdomain read lastlog
  Resolves: RHEL-119686
  - Allow staff role read/write cockpit-session unix stream sockets
  Resolves: RHEL-108068
  - Label /usr/libexec/dhcpcd-run-hooks with dhcpc_hook_exec_t
  Resolves: RHEL-113941


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.70-1
changelog:
  - Add the rpm_signal() interface
  Related: RHEL-108826
  - Allow tuned_t use its private tmpfs files
  Related: RHEL-108826
  - Allow kdump search kdumpctl_tmp_t directories
  Resolves: RHEL-66119


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.71-1
changelog:
  - Revert "Allow NM nvme dispatcher script start systemd services"
  Resolves: RHEL-111946
  - Allow ssh_agent_type create a sockfile in /run/user/USERID
  Resolves: RHEL-121936
  - Allow NM nvme dispatcher script start systemd services
  Resolves: RHEL-111946
  - Allow aide get attributes of a filesystem with extended attributes
  Resolves: RHEL-121480
  - Label miscellaneous /dev/papr-* devices
  Resolves: RHEL-129879


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.72-1
changelog:
  - Add insights_client service interfaces
  Related: RHEL-140893
  - Confine rhc-worker-playbook.worker and rhc-playbook-verifier
  Resolves: RHEL-132748
  - Allow gpg manage rpm cache
  Related: RHEL-108775
  - Allow gpg read rpm cache
  Related: RHEL-108775
  - Allow aide get attributes of tmpfs and devtmpfs filesystems
  Resolves: RHEL-121480
  - Allow rules for confined users logged in plasma
  Resolves: RHEL-133898
  - Allow login_userdomain watch lnk_files in /usr
  Resolves: RHEL-133898


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.73-1
changelog:
  - Add the fs_write_tmpfs_files() interface
  Resolves: RHEL-142141
  - Dontaudit aide the execmem permission
  Resolves: RHEL-121480
  - Update gpg policy for interactions with rhc-playbook-verifier
  Resolves: RHEL-132748
  - Allow rhc_playbook_verifier_t stream connect to itself
  Resolves: RHEL-132748
  - Update policy for rhc-worker-playbook
  Resolves: RHEL-132748
  - Allow traceroute_t bind rawip sockets to unreserved ports
  Resolves: RHEL-130267
  - Revert "Allow traceroute_t bind rawip sockets to unreserved ports"
  Related: RHEL-130267
  - Allow sudodomain connect to gkeyringd over a unix stream socket
  Resolves: RHEL-121158
  - Allow samba-bgqd send to smbd over a unix datagram socket
  Resolves: RHEL-95985
  - Allow ssh_agent_type manage generic cache home files
  Resolves: RHEL-121165
  - Label /usr/libexec/openssh/ssh-pkcs11-helper with ssh_agent_exec_t
  Resolves: RHEL-121165
  - Allow boothd connect to systemd-machined over a unix socket
  Resolves: RHEL-140882


author: Martin Osvald <mosvald@redhat.com> - 2.13.7-7
changelog:
  - Move /var/log/lastlog ownership to systemd (#2066753)
  - tcsh sets variable p to /usr/sbin from /etc/csh.login (#2066767)
  - bashrc: Don't set up VTE-specific PROMPT_COMMAND (#2026892)


author: Martin Osvald <mosvald@redhat.com> - 2.13.6-1
changelog:
  - csh.login: set PATH again (if empty) to prevent interpreter error (#1744106)
  - aliases: add pcp user (#1744091)
  - lang.csh: fix several variable substitution bugs and typos (#1746749)
  - don't set LANG as a per-shell variable
  - fix lang.csh script so it doesn't break tcsh -e scripts II (#1620004)
  - use full path for non-builtins in csh.cshrc, csh.login, lang.csh, lang.sh and profile (#1747493)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.47-7
changelog:
  - Fix sg_inq parsing in rescan-scsi-bus.sh (#2036005,#2035362)
  - Fix rescan-scsi-bus.sh summary print (#2035382)
  - sg_readcap --zbc man page switch fix (#2036718)
  - Various Covscan fixes (#2044433)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-7
changelog:
  - useradd: check if subid range exists for user. Resolves: #2179987
  - find_new_[gu]id: Skip over IDs that are reserved for legacy reasons. Resolves: #2179988


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-13
changelog:
  - nss.c: shadow_logfd to stderr. Resolves: RHEL-83431
  - vipw: restore the original terminal pgrp after editing. Resolves: RHEL-70844 and RHEL-72940


author: Martin Gieseking <martin.gieseking@uos.de> - 1.1.8-1
changelog:
  - Updated to new release.
  - Dropped version-related patch which has been applied upstream (BZ #1527850).


author: Jan Jansky <jjansky@redhat.com> = 4.9.1-1
changelog:
  - Update to 4.9.1 in RHEL 9
    Resolves: RHEL-86668
    Resolves: RHEL-86644
    Resolves: RHEL-86647
    Resolves: RHEL-86646


author: Jan Jansky <jjansky@redhat.com> = 4.9.1-2
changelog:
  - Update to 4.9.1-2 in RHEL 9
    Resolves: RHEL-86668
    Resolves: RHEL-86644
    Resolves: RHEL-86647
    Resolves: RHEL-86646


author: Jan Jansky <jjansky@redhat.com> = 4.9.2-1
changelog:
  - Update to 4.9.2 
    Resolves: RHEL-101717
    Resolves: RHEL-101718
    Resolves: RHEL-101719
    Resolves: RHEL-101720


author: Jan Jansky <jjansky@redhat.com> = 4.10.0-1
changelog:
  - Update to 4.10.0
    Resolves: RHEL-110500
    Resolves: RHEL-110501
    Resolves: RHEL-110502
    Resolves: RHEL-110503


author: Ondrej Dubaj <odubaj@redhat.com> - 3.34.0-1
changelog:
  - Updated to version 3.34.0 (https://sqlite.org/releaselog/3_34_0.html)
  - Enabled fts3conf.test on s390x and ppc64 architectures


author: Abhi Das <adas@redhat.com> - 4.4-9.git1
changelog:
  - CVE-2021-40153 squashfs-tools: unvalidated filepaths allow writing outside of destination
    rhbz#2000638


author: Abhi Das <adas@redhat.com> - 4.4-10.git1
changelog:
  - CVE-2021-41072 squashfs-tools: additional write outside destination directory exploit fix
    rhbz#2007304


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.13-3
changelog:
  - Address some issues reported by covscan (#1996691).
  - Replace 0141-tests-disable-sockopt-timestamp-on-new-glibc-with-__.patch
    with upstream v5.13-10-g0211fdc "tests: change sockopt-timestamp test
    to use syscall(__NR_recvmsg)"
    and 0154-tests-call-setsockopt-directly-in-sockopt-timestamp.patch.
  - Undo forceful injection of -m64 into CFLAGS/CPPFLAGS to avoid breaking
    mpers and its tests (#1996676).


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.18-2
changelog:
  - Fix the issues reported by covscan (#2103068).
  - Fix SELinux context matching for the deleted paths (#2087693).
  - Fix sloppy FD usage in the bpf test (#2103137).
  - Cater for RHEL 9 license requirement idiosyncrasies (#2103032).


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-1
changelog:
  - Rebase to v6.7; drop upstream patches on top of 5.18 (RHEL-8646).
  - Updated the SPDX license expression.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-2
changelog:
  - Fix incorrect syscall name reporting in restart_syscall() on attach when
    PTRACE_GET_SYSCALL_INFO is in use (RHEL-65109).
  - Update net-yy-inet* and linkat--secontext_mismatch tests.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.12-1
changelog:
  - Rebase to v6.12; drop upstream patches on top of 6.7, drop the harcoded
    "-isystem /usr/include" from CPPFLAGS (RHEL-8646).


author: Sahana Prasad <sahana@redhat.com> - 5.57-1
changelog:
  - New upstream release 5.57
  - Fixes #1925229 - client certificate not correctly verified
    when redirect and verifyChain options are used


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 5.58-4
changelog:
  - Stunnel cannot use an encrypted private key being built against OpenSSL 3.0
  - Resolves: rhbz#1976854


author: Clemens Lang <cllang@redhat.com> - 5.62-2
changelog:
  - Fix stunnel in FIPS mode
    Resolves: rhbz#2050617
  - Fail build if tests fail
    Resolves: rhbz#2051083


author: Clemens Lang <cllang@redhat.com> - 5.71-1
changelog:
  - New upstream release 5.71
    Resolves: RHEL-2468
  - Enable socket activation support
  - verify upstream source in %prep
  - clean up stale conditionals


author: Clemens Lang <cllang@redhat.com> - 5.71-2
changelog:
  - Speed up loading client CA list from CAfile
    Resolves: RHEL-52321
  - Do not load all CAs in client mode to allow continued use of BEGIN TRUSTED CERTIFICATE format
    Resolves: RHEL-52317


author: William Poteat <wpoteat@redhat.com> 1.29.10-1
changelog:
  - Switch dates returned by D-Bus ListInstalledProducts to ISO 8601
    (ptoscano@redhat.com)
  - 1793501: switch dates returned by D-Bus GetPool to ISO 8601
    (ptoscano@redhat.com)
  - Add format_iso8601_date.format_iso8601_date() (ptoscano@redhat.com)
  - Make sure, re-register works for deb repos (suttner@atix.de)
  - 1863039: Fix issue with dnf/yum variables (jhnidek@redhat.com)
  - 1879856: suppress the warning message when setting syspurpose values
    (tmerry@redhat.com)
  - ENT-2779: call format() on translated string (ptoscano@redhat.com)
  - 1930037: cockpit: ensure /etc/pki/product exist (ptoscano@redhat.com)
  - 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Reword ambiguous message (ptoscano@redhat.com)
  - Properly use ungettext for plural forms (ptoscano@redhat.com)
  - cockpit: fix extraction of plural messages (ptoscano@redhat.com)
  - 1672805: 'Addons' is failing spell check and should be changed to 'Add-ons'
    to match documentation (tmerry@redhat.com)
  - 1731109: improve man page & help for registering with --force option
    (tmerry@redhat.com)
  - 1749395: Proper handling when a user does not have an org
    (wpoteat@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - 1916540: Negative proxy tests occasionally encounter the wrong exception
    handling (tmerry@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (suanand@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ENT-3711: Fix a couple of typos (tmerry@redhat.com)
  - ENT-2468: Use format strings with named arguments for translator context
    (tmerry@redhat.com)
  - ENT-3276: refactor test_managercli.py by modules (ptoscano@redhat.com)
  - 1897767: what does 'No Valid values provided for usage' mean to the user
    (tmerry@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Replace optparse with argparse (wpoteat@redhat.com)
  - Fix variable for RestlibException exception (ptoscano@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Correction for condition that was breaking 3 nosetests (wpoteat@redhat.com)
  - maybe this time? (tmerry@localhost.localdomain)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Remove extra '%' in string (ptoscano@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - cockpit: Adjust for changed services image (martin@piware.de)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (wpoteat@redhat.com)
  - Update translation files (noreply@weblate.org)
  - 1897767: what does 'No valid values provided for usage' mean to the user
    (tmerry@localhost.localdomain)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - 1856832: add --org=ORG to the ROLE OPTIONS, USAGE OPTIONS and ADDONS OPTIONS
    (tmerry@localhost.localdomain)
  - 1880920: check for invalid addons (ptoscano@redhat.com)
  - Add AbstractSyspurposeCommand._are_provided_values_valid helper
    (ptoscano@redhat.com)
  - 1924166: improve man text of syspurpose --show (ptoscano@redhat.com)
  - 1646718 debrand a message so that it doesn't say Red Hat Subscription Manager
    but instead an entitlement server (tmerry@localhost.localdomain)


author: William Poteat <wpoteat@redhat.com> 1.29.11-1
changelog:
  - Add subscription-manager dependency to apt-katello-transport (kolb@atix.de)
  - 1898552: refactor/fix collection of IP v4/v6 address info
    (ptoscano@redhat.com)
  - cockpit: Enable TLS for mock insights server (martin@piware.de)
  - adding timoeout to jenkins pipeline (#2585) (jmolet@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1819555: cockpit: translate untranslatable messages (ptoscano@redhat.com)
  - Replace hardcoded errno value with constant (ptoscano@redhat.com)
  - 1940658: bash: complete also the syspurpose subcommand (ptoscano@redhat.com)
  - 1878736: use our i18n functions instead of dnf ones (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.12-1
changelog:
  - 1953069: bash: fix listing of config options (#2609) (ptoscano@redhat.com)
  - Cleanup old *.egg-info dirs in %post (csnyder@redhat.com)
  - 1953047: bash: drop completion for subscribe & unsubscribe
    (ptoscano@redhat.com)
  - 1952228: fix formatting of log error messages (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.13-1
changelog:
  - Updated translations for Korean, Chinese (simiplified, zh_CN), Italian
  - Refactoring of cloud collector/detector and facts (#2515)
    (jhnidek@redhat.com)
  - 1920020: show error message when setting invalid default_log_level as well as
    on every run until changed to a valid value (tmerry@redhat.com)
  - 1959048: improve wording for missing or empty syspurpose values
    (ptoscano@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1960765: fix typo "explicity" in man page (ptoscano@redhat.com)
  - cockpit: Lower cockpit-ws dependency to Recommends (martin@piware.de)
  - test: Robustify and trim down cockpit-ws installation (martin@piware.de)
  - jenkins: switch stylish job to Python 3 (ptoscano@redhat.com)
  - flake8: add more locally found issues (ptoscano@redhat.com)
  - Remove extra whitespace before '(' (ptoscano@redhat.com)
  - 1952879: extract messages from argparse instead of optparse
    (ptoscano@redhat.com)
  - po: set Project-Id-Version to rhsm (ptoscano@redhat.com)
  - po: fuzzy messages with invalid/missing placeholders (ptoscano@redhat.com)
  - po: ko: manually fix placeholder (ptoscano@redhat.com)
  - Update script reference to base branch to main (wpoteat@redhat.com)
  - 1896715: Set proper read permissions on certs (wpoteat@redhat.com)
  - cockpit: Use PF4 based empty state (mmarusak@redhat.com)
  - cockpit: Drop uglification (mmarusak@redhat.com)
  - cockpit: Use 'noreferrer' for external links (mmarusak@redhat.com)
  - cockpit: Add `standard-jsx` eslint plugin (mmarusak@redhat.com)
  - cockpit: Remove loaders for .es6 files (mmarusak@redhat.com)
  - cockpit: Add package-lock.json to .gitignore (mmarusak@redhat.com)
  - build: drop version requirements for pep8 and flake8 (ptoscano@redhat.com)
  - build: remove pyqver test requirement (ptoscano@redhat.com)
  - Add flake8 configuration (ptoscano@redhat.com)
  - Add missing second empty line after class/function (ptoscano@redhat.com)
  - Fix some over-indented code blocks (ptoscano@redhat.com)
  - jenkins: disambiguate virtualenv names (ptoscano@redhat.com)
  - 1956654: Fix issue with proxy and cockpit plugin (jhnidek@redhat.com)
  - Releaser for Centos (wpoteat@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.14-1
changelog:
  - Drop more files/references of old standalone syspurpose tool
    (ptoscano@redhat.com)
  - 1967780: improve placeholders in help text (ptoscano@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1898563: move syspurpose subcommands within the 'syspurpose' command
    (ptoscano@redhat.com)
  - Rename internal variable for syspurpose --show (ptoscano@redhat.com)
  - Drop command name from args when parsing them (ptoscano@redhat.com)
  - 1941904: disable initial-setup in RHEL >= 9 (ptoscano@redhat.com)
  - 1959048: improve wording for invalid syspurpose values (ptoscano@redhat.com)
  - Enable subman to run normally in containers for development/test
    (csnyder@redhat.com)
  - Fixed reporting of AWS cloud facts (null value) (jhnidek@redhat.com)
  - cockpit: Test also system purpose (mmarusak@redhat.com)
  - cockpit: Use current PF4 components and design (mmarusak@redhat.com)
  - test: Update cockpit test/common library (mmarusak@redhat.com)
  - cockpit: Update babel (mmarusak@redhat.com)
  - cockpit: Sync lib/patternfly with Cockpit (mmarusak@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.15-1
changelog:
  - 1941904: actually disable initial-setup in RHEL >= 9, and Fedora too (#2675)
    (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.16-1
changelog:
  - 1941904: remove packages (#2692)
    (31166354+tlhmerry9@users.noreply.github.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Move cloud detector/collector to cloud-what package (#2680)
    (jhnidek@redhat.com)
  - 1975552: add '[SUBMODULE]' in syspurpose usage string (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1973807: fix wording on error when listing syspurpose values (#2684)
    (ptoscano@redhat.com)
  - 1975552: remove extra '[OPTIONS]' from syspurpose usage string (#2682)
    (ptoscano@redhat.com)
  - Make Azure cloud collector more reliable (#2645) (jhnidek@redhat.com)
  - 1967210: Do not print warning, when valid value is provided
    (jhnidek@redhat.com)
  - 1968420: improve description of rhsm.conf format (ptoscano@redhat.com)
  - Delete server repo file (suttner@atix.de)


author: Christopher Snyder <csnyder@redhat.com> 1.29.17-1
changelog:
  - Remove no arch from python3-cloud-what package (csnyder@redhat.com)
  - 1938878: Fix issues discovered by static code analyzers (#2644)
    (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.18-1
changelog:
  - 1976324: Added cloud_what to log root namespaces (jhnidek@redhat.com)
  - 1976324: Added cloud_what to log root namespaces (jhnidek@redhat.com)
  - Slightly improve our container detection (#2611) (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1976225: read lscpu from its JSON output if available (#2699)
    (ptoscano@redhat.com)
  - 1975589: Correct typo in dnf plugin message (wpoteat@redhat.com)
  - 1924126: Fix profile upload on AWS systems (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.19-1
changelog:
  - ENT-4083: Fix flake8 error E402 (mhorky@redhat.com)
  - ENT-4085: Fix flake8 error E713 (mhorky@redhat.com)
  - 2003777: Show available organizations before asking for input
    (mhorky@redhat.com)
  - ENT-4302: Remove "u" prefix from strings (mhorky@redhat.com)
  - ENT-4326: Drop "-*- coding" comment (mhorky@redhat.com)
  - ENT-4277: Drop __future__ imports (mhorky@redhat.com)
  - 1979323: Cockpit - do not show red red icon in SCA mode (jhnidek@redhat.com)
  - Remove outdated comments from the coverage Jenkins job (mhorky@redhat.com)
  - ENT-4252: Migrate from nose to pytest (mhorky@redhat.com)
  - Debian / Ubuntu multi-architectures support
    (sbernhard@users.noreply.github.com)
  - Translated using Weblate (Spanish) (ehespinosa57@gmail.com)
  - 1859157: Display better error message on incorrect --org (mhorky@redhat.com)
  - New D-Bus method GetOrg() (jhnidek@redhat.com)
  - 1924338: list prints not status and dates in SCA mode (jhnidek@redhat.com)
  - 1983144: More useful feedback on unknown argument (mhorky@redhat.com)
  - ENT-4089: Fix flake8 error E741 (mhorky@redhat.com)
  - ENT-4090: Fix flake8 error F821 (mhorky@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - ENT-4091: Fix flake8 error F841 (mhorky@redhat.com)
  - ENT-4228: Format rhsmlib exception (mhorky@redhat.com)
  - ENT-4228: Always format restlib exceptions (mhorky@redhat.com)
  - Update exception handling (mhorky@redhat.com)
  - Drop unused M2Crypto bits (ptoscano@redhat.com)
  - 1995465: Do not use deprecated collections.MutableMapping
    (jhnidek@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1983074: Remove invalid log level (mhorky@redhat.com)
  - ENT-4213: Remove deprecated pep8 package (mhorky@redhat.com)
  - build: switch to os.makedirs(..., exist_ok=True) (ptoscano@redhat.com)
  - build: call create_dest_dir() only when running callback
    (ptoscano@redhat.com)
  - flake8: enable E131, E714 (ptoscano@redhat.com)
  - 1859569: Abort on invalid username/token option in syspurpose commands
    (mhorky@redhat.com)
  - Drop logging.conf (ptoscano@redhat.com)
  - Drop long-dead sat5to6 script (ptoscano@redhat.com)
  - Drop RHN migration (ptoscano@redhat.com)
  - 1922151: Add /var/cache/cloud-what to python3-cloud-what RPM.
    (jhnidek@redhat.com)
  - ENT-164: Remove ga_loader importer (mhorky@redhat.com)
  - ENT-164: Drop rhsm-gtk (mhorky@redhat.com)
  - ENT-164: Drop subscription-manager-gui & rhsm-icon (mhorky@redhat.com)
  - Add minimal documentation for the plugins directories (ptoscano@redhat.com)
  - ENT-4168: Unify description of --org in syspurpose subcommands
    (mhorky@redhat.com)
  - 1922151: Use in-memory cache on AWS too (jhnidek@redhat.com)
  - Move zypper plugins to an own directory (ptoscano@redhat.com)
  - Move dnf plugins to an own directory (ptoscano@redhat.com)
  - Move libdnf plugins to an own directory (ptoscano@redhat.com)
  - Drop support for YUM plugins (ptoscano@redhat.com)
  - Drop YUM plugins (ptoscano@redhat.com)
  - Add 'syspurpose' to list of commands in manpage (mhorky@redhat.com)
  - ENT-4152: Drop initial-setup addon (mhorky@redhat.com)
  - ENT-4136: Drop firstboot support (mhorky@redhat.com)
  - ENT-3764: Change comments to follow Conscious language initiative
    (mhorky@redhat.com)
  - ENT-3764: Update variable names in hwprobe.py (mhorky@redhat.com)
  - ENT-3764: Update project URLs to new versions (mhorky@redhat.com)
  - ENT-3764: Remove BLACKLISTED_LOCALES (mhorky@redhat.com)
  - 1980418: Add 'active' field to module stream profile (ianballou67@gmail.com)
  - repos: document order of --enable & --disable (ptoscano@redhat.com)
  - 1984133: repos: respect order of --enable & --disable (ptoscano@redhat.com)
  - Include D-Bus sender in User-Agent http header; Singleton
    (jhnidek@redhat.com)
  - hwprobe.py: Fix counting cores per cpu for Fujitsu A64FX CPU
    (m.mizuma@jp.fujitsu.com)
  - flake8: enable E121, E122, E123, E126, E127, E128 (ptoscano@redhat.com)
  - flake8: disable E122 for test/test_utils.py (ptoscano@redhat.com)
  - Wrap first argument/element in function calls & containers
    (ptoscano@redhat.com)
  - Fix indentation of some continuation lines (ptoscano@redhat.com)
  - 1974641: Fix tab completion with multiple optional commands
    (mhorky@redhat.com)
  - 1876828: Try to suppress errors in stderr when not run as root
    (mhorky@redhat.com)
  - 1977452: typo in string format change Add quotes to a {filename} and remove
    an extra space. (tmerry@redhat.com)
  - Update translation files (noreply@weblate.org)
  - 1976240: Improve HTTP code/message reporting in error strings
    (mhorky@redhat.com)
  - Added new stage for running libdnf unit tests. (jhnidek@redhat.com)
  - make sure gpg key download doesn't fail because of private certs
    (sbernhard@users.noreply.github.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.20-1
changelog:
  - ENT-4279: Switch away from rhsmlib.compat.subprocess_compat
    (mhorky@redhat.com)
  - 2021578: Remove proxy server test as it is unnecessary (wpoteat@redhat.com)
  - cockpit: validate SSL connection to mock-insights (ptoscano@redhat.com)
  - cockpit: fix hostname of the fake Insights server (ptoscano@redhat.com)
  - cockpit: validate the SSL connection to candlepin (ptoscano@redhat.com)
  - cockpit: resolve hostname of service machine (ptoscano@redhat.com)
  - cockpit: use CANDLEPIN_URL consistently (ptoscano@redhat.com)
  - 1719690: Update to message formatting (wpoteat@redhat.com)
  - cockpit: account for missing insights-client on non-RHEL systems
    (ptoscano@redhat.com)
  - cockpit: skip Insights tests on non-RHEL OSes (ptoscano@redhat.com)
  - ENT-4370: Drop old dbus_interface.py (mhorky@redhat.com)
  - ENT-4278: Drop unittest2 imports (mhorky@redhat.com)
  - 1985845: Fix sub-man service-level --show (jhnidek@redhat.com)
  - spec: drop non-systemd support (ptoscano@redhat.com)
  - spec: drop support for Python < 3 (ptoscano@redhat.com)
  - spec: drop support for Fedora < 33 (ptoscano@redhat.com)
  - spec: drop support for RHEL < 8 (ptoscano@redhat.com)
  - spec: drop support for SUSE < 15 (ptoscano@redhat.com)
  - 2015173: chmod /etc/pki/entitlement/*.pem only when existing
    (ptoscano@redhat.com)
  - cockpit: port subscriptions info icons to PF4 icons (kkoukiou@redhat.com)
  - cockpit: translate some untranslated aria-labels (kkoukiou@redhat.com)
  - cockpit: Port Po2JSONPlugin to webpack 5 (kkoukiou@redhat.com)
  - cockpit: stop including PF3 - it's not used anymore (kkoukiou@redhat.com)
  - cockpit: port Insights dialog remaining non PF4 parts (kkoukiou@redhat.com)
  - cockpit: port subscriptions register dialog to Patternfly 4
    (kkoukiou@redhat.com)
  - cockpit: make default TEST_OS rhel-8-4 (kkoukiou@redhat.com)
  - cockpit: port spinners to PF4 spinners (kkoukiou@redhat.com)
  - cockpit: replace custom Revealer component with 'ExpandableSection' from PF4
    (kkoukiou@redhat.com)
  - cockpit: replace pficon and fa classes with svgs form react-icons
    (kkoukiou@redhat.com)
  - cockpit: remove jquery unused dependency (kkoukiou@redhat.com)
  - cockpit: patternfly is a normal dependency - not just dev
    (kkoukiou@redhat.com)
  - cockpit: update patternfly modules and explicitely specify react-icons
    dependency (kkoukiou@redhat.com)
  - cockpit: clean up package.json from unused dependencies and move to webpack 5
    (kkoukiou@redhat.com)
  - webpack: Use relative resolve path for npm 7 compatibility
    (kkoukiou@redhat.com)
  - cockpit: Stop using a custom Select, use the one from PF instead
    (kkoukiou@redhat.com)
  - cockpit: checkout Cockpit's PF/React/build library instead of keeping a
    direct copy of it locally (kkoukiou@redhat.com)
  - cockpit: update npmshrinkwrap file (kkoukiou@redhat.com)
  - Use pytest --forked for D-Bus unit tests (jhnidek@redhat.com)
  - Support of python3 of zypper rhsm script (suttner@atix.de)
  - 2003777: Fix organizations hint in syspurpose commands (mhorky@redhat.com)
  - Small style changes of d-bus server and d-bus unit tests (jhnidek@redhat.com)
  - * Removed GLib.threads_init() (jhnidek@redhat.com)
  - Added cleanup for one patcher; fixed some comments. (jhnidek@redhat.com)
  - cockpit: skip RHEL 9 tests using insights-client (ptoscano@redhat.com)
  - cockpit: fix system installation of subscription-manager
    (ptoscano@redhat.com)
  - cockpit: wait 5 seconds for candlepin at first (ptoscano@redhat.com)
  - cockpit: use the self-signed key in mock-insights (ptoscano@redhat.com)
  - test: Building requires gcc (mmarusak@redhat.com)
  - test: Tell tests about rhel-9 package manager (mmarusak@redhat.com)
  - facts: drop dead/unused code from CleanupCollector (ptoscano@redhat.com)
  - 1989955: use /proc/device-tree/ibm,partition-uuid on POWER LPARs
    (ptoscano@redhat.com)
  - facts: prepare _get_devicetree_uuid() for multiple files
    (ptoscano@redhat.com)
  - facts: refactor device-tree parts of VirtUuidCollector (ptoscano@redhat.com)
  - cockpit: Move from obsolete node-sass to Dart sass (martin@piware.de)
  - Cloud-what: Make saving token file more robust (jhnidek@redhat.com)
  - Fix redundant API calls to Candlepin (hyu@redhat.com)
  - Remove i-notify watchers on the end of the loop (jhnidek@redhat.com)
  - build: pin flake8 to < 4 (ptoscano@redhat.com)
  - Only rpmlint our specfiles (csnyder@redhat.com)
  - Version our obsoletes of syspurpose and the container plugin
    (csnyder@redhat.com)
  - Remove unnecessary comment and sles/suse tests (csnyder@redhat.com)
  - ENT-4273: Drop usage of six.moves (mhorky@redhat.com)
  - ENT-4379: Remove function make_utf8 (mhorky@redhat.com)
  - ENT-4087: Fix flake8 error E722 (mhorky@redhat.com)
  - make spec file SUSE / Open Build Service compliant (p.seiler@linuxmail.org)
  - 2003777: Only hint organizations if it's needed (mhorky@redhat.com)
  - Drop old GUI docs leftovers (ptoscano@redhat.com)
  - tests: drop no more needed rhsm_display (ptoscano@redhat.com)
  - build: remove old specific check for GUI file (ptoscano@redhat.com)
  - Drop async_utils & its tests (ptoscano@redhat.com)
  - Remove rhsm-icon leftovers (ptoscano@redhat.com)
  - build: remove unused detect_overindent function (ptoscano@redhat.com)
  - build: drop lxml leftovers (ptoscano@redhat.com)
  - build: drop Glade leftovers (ptoscano@redhat.com)
  - Add rhsm proxy support to apt-transport-katello (suttner@atix.de)
  - ENT-4289: Drop Sphinx (mhorky@redhat.com)
  - ENT-4340: Resolve deprecation warnings (mhorky@redhat.com)
  - Fixed one unused import of six (jhnidek@redhat.com)
  - ENT-4272: Remove Python 2 conditionals (mhorky@redhat.com)
  - ENT-4274: Remove six.assert* methods (mhorky@redhat.com)
  - ENT-4275: Switch away from six.BytesIO and six.StringIO (mhorky@redhat.com)
  - ENT-4082: Fix flake8 error E265 (mhorky@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.21-1
changelog:
  - 2020248: handle server-side consumer deletion in syspurpose commands
    (ptoscano@redhat.com)
  - connection: recognize proxy errors (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com>
changelog:
  - Ignore debian architecture ALL (schmidt@atix.de)
  - 2028894: Don't allow service-level --serverurl on registered system
    (mhorky@redhat.com)
  - 2037771: Cockpit registration dialog: enable insights by default
    (jhnidek@redhat.com)
  - 2039322: fix string representation of DMI facts (ptoscano@redhat.com)
  - Drop usage of six.python_2_unicode_compatible (ptoscano@redhat.com)
  - ENT-4588: Switch away from six iterators (mhorky@redhat.com)
  - ENT-4590: Switch away from six.callable (mhorky@redhat.com)
  - ENT-4587: Switch away from six types (mhorky@redhat.com)
  - Adding permissive coverage publishing (jmolet@redhat.com)
  - Ensure that prompted environment entry follows state of multiples
    (wpoteat@redhat.com)
  - 2026316: Do not delete cache of content_access during refresh
    (jhnidek@redhat.com)
  - More SUSE compliance (jhnidek@redhat.com)
  - Updates for non-multi-environment scenario (wpoteat@redhat.com)
  - Fix some minor issues related to syspurpose (jhnidek@redhat.com)
  - syspurpose: handle users w/o organizations (ptoscano@redhat.com)
  - service-level: drop useless check (ptoscano@redhat.com)
  - 2026286: consider user-specified --org in any case (ptoscano@redhat.com)
  - 1995032: Use multiple environments (wpoteat@redhat.com)
  - cache: fix typo in debug message (ptoscano@redhat.com)
  - Switch away from Thread.getName() (ptoscano@redhat.com)
  - Fix indentation of ProductStatus. (jhnidek@redhat.com)
  - 2028969: Do not try to load compliance status from cache (jhnidek@redhat.com)
  - Switch comma-separated join to space-separated join (schmidt@atix.de)
  - 2029927: Fix bash autocompletion (mhorky@redhat.com)
  - utils: use shutil.get_terminal_size() (ptoscano@redhat.com)
  - Remove PyXML leftovers (ptoscano@redhat.com)
  - 2026320: fix format of HTTP-date headers (ptoscano@redhat.com)
  - connection: move HTTP-date formatting to own helper (ptoscano@redhat.com)
  - Ensure datetime.timezone.utc objects for parsed UTC dates
    (ptoscano@redhat.com)
  - rhsm: drop custom which() implementation (ptoscano@redhat.com)
  - facts: switch to shutil.which() (ptoscano@redhat.com)
  - test: unconditionally use hashlib (ptoscano@redhat.com)
  - 1999048: Fixed partially subscribed product in Cockpit plugin
    (jhnidek@redhat.com)
  - test: rename tests to default pytest filename pattern (ptoscano@redhat.com)
  - Fixed last bits related to updated D-Bus Register method.
    (jhnidek@redhat.com)
  - Cockpit plugin: display syspurpose card without attributes
    (jhnidek@redhat.com)
  - 2023257: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
  - 2023257: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
  - Refactoring of temporary disablement of dir watchers. (jhnidek@redhat.com)
  - Ignore enable_content option in RegisterWithActivationKeys()
    (jhnidek@redhat.com)
  - Use benefits of enable_content in cockpit plugin. (jhnidek@redhat.com)
  - Added enable_content option to Register() D-Bus method (jhnidek@redhat.com)
  - Added refresh() method to entitlement service (jhnidek@redhat.com)
  - Fixed issue with status cache (jhnidek@redhat.com)
  - Add information about content access mode to consumer (jhnidek@redhat.com)
  - 2024929: build: fix build on 'build' target (ptoscano@redhat.com)
  - 2023391: libdnf: respect environment CFLAGS (ptoscano@redhat.com)
  - Drop unused ssl_verify_depth config option (ptoscano@redhat.com)
  - tests: drop test_po_files.py (ptoscano@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)


