# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-666.el9]
changelog:
  - wifi: rtw88: limit indirect IO under powered off for RTL8822CS (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: Fix firmware version handling (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Move mt76_abort_scan out of mt76_reset_device() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: hw_scan: Don't let the operating channel be last (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: always take beacon ies in link grading (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mvm: fix beacon template/fixed rate (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: fix aux ROC time event iterator usage (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211_hwsim: Fix possible NULL dereference (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: skip rate verification for not captured PSDUs (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: reject address change while connecting (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath11k: zero init info->status in wmi_process_mgmt_tx_comp() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211_hwsim: Limit destroy_on_close radio removal to netgroup (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - Revert "wifi: ath12k: Fix missing station power save configuration" (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: use wiphy_hrtimer_work for csa.switch_work (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: use wiphy_hrtimer_work for ml_reconf_work (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: use wiphy_hrtimer_work for ttlm_work (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: add an hrtimer based delayed work item (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - Revert "wifi: ath10k: avoid unnecessary wait for service ready message" (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: fix key tailroom accounting leak (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode (Jose Ignacio Tornos Martinez) [RHEL-132587] {CVE-2025-40321}
  - wifi: mac80211: reset FILS discovery and unsol probe resp intervals (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: fix potential use after free in iwl_mld_remove_link() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: free skb during idr cleanup callback (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath10k: Fix memory leak on unsupported WMI command (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: enforce CPU endian format for all QMI data (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Use 1KB Cache Flush Command for QoS TID Descriptors (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Fix flush cache failure during RX queue update (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Add Retry Mechanism for REO RX Queue Update Failures (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Refactor REO command to use ath12k_dp_rx_tid_rxq (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Refactor RX TID buffer cleanup into helper function (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Refactor RX TID deletion handling into helper function (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Increase DP_REO_CMD_RING_SIZE to 256 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: remove IEEE80211_CHAN_{1,2,4,8,16}MHZ flags (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: fix Rx packet handling when pubsta information is not available (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: remove ieee80211_s1g_channel_width (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: correctly initialise S1G chandef for STA (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: correctly implement and validate S1G chandef (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: remove tx_handlers_drop debugfs stats (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Remove redundant rcu_read_lock/unlock() in spin_lock (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211_hwsim: Add simulation support for NAN device (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Extend support for changing NAN configuration (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Export an API to check if NAN is started (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Get the correct interface for non-netdev skb status (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Track NAN interface start/stop (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Accept management frames on NAN interface (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Support Tx of action frame for NAN (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: Store the NAN cluster ID (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: Support Tx/Rx of action frame for NAN (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: Advertise supported NAN capabilities (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: nl80211: Add more NAN capabilities (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: Add cluster joined notification APIs (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: nl80211: Add NAN Discovery Window (DW) notification (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: nl80211: Add more configuration options for NAN commands (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Extend beacon miss handling for MLO non-AP STA (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Add support to handle reason inactivity STA kickout event for QCN9274/IPQ5332 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: enhance the WMI_PEER_STA_KICKOUT event with reasons and RSSI reporting (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: report station mode per-chain signal strength (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath10k: Fix connection after GTK rekeying (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath10k: avoid unnecessary wait for service ready message (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load() (Jose Ignacio Tornos Martinez) [RHEL-132587] {CVE-2025-39991}
  - wifi: ath10k: remove gpio number assignment (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath11k: Remove redundant semicolon (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: downgrade log level for CE buffer enqueue failure (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: fix wrong logging ID used for CE (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath11k: downgrade log level for CE buffer enqueue failure (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Add fallback for invalid channel number in PHY metadata (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: fix the fetching of combined rssi (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: fix HAL_PHYRX_COMMON_USER_INFO handling in monitor mode (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: fix signal in radiotap for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Add support to set per-radio RTS threshold (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: wow: enable TKIP related feature (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8922a: add TAS feature support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: open C2H event waiting window first before sending H2C command (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: renew a completion for each H2C command waiting C2H event (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852b: enable beacon tracking support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: debug: support SER L0 simulation (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: phy: initialize AFE by firmware element table (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: obtain RX path from ppdu status IE00 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: disable RTW89_PHYSTS_IE09_FTR_0 for ppdu status (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: use ieee80211_tx_info::driver_data to store driver TX info (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: chan: allow callers to check if a link has no managed chanctx (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: abort scan/roc on hw restart (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: improve phy reset on hw restart (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: fill User Priority in skb->priority for rx packets (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: set VTA in txwi (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: remove the mem_total field of STA_REC_BF command (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: disable promiscuous mode by default (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: use altx queue for offchannel tx on connac+ (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: fix updating beacon protection with beacons enabled (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: fix key add/remove imbalance (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: delete vif keys when requested (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: fix memory leak on mt7996_mcu_sta_key_tlv error (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: fix setting beacon protection keys (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: decrease timeout for commonly issued MCU commands (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: improve hardware restart reliability (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: remove redundant per-phy mac80211 calls during restart (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7921u: Add VID/PID for Netgear A7500 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt76_eeprom_override to int (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: support writing MAC TXD for AddBA Request (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7925: refine the txpower initialization flow (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7915: fix mt7981 pre-calibration (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Add mt76_dma_get_rxdmad_c_buf utility routione (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Decouple RRO logic from WED support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Add rx_queue_init callback (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Introduce RRO MSDU callbacks (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Convert mt7996_wed_rro_addr to LE (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Fix RX packets configuration for primary WED device (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Fix tx-queues initialization for second phy on mt7996 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Introduce the capability to reset MT7992 WED device (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Enable HW RRO for MT7992 chipset (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Initial DMA configuration for MT7992 WED support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Do not always enable NAPIs for WED RRO queues (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Differentiate between RRO data and RRO MSDU queues (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Remove q->ndesc check in mt76_dma_rx_fill() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Add reset_idx to reset_q mt76_queue_ops signature. (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Enable MLO support for client interfaces (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Set EML capabilities for AP interface (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Export MLO AP capabilities to mac80211 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Temporarily disable EPCS (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Implement MLD address translation for EAPOL (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Add all active links to poll list in mt7996_mac_tx_free() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Fix mt7996_reverse_frag0_hdr_trans for MLO (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Use proper link info in mt7996_mcu_add_group (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7921: Add 160MHz beamformee capability for mt7922 device (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7925: add pci restore for hibernate (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Check phy before init msta_link in mt7996_mac_sta_add_links() (Jose Ignacio Tornos Martinez) [RHEL-132587] {CVE-2025-40066}
  - wifi: mt76: mt7996: Use proper link_id in link_sta_rc_update callback (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Remove dead code in mt76_scan_work (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Use deflink for AMPDU rx reordering (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7921: add MBSSID support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: fix potential memory leak in mt76_wmac_probe() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7925: add MBSSID support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7925u: Add VID/PID for Netgear A9000 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Set proper link destination address in mt7996_tx() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Set def_wcid pointer in mt7996_mac_sta_init_link() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Fix mt7996_mcu_bss_mld_tlv routine (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Fix mt7996_mcu_sta_ba wcid configuration (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Overwrite unspecified link_id in mt7996_tx() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mwifiex: fix endianness handling in mwifiex_send_rgpower_table (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: Remove the redundant wiphy_dev (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: fix incorrect comment (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: update the time stamps in hidden ssid (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Fix HE capabilities element check (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: add tx_handlers_drop statistics to ethtool (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: CHANNEL_SURVEY_NOTIF is always supported (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: remove support of iwl_esr_mode_notif version 1 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: remove support from of sta cmd version 1 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: remove support of roc cmd version 5 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: remove support of mac cmd ver 2 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: don't consider phy cmd version 5 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: implement wowlan status notification API update (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: fw: Add ASUS to PPAG and TAS list (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: add kunit tests for nvm parse (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: api: add a flag to iwl_link_ctx_modify_flags (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: pcie: move ltr_enabled to the specific transport (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: pcie: move pm_support to the specific transport (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: rename iwl_finish_nic_init (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: replace SUPPRESS_CMD_ERROR_ONCE status bit with a boolean (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: add STATUS_FW_ERROR API (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: Add USB ID 2001:3327 for D-Link AX18U rev. A1 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: Add USB ID 2001:332a for D-Link AX9U rev. A1 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtl8xxxu: expose efuse via debugfs (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: Fix dentry reference leak in iwl_mld_add_link_debugfs (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mei: Remove unused flexible-array member in struct iwl_sap_hdr (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: Remove redundant header files (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: Remove duplicated include in trans.c (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mwifiex: fix double free in mwifiex_send_rgpower_table() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Fix 6 GHz Band capabilities element advertisement in lower bands (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: reduce the scope of rts_threshold (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: reduce the scope of link_id (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: brcmfmac: support AP isolation to restrict reachability between stations (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: nl80211: strict checking attributes for NL80211_CMD_SET_BSS (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: drivers: indicate support for attributes in NL80211_CMD_SET_BSS (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: nl80211: allow drivers to support subset of NL80211_CMD_SET_BSS (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: nl80211: Add EHT fixed Tx rate support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: kunit: add kunit tests for S1G PVB decoding (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: support parsing S1G TIM PVB (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: support block bitmap S1G TIM encoding (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: brcmfmac: fix 43752 SDIO FWVID incorrectly labelled as Cypress (CYW) (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mwifiex: send world regulatory domain to driver (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mwifiex: add rgpower table loading support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: brcmfmac: avoid assignment in if/else-if conditions in NVRAM load path (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: count reg connection element in the size (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: Remove unused tracepoints (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852bt: Remove redundant off_reverse variables (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: use int type to store negative error codes (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: add getting function of DMA channel v1 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: abstract getting function of DMA channel (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: add RPP parser v1 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: abstract RPP parser (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: add group BD address design (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: define TX/RX buffer descriptor pool (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: add struct rtw89_{tx,rx}_rings to put related fields (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: use RDU status of R_BE_PCIE_DMA_IMR_0_V1 instead for 8922DE (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: prepare interrupt related registers and functions for 8922DE (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: move chip ISR definition out from chip generation (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtl8xxxu: Remove TL-WN722N V2 (0x2357: 0x010c) from untested devices (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: don't support WH a step (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: remove a TODO (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: carefully select the PNVM source (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: make iwl_mld_rm_vif void (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: pcie: remember when interrupts are disabled (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: support TLC command version 5 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: gen1_2: move gen specific code to a function (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: gen1_2: rename iwl_trans_pcie_op_mode_enter (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: really remove hw_wfpm_id (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: remove unneeded jacket indication (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: don't publish TWT capabilities (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: trans: move dev_cmd_pool to trans specific (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: remove .pnvm files from module info (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: acpi: make iwl_guid static (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: uefi: remove runtime check of constant values (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: refactor iwl_pnvm_get_from_fs (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: iwl-config: include module.h (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: don't modify trans state where not needed (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: simplify iwl_trans_pcie_d3_resume (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: trans: remove STATUS_SUSPENDED (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: trans: remove d3 test code (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: remove dump file name extension support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mvm: remove d3 test code (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: add a new FW file numbering scheme (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: add few missing hcmd/notif names (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: Add debug log for second link (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: simplify iwl_poll_prph_bit return value (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: pcie: relocate finish_nic_init logic to gen1_2 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: trigger mlo scan only when not in EMLSR (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: don't check the cipher on resume (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: don't validate keys state on resume (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: rename iwl_mld_set_key_rx_seq (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: refactor iwl_mld_add_all_rekeys (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: don't consider old versions of PPAG (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: make ppag versioning clear (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - Reapply "wifi: iwlwifi: remove support of several iwl_ppag_table_cmd versions" (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: bump MIN API in HR/GF/BZ/SC/DR (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mvm: remove a function declaration (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld/mvm: set beacon protection capability in wowlan config (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mvm/mld: correctly retrieve the keyidx from the beacon (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: track BIGTK per link (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: support MLO rekey on resume (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mvm: cleanup cipher lookup in resume (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: cleanup cipher lookup in resume (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mvm: remove MLO code (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw88: Use led->brightness_set_blocking for PCI too (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: coex: Limit Wi-Fi scan slot cost to avoid A2DP glitch (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852c: update firmware crash trigger type for newer firmware (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852a: report average RSSI to avoid unnecessary scanning (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852a: report per-channel noise level by get_survey ops (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852bt: Simplify unnecessary if-else conditions in _dpk_onoff() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtl8xxxu: Don't claim USB ID 07b8:8188 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: fix group frames loss when connected to non-transmitted BSSID (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: fix BSSID comparison for non-transmitted BSSID (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852c: check LPS H2C command complete by C2H reg instead of done ack (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8851b: rfk: update TX wideband IQK (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8851b: rfk: update IQK TIA setting (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: wow: remove notify during WoWLAN net-detect (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: debug: add beacon_info debugfs (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: introduce beacon tracking to improve connection stability (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852bt: Use standard helper for string choice (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: add dummy C2H handlers for BCN resend and update done (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: print just once for unknown C2H events (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw88: Lock rtwdev->mutex before setting the LED (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw88: sdio: use indirect IO for device registers before power-on (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - ktime: Add us_to_ktime() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - net: convert to nla_get_*_default() [wireless] (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138032] {CVE-2025-38349}
  - blk-mq: Abort suspend when wakeup events are pending (Ming Lei) [RHEL-137855]
  - fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137099] {CVE-2025-40271}
  - idpf: set mac type when adding and removing MAC filters (Michal Schmidt) [RHEL-82234 RHEL-91991 RHEL-92017]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-667.el9]
changelog:
  - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() (Maurizio Lombardi) [RHEL-87800]
  - ata: libata-scsi: Fix system suspend for a security locked drive (Tomas Henzl) [RHEL-106827]
  - ata: ahci: Use correct DMI identifier for ASUSPRO-D840SA LPM quirk (Tomas Henzl) [RHEL-106827]
  - ata: libata-scsi: Fix ata_to_sense_error() status handling (Tomas Henzl) [RHEL-106827]
  - ata: ahci: Disallow LPM for Asus B550-F motherboard (Tomas Henzl) [RHEL-106827]
  - ata: ahci: Disallow LPM for ASUSPRO-D840SA motherboard (Tomas Henzl) [RHEL-106827]
  - ata: libata-scsi: Fix offsets for the fixed format sense data (Tomas Henzl) [RHEL-106827]
  - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137065] {CVE-2025-38024}
  - scsi: qla2xxx: Update version to 10.02.10.100-k (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Fix bsg_done() causing double free (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Query FW again before proceeding with login (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Validate sp before freeing associated memory (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Free sp in error path to fix system crash (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Delay module unload while fabric scan in progress (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Allow recovery for tape devices (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Add bsg interface to support firmware img validation (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Validate MCU signature before executing MBC 03h (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Add load flash firmware mailbox support for 28xxx (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Add support for 64G SFP speed (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Add Speed in SFP print information (Nilesh Javali) [RHEL-136530]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-668.el9]
changelog:
  - bonding: don't set oif to bond dev when getting NS target destination (CKI Backport Bot) [RHEL-128764]
  - thunderbolt: Add support for Intel Wildcat Lake (Desnes Nunes) [RHEL-95661]
  - crypto: seqiv - Do not use req->iv after crypto_aead_encrypt (Xin Long) [RHEL-118175]
  - redhat: hsr: Remove tech preview tainting (Felix Maurer) [RHEL-100941]
  - redhat: Package net/hsr selftests (Felix Maurer) [RHEL-127796]
  - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (Felix Maurer) [RHEL-127794]
  - hsr: Follow standard for HSRv0 supervision frames (Felix Maurer) [RHEL-127794]
  - hsr: Fix supervision frame sending on HSRv0 (Felix Maurer) [RHEL-127794]
  - net: hsr: prevent creation of HSR device with slaves from another netns (Felix Maurer) [RHEL-127794]
  - net/hsr: add interlink to fill_info output (Felix Maurer) [RHEL-127764 RHEL-127794]
  - net/hsr: add protocol version to fill_info output (Felix Maurer) [RHEL-127764 RHEL-127794]
  - hsr: hold rcu and dev lock for hsr_get_port_ndev (Felix Maurer) [RHEL-127794]
  - hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr (Felix Maurer) [RHEL-127794]
  - hsr: use rtnl lock when iterating over ports (Felix Maurer) [RHEL-127794]
  - hsr: use netdev_master_upper_dev_link() when linking lower ports (Felix Maurer) [RHEL-127794]
  - net, hsr: reject HSR frame if skb can't hold tag (Felix Maurer) [RHEL-127794] {CVE-2025-39703}
  - net: hsr: sync hw addr of slave2 according to slave1 hw addr on PRP (Felix Maurer) [RHEL-127794 RHEL-130474]
  - redhat: hsr: Enable KUnit test for PRP duplicate discard (Felix Maurer) [RHEL-127794]
  - net: hsr: Add KUnit test for PRP (Felix Maurer) [RHEL-127794]
  - net: hsr: Fix PRP duplicate detection (Felix Maurer) [RHEL-127794]
  - net: hsr: Create and export hsr_get_port_ndev() (Felix Maurer) [RHEL-127794]
  - net: hsr: remove synchronize_rcu() from hsr_add_port() (Felix Maurer) [RHEL-127794]
  - net: hsr: remove one synchronize_rcu() from hsr_del_port() (Felix Maurer) [RHEL-127794]
  - net: hsr: must allocate more bytes for RedBox support (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Add test for VLAN (Felix Maurer) [RHEL-127794 RHEL-130476]
  - net: hsr: Add VLAN CTAG filter support (Felix Maurer) [RHEL-127794 RHEL-130476]
  - net: hsr: Add VLAN support (Felix Maurer) [RHEL-127794 RHEL-130476]
  - tests: hsr: Increase timeout to 50 seconds (Felix Maurer) [RHEL-127794]
  - net: hsr: convert to use new timer APIs (Felix Maurer) [RHEL-127794]
  - net: hsr: Remove interlink_sequence_nr. (Felix Maurer) [RHEL-127794]
  - net: hsr: Use the seqnr lock for frames received via interlink port. (Felix Maurer) [RHEL-127794]
  - net: hsr: prevent NULL pointer dereference in hsr_proxy_announce() (Felix Maurer) [RHEL-127794]
  - net: hsr: cosmetic: Remove extra white space (Felix Maurer) [RHEL-127794]
  - treewide, timers: Rename from_timer() to timer_container_of() (Felix Maurer) [RHEL-100940 RHEL-127794]
  - net: hsr: Send supervisory frames to HSR network with ProxyNodeTable data (Felix Maurer) [RHEL-100940 RHEL-127794]
  - selftests: hsr: Extend the hsr_ping.sh test to use fixed MAC addresses (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Extend the hsr_redbox.sh test to use fixed MAC addresses (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Fix "File exists" errors for hsr_ping (Felix Maurer) [RHEL-127794]
  - test: hsr: Extend the hsr_redbox.sh to have more SAN devices connected (Felix Maurer) [RHEL-127794]
  - test: hsr: Call cleanup_all_ns when hsr_redbox.sh script exits (Felix Maurer) [RHEL-100940 RHEL-127794]
  - net: hsr: init prune_proxy_timer sooner (Felix Maurer) [RHEL-100940 RHEL-127794]
  - test: hsr: Add test for HSR RedBOX (HSR-SAN) mode of operation (Felix Maurer) [RHEL-100940 RHEL-127794]
  - test: hsr: Extract version agnostic information from ping command output (Felix Maurer) [RHEL-100940 RHEL-127794]
  - test: hsr: Move common code to hsr_common.sh file (Felix Maurer) [RHEL-100940 RHEL-127794]
  - test: hsr: Remove script code already implemented in lib.sh (Felix Maurer) [RHEL-100940 RHEL-127794]
  - net: hsr: Provide RedBox support (HSR-SAN) (Felix Maurer) [RHEL-100940 RHEL-127794]
  - net: hsr: Use full string description when opening HSR network device (Felix Maurer) [RHEL-127794]
  - net: hsr: Fix typo in the hsr_forward_do() function comment (Felix Maurer) [RHEL-127794]
  - net: hsr: constify the struct device_type usage (Felix Maurer) [RHEL-127794]
  - net: fill in MODULE_DESCRIPTION()s for HSR (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Extend the testsuite to also cover HSRv1. (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Reorder the testsuite. (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Use `let' properly. (Felix Maurer) [RHEL-127794]
  - net/hsr: Remove unused function declarations (Felix Maurer) [RHEL-127794]
  - net: ionic: map SKB after pseudo-header checksum prep (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: add dma_wmb() before ringing TX doorbell (Jakub Ramaseuski) [RHEL-127815]
  - ionic: convert to ndo_hwtstamp API (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Fix memory leak of admin q_wr (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Use ether_addr_copy instead of memcpy (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Fix build failure on SPARC due to xchg() operand size (Jakub Ramaseuski) [RHEL-127815]
  - ionic: use int type for err in ionic_get_module_eeprom_by_page (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Add Makefile/Kconfig to kernel build environment (Jakub Ramaseuski) [RHEL-127815]
  - RDMA: Add IONIC to rdma_driver_id definition (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Implement device stats ops (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Register device ops for miscellaneous functionality (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Register device ops for datapath (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Register device ops for control path (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Create device queues to support admin operations (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Register auxiliary module for ionic ethernet adapter (Jakub Ramaseuski) [RHEL-127815]
  - redhat/configs: Disable CONFIG_INFINIBAND_IONIC in generic (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Provide doorbell and CMB region information (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Provide interrupt allocation support for the RDMA driver (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Provide RDMA reset support for the RDMA driver (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Export the APIs from net driver to support device commands (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Update LIF identity with additional RDMA capabilities (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Create an auxiliary device for rdma driver (Jakub Ramaseuski) [RHEL-127815]
  - ethernet: ionic: Fix DMA mapping tests (Jakub Ramaseuski) [RHEL-127815]
  - ionic: cancel delayed work earlier in remove (Jakub Ramaseuski) [RHEL-127815]
  - ionic: clean dbpage in de-init (Jakub Ramaseuski) [RHEL-127815]
  - ionic: print firmware heartbeat as unsigned (Jakub Ramaseuski) [RHEL-127815]
  - ionic: Prevent driver/fw getting out of sync on devcmd(s) (Jakub Ramaseuski) [RHEL-127815]
  - redhat: enable TDX host config (Paolo Bonzini) [RHEL-115482]
  - KVM: TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-115482]
  - x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-115482]
  - x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-115482]
  - x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-115482]
  - x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-115482]
  - x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-115482]
  - x86/virt/tdx: Avoid indirect calls to TDX assembly functions (Paolo Bonzini) [RHEL-115482]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-669.el9]
changelog:
  - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144333] {CVE-2026-22998}
  - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-141483]
  - virtio-net: remove unused delayed refill worker (Laurent Vivier) [RHEL-139819]
  - virtio-net: don't schedule delayed refill worker (Laurent Vivier) [RHEL-139819]
  - virtio-net: don't re-enable refill work too early when NAPI is disabled (Laurent Vivier) [RHEL-139819]
  - virtio-net: disable delayed refill when pausing rx (Laurent Vivier) [RHEL-139819]
  - virtio-net: Refactor napi_disable paths (Laurent Vivier) [RHEL-139819]
  - virtio-net: Refactor napi_enable paths (Laurent Vivier) [RHEL-139819]
  - virtio_net: separate virtnet_tx_resize() (Laurent Vivier) [RHEL-139819]
  - virtio_net: separate virtnet_rx_resize() (Laurent Vivier) [RHEL-139819]
  - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137698] {CVE-2025-38403}
  - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Mamatha Inamdar) [RHEL-14156]
  - ftrace: Fix BPF fexit with livepatch (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/modules: replace stub allocation sentinel with an explicit counter (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: ensure ftrace record ops are always set for NOPs (Mamatha Inamdar) [RHEL-14156]
  - redhat: Add CONFIG_PPC_FTRACE_OUT_OF_LINE_NUM_RESERVE (Mamatha Inamdar) [RHEL-14156]
  - ftrace: fix incorrect hash size in register_ftrace_direct() (Mamatha Inamdar) [RHEL-14156]
  - kbuild: dummy-tools: pretend we understand -fpatchable-function-entry (Mamatha Inamdar) [RHEL-14156]
  - ftrace: Fix modification of direct_function hash while in use (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/ftrace: fix module loading without patchable function entries (Mamatha Inamdar) [RHEL-14156]
  - powerpc: Replace kretprobe code with rethook on powerpc (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/ftrace: fix clobbered r15 during livepatching (Mamatha Inamdar) [RHEL-14156]
  - powerpc/bpf: fix JIT code size calculation of bpf trampoline (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Fix ftrace bug with KASAN=y (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/bpf: Add support for bpf trampolines (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add support for DYNAMIC_FTRACE_WITH_DIRECT_CALLS (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add support for DYNAMIC_FTRACE_WITH_CALL_OPS (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/ftrace: Support .text larger than 32MB with out-of-line stubs (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/ftrace: Move ftrace sequence out of line (Mamatha Inamdar) [RHEL-14156]
  - kbuild: Add generic hook for architectures to use before the final vmlinux link (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add a postlink script to validate function tracer (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/bpf: Fold bpf_jit_emit_func_call_hlp() into bpf_jit_emit_func_call_rel() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Move ftrace stub used for init text before _einittext (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Skip instruction patching if the instructions are the same (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Remove pointer to struct module from dyn_arch_ftrace (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/ftrace: Nop out additional 'std' instruction emitted by gcc v5.x (Mamatha Inamdar) [RHEL-14156]
  - powerpc/kprobes: Use ftrace to determine if a probe is at function entry (Mamatha Inamdar) [RHEL-14156]
  - powerpc/trace: Account for -fpatchable-function-entry support by toolchain (Mamatha Inamdar) [RHEL-14156]
  - kbuild: move vmlinux.o rule to the top Makefile (Mamatha Inamdar) [RHEL-14156]
  - powerpc/code-patching: Use dedicated memory routines for patching (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Ignore ftrace locations in exit text sections (Mamatha Inamdar) [RHEL-14156]
  - powerpc: Fix build issue with LD_DEAD_CODE_DATA_ELIMINATION and FTRACE_MCOUNT_USE_PATCHABLE_FUNCTION_ENTRY (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add support for -fpatchable-function-entry (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Implement ftrace_replace_code() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Replace use of ftrace_call_replace() with ftrace_create_branch_inst() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Simplify ftrace_modify_call() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Simplify ftrace_make_call() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Simplify ftrace_make_nop() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add separate ftrace_init_nop() with additional validation (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Stop re-purposing linker generated long branches for ftrace (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Refactor ftrace_modify_code() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Simplify function_graph support in ftrace.c (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Use patch_instruction() return directly (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Refactor prepare_ftrace_return() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Have arch_ftrace_get_regs() return NULL unless FL_SAVE_REGS is set (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add recursion protection in prepare_ftrace_return() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Also save r1 in ftrace_caller() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: directly call of function graph tracer by ftrace caller (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Refactor ftrace_{en/dis}able_ftrace_graph_caller (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Implement CONFIG_DYNAMIC_FTRACE_WITH_ARGS (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Prepare PPC64's ftrace_caller() for CONFIG_DYNAMIC_FTRACE_WITH_ARGS (Mamatha Inamdar) [RHEL-14156]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-670.el9]
changelog:
  - memblock: Accept allocated memory before use in memblock_double_array() (Aristeu Rozanski) [RHEL-140475]
  - Reapply "Bluetooth: revert TX timestamping" for kernel v6.18 rebase. (David Marlin) [RHEL-141499]
  - Bluetooth: hci_sync: enable PA Sync Lost event (David Marlin) [RHEL-141499]
  - Bluetooth: SMP: Fix not generating mackey and ltk when repairing (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: mediatek: Avoid btusb_mtk_claim_iso_intf() NULL deref (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: lookup hci_conn on RX path on protocol side (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: Fix triggering cmd_timer for HCI_OP_NOP (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interface (David Marlin) [RHEL-141499]
  - Bluetooth: btrtl: Avoid loading the config file on security chips (David Marlin) [RHEL-141499]
  - Bluetooth: hci_event: Fix not handling PA Sync Lost event (David Marlin) [RHEL-141499]
  - Bluetooth: hci_conn: Fix not cleaning up PA_LINK connections (David Marlin) [RHEL-141499]
  - Bluetooth: 6lowpan: add missing l2cap_chan_lock() (David Marlin) [RHEL-141499]
  - Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions (David Marlin) [RHEL-141499]
  - Bluetooth: L2CAP: export l2cap_chan_hold for modules (David Marlin) [RHEL-141499]
  - Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion (David Marlin) [RHEL-141499]
  - Bluetooth: 6lowpan: reset link-local header on ipv6 recv path (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-141499]
  - Bluetooth: MGMT: cancel mesh send timer when hdev removed (David Marlin) [RHEL-141499]
  - Bluetooth: btrtl: Fix memory leak in rtlbt_parse_firmware_v2() (David Marlin) [RHEL-141499]
  - Bluetooth: hci_event: validate skb length for unknown CC opcode (David Marlin) [RHEL-141499]
  - Bluetooth: rfcomm: fix modem control handling (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: Fix tracking of periodic advertisement (David Marlin) [RHEL-141499]
  - Bluetooth: hci_conn: Fix connection cleanup with BIG with 2 or more BIS (David Marlin) [RHEL-141499]
  - Bluetooth: fix corruption in h4_recv_buf() after cleanup (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Fix event packet loss issue (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: Fix another instance of dst_type handling (David Marlin) [RHEL-141499]
  - Bluetooth: btmtksdio: Add pmctrl handling for BT closed state during reset (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: Fix BIS connection dst_type handling (David Marlin) [RHEL-141499]
  - Bluetooth: Avoid a couple dozen -Wflex-array-member-not-at-end warnings (David Marlin) [RHEL-141499]
  - Bluetooth: hci_sync: Fix using random address for BIG/PA advertisements (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: don't leak skb in ISO_CONT RX (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: free rx_skb if not consumed (David Marlin) [RHEL-141499]
  - Bluetooth: SCO: Fix UAF on sco_conn_free (David Marlin) [RHEL-141499]
  - Bluetooth: bcsp: receive data only if registered (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: Add new VID/PID 13d3/3633 for MT7922 (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: Add new VID/PID 13d3/3627 for MT7925 (David Marlin) [RHEL-141499]
  - Bluetooth: remove duplicate h4_recv_buf() in header (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: Check for unexpected bytes when defragmenting HCI frames (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: Print information of hcon on hci_low_sent (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: Print number of packets in conn->data_q (David Marlin) [RHEL-141499]
  - Bluetooth: Add function and line information to bt_dbg (David Marlin) [RHEL-141499]
  - Bluetooth: MGMT: Fix not exposing debug UUID on MGMT_OP_READ_EXP_FEATURES_INFO (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: Detect if an ISO link has stalled (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: Use sk_sndtimeo as conn_timeout (David Marlin) [RHEL-141499]
  - Bluetooth: HCI: Fix using LE/ACL buffers for ISO packets (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: Don't initiate CIS connections if there are no buffers (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Refactor Device Coredump (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Use strscpy() instead of strscpy_pad() (David Marlin) [RHEL-141499]
  - Bluetooth: Annotate struct hci_drv_rp_read_info with __counted_by_le() (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Define hdev->wakeup() callback (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: Add USB ID 2001:332a for D-Link AX9U rev. A1 (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Move model comment before its definition (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Add id of Scorpious, Panther Lake-H484 (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Add Bluetooth core/platform as comments (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Add support for _suspend() / _resume() (David Marlin) [RHEL-141499]
  - Bluetooth: btintel: Add support for BlazarIW core (David Marlin) [RHEL-141499]
  - Revert "Bluetooth: revert TX timestamping" (David Marlin) [RHEL-141499]
  - dm log-writes: Add missing set_freezable() for freezable kthread (Benjamin Marzinski) [RHEL-136400]
  - dm-raid: fix possible NULL dereference with undefined raid type (Benjamin Marzinski) [RHEL-136400]
  - dm-snapshot: fix 'scheduling while atomic' on real-time kernels (Benjamin Marzinski) [RHEL-136400]
  - dm-verity: fix unreliable memory allocation (Benjamin Marzinski) [RHEL-136400]
  - perf jitdump: Add sym/str-tables to build-ID generation (Michael Petlan) [RHEL-139923]
  - perf genelf: Fix NO_LIBDW=1 build (Michael Petlan) [RHEL-139923]
  - perf genelf: Remove libcrypto dependency and use built-in sha1() (Michael Petlan) [RHEL-139923]
  - perf util: add a basic SHA-1 implementation (Michael Petlan) [RHEL-139923]
  - dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-139700]
  - net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-131711]
  - net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-131711]
  - net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-131711]
  - gfs2: Clean up quotad timeout handling (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: Minor cosmetic remote delete cleanups (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: fix remote evict for read-only filesystems (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: fix freeze error handling (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129403]
  - redhat/configs: Add CONFIG_CRYPTO_DEV_QAT_6XXX (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix warning on adf_pfvf_pf_proto.c (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add bank state save and restore for qat_420xx (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix parameter order used in ICP_QAT_FW_COMN_FLAGS_BUILD (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix duplicate restarting msg during AER error (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add WQ_PERCPU to alloc_workqueue users (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - use simple_strtoull to improve qat_uclo_parse_num (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - Return pointer directly in adf_ctl_alloc_resources (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - Replace kzalloc() + copy_from_user() with memdup_user() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - use kcalloc() in qat_uclo_map_objs_from_mof() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add command queue telemetry counters for GEN6 (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add ring buffer idle telemetry counter for GEN6 (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - make adf_dev_autoreset() static (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - refactor ring-related debug functions (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix seq_file position update in adf_ring_next() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix DMA direction for compression on GEN2 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - flush misc workqueue during device shutdown (Vladislav Dronov) [RHEL-94929] {CVE-2025-39721}
  - crypto: qat - enable rate limiting feature for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add compression slice count for rate limiting (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add get_svc_slice_cnt() in device data structure (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add adf_rl_get_num_svc_aes() in rate limiting (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - relocate service related functions (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - consolidate service enums (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add decompression service for rate limiting (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - validate service in rate limiting sysfs api (Vladislav Dronov) [RHEL-94929]
  - Documentation: qat: update debugfs-driver-qat_telemetry for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - enable telemetry for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add decompression service to telemetry (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - enable power management debugfs for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - relocate power management debugfs helper APIs (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix virtual channel configuration for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add live migration enablers for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - relocate and rename bank state structure definition (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - relocate bank state helper functions (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - replace CHECK_STAT macro with static inline function (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - use pr_fmt() in adf_gen4_hw_data.c (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - disable ZUC-256 capability for QAT GEN5 (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - restore ASYM service support for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - remove duplicate masking for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - lower priority for skcipher and aead algorithms (Vladislav Dronov) [RHEL-94929]
  - Documentation: qat: update sysfs-driver-qat for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add support for decompression service to GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix state restore for banks with exceptions (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - allow enabling VFs in the absence of IOMMU (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - use unmanaged allocation for dc_data (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add missing header inclusion (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - enable reporting of error counters for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - enable RAS support for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat/qat_6xxx - Fix NULL vs IS_ERR() check in adf_probe() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add qat_6xxx driver (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add firmware headers for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - update firmware api (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - export adf_init_admin_pm() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - expose configuration functions (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - export adf_get_service_mask() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add GEN6 firmware loader (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - refactor FW signing algorithm (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - use pr_fmt() in qat uclo.c (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - refactor compression template logic (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - rename and relocate timer logic (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - include qat_common in top Makefile (Vladislav Dronov) [RHEL-94929]
  - workqueue: Add new WQ_PERCPU flag (Vladislav Dronov) [RHEL-94929]
  - bitfield: Add FIELD_MODIFY() helper (Vladislav Dronov) [RHEL-94929]
  - sprintf.h requires stdarg.h (Vladislav Dronov) [RHEL-94929]
  - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (CKI Backport Bot) [RHEL-130018] {CVE-2025-40168}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-671.el9]
changelog:
  - ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-137910]
  - ice: fix devlink reload call trace (Michal Schmidt) [RHEL-141485]
  - ice: add missing ice_deinit_hw() in devlink reinit path (Michal Schmidt) [RHEL-141485]
  - ice: Fix persistent failure in ice_get_rxfh (Michal Schmidt) [RHEL-141485]
  - ice: Fix incorrect timeout ice_release_res() (Michal Schmidt) [RHEL-141485]
  - ice: Avoid detrimental cleanup for bond during interface stop (Michal Schmidt) [RHEL-141485]
  - ice: initialize ring_stats->syncp (Michal Schmidt) [RHEL-141485]
  - ice: remove duplicate call to ice_deinit_hw() on error paths (Michal Schmidt) [RHEL-141485]
  - ice: move ice_deinit_dev() to the end of deinit paths (Michal Schmidt) [RHEL-141485]
  - ice: extract ice_init_dev() from ice_init() (Michal Schmidt) [RHEL-141485]
  - ice: move ice_init_pf() out of ice_init_dev() (Michal Schmidt) [RHEL-141485]
  - ice: move udp_tunnel_nic and misc IRQ setup into ice_init_pf() (Michal Schmidt) [RHEL-141485]
  - iavf: add RSS support for GTP protocol via ethtool (Michal Schmidt) [RHEL-141485]
  - ice: implement GTP RSS context tracking and configuration (Michal Schmidt) [RHEL-141485]
  - ice: add virtchnl definitions and static data for GTP RSS (Michal Schmidt) [RHEL-141485]
  - ice: ice_init_pf: destroy mutexes and xarrays on memory alloc failure (Michal Schmidt) [RHEL-141485]
  - ice: refactor to use helpers (Michal Schmidt) [RHEL-141485]
  - ice: add E830 Earliest TxTime First Offload support (Michal Schmidt) [RHEL-141485]
  - ice, libie: move fwlog code to libie (Michal Schmidt) [RHEL-141485]
  - ice: support egress drop rules on PF (Michal Schmidt) [RHEL-141485]
  - iavf: fix off-by-one issues in iavf_config_rss_reg() (Michal Schmidt) [RHEL-141485] {CVE-2025-71087}
  - iavf: clarify VLAN add/delete log messages and lower log level (Michal Schmidt) [RHEL-141485]
  - ice: fix comment typo and correct module format string (Michal Schmidt) [RHEL-141485]
  - iavf: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-141485] {CVE-2025-68752}
  - ice: fix PTP cleanup on driver removal in error path (Michal Schmidt) [RHEL-141485] {CVE-2025-68215}
  - ice: Extend PTYPE bitmap coverage for GTP encapsulated flows (Michal Schmidt) [RHEL-141485]
  - ice: improve TCAM priority handling for RSS profiles (Michal Schmidt) [RHEL-141485]
  - ice: add flow parsing for GTP and new protocol field support (Michal Schmidt) [RHEL-141485]
  - ice: Allow 100M speed for E825C SGMII device (Michal Schmidt) [RHEL-141485]
  - ice: fix usage of logical PF id (Michal Schmidt) [RHEL-141485]
  - ice: fix destination CGU for dual complex E825 (Michal Schmidt) [RHEL-141485]
  - ice: fix lane number calculation (Michal Schmidt) [RHEL-141485]
  - ice: move ice_init_interrupt_scheme() prior ice_init_pf() (Michal Schmidt) [RHEL-141485]
  - ice: move service task start out of ice_init_pf() (Michal Schmidt) [RHEL-141485]
  - ice: enforce RTNL assumption of queue NAPI manipulation (Michal Schmidt) [RHEL-141485]
  - ice: implement transmit hardware timestamp statistics (Michal Schmidt) [RHEL-141485]
  - ice: add tracking of good transmit timestamps (Michal Schmidt) [RHEL-141485]
  - ice: implement ethtool standard stats (Michal Schmidt) [RHEL-141485]
  - libie: fix string names for AQ error codes (Michal Schmidt) [RHEL-141485]
  - iavf: fix proper type for error code in iavf_resume() (Michal Schmidt) [RHEL-141485]
  - ice: Remove deprecated ice_lag_move_new_vf_nodes() call (Michal Schmidt) [RHEL-141485]
  - ice: move ice_qp_[ena|dis] for reuse (Michal Schmidt) [RHEL-141485]
  - ice: reregister fwlog after driver reinit (Michal Schmidt) [RHEL-141485]
  - ice: prepare for moving file to libie (Michal Schmidt) [RHEL-141485]
  - ice: move debugfs code to fwlog (Michal Schmidt) [RHEL-141485]
  - libie, ice: move fwlog admin queue to libie (Michal Schmidt) [RHEL-141485]
  - ice: drop driver specific structure from fwlog code (Michal Schmidt) [RHEL-141485]
  - ice: check for PF number outside the fwlog code (Michal Schmidt) [RHEL-141485]
  - ice: move out debugfs init from fwlog (Michal Schmidt) [RHEL-141485]
  - ice: allow calling custom send function in fwlog (Michal Schmidt) [RHEL-141485]
  - ice: add pdev into fwlog structure and use it for logging (Michal Schmidt) [RHEL-141485]
  - ice: introduce ice_fwlog structure (Michal Schmidt) [RHEL-141485]
  - ice: drop ice_pf_fwlog_update_module() (Michal Schmidt) [RHEL-141485]
  - ice: move get_fwlog_data() to fwlog file (Michal Schmidt) [RHEL-141485]
  - ice: make fwlog functions static (Michal Schmidt) [RHEL-141485]
  - ice: finish virtchnl.c split into rss.c (Michal Schmidt) [RHEL-141485]
  - ice: extract virt/rss.c: cleanup - p2 (Michal Schmidt) [RHEL-141485]
  - ice: extract virt/rss.c: cleanup - p1 (Michal Schmidt) [RHEL-141485]
  - ice: split RSS stuff out of virtchnl.c - copy back (Michal Schmidt) [RHEL-141485]
  - ice: split RSS stuff out of virtchnl.c - tmp rename (Michal Schmidt) [RHEL-141485]
  - ice: finish virtchnl.c split into queues.c (Michal Schmidt) [RHEL-141485]
  - ice: extract virt/queues.c: cleanup - p3 (Michal Schmidt) [RHEL-141485]
  - ice: extract virt/queues.c: cleanup - p2 (Michal Schmidt) [RHEL-141485]
  - ice: extract virt/queues.c: cleanup - p1 (Michal Schmidt) [RHEL-141485]
  - ice: split queue stuff out of virtchnl.c - copy back (Michal Schmidt) [RHEL-141485]
  - ice: split queue stuff out of virtchnl.c - tmp rename (Michal Schmidt) [RHEL-141485]
  - ice: fix incorrect counter for buffer allocation failures (Michal Schmidt) [RHEL-141485]
  - ice: add virt/ and move ice_virtchnl* files there (Michal Schmidt) [RHEL-141485]
  - ice: Implement support for SRIOV VFs across Active/Active bonds (Michal Schmidt) [RHEL-141485]
  - ice: cleanup capabilities evaluation (Michal Schmidt) [RHEL-141485]
  - ice: Cleanup variable initialization in LAG code (Michal Schmidt) [RHEL-141485]
  - ice: move LAG function in code to prepare for Active-Active (Michal Schmidt) [RHEL-141485]
  - ice: Add driver specific prefix to LAG defines (Michal Schmidt) [RHEL-141485]
  - ice: replace u8 elements with bool where appropriate (Michal Schmidt) [RHEL-141485]
  - ice: Remove casts on void pointers in LAG code (Michal Schmidt) [RHEL-141485]
  - ice: Don't use %pK through printk or tracepoints (Michal Schmidt) [RHEL-141485]
  - net: Fix typos [partial:ice] (Michal Schmidt) [RHEL-141485]
  - iavf: use libie_aq_str (Michal Schmidt) [RHEL-141485]
  - ice: use libie_aq_str (Michal Schmidt) [RHEL-141485]
  - libie: add adminq helper for converting err to str (Michal Schmidt) [RHEL-141485]
  - iavf: use libie adminq descriptors (Michal Schmidt) [RHEL-141485]
  - i40e: use libie adminq descriptors [partial:ice,libie] (Michal Schmidt) [RHEL-141485]
  - ixgbe: use libie adminq descriptors [partial:libie] (Michal Schmidt) [RHEL-141485]
  - ice, libie: move generic adminq descriptors to lib (Michal Schmidt) [RHEL-141485]
  - ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (Michal Schmidt) [RHEL-141485] {CVE-2025-38664}
  - ice: breakout common LAG code into helpers (Michal Schmidt) [RHEL-141485]
  - ice: convert ice_add_prof() to bitmap (Michal Schmidt) [RHEL-141485]
  - ice: add E835 device IDs (Michal Schmidt) [RHEL-141485]
  - ice: add 40G speed to Admin Command GET PORT OPTION (Michal Schmidt) [RHEL-141485]
  - ice: check correct pointer in fwlog debugfs (Michal Schmidt) [RHEL-141485]
  - ice: add NULL check in eswitch lag check (Michal Schmidt) [RHEL-141485] {CVE-2025-38526}
  - ice: introduce ice_get_vf_by_dev() wrapper (Michal Schmidt) [RHEL-141485]
  - ice: avoid rebuilding if MSI-X vector count is unchanged (Michal Schmidt) [RHEL-141485]
  - ice: use pci_iov_vf_id() to get VF ID (Michal Schmidt) [RHEL-141485]
  - ice: expose VF functions used by live migration (Michal Schmidt) [RHEL-141485]
  - ice: move ice_vsi_update_l2tsel to ice_lib.c (Michal Schmidt) [RHEL-141485]
  - ice: save RSS hash configuration for migration (Michal Schmidt) [RHEL-141485]
  - ice: add functions to get and set Tx queue context (Michal Schmidt) [RHEL-141485]
  - ice: add support for reading and unpacking Rx queue context (Michal Schmidt) [RHEL-141485]
  - eth: ice: drop the dead code related to rss_contexts (Michal Schmidt) [RHEL-141485]
  - ice: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Michal Schmidt) [RHEL-141485]
  - ice: add ref-sync dpll pins (Michal Schmidt) [RHEL-141485]
  - net: ice: Perform accurate aRFS flow match (Michal Schmidt) [RHEL-141485]
  - ice: add phase offset monitor for all PPS dpll inputs (Michal Schmidt) [RHEL-141485]
  - ice: add a separate Rx handler for flow director commands (Michal Schmidt) [RHEL-141485]
  - ice: change SMA pins to SDP in PTP API (Michal Schmidt) [RHEL-141485]
  - ice: redesign dpll sma/u.fl pins control (Michal Schmidt) [RHEL-141485]
  - ice: add link_down_events statistic (Michal Schmidt) [RHEL-141485]
  - net: intel: move RSS packet classifier types to libie (Michal Schmidt) [RHEL-141485]
  - net: intel: rename 'hena' to 'hashcfg' for clarity (Michal Schmidt) [RHEL-141485]
  - iavf: extract iavf_watchdog_step() out of iavf_watchdog_task() (Michal Schmidt) [RHEL-141485]
  - iavf: simplify watchdog_task in terms of adminq task scheduling (Michal Schmidt) [RHEL-141485]
  - iavf: centralize watchdog requeueing itself (Michal Schmidt) [RHEL-141485]
  - ice: make const read-only array dflt_rules static (Michal Schmidt) [RHEL-141485]
  - ice: improve error message for insufficient filter space (Michal Schmidt) [RHEL-141485]
  - ice: enable LLDP TX for VFs through tc (Michal Schmidt) [RHEL-141485]
  - ice: remove headers argument from ice_tc_count_lkups (Michal Schmidt) [RHEL-141485]
  - ice: receive LLDP on trusted VFs (Michal Schmidt) [RHEL-141485]
  - ice: do not add LLDP-specific filter if not necessary (Michal Schmidt) [RHEL-141485]
  - ice: fix check for existing switch rule (Michal Schmidt) [RHEL-141485]
  - ice: clear NAPI's IRQ numbers in ice_vsi_clear_napi_queues() (Michal Schmidt) [RHEL-141485]
  - ice: refactor ICE_TC_FLWR_FIELD_ENC_OPTS (Michal Schmidt) [RHEL-141485]
  - Revert "ice: Fix ice VF reset during iavf initialization" (Michal Schmidt) [RHEL-141485]
  - ice: Fix ice VF reset during iavf initialization (Michal Schmidt) [RHEL-141485]
  - net/ena: fix missing lock when update devlink params (Kamal Heib) [RHEL-127326]
  - net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable (Kamal Heib) [RHEL-127326]
  - net: ena: View PHC stats using debugfs (Kamal Heib) [RHEL-127326]
  - net: ena: Add debugfs support to the ENA driver (Kamal Heib) [RHEL-127326]
  - net: ena: Control PHC enable through devlink (Kamal Heib) [RHEL-127326]
  - net: ena: Add devlink port support (Kamal Heib) [RHEL-127326]
  - net: ena: Add device reload capability through devlink (Kamal Heib) [RHEL-127326]
  - net: ena: PHC silent reset (Kamal Heib) [RHEL-127326]
  - net: ena: Add PHC support in the ENA driver (Kamal Heib) [RHEL-127326]
  - net: ena: resolve WARN_ON when freeing IRQs (Kamal Heib) [RHEL-127326]
  - net: ena: use napi's aRFS rmap notifers (Kamal Heib) [RHEL-127326]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-672.el9]
changelog:
  - net: ipv4: convert ip_rcv_options to drop reasons (Antoine Tenart) [RHEL-139236]
  - net: ipv4: simplify drop reason handling in ip_rcv_finish_core (Antoine Tenart) [RHEL-139236]
  - net: ipv4: make udp_v4_early_demux explicitly return drop reason (Antoine Tenart) [RHEL-139236]
  - net/sched: Add precise drop reason for pfifo_fast queue overflows (Antoine Tenart) [RHEL-139236]
  - net: track pfmemalloc drops via SKB_DROP_REASON_PFMEMALLOC (Antoine Tenart) [RHEL-139236]
  - net: arp: use kfree_skb_reason() in arp_rcv() (Antoine Tenart) [RHEL-139236]
  - can: add drop reasons in CAN protocols receive path (Antoine Tenart) [RHEL-139236]
  - can: add drop reasons in the receive path of AF_CAN (Antoine Tenart) [RHEL-139236]
  - net: neigh: use kfree_skb_reason() in neigh_resolve_output() and neigh_connected_output() (Antoine Tenart) [RHEL-139236]
  - net: flush_backlog() small changes (Antoine Tenart) [RHEL-139236]
  - tcp: rstreason: let it work finally in tcp_send_active_reset() (Antoine Tenart) [RHEL-139236]
  - tcp: rstreason: introduce SK_RST_REASON_TCP_DISCONNECT_WITH_DATA for active reset (Antoine Tenart) [RHEL-139236]
  - tcp: rstreason: introduce SK_RST_REASON_TCP_KEEPALIVE_TIMEOUT for active reset (Antoine Tenart) [RHEL-139236]
  - tcp: rstreason: introduce SK_RST_REASON_TCP_STATE for active reset (Antoine Tenart) [RHEL-139236]
  - tcp: rstreason: introduce SK_RST_REASON_TCP_ABORT_ON_MEMORY for active reset (Antoine Tenart) [RHEL-139236]
  - tcp: rstreason: introduce SK_RST_REASON_TCP_ABORT_ON_LINGER for active reset (Antoine Tenart) [RHEL-139236]
  - tcp: rstreason: introduce SK_RST_REASON_TCP_ABORT_ON_CLOSE for active reset (Antoine Tenart) [RHEL-139236]
  - x86/lam: Disable ADDRESS_MASKING in most cases (Rafael Aquini) [RHEL-109600]
  - svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142791] {CVE-2025-68811}
  - mm: Create/affine kswapd to its preferred node (Rafael Aquini) [RHEL-135521]
  - mm: Create/affine kcompactd to its preferred node (Rafael Aquini) [RHEL-135521]
  - mm/vmscan: print err before panic (Rafael Aquini) [RHEL-135521]
  - kthread: Fix return value on kzalloc() failure in kthread_affine_preferred() (Rafael Aquini) [RHEL-135521]
  - kthread: Implement preferred affinity (Rafael Aquini) [RHEL-135521]
  - kthread: Default affine kthread to its preferred NUMA node (Rafael Aquini) [RHEL-135521]
  - kthread: Make sure kthread hasn't started while binding it (Rafael Aquini) [RHEL-135521]
  - sched,arm64: Handle CPU isolation on last resort fallback rq selection (Rafael Aquini) [RHEL-135521]
  - arm64: Exclude nohz_full CPUs from 32bits el0 support (Rafael Aquini) [RHEL-135521]
  - blk-mq: skip CPU offline notify on unmapped hctx (Ming Lei) [RHEL-140714]
  - padata: remove __padata_list_init() (Herbert Xu) [RHEL-127800]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-673.el9]
changelog:
  - s390/cio: Update purge function to unregister the unused subchannels (Mete Durlu) [RHEL-145337]
  - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145338]
  - platform/x86:intel/pmc: Enable SSRAM support for Wildcat Lake (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Remove redundant has_die_c6 variable (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Relocate lpm_req_guid to pmc_reg_map (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Rename PMC index variable to pmc_idx (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Add DMU GUID to Arrow Lake U/H (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Add support for multiple DMU GUIDs (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Update Arrow Lake telemetry GUID (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Replace dev_warn() with dev_dbg() (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Enable SSRAM support for Panther Lake (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Show substate requirement for S0ix blockers (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Improve function to show substate header (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Move telemetry endpoint register handling (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Enable SSRAM support for Lunar Lake (David Arcari) [RHEL-95637]
  - platform/x86/intel/pmc: Add Wildcat Lake support to Intel PMC SSRAM Telemetry (David Arcari) [RHEL-95637]
  - platform/x86/intel/pmc: use kcalloc() instead of kzalloc() (David Arcari) [RHEL-95637]
  - platform/x86/intel/vsec: Add support for Wildcat Lake (David Arcari) [RHEL-95637]
  - platform/x86/amd/hsmp: Replace amd_num_nodes() with topology_max_packages() (David Arcari) [RHEL-122802]
  - tools/power turbostat: Add Wildcat Lake and Nova Lake support (CKI Backport Bot) [RHEL-95677]
  - EDAC/i10nm: Add Intel Clearwater Forest server support (Aristeu Rozanski) [RHEL-45085]
  - ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-97718]
  - ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-97718]
  - ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-97718]
  - ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-97718]
  - ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-97718]
  - ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-97718]
  - ipmi:si: Merge some if statements (Tony Camuso) [RHEL-97718]
  - ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-97718]
  - ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-97718]
  - ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-97718]
  - ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-97718]
  - ipmi: Rework user message limit handling (Tony Camuso) [RHEL-97718]
  - Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-97718]
  - ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-97718]
  - char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-97718]
  - ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-97718]
  - ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-97718]
  - ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-97718]
  - ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-97718]
  - ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-97718]
  - ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-97718]
  - ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-97718]
  - ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-97718]
  - i40e: add rh_phys_port_name mod option to behave like upstream (Michal Schmidt) [RHEL-126034]
  - ice: add rh_phys_port_name mod option to behave like upstream (Michal Schmidt) [RHEL-126034]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-674.el9]
changelog:
  - s390/drivers: Remove unnecessary include <linux/export.h> (Mete Durlu) [RHEL-99995]
  - scsi: zfcp: Simplify workqueue allocation (Mete Durlu) [RHEL-99995]
  - s390/zfcp: Remove outdated email address (Mete Durlu) [RHEL-99995]
  - rcu/nocb: Add Safe checks for access offloaded rdp (Luis Claudio R. Goncalves) [RHEL-144727]
  - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137596] {CVE-2025-38459}
  - drm/amdkfd: Fix improper NULL termination of queue restore SMI event string (José Expósito) [RHEL-135337]
  - drm/amd/display: Fix DP no audio issue (José Expósito) [RHEL-135337]
  - drm/amd/pm: force send pcie parmater on navi1x (José Expósito) [RHEL-135337]
  - drm/amd/pm: fix wrong pcie parameter on navi1x (José Expósito) [RHEL-135337]
  - drm/amd/display: shrink struct members (José Expósito) [RHEL-135337]
  - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] (José Expósito) [RHEL-135337]
  - drm/tidss: Fix enable/disable order (José Expósito) [RHEL-135337]
  - drm/atomic-helper: Export and namespace some functions (José Expósito) [RHEL-135337]
  - drm/amdgpu: Fix query for VPE block_type and ip_count (José Expósito) [RHEL-135337]
  - drm/amd/display: Apply e4479aecf658 to dml (José Expósito) [RHEL-135337]
  - Revert "drm/atomic-helper: Re-order bridge chain pre-enable and post-disable" (José Expósito) [RHEL-135337]
  - nouveau: don't attempt fwsec on sb on newer platforms. (José Expósito) [RHEL-135337]
  - drm/imagination: Disallow exporting of PM/FW protected objects (José Expósito) [RHEL-135337]
  - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb (José Expósito) [RHEL-135337]
  - drm/pagemap, drm/xe: Ensure that the devmem allocation is idle before use (José Expósito) [RHEL-135337]
  - drm/xe/svm: Fix a debug printout (José Expósito) [RHEL-135337]
  - drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer (José Expósito) [RHEL-135337]
  - drm/xe: Drop preempt-fences when destroying imported dma-bufs. (José Expósito) [RHEL-135337]
  - drm/xe: Use usleep_range for accurate long-running workload timeslicing (José Expósito) [RHEL-135337]
  - drm/xe: Adjust long-running workload timeslices to reasonable values (José Expósito) [RHEL-135337]
  - drm/xe/eustall: Disallow 0 EU stall property values (José Expósito) [RHEL-135337]
  - drm/xe/oa: Disallow 0 OA property values (José Expósito) [RHEL-135337]
  - drm/xe/bo: Don't include the CCS metadata in the dma-buf sg-table (José Expósito) [RHEL-135337]
  - drm: Fix object leak in DRM_IOCTL_GEM_CHANGE_HANDLE (José Expósito) [RHEL-135337]
  - drm/mgag200: Fix big-endian support (José Expósito) [RHEL-135337]
  - drm/ttm: Avoid NULL pointer deref for evicted BOs (José Expósito) [RHEL-135337]
  - drm/i915: Fix format string truncation warning (José Expósito) [RHEL-135337]
  - drm/amdkfd: Trap handler support for expert scheduling mode (José Expósito) [RHEL-135337]
  - drm/amdkfd: bump minimum vgpr size for gfx1151 (José Expósito) [RHEL-135337]
  - drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace (José Expósito) [RHEL-135337]
  - drm/nouveau/gsp: Allocate fwsec-sb at boot (José Expósito) [RHEL-135337]
  - drm/bridge: ti-sn65dsi83: ignore PLL_UNLOCK errors (José Expósito) [RHEL-135337]
  - drm/amd: Fix unbind/rebind for VCN 4.0.5 (José Expósito) [RHEL-135337]
  - drm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl() (José Expósito) [RHEL-135337]
  - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() (José Expósito) [RHEL-135337]
  - drm/buddy: Separate clear and dirty free block trees (José Expósito) [RHEL-135337]
  - drm/buddy: Optimize free block management with RB tree (José Expósito) [RHEL-135337]
  - drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling (José Expósito) [RHEL-135337]
  - drm/amdgpu/sdma6: Update SDMA 6.0.3 FW version to include UMQ protected-fence fix (José Expósito) [RHEL-135337]
  - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma (José Expósito) [RHEL-135337]
  - drm/amdgpu: Forward VMID reservation errors (José Expósito) [RHEL-135337]
  - drm/amdgpu/gmc12: add amdgpu_vm_handle_fault() handling (José Expósito) [RHEL-135337]
  - Revert "drm/amd: Skip power ungate during suspend for VPE" (José Expósito) [RHEL-135337]
  - drm/xe/guc: READ/WRITE_ONCE g2h_fence->done (José Expósito) [RHEL-135337]
  - drm/gem-shmem: Fix the MODULE_LICENSE() string (José Expósito) [RHEL-135337]
  - drm/amdgpu: don't attach the tlb fence for SI (José Expósito) [RHEL-135337]
  - drm/displayid: add quirk to ignore DisplayID checksum errors (José Expósito) [RHEL-135337]
  - drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct drm_edid_ident (José Expósito) [RHEL-135337]
  - drm: nova: depend on CONFIG_64BIT (José Expósito) [RHEL-135337]
  - drm/displayid: pass iter to drm_find_displayid_extension() (José Expósito) [RHEL-135337]
  - drm/amd/display: Fix scratch registers offsets for DCN351 (José Expósito) [RHEL-135337]
  - drm/amd/display: Fix scratch registers offsets for DCN35 (José Expósito) [RHEL-135337]
  - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() (José Expósito) [RHEL-135337]
  - Revert "drm/amd/display: Fix pbn to kbps Conversion" (José Expósito) [RHEL-135337]
  - drm/xe/oa: Always set OAG_OAGLBCTXCTRL_COUNTER_RESUME (José Expósito) [RHEL-135337]
  - drm/xe/oa: Limit num_syncs to prevent oversized allocations (José Expósito) [RHEL-135337]
  - drm/xe: Limit num_syncs to prevent oversized allocations (José Expósito) [RHEL-135337]
  - drm/amdgpu: fix a job->pasid access race in gpu recovery (José Expósito) [RHEL-135337]
  - drm/panel: sony-td4353-jdi: Enable prepare_prev_first (José Expósito) [RHEL-135337]
  - drm/xe: Restore engine registers before restarting schedulers after GT reset (José Expósito) [RHEL-135337]
  - drm/xe: Increase TDF timeout (José Expósito) [RHEL-135337]
  - drm/me/gsc: mei interrupt top half should be in irq disabled context (José Expósito) [RHEL-135337]
  - drm/xe: fix drm_gpusvm_init() arguments (José Expósito) [RHEL-135337]
  - drm/xe: Apply Wa_14020316580 in xe_gt_idle_enable_pg() (José Expósito) [RHEL-135337]
  - drm/xe: Fix freq kobject leak on sysfs_create_files failure (José Expósito) [RHEL-135337]
  - drm/tests: Handle EDEADLK in set_up_atomic_state() (José Expósito) [RHEL-135337]
  - drm/tests: Handle EDEADLK in drm_test_check_valid_clones() (José Expósito) [RHEL-135337]
  - drm/tests: hdmi: Handle drm_kunit_helper_enable_crtc_connector() returning EDEADLK (José Expósito) [RHEL-135337]
  - drm/i915/fbdev: Hold runtime PM ref during fbdev BO creation (José Expósito) [RHEL-135337]
  - drm/{i915, xe}/fbdev: deduplicate struct drm_mode_fb_cmd2 init (José Expósito) [RHEL-135337]
  - drm/{i915, xe}/fbdev: pass struct drm_device to intel_fbdev_fb_alloc() (José Expósito) [RHEL-135337]
  - drm/i915/fbdev: make intel_framebuffer_create() error return handling explicit (José Expósito) [RHEL-135337]
  - drm/xe/fbdev: use the same 64-byte stride alignment as i915 (José Expósito) [RHEL-135337]
  - drm/amdkfd: Use huge page size to check split svm range alignment (José Expósito) [RHEL-135337]
  - drm/nouveau: fix circular dep oops from vendored i2c encoder (José Expósito) [RHEL-135337]
  - drm/nouveau: refactor deprecated strcpy (José Expósito) [RHEL-135337]
  - drm/plane: Fix IS_ERR() vs NULL check in drm_plane_create_hotspot_properties() (José Expósito) [RHEL-135337]
  - drm/panel: novatek-nt35560: avoid on-stack device structure (José Expósito) [RHEL-135337]
  - drm/panthor: Prevent potential UAF in group creation (José Expósito) [RHEL-135337]
  - drm/amdkfd: assign AID to uuid in topology for SPX mode (José Expósito) [RHEL-135337]
  - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() (José Expósito) [RHEL-135337]
  - drm/panthor: Avoid adding of kernel BOs to extobj list (José Expósito) [RHEL-135337]
  - drm/nouveau: restrict the flush page to a 32-bit address (José Expósito) [RHEL-135337]
  - drm/tidss: Move OLDI mode validation to OLDI bridge mode_valid hook (José Expósito) [RHEL-135337]
  - drm/tidss: Remove max_pclk_khz and min_pclk_khz from tidss display features (José Expósito) [RHEL-135337]
  - drm/panthor: Fix potential memleak of vma structure (José Expósito) [RHEL-135337]
  - drm/panthor: Fix UAF on kernel BO VA nodes (José Expósito) [RHEL-135337]
  - drm/panthor: Fix race with suspend during unplug (José Expósito) [RHEL-135337]
  - drm/panthor: Fix UAF race between device unplug and FW event processing (José Expósito) [RHEL-135337]
  - drm/panthor: Fix group_free_queue() for partially initialized queues (José Expósito) [RHEL-135337]
  - drm/panthor: Handle errors returned by drm_sched_entity_init() (José Expósito) [RHEL-135337]
  - drm/imagination: Fix reference to devm_platform_get_and_ioremap_resource() (José Expósito) [RHEL-135337]
  - accel/ivpu: Fix race condition when unbinding BOs (José Expósito) [RHEL-135337]
  - drm: nova: select NOVA_CORE (José Expósito) [RHEL-135337]
  - accel/ivpu: Remove skip of dma unmap for imported buffers (José Expósito) [RHEL-135337]
  - drm/rcar-du: dsi: Fix missing parameter in RXSETR_...EN macros (José Expósito) [RHEL-135337]
  - drm/amdgpu/userq: fix SDMA and compute validation (José Expósito) [RHEL-135337]
  - drm/amdgpu: add userq object va track helpers (José Expósito) [RHEL-135337]
  - accel/ivpu: Fix race condition when mapping dmabuf (José Expósito) [RHEL-135337]
  - drm: atmel-hlcdc: fix atmel_xlcdc_plane_setup_scaler() (José Expósito) [RHEL-135337]
  - drm/vgem-fence: Fix potential deadlock on release (José Expósito) [RHEL-135337]
  - accel/ivpu: Fix DCT active percent format (José Expósito) [RHEL-135337]
  - accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context() (José Expósito) [RHEL-135337]
  - accel/ivpu: Rework bind/unbind of imported buffers (José Expósito) [RHEL-135337]
  - drm/panel: visionox-rm69299: Don't clear all mode flags (José Expósito) [RHEL-135337]
  - drm/panel: visionox-rm69299: Fix clock frequency for SHIFT6mq (José Expósito) [RHEL-135337]
  - accel/ivpu: Ensure rpm_runtime_put in case of engine reset/resume fail (José Expósito) [RHEL-135337]
  - Reapply "drm/vkms: convert to use faux_device" (José Expósito) [RHEL-135337]
  - printk: Use console_is_usable on console_unblank (Derek Barbosa) [RHEL-141481]
  - printk: Check CON_SUSPEND when unblanking a console (Derek Barbosa) [RHEL-141481]
  - printk: Avoid irq_work for printk_deferred() on suspend (Derek Barbosa) [RHEL-141481]
  - printk: Avoid scheduling irq_work on suspend (Derek Barbosa) [RHEL-141481]
  - printk: nbcon: Allow reacquire during panic (Derek Barbosa) [RHEL-141481]
  - printk: Allow printk_trigger_flush() to flush all types (Herton R. Krzesinski) [RHEL-141481]
  - printk: nbcon: Use raw_cpu_ptr() instead of open coding (Herton R. Krzesinski) [RHEL-141481]
  - backport "printk: Add helper for flush type logic" and associated changes (Herton R. Krzesinski) [RHEL-141481]
  - printk: Remove redundant deferred check in vprintk() (Herton R. Krzesinski) [RHEL-141481]
  - printk: Introduce force_legacy_kthread() macro (Herton R. Krzesinski) [RHEL-141481]
  - printk: Add is_printk_legacy_deferred() (Herton R. Krzesinski) [RHEL-141481]
  - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132890] {CVE-2023-53034}
  - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138020] {CVE-2025-38415}
  - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138020] {CVE-2025-38415}
  - scsi: qla2xxx: Enable/disable IRQD_NO_BALANCING during reset (Ewan D. Milne) [RHEL-89559]
  - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset (Ewan D. Milne) [RHEL-89559]
  - perf/x86/intel/cstate: Add Clearwater Forest support (Michael Petlan) [RHEL-45067]
  - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-7971]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-675.el9]
changelog:
  - sched: Fix tracepoint called from set_tsk_need_resched() more (Phil Auld) [RHEL-145368]
  - smb: client: fix oops in smbd_post_send_data() (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix UBSAN array-index-out-of-bounds in smb2_copychunk_range (Paulo Alcantara) [RHEL-116058]
  - smb3 client: add missing tracepoint for unsupported ioctls (Paulo Alcantara) [RHEL-116058]
  - cifs: Fix memory and information leak in smb3_reconfigure() (Paulo Alcantara) [RHEL-116058] {CVE-2025-71151}
  - smb: move some SMB1 definitions into common/smb1pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: align durable reconnect v2 context to 8 byte boundary (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.connect.{lock,work} (Paulo Alcantara) [RHEL-116058]
  - smb/client: remove DeviceType Flags and Device Characteristics definitions (Paulo Alcantara) [RHEL-116058]
  - smb: move File Attributes definitions into common/fscc.h (Paulo Alcantara) [RHEL-116058]
  - smb: update struct duplicate_extents_to_file_ex (Paulo Alcantara) [RHEL-116058]
  - smb: move file_notify_information to common/fscc.h (Paulo Alcantara) [RHEL-116058]
  - smb: move SMB2 Notify Action Flags into common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move notify completion filter flags into common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb/client: add parentheses to NT error code definitions containing bitwise OR operator (Paulo Alcantara) [RHEL-116058]
  - smb: add documentation references for smb2 change notify definitions (Paulo Alcantara) [RHEL-116058]
  - smb/client: add 4 NT error code definitions (Paulo Alcantara) [RHEL-116058]
  - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value (Paulo Alcantara) [RHEL-116058]
  - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value (Paulo Alcantara) [RHEL-116058]
  - smb/client: fix NT_STATUS_NO_DATA_DETECTED value (Paulo Alcantara) [RHEL-116058]
  - smb/client: update some SMB2 status strings (Paulo Alcantara) [RHEL-116058]
  - cifs: Remove dead function prototypes (Paulo Alcantara) [RHEL-116058]
  - smb/client: add two elements to smb2_error_map_table array (Paulo Alcantara) [RHEL-116058]
  - smb: rename to STATUS_SMB_NO_PREAUTH_INTEGRITY_HASH_OVERLAP (Paulo Alcantara) [RHEL-116058]
  - smb/client: remove unused elements from smb2_error_map_table array (Paulo Alcantara) [RHEL-116058]
  - smb/client: reduce loop count in map_smb2_to_linux_error() by half (Paulo Alcantara) [RHEL-116058]
  - smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-116058]
  - smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-116058]
  - smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-116058]
  - cifs: client: allow changing multichannel mount options on remount (Paulo Alcantara) [RHEL-116058]
  - cifs: Do some preparation prior to organising the function declarations (Paulo Alcantara) [RHEL-116058]
  - cifs: Don't need state locking in smb2_get_mid_entry() (Paulo Alcantara) [RHEL-116058]
  - cifs: Remove the server pointer from smb_message (Paulo Alcantara) [RHEL-116058]
  - cifs: Fix specification of function pointers (Paulo Alcantara) [RHEL-116058]
  - cifs: Replace SendReceiveBlockingLock() with SendReceive() plus flags (Paulo Alcantara) [RHEL-116058]
  - cifs: Clean up some places where an extra kvec[] was required for rfc1002 (Paulo Alcantara) [RHEL-116058]
  - cifs: Make smb1's SendReceive() wrap cifs_send_recv() (Paulo Alcantara) [RHEL-116058]
  - cifs: Remove the RFC1002 header from smb_hdr (Paulo Alcantara) [RHEL-116058]
  - cifs: client: enforce consistent handling of multichannel and max_channels (Paulo Alcantara) [RHEL-116058]
  - smb: client: show smb lease key in open_dirs output (Paulo Alcantara) [RHEL-116058]
  - smb: client: show smb lease key in open_files output (Paulo Alcantara) [RHEL-116058]
  - smb: client: relax WARN_ON_ONCE(SMBDIRECT_SOCKET_*) checks in recv_done() and smbd_conn_upcall() (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce SMBDIRECT_CHECK_STATUS_{WARN,DISCONNECT}() (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce SMBDIRECT_DEBUG_ERR_PTR() helper (Paulo Alcantara) [RHEL-116058]
  - smb: move FILE_SYSTEM_ATTRIBUTE_INFO to common/fscc.h (Paulo Alcantara) [RHEL-116058]
  - smb: move create_durable_reconn to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: fix some warnings reported by scripts/checkpatch.pl (Paulo Alcantara) [RHEL-116058]
  - smb: do some cleanups (Paulo Alcantara) [RHEL-116058]
  - smb: move FILE_SYSTEM_SIZE_INFO to common/fscc.h (Paulo Alcantara) [RHEL-116058]
  - smb: move some duplicate struct definitions to common/fscc.h (Paulo Alcantara) [RHEL-116058]
  - smb: move list of FileSystemAttributes to common/fscc.h (Paulo Alcantara) [RHEL-116058]
  - smb: move SMB_NEGOTIATE_REQ to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move some duplicate definitions to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move create_durable_rsp_v2 to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move create_durable_handle_reconnect_v2 to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move create_durable_req_v2 to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move MAX_CIFS_SMALL_BUFFER_SIZE to common/smbglob.h (Paulo Alcantara) [RHEL-116058]
  - smb/client: fix CAP_BULK_TRANSFER value (Paulo Alcantara) [RHEL-116058]
  - smb: move resume_key_ioctl_rsp to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move copychunk definitions to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move smb_sockaddr_in and smb_sockaddr_in6 to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move SMB1_PROTO_NUMBER to common/smbglob.h (Paulo Alcantara) [RHEL-116058]
  - smb: move get_rfc1002_len() to common/smbglob.h (Paulo Alcantara) [RHEL-116058]
  - smb: move smb_version_values to common/smbglob.h (Paulo Alcantara) [RHEL-116058]
  - smb: rename common/cifsglob.h to common/smbglob.h (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix memory leak in cifs_construct_tcon() (Paulo Alcantara) [RHEL-116058] {CVE-2025-68295}
  - cifs: fix memory leak in smb3_fs_context_parse_param error path (Paulo Alcantara) [RHEL-116058] {CVE-2025-68219}
  - smb: client: introduce close_cached_dir_locked() (Paulo Alcantara) [RHEL-116058]
  - smb: client: let smbd_disconnect_rdma_connection() turn CREATED into DISCONNECTED (Paulo Alcantara) [RHEL-116058]
  - smb: fix invalid username check in smb3_fs_context_parse_param() (Paulo Alcantara) [RHEL-116058]
  - cifs: client: fix memory leak in smb3_fs_context_parse_param (Paulo Alcantara) [RHEL-116058] {CVE-2025-40268}
  - smb: client: fix cifs_pick_channel when channel needs reconnect (Paulo Alcantara) [RHEL-116058]
  - smb: client: validate change notify buffer before copy (Paulo Alcantara) [RHEL-116058]
  - smb: client: call smbd_destroy() in the same splace as kernel_sock_shutdown()/sock_release() (Paulo Alcantara) [RHEL-116058]
  - cifs: fix typo in enable_gcm_256 module parameter (Paulo Alcantara) [RHEL-116058]
  - cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-116058]
  - cifs: Call the calc_signature functions directly (Paulo Alcantara) [RHEL-116058]
  - cifs: Fix TCP_Server_Info::credits to be signed (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.send_io.lcredits.* (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.send_io.lcredits.* (Paulo Alcantara) [RHEL-116058]
  - smb: client: allocate enough space for MR WRs and ib_drain_qp() (Paulo Alcantara) [RHEL-116058]
  - smb: client: let smbd_destroy() wait for SMBDIRECT_SOCKET_DISCONNECTED (Paulo Alcantara) [RHEL-116058]
  - smb: move some duplicate definitions to common/cifsglob.h (Paulo Alcantara) [RHEL-116058]
  - smb: client: let destroy_mr_list() keep smbdirect_mr_io memory if registered (Paulo Alcantara) [RHEL-116058]
  - smb: client: let destroy_mr_list() call ib_dereg_mr() before ib_dma_unmap_sg() (Paulo Alcantara) [RHEL-116058]
  - smb: client: call ib_dma_unmap_sg if mr->sgt.nents is not 0 (Paulo Alcantara) [RHEL-116058]
  - smb: client: improve logic in smbd_deregister_mr() (Paulo Alcantara) [RHEL-116058]
  - smb: client: improve logic in smbd_register_mr() (Paulo Alcantara) [RHEL-116058]
  - smb: client: improve logic in allocate_mr_list() (Paulo Alcantara) [RHEL-116058]
  - smb: client: let destroy_mr_list() remove locked from the list (Paulo Alcantara) [RHEL-116058]
  - smb: client: let destroy_mr_list() call list_del(&mr->list) (Paulo Alcantara) [RHEL-116058]
  - smb: client: change smbd_deregister_mr() to return void (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_mr_io.{kref,mutex} and SMBDIRECT_MR_DISABLED (Paulo Alcantara) [RHEL-116058]
  - smb: client: Omit one redundant variable assignment in cifs_xattr_set() (Paulo Alcantara) [RHEL-116058]
  - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-116058]
  - cifs: Add comments for DeletePending assignments in open functions (Paulo Alcantara) [RHEL-116058]
  - cifs: Add fallback code path for cifs_mkdir_setinfo() (Paulo Alcantara) [RHEL-116058]
  - cifs: Allow fallback code in smb_set_file_info() also for directories (Paulo Alcantara) [RHEL-116058]
  - cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove redudant assignment in cifs_strict_fsync() (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix race with fallocate(2) and AIO+DIO (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix missing timestamp updates after ftruncate(2) (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix missing timestamp updates with O_TRUNC (Paulo Alcantara) [RHEL-116058]
  - smb: client: batch SRV_COPYCHUNK entries to cut round trips (Paulo Alcantara) [RHEL-116058]
  - smb: client: Omit an if branch in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-116058]
  - smb: client: Return directly after a failed genlmsg_new() in cifs_swn_send_register_message() (Paulo Alcantara) [RHEL-116058]
  - smb: client: Use common code in cifs_do_create() (Paulo Alcantara) [RHEL-116058]
  - smb: client: Improve unlocking of a mutex in cifs_get_swn_reg() (Paulo Alcantara) [RHEL-116058]
  - smb: client: Return a status code only as a constant in cifs_spnego_key_instantiate() (Paulo Alcantara) [RHEL-116058]
  - smb: client: Use common code in cifs_lookup() (Paulo Alcantara) [RHEL-116058]
  - smb: client: Reduce the scopes for a few variables in two functions (Paulo Alcantara) [RHEL-116058]
  - cifs: client: force multichannel=off when max_channels=1 (Paulo Alcantara) [RHEL-116058]
  - smb: client: transport: avoid reconnects triggered by pending task work (Paulo Alcantara) [RHEL-116058]
  - smb: client: add tcon information to smb2_reconnect() debug messages (Paulo Alcantara) [RHEL-116058]
  - smb: client: let smbd_post_send_iter() call ib_dma_map_single() for the header first (Paulo Alcantara) [RHEL-116058]
  - smb: client: defer calling ib_alloc_pd() after we are connected (Paulo Alcantara) [RHEL-116058]
  - smb: client: allocate smbdirect workqueue at the beginning of _smbd_get_connection() (Paulo Alcantara) [RHEL-116058]
  - smb: client: make consitent use of spin_lock_irq{save,restore}() in smbdirect.c (Paulo Alcantara) [RHEL-116058]
  - smb: client: let smbd_{destroy,disconnect_rdma_{work,connection}}() wake up all wait queues (Paulo Alcantara) [RHEL-116058]
  - smb: client: let smbd_disconnect_rdma_connection() disable all work but disconnect_work (Paulo Alcantara) [RHEL-116058]
  - smb: client: fill in smbdirect_socket.first_error on error (Paulo Alcantara) [RHEL-116058]
  - smb: client: let smbd_disconnect_rdma_connection() set SMBDIRECT_SOCKET_ERROR... (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to get_mr() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_negotiate() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_post_send_negotiate_req() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_ia_open() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_create_id() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_qp_async_error_upcall() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_conn_upcall() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_post_send_full_iter() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_post_send_empty() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_post_send_iter() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to manage_keep_alive_before_sending() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_post_send() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to manage_credits_prior_sending() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_post_recv() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_disconnect_rdma_connection() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to {allocate,destroy}_mr_list() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to {enqueue,_get_first}_reassembly() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to {allocate,destroy}_caches_and_workqueue() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to {allocate,destroy}_receive_buffers() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to {get,put}_receive_buffer() (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.mr_io (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket_parameters.max_frmr_depth (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of struct smbdirect_mr_io (Paulo Alcantara) [RHEL-116058]
  - smb: client: add and use smbd_get_parameters() (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.workqueue (Paulo Alcantara) [RHEL-116058]
  - smb: client: move rdma_readwrite_threshold from smbd_connection to TCP_Server_Info (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.statistics (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove unused smbd_connection.count_reassembly_queue (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove unused smbd_connection->protocol (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.idle.{keepalive,immediate_work,timer_work} (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix smbdirect keep alive handling to match the documentation (Paulo Alcantara) [RHEL-116058]
  - smb: client: send empty packets via send_immediate_work (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.rdma.legacy_iwarp (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket_parameters.{initiator_depth,responder_resources} (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket_parameters.{resolve_{addr,route},rdma_connect,negotiate}_timeout_msec (Paulo Alcantara) [RHEL-116058]
  - smb: client: fill smbdirect_socket_parameters at the beginning and use the values from there (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove useless smbd_connection.send_immediate (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.recv_io.{posted,credits} (Paulo Alcantara) [RHEL-116058]
  - smb: client: count the number of posted recv_io messages in order to calculated credits (Paulo Alcantara) [RHEL-116058]
  - smb: client: limit the range of info->receive_credit_target (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove info->wait_receive_queues handling in smbd_destroy() (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of ib_wc_status_msg() and skip IB_WC_WR_FLUSH_ERR logging (Paulo Alcantara) [RHEL-116058]
  - smb: client: queue post_recv_credits_work also if the peer raises the credit target (Paulo Alcantara) [RHEL-116058]
  - smb: client: make sure smbd_disconnect_rdma_work() doesn't run after smbd_destroy() took over (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.send_io.credits.{count,wait_queue} (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.send_io.pending.{count,{dec,zero}_wait_queue} (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.disconnect_work (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket_init() (Paulo Alcantara) [RHEL-116058]
  - smb: client: make only use of wake_up[_all]() in smbdirect.c (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.status_wait (Paulo Alcantara) [RHEL-116058]
  - smb: client: use status_wait and SMBDIRECT_SOCKET_RESOLVE_{ADDR,ROUTE}_RUNNING for completion (Paulo Alcantara) [RHEL-116058]
  - smb: client: use status_wait and SMBDIRECT_SOCKET_NEGOTIATE_RUNNING for completion (Paulo Alcantara) [RHEL-116058]
  - smb: client: adjust smbdirect related output of cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.first_error (Paulo Alcantara) [RHEL-116058]
  - smb: client/smbdirect: introduce SMBDIRECT_SOCKET_ERROR (Paulo Alcantara) [RHEL-116058]
  - smb: client/smbdirect: replace SMBDIRECT_SOCKET_CONNECTING with more detailed states (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix sending the iwrap custom IRD/ORD negotiation messages (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: let smbdirect_socket_init() initialize all [delayed_]work_structs as disabled (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.mr_io.* (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket_parameters.max_frmr_depth (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce struct smbdirect_mr_io (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.workqueue (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.statistics (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.idle.{keepalive,immediate_work,timer_work} (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.rdma.legacy_iwarp (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket_parameters.{initiator_depth,responder_resources} (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket_parameters.{resolve_{addr,route},rdma_connect,negotiate}_timeout_msec (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.{posted,credits} (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce struct smbdirect_rw_io (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.rw_io.credits (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce struct smbdirect_send_batch (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.send_io.credits.{count,wait_queue} (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.send_io.pending.{count,{dec,zero}_wait_queue} (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.disconnect_work (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket_init() (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.status_wait (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket_status_string() (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path (Paulo Alcantara) [RHEL-116058] {CVE-2025-39929}
  - smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work) (Paulo Alcantara) [RHEL-116058] {CVE-2025-39932}
  - smb: client: use disable[_delayed]_work_sync in smbdirect.c (Paulo Alcantara) [RHEL-116058]
  - cifs: prevent NULL pointer dereference in UTF16 conversion (Paulo Alcantara) [RHEL-116058] {CVE-2025-39838}
  - smb: client: fix spellings in comments (Paulo Alcantara) [RHEL-116058]
  - smb3 client: fix return code mapping of remap_file_range (Paulo Alcantara) [RHEL-116058]
  - smb: client: don't wait for info->send_pending == 0 on error (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-116058]
  - cifs: avoid extra calls to strlen() in cifs_get_spnego_key() (Paulo Alcantara) [RHEL-116058]
  - cifs: Fix collect_sample() to handle any iterator type (Paulo Alcantara) [RHEL-116058]
  - smb: client: only use a single wait_queue to monitor smbdirect connection status (Paulo Alcantara) [RHEL-116058]
  - smb: client: don't call init_waitqueue_head(&info->conn_wait) twice in _smbd_get_connection (Paulo Alcantara) [RHEL-116058]
  - smb: client: improve logging in smbd_conn_upcall() (Paulo Alcantara) [RHEL-116058]
  - smb: client: return an error if rdma_connect does not return within 5 seconds (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.{send,recv}_io.mem.{cache,pool} (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: add smbdirect_socket.{send,recv}_io.mem.{cache,pool} (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of struct smbdirect_send_io (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce struct smbdirect_send_io (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of SMBDIRECT_RECV_IO_MAX_SGE (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: add SMBDIRECT_RECV_IO_MAX_SGE (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove unused enum smbd_connection_status (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.recv_io.reassembly.* (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.reassembly.* (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smb: smbdirect_socket.recv_io.free.{list,lock} (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.free.{list,lock} (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of struct smbdirect_recv_io (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce struct smbdirect_recv_io (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket->recv_io.expected (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.expected (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove unused smbd_connection->fragment_reassembly_remaining (Paulo Alcantara) [RHEL-116058]
  - smb: client: let recv_done() avoid touching data_transfer after cleanup/move (Paulo Alcantara) [RHEL-116058]
  - smb: client: let recv_done() cleanup before notifying the callers. (Paulo Alcantara) [RHEL-116058]
  - smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove separate empty_packet_queue (Paulo Alcantara) [RHEL-116058]
  - smb: client: let send_done() cleanup before calling smbd_disconnect_rdma_connection() (Paulo Alcantara) [RHEL-116058]
  - cifs: Move the SMB1 transport code out of transport.c (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-116058]
  - r8152: Advertise software timestamp information. (Jose Ignacio Tornos Martinez) [RHEL-132607]
  - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137684] {CVE-2025-40304}
  - fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136943] {CVE-2025-40322}
  - ixgbe: use EOPNOTSUPP instead of ENOTSUPP in ixgbe_ptp_feature_enable() (Corinna Vinschen) [RHEL-97675]
  - ixgbe: fix memory leak and use-after-free in ixgbe_recovery_probe() (Corinna Vinschen) [RHEL-97675]
  - ixgbe: fix too early devlink_free() in ixgbe_remove() (Corinna Vinschen) [RHEL-97675]
  - ixgbe: handle IXGBE_VF_FEATURES_NEGOTIATE mbox cmd (Corinna Vinschen) [RHEL-97675]
  - ixgbevf: fix mailbox API compatibility by negotiating supported features (Corinna Vinschen) [RHEL-97673]
  - ixgbe: handle IXGBE_VF_GET_PF_LINK_STATE mailbox operation (Corinna Vinschen) [RHEL-97675]
  - ixgbevf: fix getting link speed data for E610 devices (Corinna Vinschen) [RHEL-97673]
  - ixgbe: fix typos and docstring inconsistencies (Corinna Vinschen) [RHEL-97675]
  - ixgbevf: fix proper type for error code in ixgbevf_resume() (Corinna Vinschen) [RHEL-97673]
  - ixgbe: destroy aci.lock later within ixgbe_remove path (Corinna Vinschen) [RHEL-97675]
  - ixgbe: initialize aci.lock before it's used (Corinna Vinschen) [RHEL-97675]
  - ixgbe: fix typo in function comment for ixgbe_get_num_per_func() (Corinna Vinschen) [RHEL-97675]
  - ixgbe: drop unnecessary casts to u16 / int (Corinna Vinschen) [RHEL-97675]
  - ixgbe: reduce number of reads when getting OROM data (Corinna Vinschen) [RHEL-97675]
  - ixgbe: add the 2.5G and 5G speeds in auto-negotiation for E610 (Corinna Vinschen) [RHEL-97675]
  - ixgbe: fix incorrect map used in eee linkmode (Corinna Vinschen) [RHEL-97675]
  - ixgbe: fix ndo_xdp_xmit() workloads (Corinna Vinschen) [RHEL-97675]
  - ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc (Corinna Vinschen) [RHEL-97675]
  - eth: intel: use vmalloc_array() to simplify code [ixgbevf] (Corinna Vinschen) [RHEL-97673]
  - eth: intel: use vmalloc_array() to simplify code [ixgbe] (Corinna Vinschen) [RHEL-97675]
  - net: Fix typos [ixgbevf] (Corinna Vinschen) [RHEL-97673]
  - ixgbevf: remove unused fields from struct ixgbevf_adapter (Corinna Vinschen) [RHEL-97673]
  - ethernet: intel: fix building with large NR_CPUS [ixgbe] (Corinna Vinschen) [RHEL-97675]
  - ixgbe: spelling corrections (Corinna Vinschen) [RHEL-97675]
  - ixgbe: turn off MDD while modifying SRRCTL (Corinna Vinschen) [RHEL-97675]
  - ixgbe: add Tx hang detection unhandled MDD (Corinna Vinschen) [RHEL-97675]
  - ixgbe: check for MDD events (Corinna Vinschen) [RHEL-97675]
  - ixgbe: add MDD support (Corinna Vinschen) [RHEL-97675]
  - ixgbe: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Corinna Vinschen) [RHEL-97675]
  - ixgbe: Fix typos and clarify comments in X550 driver code (Corinna Vinschen) [RHEL-97675]
  - ixgbe: add link_down_events statistic (Corinna Vinschen) [RHEL-97675]
  - ixgbe: devlink: add devlink region support for E610 (Corinna Vinschen) [RHEL-97675]
  - ixgbe: add E610 .set_phys_id() callback implementation (Corinna Vinschen) [RHEL-97675]
  - ixgbe: apply different rules for setting FC on E610 (Corinna Vinschen) [RHEL-97675]
  - ixgbe: add support for ACPI WOL for E610 (Corinna Vinschen) [RHEL-97675]
  - ixgbe: create E610 specific ethtool_ops structure (Corinna Vinschen) [RHEL-97675]
  - ixgbevf: stop attempting IPSEC offload on Mailbox API 1.5 (Corinna Vinschen) [RHEL-97673]
  - ixgbevf: Add support for new mailbox communication between PF and VF (Corinna Vinschen) [RHEL-97673]
  - igc: Reduce TSN TX packet buffer from 7KB to 5KB per queue (Corinna Vinschen) [RHEL-97650]
  - igc: fix race condition in TX timestamp read for register 0 (Corinna Vinschen) [RHEL-97650]
  - igc: Restore default Qbv schedule when changing channels (Corinna Vinschen) [RHEL-97650]
  - igc: extract GRXRINGS from .get_rxnfc (Corinna Vinschen) [RHEL-97650]
  - igc: use EOPNOTSUPP instead of ENOTSUPP in igc_ethtool_get_sset_count() (Corinna Vinschen) [RHEL-97650]
  - igc: power up the PHY before the link test (Corinna Vinschen) [RHEL-97650]
  - igc: don't fail igc_probe() on LED setup error (Corinna Vinschen) [RHEL-97650] {CVE-2025-39956}
  - igc: drop unnecessary constant casts to u16 (Corinna Vinschen) [RHEL-97650]
  - igc: fix disabling L1.2 PCI-E link substate on I226 on init (Corinna Vinschen) [RHEL-97650]
  - eth: intel: use vmalloc_array() to simplify code [igc] (Corinna Vinschen) [RHEL-97650]
  - net: Fix typos [igc] (Corinna Vinschen) [RHEL-97650]
  - igc: Add wildcard rule support to ethtool NFC using Default Queue (Corinna Vinschen) [RHEL-97650]
  - igc: Relocate RSS field definitions to igc_defines.h (Corinna Vinschen) [RHEL-97650]
  - igc: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Corinna Vinschen) [RHEL-97650]
  - igc: disable L1.2 PCI-E link substate to avoid performance issue (Corinna Vinschen) [RHEL-97650]
  - igc: Make the const read-only array supported_sizes static (Corinna Vinschen) [RHEL-97650]
  - igc: add preemptible queue support in mqprio (Corinna Vinschen) [RHEL-97650]
  - igc: add preemptible queue support in taprio (Corinna Vinschen) [RHEL-97650]
  - igc: add private flag to reverse TX queue priority in TSN mode (Corinna Vinschen) [RHEL-97650]
  - igc: assign highest TX queue number as highest priority in mqprio (Corinna Vinschen) [RHEL-97650]
  - igc: refactor TXDCTL macros to use FIELD_PREP and GEN_MASK (Corinna Vinschen) [RHEL-97650]
  - igc: add DCTL prefix to related macros (Corinna Vinschen) [RHEL-97650]
  - igc: move TXDCTL and RXDCTL related macros (Corinna Vinschen) [RHEL-97650]
  - igc: Change Tx mode for MQPRIO offloading (Corinna Vinschen) [RHEL-97650]
  - igc: Limit netdev_tc calls to MQPRIO (Corinna Vinschen) [RHEL-97650]
  - igc: add support to get frame preemption statistics via ethtool (Corinna Vinschen) [RHEL-97650]
  - igc: add support to get MAC Merge data via ethtool (Corinna Vinschen) [RHEL-97650]
  - igc: block setting preemptible traffic class in taprio (Corinna Vinschen) [RHEL-97650]
  - igc: add support to set tx-min-frag-size (Corinna Vinschen) [RHEL-97650]
  - igc: add support for frame preemption verification (Corinna Vinschen) [RHEL-97650]
  - igc: Fix TX drops in XDP ZC (Corinna Vinschen) [RHEL-97650]
  - igc: Add launch time support to XDP ZC (Corinna Vinschen) [RHEL-97650]
  - igc: Refactor empty frame insertion for launch time support (Corinna Vinschen) [RHEL-97650]
  - igc: Switch to use hrtimer_setup() (Corinna Vinschen) [RHEL-97650]
  - igb: extract GRXRINGS from .get_rxnfc (Corinna Vinschen) [RHEL-97672]
  - igbvf: fix misplaced newline in VLAN add warning message (Corinna Vinschen) [RHEL-97690]
  - igb: use EOPNOTSUPP instead of ENOTSUPP in igb_get_sset_count() (Corinna Vinschen) [RHEL-97672]
  - igb: fix link test skipping when interface is admin down (Corinna Vinschen) [RHEL-97672]
  - igb: Fix NULL pointer dereference in ethtool loopback test (Corinna Vinschen) [RHEL-97672]
  - igb: drop unnecessary constant casts to u16 (Corinna Vinschen) [RHEL-97672]
  - igbvf: remove redundant counter rx_long_byte_count from ethtool statistics (Corinna Vinschen) [RHEL-97690]
  - igbvf: add lbtx_packets and lbtx_bytes to ethtool statistics (Corinna Vinschen) [RHEL-97690]
  - eth: intel: use vmalloc_array() to simplify code [igb] (Corinna Vinschen) [RHEL-97672]
  - igbvf: remove unused fields from struct igbvf_adapter (Corinna Vinschen) [RHEL-97690]
  - igbvf: add tx_timeout_count to ethtool statistics (Corinna Vinschen) [RHEL-97690]
  - igbvf: remove unused interrupt counter fields from struct igbvf_adapter (Corinna Vinschen) [RHEL-97690]
  - igb: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Corinna Vinschen) [RHEL-97672]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-676.el9]
changelog:
  - io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths [partial] (Jeff Moyer) [RHEL-141266]
  - io_uring: fix filename leak in __io_openat_prep() (Jeff Moyer) [RHEL-141266]
  - io_uring: fix min_wait wakeups for SQPOLL (Jeff Moyer) [RHEL-141266]
  - io_uring/kbuf: use READ_ONCE() for userspace-mapped memory (Jeff Moyer) [RHEL-141266]
  - io_uring/rsrc: fix lost entries after cloned range (Jeff Moyer) [RHEL-141266]
  - io_uring/poll: correctly handle io_poll_add() return value on update (Jeff Moyer) [RHEL-141266]
  - io_uring: use WRITE_ONCE for user shared memory (Jeff Moyer) [RHEL-141266]
  - io_uring: correct __must_hold annotation in io_install_fixed_file (Jeff Moyer) [RHEL-141266]
  - io_uring/sqpoll: be smarter on when to update the stime usage (Jeff Moyer) [RHEL-141266]
  - io_uring/sqpoll: switch away from getrusage() for CPU accounting (Jeff Moyer) [RHEL-141266]
  - io_uring: fix incorrect io_kiocb reference in io_link_skb (Jeff Moyer) [RHEL-141266]
  - io_uring: include dying ring in task_work "should cancel" state (Jeff Moyer) [RHEL-141266]
  - io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-141266]
  - io_uring: finish IOU_OK -> IOU_COMPLETE transition (Jeff Moyer) [RHEL-141266]
  - io_uring: unify STOP_MULTISHOT with IOU_OK (Jeff Moyer) [RHEL-141266]
  - io_uring: return -EAGAIN to continue multishot (Jeff Moyer) [RHEL-141266]
  - RDMA/efa: Remove possible negative shift (Kamal Heib) [RHEL-140844]
  - RDMA/efa: Extend admin timeout error print (Kamal Heib) [RHEL-140844]
  - RDMA/efa: Add Network HW statistics counters (Kamal Heib) [RHEL-140844]
  - e1000e: Introduce private flag to disable K1 (Corinna Vinschen) [RHEL-134986]
  - e1000e: drop unnecessary constant casts to u16 (Corinna Vinschen) [RHEL-134986]
  - e1000e: ignore uninitialized checksum word on tgp (Corinna Vinschen) [RHEL-134986]
  - e1000e: disregard NVM checksum on tgp when valid checksum bit is not set (Corinna Vinschen) [RHEL-134986]
  - e1000e: set fixed clock frequency indication for Nahum 11 and Nahum 13 (Corinna Vinschen) [RHEL-134986]
  - e1000e: change k1 configuration on MTP and later platforms (Corinna Vinschen) [RHEL-134986]
  - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-129138]
  - x86/microcode: Mark early_parse_cmdline() as __init (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-129138]
  - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-129138]
  - redhat/configs: Add CONFIG_MICROCODE_DBG [=n] (Waiman Long) [RHEL-129138]
  - x86/microcode: Add microcode loader debugging functionality (Waiman Long) [RHEL-129138]
  - x86/microcode: Add microcode= cmdline parsing (Waiman Long) [RHEL-129138]
  - x86/microcode/intel: Refresh the revisions that determine old_microcode (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Do not return error when microcode update is not necessary (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Clean the cache if update did not load microcode (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Make __verify_patch_size() return bool (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Remove bogus comment from parse_container() (Waiman Long) [RHEL-129138]
  - mm: memcg: add NULL check to obj_cgroup_put() (Radostin Stoyanov) [RHEL-113275]
  - mm: memcg: use rstat for non-hierarchical stats (Radostin Stoyanov) [RHEL-113275]
  - mm: memcg: change flush_next_time to flush_last_time (Radostin Stoyanov) [RHEL-113275]
  - zswap: export compression failure stats (Radostin Stoyanov) [RHEL-113275]
  - Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline" (Radostin Stoyanov) [RHEL-113275]
  - cgroup/rstat: Fix forceidle time in cpu.stat (Radostin Stoyanov) [RHEL-113275]
  - memcg: drain obj stock on cpu hotplug teardown (Radostin Stoyanov) [RHEL-113275]
  - memcg: avoid dead loop when setting memory.max (Radostin Stoyanov) [RHEL-113275]
  - cgroup: Add compatibility option for content of /proc/cgroups (Radostin Stoyanov) [RHEL-113275]
  - cgroup: Print message when /proc/cgroups is read on v2-only system (Radostin Stoyanov) [RHEL-113275]
  - cgroup,freezer: fix incomplete freezing when attaching tasks (Radostin Stoyanov) [RHEL-113275]
  - cgroup: add helper for checking when css is cgroup::self (Radostin Stoyanov) [RHEL-113275]
  - include/cgroup: separate {get,put}_cgroup_ns no-op case (Radostin Stoyanov) [RHEL-113275]
  - sched: Factor out cgroup weight conversion functions (Radostin Stoyanov) [RHEL-113275]
  - blk-cgroup: Simplify policy files registration (Radostin Stoyanov) [RHEL-113275]
  - selftests/bpf: Add a test for bpf_cgroup_from_id lookup in non-root cgns (Radostin Stoyanov) [RHEL-113275]
  - bpf: Do not limit bpf_cgroup_from_id to current's namespace (Radostin Stoyanov) [RHEL-113275]
  - mm: cleanup WORKINGSET_NODES in workingset (Radostin Stoyanov) [RHEL-113275]
  - memcg: cleanup __mod_memcg_lruvec_state (Radostin Stoyanov) [RHEL-113275]
  - memcg: reduce memory size of mem_cgroup_events_index (Radostin Stoyanov) [RHEL-113275]
  - sched/headers: Move 'struct sched_param' out of uapi, to work around glibc/musl breakage (Radostin Stoyanov) [RHEL-113275]
  - cgroup/bpf: only cgroup v2 can be attached by bpf programs (Radostin Stoyanov) [RHEL-113275]
  - cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Radostin Stoyanov) [RHEL-113275]
  - Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Radostin Stoyanov) [RHEL-113275]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-677.el9]
changelog:
  - nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference (Ming Lei) [RHEL-142602]
  - scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-138489]
  - evm: Support multiple LSMs providing an xattr (Coiby Xu) [RHEL-140008]
  - evm: Align evm_inode_init_security() definition with LSM infrastructure (Coiby Xu) [RHEL-140008]
  - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-136438]
  - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-136438]
  - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-136438]
  - audit: fix out-of-bounds read in audit_compare_dname_path() (CKI Backport Bot) [RHEL-119177] {CVE-2025-39840}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-678.el9]
changelog:
  - dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146358]
  - dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-147460]
  - dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-147460]
  - dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-147460]
  - lockd: don't allow locking on reexported NFSv2/3 (Olga Kornievskaia) [RHEL-61448]
  - nfsd: disallow file locking and delegations for NFSv4 reexport (Olga Kornievskaia) [RHEL-61448]
  - perf trace: fix tracepoint structure alignment (Jakub Brnak) [RHEL-71808]
  - tracing: Fix a warning when allocating buffered events fails (Charles Haithcock) [RHEL-136272]
  - tracing: Fix a possible race when disabling buffered events (Charles Haithcock) [RHEL-136272]
  - tracing: Fix incomplete locking when disabling buffered events (Charles Haithcock) [RHEL-136272]
  - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-95934]
  - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-95934]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-679.el9]
changelog:
  - perf list: Add IBM z17 event descriptions (Jakub Brnak) [RHEL-50801]
  - redhat/dracut-virt.conf: omit drm drivers in UKI initrd (Li Tian) [RHEL-147294]
  - block: fix memory leak in __blkdev_issue_zero_pages (Ming Lei) [RHEL-137854]
  - nouveau/gsp: fix suspend/resume regression on r570 firmware (José Expósito) [RHEL-141648]
  - nouveau: add a third state to the fini handler. (José Expósito) [RHEL-141648]
  - nouveau/gsp: use rpc sequence numbers properly. (José Expósito) [RHEL-141648]
  - netfilter: ctnetlink: Support offloaded conntrack entry deletion (Phil Sutter) [RHEL-138511]
  - cpuidle: governors: menu: Select polling state in some more cases (Mark Langsdorf) [RHEL-120324]
  - cpuidle: governors: menu: Rearrange main loop in menu_select() (Mark Langsdorf) [RHEL-120324]
  - Revert "cpuidle: menu: Avoid discarding useful information" (Mark Langsdorf) [RHEL-120324]
  - cpuidle: governors: menu: Avoid selecting states with too much latency (Mark Langsdorf) [RHEL-120324]
  - cpuidle: governors: menu: Avoid using invalid recent intervals data (Mark Langsdorf) [RHEL-120324]
  - cpuidle: psci: Fix cpuhotplug routine with PREEMPT_RT=y (Mark Langsdorf) [RHEL-120324]
  - cpuidle: psci: Drop redundant sync_state support (Mark Langsdorf) [RHEL-120324]
  - cpuidle: psci: Opt-out from genpd's common ->sync_state() support (Mark Langsdorf) [RHEL-120324]
  - cpuidle: psci: Fix uninitialized variable in dt_idle_state_present() (Mark Langsdorf) [RHEL-120324]
  - cpuidle: psci: Avoid initializing faux device if no DT idle states are present (Mark Langsdorf) [RHEL-120324]
  - cpuidle: psci: Correct the domain-idlestate statistics in debugfs (Mark Langsdorf) [RHEL-120324]
  - cpuidle: psci: Move the per CPU variable domain_state to a struct (Mark Langsdorf) [RHEL-120324]
  - pmdomain: core: Add genpd helper to correct the usage/rejected counters (Mark Langsdorf) [RHEL-120324]
  - cpuidle: psci: Transition to the faux device interface (Mark Langsdorf) [RHEL-120324]
  - cpuidle: menu: Optimize bucket assignment when next_timer_ns equals KTIME_MAX (Mark Langsdorf) [RHEL-120324]
  - cpufreq: scmi: Account for malformed DT in scmi_dev_used_by_cpus() (Mark Langsdorf) [RHEL-120322]
  - ACPI: CPPC: Add three functions related to autonomous selection (Mark Langsdorf) [RHEL-120322]
  - cpufreq: Initialize cpufreq-based invariance before subsys (Mark Langsdorf) [RHEL-120322]
  - cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag (Mark Langsdorf) [RHEL-120322]
  - drivers: cpufreq: add Tegra114 support (Mark Langsdorf) [RHEL-120322]
  - cpufreq: Exit governor when failed to start old governor (Mark Langsdorf) [RHEL-120322]
  - cpufreq: Move the check of cpufreq_driver->get into cpufreq_verify_current_freq() (Mark Langsdorf) [RHEL-120322]
  - cpufreq: Init policy->rwsem before it may be possibly used (Mark Langsdorf) [RHEL-120322]
  - cpufreq: Initialize cpufreq-based frequency-invariance later (Mark Langsdorf) [RHEL-120322]
  - cpufreq: Remove duplicate check in __cpufreq_offline() (Mark Langsdorf) [RHEL-120322]
  - cpufreq: Don't unregister cpufreq cooling on CPU hotplug (Mark Langsdorf) [RHEL-120322]
  - cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs (Mark Langsdorf) [RHEL-120322]
  - cpufreq: tegra124: Allow building as a module (Mark Langsdorf) [RHEL-120322]
  - cpufreq: dt: Add register helper (Mark Langsdorf) [RHEL-120322]
  - cpufreq: Export disable_cpufreq() (Mark Langsdorf) [RHEL-120322]
  - cpufreq: brcmstb-avs: Fully open-code compatible for grepping (Mark Langsdorf) [RHEL-120322]
  - cpufreq: userspace: set CPUFREQ_GOV_STRICT_TARGET flag (Mark Langsdorf) [RHEL-120322]
  - cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em() (Mark Langsdorf) [RHEL-120322]
  - cpufreq: CPPC: Do not return a value from populate_efficiency_class() (Mark Langsdorf) [RHEL-120322]
  - cpufreq: CPPC: Remove cpu_data_list (Mark Langsdorf) [RHEL-120322]
  - cpufreq: CPPC: Add support for autonomous selection (Mark Langsdorf) [RHEL-120322]
  - cpufreq: Update sscanf() to kstrtouint() (Mark Langsdorf) [RHEL-120322]
  - cpufreq: Replace magic number (Mark Langsdorf) [RHEL-120322]
  - cpufreq: scmi: Skip SCMI devices that aren't used by the CPUs (Mark Langsdorf) [RHEL-120322]
  - cpufreq: drop redundant cpus_read_lock() from store_local_boost() (Mark Langsdorf) [RHEL-120322]
  - cpufreq: Drop policy locking from cpufreq_policy_is_good_for_eas() (Mark Langsdorf) [RHEL-120322]
  - powernow: use pr_info_once (Mark Langsdorf) [RHEL-120322]
  - cpufreq/sched: Move cpufreq-specific EAS checks to cpufreq (Mark Langsdorf) [RHEL-120322]
  - cpufreq/sched: schedutil: Add helper for governor checks (Mark Langsdorf) [RHEL-120322]
  - cpufreq: Force sync policy boost with global boost on sysfs update (Mark Langsdorf) [RHEL-120322]
  - cpufreq: Preserve policy's boost state after resume (Mark Langsdorf) [RHEL-120322]
  - cpufreq: Pass policy pointer to ->update_limits() (Mark Langsdorf) [RHEL-120322]
  - cpufreq: intel_pstate: Rearrange max frequency updates handling code (Mark Langsdorf) [RHEL-120322]
  - cpufreq: Introduce policy_set_boost() (Mark Langsdorf) [RHEL-120322]
  - cpufreq: Don't unnecessarily call set_boost() (Mark Langsdorf) [RHEL-120322]
  - cpufreq: Drop unused cpufreq_get_policy() (Mark Langsdorf) [RHEL-120322]
  - cpufreq: Introduce cpufreq_policy_refresh() (Mark Langsdorf) [RHEL-120322]
  - cpufreq: Use __free() for policy reference counting cleanup (Mark Langsdorf) [RHEL-120322]
  - cpufreq: Drop cpufreq_cpu_acquire() and cpufreq_cpu_release() (Mark Langsdorf) [RHEL-120322]
  - cpufreq: Use locking guard and __free() in cpufreq_update_policy() (Mark Langsdorf) [RHEL-120322]
  - cpufreq: Add and use cpufreq policy locking guards (Mark Langsdorf) [RHEL-120322]
  - cpufreq: Drop unnecessary cpus locking from store() (Mark Langsdorf) [RHEL-120322]
  - cpufreq: Split cpufreq_online() (Mark Langsdorf) [RHEL-120322]
  - cpufreq: Consolidate some code in cpufreq_online() (Mark Langsdorf) [RHEL-120322]
  - cpufreq: ppc_cbe: Remove powerpc Cell driver (Mark Langsdorf) [RHEL-120322]
  - cpufreq: staticize cpufreq_boost_trigger_state() (Mark Langsdorf) [RHEL-120322]
  - cpufreq: Remove cpufreq_generic_attrs (Mark Langsdorf) [RHEL-120322]
  - cpufreq: virtual: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-120322]
  - cpufreq: speedstep: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-120322]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-680.el9]
changelog:
  - xfs: set max_agbno to allow sparse alloc of last full inode chunk (CKI Backport Bot) [RHEL-141685]
  - configs: new config in drivers/phy (Izabela Bakollari) [RHEL-75582]
  - net: phy: fix phy_uses_state_machine() (Izabela Bakollari) [RHEL-75582]
  - net: phylink: move PHY interrupt request to non-fail path (Izabela Bakollari) [RHEL-75582]
  - net: mdio: mdio-i2c: Hold the i2c bus lock during smbus transactions (Izabela Bakollari) [RHEL-75582]
  - ixgene-v2: prepare for phylib stop exporting phy_10_100_features_array (Izabela Bakollari) [RHEL-75582]
  - net: gianfar: simplify init_phy() (Izabela Bakollari) [RHEL-75582]
  - net: ethernet: xgbe: re-add aneg to supported features in PHY quirks (Izabela Bakollari) [RHEL-75582]
  - dt-bindings: net: dp83822: Add support for GPIO2 clock output (Izabela Bakollari) [RHEL-75582]
  - dt-bindings: net: tja11xx: add "nxp,rmii-refclk-out" property (Izabela Bakollari) [RHEL-75582]
  - net: phy: Support speed selection for PHY loopback (Izabela Bakollari) [RHEL-75582]
  - net: phy: microchip: limit 100M workaround to link-down events on LAN88xx (Izabela Bakollari) [RHEL-75582]
  - net: phy: microchip: Use genphy_soft_reset() to purge stale LPA bits (Izabela Bakollari) [RHEL-75582]
  - net: phy: phy_caps: Don't skip better duplex macth on non-exact match (Izabela Bakollari) [RHEL-75582]
  - net: mdio: mdio-i2c: Add support for single-byte SMBus operations (Izabela Bakollari) [RHEL-75582]
  - net: phy: add driver for MaxLinear MxL86110 PHY (Izabela Bakollari) [RHEL-75582]
  - net: phy: fixed_phy: remove irq argument from fixed_phy_add (Izabela Bakollari) [RHEL-75582]
  - net: phylink: add functions to block/unblock rx clock stop (Izabela Bakollari) [RHEL-75582]
  - net: phy: fix genphy_c45_eee_is_active() for disabled EEE (Izabela Bakollari) [RHEL-75582]
  - net: phy: c45: remove local advertisement parameter from genphy_c45_eee_is_active (Izabela Bakollari) [RHEL-75582]
  - net: phy: c45: use cached EEE advertisement in genphy_c45_ethtool_get_eee (Izabela Bakollari) [RHEL-75582]
  - net: phy: update phy_ethtool_get_eee() documentation (Izabela Bakollari) [RHEL-75582]
  - net: phy: remove genphy_c45_eee_is_active()'s is_enabled arg (Izabela Bakollari) [RHEL-75582]
  - net: phy: c45: Don't silently remove disabled EEE modes any longer when writing advertisement register (Izabela Bakollari) [RHEL-75582]
  - net: phy: remove disabled EEE modes from advertising_eee in phy_probe (Izabela Bakollari) [RHEL-75582]
  - net: phylink: add support for notifying PCS about EEE (Izabela Bakollari) [RHEL-75582]
  - net: phylink: provide phylink_mac_implements_lpi() (Izabela Bakollari) [RHEL-75582]
  - net: phylink: make configuring clock-stop dependent on MAC support (Izabela Bakollari) [RHEL-75582]
  - net: phylink: fix regression when binding a PHY (Izabela Bakollari) [RHEL-75582]
  - net: phy: improve phy_disable_eee_mode (Izabela Bakollari) [RHEL-75582]
  - net: phy: move definition of phy_is_started before phy_disable_eee_mode (Izabela Bakollari) [RHEL-75582]
  - net: phy: rename phy_set_eee_broken to phy_disable_eee_mode (Izabela Bakollari) [RHEL-75582]
  - net: phy: rename eee_broken_modes to eee_disabled_modes (Izabela Bakollari) [RHEL-75582]
  - r8169: add support for RTL8125BP rev.b (Izabela Bakollari) [RHEL-93674]
  - r8169: copy vendor driver 2.5G/5G EEE advertisement constraints (Izabela Bakollari) [RHEL-93674]
  - r8169: align RTL8126 EEE config with vendor driver (Izabela Bakollari) [RHEL-93674]
  - r8169: align RTL8125 EEE config with vendor driver (Izabela Bakollari) [RHEL-93674]
  - r8169: align RTL8125/RTL8126 PHY config with vendor driver (Izabela Bakollari) [RHEL-93674]
  - net: phylink: add EEE management (Izabela Bakollari) [RHEL-75582]
  - net: phy: micrel: use helper phy_disable_eee (Izabela Bakollari) [RHEL-75582]
  - net: phy: fix phy_disable_eee (Izabela Bakollari) [RHEL-75582]
  - net: phy: add phy_disable_eee (Izabela Bakollari) [RHEL-75582]
  - net: phy: introduce optional polling interface for PHY statistics (Izabela Bakollari) [RHEL-75582]
  - net: phy: avoid undefined behavior in *_led_polarity_set() (Izabela Bakollari) [RHEL-75582]
  - net: phy: mxl-gpy: correctly describe LED polarity (Izabela Bakollari) [RHEL-75582]
  - net: phy: microchip_t1: SQI support for LAN887x (Izabela Bakollari) [RHEL-75582]
  - net: phy: mxl-gpy: add missing support for TRIGGER_NETDEV_LINK_10 (Izabela Bakollari) [RHEL-75582]
  - net: phy: microchip_t1: Interrupt support for lan887x (Izabela Bakollari) [RHEL-75582]
  - net: phy: mxl-gpy: add basic LED support (Izabela Bakollari) [RHEL-75582]
  - net: phy: fix phylib's dual eee_enabled (Izabela Bakollari) [RHEL-75582]
  - net: phy: fix phy_ethtool_set_eee() incorrectly enabling LPI (Izabela Bakollari) [RHEL-75582]
  - net: phy: ensure that genphy_c45_an_config_eee_aneg() sees new value of phydev->eee_cfg.eee_enabled (Izabela Bakollari) [RHEL-75582]
  - net: phy: Immediately call adjust_link if only tx_lpi_enabled changes (Izabela Bakollari) [RHEL-75582]
  - net: phy: Add phy_support_eee() indicating MAC support EEE (Izabela Bakollari) [RHEL-75582]
  - net: phy: convert eee_broken_modes to a linkmode bitmap (Izabela Bakollari) [RHEL-75582]
  - net: phy: Keep track of EEE configuration (Izabela Bakollari) [RHEL-75582]
  - net: phy: Add phydev->enable_tx_lpi to simplify adjust link callbacks (Izabela Bakollari) [RHEL-75582]
  - net: phy: Provide Module 4 KSZ9477 errata (DS80000754C) (Izabela Bakollari) [RHEL-75582]
  - net: phy: micrel: add Microchip KSZ 9477 to the device table (Izabela Bakollari) [RHEL-75582]
  - net: phy: realtek: remove unsed RTL821x_PHYSR* macros (Izabela Bakollari) [RHEL-75582]
  - dt-bindings: net: ethernet-phy: Add timing-role role property for ethernet PHYs (Izabela Bakollari) [RHEL-75582]
  - net: phy: mediatek: add driver for built-in 2.5G ethernet PHY on MT7988 (Izabela Bakollari) [RHEL-75582]
  - net: phy: mediatek: Sort config and file names in Kconfig and Makefile (Izabela Bakollari) [RHEL-75582]
  - net: phy: realtek: add RTL8127-internal PHY (Izabela Bakollari) [RHEL-75582]
  - net: phy: microchip: document where the LAN88xx PHYs are used (Izabela Bakollari) [RHEL-75582]
  - net: phy: fixed_phy: remove fixed_phy_register_with_gpiod (Izabela Bakollari) [RHEL-75582]
  - net: phy: remove stub for mdiobus_register_board_info (Izabela Bakollari) [RHEL-75582]
  - net: phy: marvell-88q2xxx: Enable temperature measurement in probe again (Izabela Bakollari) [RHEL-75582]
  - net: phy: mediatek: do not require syscon compatible for pio property (Izabela Bakollari) [RHEL-75582]
  - net: phy: dp83867: use 2ns delay if not specified in DTB (Izabela Bakollari) [RHEL-75582]
  - net: phy: dp83867: remove check of delay strap configuration (Izabela Bakollari) [RHEL-75582]
  - net: phy: realtek: Add support for PHY LEDs on RTL8211E (Izabela Bakollari) [RHEL-75582]
  - net: phy: realtek: use __set_bit() in rtl8211f_led_hw_control_get() (Izabela Bakollari) [RHEL-75582]
  - net: phy: realtek: Group RTL82* macro definitions (Izabela Bakollari) [RHEL-75582]
  - net: phy: realtek: add RTL8211F register defines (Izabela Bakollari) [RHEL-75582]
  - net: phy: realtek: Clean up RTL821x ExtPage access (Izabela Bakollari) [RHEL-75582]
  - net: phy: Refactor fwnode_get_phy_node() (Izabela Bakollari) [RHEL-75582]
  - net: phy: realtek: Add support for WOL magic packet on RTL8211F (Izabela Bakollari) [RHEL-75582]
  - net: phy: aquantia: fix commenting format (Izabela Bakollari) [RHEL-75582]
  - net: phylink: Drop unused defines for SUPPORTED/ADVERTISED_INTERFACES (Izabela Bakollari) [RHEL-75582]
  - net: phy: marvell-88q2xxx: Enable temperature sensor for mv88q211x (Izabela Bakollari) [RHEL-75582]
  - net: phy: remove function stubs (Izabela Bakollari) [RHEL-75582]
  - net: phy: leds: fix memory leak (Izabela Bakollari) [RHEL-75582]
  - net: phy: Add helper for getting MAC termination resistance (Izabela Bakollari) [RHEL-75582]
  - net: phylink: fix suspend/resume with WoL enabled and link down (Izabela Bakollari) [RHEL-75582]
  - net: phy: microchip: force IRQ polling mode for lan88xx (Izabela Bakollari) [RHEL-75582]
  - net: phy: mediatek: init val in .phy_led_polarity_set for AN7581 (Izabela Bakollari) [RHEL-75582]
  - net: phy: remove redundant dependency on NETDEVICES for PHYLINK and PHYLIB (Izabela Bakollari) [RHEL-75582]
  - net: phy: remove device_phy_find_device (Izabela Bakollari) [RHEL-75582]
  - net: phy: mediatek: add Airoha PHY ID to SoC driver (Izabela Bakollari) [RHEL-75582]
  - net: phy: mediatek: permit to compile test GE SOC PHY driver (Izabela Bakollari) [RHEL-75582]
  - net: phy: air_en8811h: Add clk provider for CKO pin (Izabela Bakollari) [RHEL-75582]
  - net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (Izabela Bakollari) [RHEL-75582]
  - net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend() (Izabela Bakollari) [RHEL-75582]
  - net: phylink: force link down on major_config failure (Izabela Bakollari) [RHEL-75582]
  - net: phy: Introduce PHY_ID_SIZE — minimum size for PHY ID string (Izabela Bakollari) [RHEL-75582]
  - net: phy: aquantia: add essential functions to aqr105 driver (Izabela Bakollari) [RHEL-75582]
  - net: phy: aquantia: search for firmware-name in fwnode (Izabela Bakollari) [RHEL-75582]
  - net: phy: aquantia: add probe function to aqr105 for firmware loading (Izabela Bakollari) [RHEL-75582]
  - net: phy: Add swnode support to mdiobus_scan (Izabela Bakollari) [RHEL-75582]
  - net: phy: sfp: Add support for SMBus module access (Izabela Bakollari) [RHEL-75582]
  - net: phylink: add phylink_prepare_resume() (Izabela Bakollari) [RHEL-75582]
  - net: phylink: Remove unused function pointer from phylink structure (Izabela Bakollari) [RHEL-75582]
  - net: phy: realtek: disable PHY-mode EEE (Izabela Bakollari) [RHEL-75582]
  - net: phy: phy_interface_t: Fix RGMII_TXID code comment (Izabela Bakollari) [RHEL-75582]
  - net: phy: marvell-88q2xxx: remove call to devm_hwmon_sanitize_name (Izabela Bakollari) [RHEL-75582]
  - net: phy: mxl-gpy: remove call to devm_hwmon_sanitize_name (Izabela Bakollari) [RHEL-75582]
  - net: phy: tja11xx: remove call to devm_hwmon_sanitize_name (Izabela Bakollari) [RHEL-75582]
  - net: phy: marvell: Align set_loopback() implementation (Izabela Bakollari) [RHEL-75582]
  - net: phy: micrel: Add loopback support (Izabela Bakollari) [RHEL-75582]
  - net: phy: Allow loopback speed selection for PHY drivers (Izabela Bakollari) [RHEL-75582]
  - phy: fix xa_alloc_cyclic() error handling (Izabela Bakollari) [RHEL-75582]
  - net: phy: remove unused functions phy_package_[read|write]_mmd (Izabela Bakollari) [RHEL-75582]
  - net: phy: move PHY package MMD access function declarations from phy.h to phylib.h (Izabela Bakollari) [RHEL-75582]
  - net: phylink: Use phy_caps to get an interface's capabilities and modes (Izabela Bakollari) [RHEL-75582]
  - net: phylink: Convert capabilities to linkmodes using phy_caps (Izabela Bakollari) [RHEL-75582]
  - net: phylink: Add a mapping between MAC_CAPS and LINK_CAPS (Izabela Bakollari) [RHEL-75582]
  - net: phylink: Use phy_caps_lookup for fixed-link configuration (Izabela Bakollari) [RHEL-75582]
  - net: phy: phy_device: Use link_capabilities lookup for PHY aneg config (Izabela Bakollari) [RHEL-75582]
  - net: phy: phy_caps: Allow looking-up link caps based on speed and duplex (Izabela Bakollari) [RHEL-75582]
  - net: phy: phy_caps: Implement link_capabilities lookup by linkmode (Izabela Bakollari) [RHEL-75582]
  - net: phy: phy_caps: Introduce phy_caps_valid (Izabela Bakollari) [RHEL-75582]
  - net: phy: phy_caps: Move __set_linkmode_max_speed to phy_caps (Izabela Bakollari) [RHEL-75582]
  - net: phy: phy_caps: Move phy_speeds to phy_caps (Izabela Bakollari) [RHEL-75582]
  - net: phy: Use an internal, searchable storage for the linkmodes (Izabela Bakollari) [RHEL-75582]
  - net: phylink: Remove unused phylink_init_eee (Izabela Bakollari) [RHEL-75582]
  - net: phy: tja11xx: enable PHY in sleep mode for TJA1102S (Izabela Bakollari) [RHEL-75582]
  - net: phy: tja11xx: add support for TJA1102S (Izabela Bakollari) [RHEL-75582]
  - net: phy: nxp-c45-tja11xx: add TJA112XB SGMII PCS restart errata (Izabela Bakollari) [RHEL-75582]
  - net: phy: nxp-c45-tja11xx: add TJA112X PHY configuration errata (Izabela Bakollari) [RHEL-75582]
  - net: phy: remove remaining PHY package related definitions from phy.h (Izabela Bakollari) [RHEL-75582]
  - net: phy: move PHY package related code from phy.h to phy_package.c (Izabela Bakollari) [RHEL-75582]
  - net: phy: mscc: use new phy_package_shared getters (Izabela Bakollari) [RHEL-75582]
  - net: phy: mediatek: use new phy_package_shared getters (Izabela Bakollari) [RHEL-75582]
  - net: phy: micrel: use new phy_package_shared getters (Izabela Bakollari) [RHEL-75582]
  - net: phy: qca807x: use new phy_package_shared getters (Izabela Bakollari) [RHEL-75582]
  - net: phy: add getters for public members in struct phy_package_shared (Izabela Bakollari) [RHEL-75582]
  - net: phy: move PHY package code from phy_device.c to own source file (Izabela Bakollari) [RHEL-75582]
  - net: phy: nxp-c45-tja11xx: add support for TJA1121 (Izabela Bakollari) [RHEL-75582]
  - net: phy: nxp-c45-tja11xx: add match_phy_device to TJA1103/TJA1104 (Izabela Bakollari) [RHEL-75582]
  - net: phylink: use pl->link_interface in phylink_expects_phy() (Izabela Bakollari) [RHEL-75582]
  - net: sfp: add quirk for FS SFP-10GM-T copper SFP+ module (Izabela Bakollari) [RHEL-75582]
  - net: phy: add phylib-internal.h (Izabela Bakollari) [RHEL-75582]
  - net: phy: remove unused feature array declarations (Izabela Bakollari) [RHEL-75582]
  - net: phy: qcom: qca807x fix condition for DAC_DSP_BIAS_CURRENT (Izabela Bakollari) [RHEL-75582]
  - net: sfp: add quirk for 2.5G OEM BX SFP (Izabela Bakollari) [RHEL-75582]
  - net: phy: realtek: add defines for shadowed c45 standard registers (Izabela Bakollari) [RHEL-75582]
  - net: phy: realtek: add helper RTL822X_VND2_C22_REG (Izabela Bakollari) [RHEL-75582]
  - net: phy: marvell-88q2xxx: Init PHY private structure for mv88q211x (Izabela Bakollari) [RHEL-75582]
  - net: phy: marvell-88q2xxx: enable temperature sensor in mv88q2xxx_config_init (Izabela Bakollari) [RHEL-75582]
  - net: phy: marvell-88q2xxx: order includes alphabetically (Izabela Bakollari) [RHEL-75582]
  - net: phy: marvell-88q2xxx: align defines (Izabela Bakollari) [RHEL-75582]
  - net: phy: Add helper for getting tx amplitude gain (Izabela Bakollari) [RHEL-75582]
  - net: phy: remove helper phy_is_internal (Izabela Bakollari) [RHEL-75582]
  - net: phy: stop exporting phy_queue_state_machine (Izabela Bakollari) [RHEL-75582]
  - net: phy: stop exporting feature arrays which aren't used outside phylib (Izabela Bakollari) [RHEL-75582]
  - net: phy: remove fixup-related definitions from phy.h which are not used outside phylib (Izabela Bakollari) [RHEL-75582]
  - net: phy: mediatek: Move some macros to phy-lib for later use (Izabela Bakollari) [RHEL-75582]
  - net: phy: mediatek: Add token ring clear bit operation support (Izabela Bakollari) [RHEL-75582]
  - net: phy: mediatek: Add token ring set bit operation support (Izabela Bakollari) [RHEL-75582]
  - net: phy: mediatek: Add token ring access helper functions in mtk-phy-lib (Izabela Bakollari) [RHEL-75582]
  - net: phy: mediatek: Change to more meaningful macros (Izabela Bakollari) [RHEL-75582]
  - net: phy: marvell-88q2xxx: Add support for PHY LEDs on 88q2xxx (Izabela Bakollari) [RHEL-75582]
  - net: phy: broadcom: don't include '<linux/pm_wakeup.h>' directly (Izabela Bakollari) [RHEL-75582]
  - net: phy: dp83tg720: Add randomized polling intervals for link detection (Izabela Bakollari) [RHEL-75582]
  - net: phy: Add support for driver-specific next update time (Izabela Bakollari) [RHEL-75582]
  - net: phy: aquantia: Use HWMON_CHANNEL_INFO macro to simplify code (Izabela Bakollari) [RHEL-75582]
  - net: phy: marvell10g: Use HWMON_CHANNEL_INFO macro to simplify code (Izabela Bakollari) [RHEL-75582]
  - net: phy: marvell: Use HWMON_CHANNEL_INFO macro to simplify code (Izabela Bakollari) [RHEL-75582]
  - net: phy: remove unused PHY_INIT_TIMEOUT and PHY_FORCE_TIMEOUT (Izabela Bakollari) [RHEL-75582]
  - net: phy: dp83td510: introduce LED framework support (Izabela Bakollari) [RHEL-75582]
  - net: phy: realtek: use string choices helpers (Izabela Bakollari) [RHEL-75582]
  - net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset (Izabela Bakollari) [RHEL-75582]
  - net: phy: marvell-88q2xxx: Fix temperature measurement with reset-gpios (Izabela Bakollari) [RHEL-75582]
  - net: phylink: always do a major config when attaching a SFP PHY (Izabela Bakollari) [RHEL-75582]
  - net: phy: remove leftovers from switch to linkmode bitmaps (Izabela Bakollari) [RHEL-75582]
  - net: phylink: add phylink_link_is_up() helper (Izabela Bakollari) [RHEL-75582]
  - net: phy: add support for querying PHY clock stop capability (Izabela Bakollari) [RHEL-75582]
  - net: mdio: add definition for clock stop capable bit (Izabela Bakollari) [RHEL-75582]
  - net: phy: Constify struct mdio_device_id (Izabela Bakollari) [RHEL-75582]
  - net: phy: dp83tg720: add statistics support (Izabela Bakollari) [RHEL-75582]
  - net: phy: dp83td510: add statistics support (Izabela Bakollari) [RHEL-75582]
  - net: phy: add configuration of rx clock stop mode (Izabela Bakollari) [RHEL-75582]
  - net: phylink: add support for PCS supported_interfaces bitmap (Izabela Bakollari) [RHEL-75582]
  - net: phylink: improve phylink_sfp_config_phy() error message with missing PHY driver (Izabela Bakollari) [RHEL-75582]
  - net: phy: dp83822: Add support for GPIO2 clock output (Izabela Bakollari) [RHEL-75582]
  - net: phy: dp83822: Replace DP83822_DEVADDR with MDIO_MMD_VEND2 (Izabela Bakollari) [RHEL-75582]
  - net: phy: Add helper for mapping RGMII link speed to clock rate (Izabela Bakollari) [RHEL-75582]
  - net: phy: avoid genphy_c45_ethtool_get_eee() setting eee_enabled (Izabela Bakollari) [RHEL-75582]
  - net: phy: marvell: use phydev->eee_cfg.eee_enabled (Izabela Bakollari) [RHEL-75582]
  - net: phylink: remove phylink_phy_no_inband() (Izabela Bakollari) [RHEL-75582]
  - net: phylink: add negotiation of in-band capabilities (Izabela Bakollari) [RHEL-75582]
  - net: phylink: add pcs_inband_caps() method (Izabela Bakollari) [RHEL-75582]
  - net: phy: marvell: implement config_inband() method (Izabela Bakollari) [RHEL-75582]
  - net: phy: add phy_config_inband() (Izabela Bakollari) [RHEL-75582]
  - net: phy: marvell: implement phy_inband_caps() method (Izabela Bakollari) [RHEL-75582]
  - net: phy: bcm84881: implement phy_inband_caps() method (Izabela Bakollari) [RHEL-75582]
  - net: phy: add phy_inband_caps() (Izabela Bakollari) [RHEL-75582]
  - net: phylink: add debug for phylink_major_config() (Izabela Bakollari) [RHEL-75582]
  - net: phylink: split cur_link_an_mode into requested and active (Izabela Bakollari) [RHEL-75582]
  - net: phylink: pass phylink and pcs into phylink_pcs_neg_mode() (Izabela Bakollari) [RHEL-75582]
  - net: phy: microchip: Reset LAN88xx PHY to ensure clean link state on LAN7800/7850 (Izabela Bakollari) [RHEL-75582]
  - net: phy: microchip_t1: Clause-45 PHY loopback support for LAN887x (Izabela Bakollari) [RHEL-75582]
  - net: phy: c45: don't use temporary linkmode bitmaps in genphy_c45_ethtool_get_eee (Izabela Bakollari) [RHEL-75582]
  - net: phylink: ensure PHY momentary link-fails are handled (Izabela Bakollari) [RHEL-75582]
  - net: phy: dp83869: fix status reporting for 1000base-x autonegotiation (Izabela Bakollari) [RHEL-75582]
  - mdio: Remove mdio45_ethtool_gset_npage() (Izabela Bakollari) [RHEL-75582]
  - include: mdio: Remove mdio45_ethtool_gset() (Izabela Bakollari) [RHEL-75582]
  - net: phy: mediatek: add MT7530 & MT7531's PHY ID macros (Izabela Bakollari) [RHEL-75582]
  - net: phy: mediatek: Integrate read/write page helper functions (Izabela Bakollari) [RHEL-75582]
  - net: phy: mediatek: Improve readability of mtk-phy-lib.c's mtk_phy_led_hw_ctrl_set() (Izabela Bakollari) [RHEL-75582]
  - net: phy: mediatek: Move LED helper functions into mtk phy lib (Izabela Bakollari) [RHEL-75582]
  - net: phy: mediatek: Re-organize MediaTek ethernet phy drivers (Izabela Bakollari) [RHEL-75582]
  - net: phylink: clean up phylink_resolve() (Izabela Bakollari) [RHEL-75582]
  - net: phylink: remove switch() statement in resolve handling (Izabela Bakollari) [RHEL-75582]
  - net: phylink: move MLO_AN_PHY resolve handling to if() statement (Izabela Bakollari) [RHEL-75582]
  - net: phylink: move MLO_AN_FIXED resolve handling to if() statement (Izabela Bakollari) [RHEL-75582]
  - net: phylink: move manual flow control setting (Izabela Bakollari) [RHEL-75582]
  - net: phy: add phy_set_eee_broken (Izabela Bakollari) [RHEL-75582]
  - net: phy: aquantia: Add mdix config and reporting (Izabela Bakollari) [RHEL-75582]
  - net: phy: remove genphy_config_eee_advert (Izabela Bakollari) [RHEL-75582]
  - net: phy: broadcom: use genphy_c45_an_config_eee_aneg in bcm_config_lre_aneg (Izabela Bakollari) [RHEL-75582]
  - net: phy: export genphy_c45_an_config_eee_aneg (Izabela Bakollari) [RHEL-75582]
  - net: phy: make genphy_c45_write_eee_adv() static (Izabela Bakollari) [RHEL-75582]
  - net: phy: ti: add PHY_RST_AFTER_CLK_EN flag (Izabela Bakollari) [RHEL-75582]
  - net: phy: respect cached advertising when re-enabling EEE (Izabela Bakollari) [RHEL-75582]
  - net: phy: use ethtool string helpers (Izabela Bakollari) [RHEL-75582]
  - net: phy: dp83822: Configure RMII mode on DP83825 devices (Izabela Bakollari) [RHEL-75582]
  - net: phylink: simplify how SFP PHYs are attached (Izabela Bakollari) [RHEL-75582]
  - net: phylink: validate sfp_select_interface() returned interface (Izabela Bakollari) [RHEL-75582]
  - net: phylink: add common validation for sfp_select_interface() (Izabela Bakollari) [RHEL-75582]
  - net: phylink: simplify phylink_parse_fixedlink() (Izabela Bakollari) [RHEL-75582]
  - net: phy: mediatek-ge-soc: Propagate error code correctly in cal_cycle() (Izabela Bakollari) [RHEL-75582]
  - net: phy: mediatek-ge-soc: Shrink line wrapping to 80 characters (Izabela Bakollari) [RHEL-75582]
  - net: phy: mediatek-ge-soc: Fix coding style (Izabela Bakollari) [RHEL-75582]
  - net: phy: marvell: Add mdix status reporting (Izabela Bakollari) [RHEL-75582]
  - net: phylink: remove "using_mac_select_pcs" (Izabela Bakollari) [RHEL-75582]
  - net: phylink: remove use of pl->pcs in phylink_validate_mac_and_pcs() (Izabela Bakollari) [RHEL-75582]
  - net: phylink: allow mac_select_pcs() to remove a PCS (Izabela Bakollari) [RHEL-75582]
  - net: phy: aquantia: fix return value check in aqr107_config_mdi() (Izabela Bakollari) [RHEL-75582]
  - net: sfp: change quirks for Alcatel Lucent G-010S-P (Izabela Bakollari) [RHEL-75582]
  - net: phylink: allow half-duplex modes with RATE_MATCH_PAUSE (Izabela Bakollari) [RHEL-75582]
  - net: phy: intel-xway: add support for PHY LEDs (Izabela Bakollari) [RHEL-75582]
  - net: phy: aquantia: correctly describe LED polarity override (Izabela Bakollari) [RHEL-75582]
  - net: phy: support 'active-high' property for PHY LEDs (Izabela Bakollari) [RHEL-75582]
  - net: phy: microchip_t1s: configure collision detection based on PLCA mode (Izabela Bakollari) [RHEL-75582]
  - net: phy: microchip_t1s: add support for Microchip's LAN867X Rev.C2 (Izabela Bakollari) [RHEL-75582]
  - net: phy: microchip_t1s: add support for Microchip's LAN867X Rev.C1 (Izabela Bakollari) [RHEL-75582]
  - net: phy: microchip_t1s: move LAN867X reset handling to a new function (Izabela Bakollari) [RHEL-75582]
  - net: phy: microchip_t1s: add support for Microchip's LAN865X Rev.B1 (Izabela Bakollari) [RHEL-75582]
  - net: phy: microchip_t1s: update new initial settings for LAN865X Rev.B0 (Izabela Bakollari) [RHEL-75582]
  - net: phy: microchip_t1s: restructure cfg read/write functions arguments (Izabela Bakollari) [RHEL-75582]
  - net: phy: c45-tja11xx: add support for outputting RMII reference clock (Izabela Bakollari) [RHEL-75582]
  - net: phy: aquantia: poll status register (Izabela Bakollari) [RHEL-75582]
  - net: phy: Validate PHY LED OPs presence before registering (Izabela Bakollari) [RHEL-75582]
  - net: phy: smsc: use devm_clk_get_optional_enabled_with_rate() (Izabela Bakollari) [RHEL-75582]
  - net: phy: marvell-88q2xxx: Enable auto negotiation for mv88q2110 (Izabela Bakollari) [RHEL-75582]
  - net: phy: marvell-88q2xxx: Make register writer function generic (Izabela Bakollari) [RHEL-75582]
  - net: phy: marvell-88q2xxx: Align soft reset for mv88q2110 and mv88q2220 (Izabela Bakollari) [RHEL-75582]
  - net: phy: aquantia: allow forcing order of MDI pairs (Izabela Bakollari) [RHEL-75582]
  - net: phy: Add support for PHY timing-role configuration via device tree (Izabela Bakollari) [RHEL-75582]
  - net: phy: realtek: switch from paged to MMD ops in rtl822x functions (Izabela Bakollari) [RHEL-75582]
  - net: phy: realtek: improve mmd register access for internal PHY's (Izabela Bakollari) [RHEL-75582]
  - r8169: add PHY c45 ops for MDIO_MMD_VENDOR2 registers (Izabela Bakollari) [RHEL-75582]
  - net: phy: move realtek PHY driver to its own subdirectory (Izabela Bakollari) [RHEL-75582]
  - net: phy: realtek: always clear NBase-T lpa (Izabela Bakollari) [RHEL-75582]
  - net: phy: realtek: clear master_slave_state if link is down (Izabela Bakollari) [RHEL-75582]
  - net: phy: realtek: clear 1000Base-T lpa if link is down (Izabela Bakollari) [RHEL-75582]
  - net: phy: realtek: add RTL8125D-internal PHY (Izabela Bakollari) [RHEL-75582]
  - net: phy: realtek: merge the drivers for internal NBase-T PHY's (Izabela Bakollari) [RHEL-75582]
  - net: phy: realtek: add support for reading MDIO_MMD_VEND2 regs on RTL8125/RTL8126 (Izabela Bakollari) [RHEL-75582]
  - net: phy: realtek: clear 1000Base-T link partner advertisement (Izabela Bakollari) [RHEL-75582]
  - net: phy: realtek: change order of calls in C22 read_status() (Izabela Bakollari) [RHEL-75582]
  - net: phy: realtek: read duplex and gbit master from PHYSR register (Izabela Bakollari) [RHEL-75582]
  - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104054]
  - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104054]
  - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104054]
  - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104054]
  - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104054]
  - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104054]
  - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104054]
  - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104054]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-681.el9]
changelog:
  - redhat/dracut-virt.conf: remove erroneous spaces in omit_dracutmodules (Li Tian)
  - smb: client: prevent races in ->query_interfaces() (Paulo Alcantara) [RHEL-147201]
  - smb: client: add proper locking around ses->iface_last_update (Paulo Alcantara) [RHEL-147201]
  - smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-147201]
  - cifs: Fix locking usage for tcon fields (Paulo Alcantara) [RHEL-147201]
  - cifs: Corrections to lock ordering notes (Paulo Alcantara) [RHEL-147201]
  - smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-147201]
  - smb/client: fix memory leak in SendReceive() (Paulo Alcantara) [RHEL-147201]
  - smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-147201]
  - fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-138741]
  - tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-138741]
  - gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-138741]
  - netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-138741]
  - fou: fix initialization of grc (Xin Long) [RHEL-138741]
  - fou: Fix null-ptr-deref in GRO. (Xin Long) [RHEL-138741]
  - fou: remove warn in gue_gro_receive on unsupported protocol (Xin Long) [RHEL-138741]
  - fou: Remove XRFM from NET_FOU Kconfig (Xin Long) [RHEL-138741]
  - fou: remove sparse errors (Xin Long) [RHEL-138741]
  - redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-138741]
  - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140835]
  - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140835]
  - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140835]
  - locking/lockref: Use try_cmpxchg64 in CMPXCHG_LOOP macro (Waiman Long) [RHEL-140835]


author: Tao Liu <ltao@redhat.com> - 2.0.29-2
changelog:
  - Re-introduce vmcore creation notification to kdump
  - Revert "Introduce vmcore creation notification to kdump"
  - Add kdump dracut config
  - kdump-lib-initramfs: Improve mount point retrieval logic


author: Tao Liu <ltao@redhat.com> - 2.0.29-3
changelog:
  - fadump: fix passing additional parameters for capture kernel
  - fadump: pass additional parameters for capture kernel


author: Tao Liu <ltao@redhat.com> - 2.0.29-6
changelog:
  - 99-kdump.conf: Omit rdma module
  - Fallback to get NIC driver by /sys/class/net/NIC/device/driver/module
  - Note user-specified crashkernel value will be overwritten by default value


author: Tao Liu <ltao@redhat.com> - 2.0.29-7
changelog:
  - 99-kdump.conf: Omit clevis related dracut modules
  - kdump-lib.sh: rounded up the total_mem to 128M in get_system_size
  - kdump-lib.sh: Adjust default crashkernel reservation for x86_64 and s390x
  - doc/kdump.conf: correctly align the options


author: Tao Liu <ltao@redhat.com> - 2.0.29-8
changelog:
  - kdumpctl: check and generate /etc/vconsole.conf
  - kdump-lib.sh: Reserve crashkernel by default for systems with 1G-2G memory


author: Tao Liu <ltao@redhat.com> - 2.0.29-12
changelog:
  - Allow "sudo kdumpctl" for LUKS dump target
  - Restore SELinux label of crypttab file
  - Allow kdump.service to access LUKS volume keys
  - Wait for LUKS configfs API to be ready
  - Change LUKS volume key prefix to kdump-cryptsetup:vk-
  - Remove unused LUKS volume keys from keyring
  - Limit LUKS support to x86_64
  - Add kdumpctl setup-crypttab subcommand
  - Return LUKS devices in the form of UUIDs directly
  - Fix SC2181 issues in kdump-udev-throttler
  - LUKS: make /usr writable
  - Address CPU/memory hot plugging for kdump LUKS support
  - shfmt kdump-udev-throttler
  - Use cryptsetup --link-vk-to-keyring to save volume keys
  - Support dumping to a LUKS-encrypted target
  - Add a helper function to get uuid by MAJ:MIN


author: Pingfan Liu <piliu@redhat.com> - 2.0.29-14
changelog:
  - powerpc: Set nr_cpus=16 for kdump kernel
  - powerpc: consider CPU count while calculating crashkernel value
  - Use all available CPUs to collect dump


author: Lichen Liu <lichliu@redhat.com> - 2.0.29-15
changelog:
  - sysconfig: use initramfs_options to reduce memory usage
  - kdump-lib-initramfs: rewrite kdump_get_conf_val
  - kdump-lib-initramfs: Fix performance regression in kdump_get_conf_val


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
    Resolves: rhbz#2151513
  - Remove invalid password expiry warning
    Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
    Resolves: rhbz#2063838
  - New upstream version (1.20.1)
    Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
    Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Julien Rische <jrische@redhat.com> - 1.21.1-9
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88704
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88048
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-82647


author: Steve Dickson <steved@redhat.com> 0.10-0
changelog:
  - Initial package
  - Upstream contributions by:
      - Chuck Lever <chuck.lever@oracle.com>
      - Hannes Reinecke <hare@suse.de>
      - Jeff Layton <jlayton@kernel.org>
      - Benjamin Coddington <bcodding@redhat.com>
      - David Härdeman <david@hardeman.nu>
      - Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
      - Moritz "WanzenBug" Wanzenböck <moritz.wanzenboeck@linbit.com>


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-5
changelog:
  - resolves: RHEL-101761 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-4.el9)


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-1
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114548 - Update to version 4.23.4
  - resolves: RHEL-132995 - Fix Time Machine backup
  - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-1
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-143401 - Fix winbind group resolution
  - resolves: RHEL-141027 - Fix winbind crash


author: Honza Horak <hhorak@redhat.com> - 590-1
changelog:
  - Update to the version 590
  - Also solves the "message overlay" in the terminal
    Resolves: #2062188


author: Marek Polacek <polacek@redhat.com> 11.5.0-2
changelog:
  - fix TARGET_CPU_DEFAULT (PR target/105157, RHEL-50037)
  - libstdc++: Workaround kernel-headers on s390x-linux (RHEL-50054)
  - fix wrong code with memcpy from _Complex (PR tree-optimization/116034)


author: Florian Weimer <fweimer@redhat.com> - 11.5.0-10
changelog:
  - Exception handling performance improvements (RHEL-105072)
  - libgcc: Use _dl_find_object to find DWARF data in unwinder
  - libgcc: Use lock-free data structures for run-time unwinder registration


author: David Malcolm <dmalcolm@redhat.com> - 11.5.0-14
changelog:
  - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
    branches and calls to gcov output, but not conditions (RHEL-105416).


author: Marek Polacek <polacek@redhat.com> 11.4.1-2
changelog:
  - update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release
    - PRs bootstrap/90543, c++/53932, c++/69410, c++/92752, c++/98056,
  	c++/98821, c++/100295, c++/100474, c++/101118, c++/101869,
  	c++/102780, c++/103871, c++/104527, c++/105406, c++/105996,
  	c++/106188, c++/106675, c++/106713, c++/106740, c++/107065,
  	c++/107163, c++/107179, c++/107558, c++/107579, c++/107864,
  	c++/108138, c++/108180, c++/108365, c++/108468, c++/108474,
  	c++/108607, c++/108975, c++/108998, c++/109096, c++/109164, c/107127,
  	c/107465, c/109151, d/107592, d/108050, d/108877, d/109108,
  	debug/106719, debug/108573, debug/108716, debug/108967, driver/106624,
  	fortran/85877, fortran/95107, fortran/96024, fortran/96025,
  	fortran/99036, fortran/103259, fortran/104332, fortran/106209,
  	fortran/106945, fortran/107576, fortran/107872, fortran/108131,
  	fortran/108349, fortran/108420, fortran/108421, fortran/108451,
  	fortran/108453, fortran/108501, fortran/108502, fortran/108527,
  	fortran/108529, fortran/108609, fortran/108937, fortran/109186,
  	fortran/109511, fortran/109846, ipa/105685, ipa/106124, ipa/107944,
  	libquadmath/87204, libquadmath/94756, libstdc++/91456,
  	libstdc++/103934, libstdc++/104866, libstdc++/104875,
  	libstdc++/105844, libstdc++/106183, libstdc++/107801,
  	libstdc++/107814, libstdc++/108030, libstdc++/108118,
  	libstdc++/108265, libstdc++/108636, libstdc++/108856,
  	libstdc++/108952, libstdc++/109064, libstdc++/109261,
  	libstdc++/109949, lto/109263, middle-end/104450, middle-end/104464,
  	middle-end/106190, middle-end/107317, middle-end/108237,
  	middle-end/108264, middle-end/108435, middle-end/108459,
  	middle-end/108546, middle-end/108625, middle-end/108685,
  	middle-end/108854, other/108560, other/109306,
  	rtl-optimization/106751, rtl-optimization/107482,
  	rtl-optimization/108193, rtl-optimization/108596,
  	rtl-optimization/109585, target/70243, target/90458, target/96373,
  	target/98776, target/100758, target/104871, target/104921,
  	target/105554, target/105599, target/106736, target/106875,
  	target/107568, target/107714, target/107863, target/108272,
  	target/108348, target/108589, target/108699, target/108807,
  	target/108812, target/108881, target/109067, target/109140,
  	target/109276, testsuite/47334, testsuite/103823, testsuite/108151,
  	testsuite/108973, testsuite/108985, tree-optimization/105484,
  	tree-optimization/106809, tree-optimization/107107,
  	tree-optimization/107212, tree-optimization/107254,
  	tree-optimization/107323, tree-optimization/107451,
  	tree-optimization/107554, tree-optimization/107898,
  	tree-optimization/107997, tree-optimization/108068,
  	tree-optimization/108076, tree-optimization/108095,
  	tree-optimization/108199, tree-optimization/108498,
  	tree-optimization/108688, tree-optimization/108692,
  	tree-optimization/108821, tree-optimization/108950,
  	tree-optimization/109176, tree-optimization/109410,
  	tree-optimization/109473, tree-optimization/109491,
  	tree-optimization/109502, tree-optimization/109573,
  	tree-optimization/109724, tree-optimization/109778
    - PRs fortran/100607, libstdc++/109822, target/109954,
  	tree-optimization/109505


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Marek Polacek <polacek@redhat.com> 11.5.0-1
changelog:
  - update from releases/gcc-11 branch (RHEL-35635)
    - GCC 11.5 release
    - PRs ada/113893, ada/113979, analyzer/104042, c/113262, c/114007, c/114493,
  	c++/89224, c++/92145, c++/92407, c++/97990, c++/99710, c++/100667,
  	c++/100772, c++/101765, c++/103185, c++/104051, c++/111485,
  	c++/111529, c++/113598, c++/113674, c++/114537, c++/114561,
  	c++/114562, c++/114572, c++/114634, c++/114691, d/113125, d/113758,
  	d/114171, debug/111080, debug/112718, driver/115440, fortran/50410,
  	fortran/103715, fortran/104908, fortran/107426, fortran/114474,
  	fortran/114825, gcov-profile/114115, libfortran/110651,
  	libgomp/113192, libquadmath/114533, libstdc++/104259,
  	libstdc++/104606, libstdc++/105417, libstdc++/110054,
  	libstdc++/113250, libstdc++/114147, libstdc++/114401,
  	libstdc++/114750, libstdc++/114803, libstdc++/115269,
  	libstdc++/115454, libstdc++/115575, middle-end/90348,
  	middle-end/95351, middle-end/107385, middle-end/108789,
  	middle-end/110027, middle-end/110115, middle-end/110176,
  	middle-end/111422, middle-end/111632, middle-end/112732,
  	middle-end/113907, middle-end/113921, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/115527,
  	middle-end/115836, objc/101666, objc/101718, preprocessor/105608,
  	rtl-optimization/100303, rtl-optimization/108086,
  	rtl-optimization/110079, rtl-optimization/114768,
  	rtl-optimization/114902, rtl-optimization/115092, sanitizer/97696,
  	sanitizer/111736, sanitizer/114956, sanitizer/115172, target/88309,
  	target/101737, target/101865, target/105522, target/108120,
  	target/108743, target/110411, target/111610, target/111677,
  	target/112397, target/113122, target/113281, target/114049,
  	target/114098, target/114130, target/114184, target/114310,
  	target/114837, target/114846, target/115253, target/115297,
  	target/115360, target/115457, target/115475, target/115611,
  	target/115691, testsuite/113175, testsuite/114034, testsuite/114036,
  	tree-optimization/110386, tree-optimization/110422,
  	tree-optimization/111039, tree-optimization/111070,
  	tree-optimization/111331, tree-optimization/111407,
  	tree-optimization/111445, tree-optimization/111736,
  	tree-optimization/112495, tree-optimization/112505,
  	tree-optimization/112793, tree-optimization/113372,
  	tree-optimization/113552, tree-optimization/113603,
  	tree-optimization/114027, tree-optimization/114115,
  	tree-optimization/114566, tree-optimization/114876,
  	tree-optimization/115192, tree-optimization/115337,
  	tree-optimization/115843
  - fix FLUSH IOSTAT value (PR libfortran/101255, RHEL-32536)
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960)


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Jaroslav Rohel <jrohel@redhat.com> - 0.69.0-7
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-12123)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279, RHEL-6304)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-12124)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-9
changelog:
  - Grow memory if applying a query after increasing a number of available
    packages (RHEL-27657)
  - Fix a memory leak in get_best_solution() (RHEL-26226)
  - Fix destructing libdnf::TransactionItem from a base class (RHEL-26240)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-11
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-1454)


author: Evan Goode <egoode@redhat.com> - 0.69.0-16
changelog:
  - Introduce $releasever_major, $releasever_minor variables, shell-style
    variable substitution (RHEL-95006)


author: Pino Toscano <ptoscano@redhat.com> 1.29.36-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ENT-5581: Update messaging around the "container mode" (mhorky@redhat.com)
  - Remove 'dbus' marker for pytest (mhorky@redhat.com)
  - Rewrite D-Bus tests to be testable without pytest-forked (mhorky@redhat.com)
  - Drop further ethtool dependency mentions (mhorky@redhat.com)
  - tests: fix test_file_monitor without pyinotify (ptoscano@redhat.com)
  - tests: switch from imp to importlib (ptoscano@redhat.com)
  - Fix the order of user env var checking for translations.
    (tkuratom@redhat.com)
  - 2215974: Collect network facts using 'ip' (mhorky@redhat.com)
  - ENT-5582: Remove container detection envvar overwrite (mhorky@redhat.com)
  - ENT-5603: Explicitly check for provided entitlement certificates
    (mhorky@redhat.com)
  - fix test case (chambrid@redhat.com)
  - Collect GCP Project information as cloud facts (chambrid@redhat.com)
  - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com)
  - ENT-5580: Disable the proper container detection (mhorky@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - 2093291: Make reading of cache file more reliable (jhnidek@redhat.com)
  - 2093291: Make code of DNF plugins testable (jhnidek@redhat.com)
  - spec: change subscription-manager dnf dep (ptoscano@redhat.com)
  - spec: update libdnf-plugin-subscription-manager deps (ptoscano@redhat.com)
  - tests: repair attach cases in SCA mode (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.37-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - 2225446: Hotfix of D-Bus policy (jhnidek@redhat.com)
  - TESTING: Update testing requirements (mhorky@redhat.com)
  - Use Fedora registry to pull container images (mhorky@redhat.com)
  - 2232316: dbus: check "force" again from the registration option
    (ptoscano@redhat.com)
  - dbus: run EntCertActionInvoker on PoolAttach (ptoscano@redhat.com)
  - ENT-5624: Properly translate error strings (mhorky@redhat.com)
  - Mock IOError for Insights fact collection tests (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.38-1
changelog:
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ENT-5603: Fix a typo in a comment (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.39-1
changelog:
  - tito: drop bz requirement (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)
  - RHEL-7206: Small change of message printed by dnf plugin (jhnidek@redhat.com)
  - CCT-118: Fix flake8 error E721 (mhorky@redhat.com)
  - Fix type hint in rhsm (mhorky@redhat.com)
  - Simplify autoregistration test setup (mhorky@redhat.com)
  - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com)
  - Fixed inappropriate logical expression (ataf@openrefactory.com)
  - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com)
  - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com)
  - RPM: Avoid needless runtime requirement on python3-setuptools
    (miro@hroncok.cz)
  - cli: normalize hostname in error message (ptoscano@redhat.com)
  - connection: normalize hostname in ConnectionOSErrorException
    (ptoscano@redhat.com)
  - Improved printing of addresses and URLs (jhnidek@redhat.com)
  - Use username and password from --proxy=URL (jhnidek@redhat.com)
  - Use parse_url() from utils.py for parsing URL, when --proxy is used.
    (jhnidek@redhat.com)
  - 2225403: Parse URL properly (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.40-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
    (mariocanfly@hotmail.com)
  - spec: Add missing GLib dependency when building without DNF
    (debarshir@gnome.org)
  - Remove deprecated `locale.*()` functions (mhorky@redhat.com)
  - Remove version constraint of pytest (mhorky@redhat.com)
  - RHEL-15110: RegisterServer is stopped, when not needed (jhnidek@redhat.com)
  - RHEL-15110: Fix issue with registration using gsd-subman (jhnidek@redhat.com)
  - Fix an error in debug logging of cloud-what (mhorky@redhat.com)
  - ci: bump actions/upload-artifact from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Improve debug logging to make it faster to understand (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.41-1
changelog:
  - feat: update man page with deprecation notices (jajerome@redhat.com)
  - feat: Disable anonymous cloud registration temporarily (mhorky@redhat.com)
  - feat: Deprecate 'syspurpose addons' (mhorky@redhat.com)
  - fix: make SyspurposeComplianceStatusCache.get_overall_status() always usable
    (ptoscano@redhat.com)
  - fix: Change order of checks (jhnidek@redhat.com)
  - fix: Cache shouldn't try to get data from server without UUID
    (jhnidek@redhat.com)
  - feat: Deprecate import command (zpetrace@redhat.com)
  - fix: 1.29 modify section about remove command in man page
    (jhnidek@redhat.com)
  - feat: 1.29 Deprecate redeem sub-command (jhnidek@redhat.com)
  - fix: Reformated man page of subscription-manager (jhnidek@redhat.com)
  - fix: [1.29] Remove command should not be primary command (jhnidek@redhat.com)
  - feat: deprecate autosubscribe/auto-attach register options
    (jajerome@redhat.com)
  - feat: deprecate attach/auto-attach modules (jajerome@redhat.com)
  - docs: deprecate attach/auto-attach in man page (jajerome@redhat.com)
  - fix: Hide subscription management "errors" in container mode
    (mhorky@redhat.com)
  - feat: 1.29 Deprecate remove sub-command (jhnidek@redhat.com)
  - fix: 1.29 Do not try to test this branch for Fedora latest
    (jhnidek@redhat.com)
  - fix: 1.29 Do not try to test this branch for Fedora rawhide
    (jhnidek@redhat.com)
  - fix(test): Properly stop method mock (mhorky@redhat.com)
  - feat: Azure: added extended location and type of location fact
    (jhnidek@redhat.com)
  - fix: Update version of Azure metadata (jhnidek@redhat.com)
  - feat: Added Azure location to facts (jhnidek@redhat.com)
  - feat: Added zone GCP fact (jhnidek@redhat.com)
  - feat: Added more AWS cloud facts (jhnidek@redhat.com)
  - fix: Change type hint according returned value. (jhnidek@redhat.com)
  - feat: Add warning message about release version to dnf plugin
    (jhnidek@redhat.com)
  - Bump black from 23.3.0 to 24.3.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Format code with black==24.3.0 (ptoscano@redhat.com)
  - Fix memory leaks in test-productdb.c (jhnidek@redhat.com)
  - Fix memory leaks in productdb.c (jhnidek@redhat.com)
  - fix: Function prototype without declaration is deprecated
    (jhnidek@redhat.com)
  - Removed unused includes of .h files (jhnidek@redhat.com)
  - libdnf: switch from g_error_free() to g_clear_error() in tests
    (ptoscano@redhat.com)
  - libdnf: do not build test code in plugin (ptoscano@redhat.com)
  - Change handling of deprecated `datetime.datetime.utcnow()`
    (mhorky@redhat.com)
  - CCT-66: Update identity reporting in DNF plugin during autoregistration
    (mhorky@redhat.com)
  - Remove automatic registration delay for rhsmcertd (mhorky@redhat.com)
  - Remove API endpoint for automatic cloud registration v1 (mhorky@redhat.com)
  - CCT-67: Use automatic registration v2 (mhorky@redhat.com)
  - IdentityUpdateAction: Improve logging for updating identity certificates
    (mhorky@redhat.com)
  - Identity: Add method to extract current owner (mhorky@redhat.com)
  - rhsmcertd: Define exit codes (mhorky@redhat.com)
  - rhsmcertd: Use module-level logger (mhorky@redhat.com)
  - Add AnonymousCertificateManager (mhorky@redhat.com)
  - Add CloudTokenCache for Candlepin JWT (mhorky@redhat.com)
  - Implement API endpoints for Automatic registration v2 (mhorky@redhat.com)
  - Update documentation for one API call in connection.py (mhorky@redhat.com)
  - Fix type hint of RegisterService.register() (mhorky@redhat.com)
  - rhsmcertd: Drop D-Bus loop code (mhorky@redhat.com)
  - rhsmcertd: Add type hints (mhorky@redhat.com)
  - rhsmcertd: Remove forgotten old comment (mhorky@redhat.com)
  - Stop logging full lscpu output (mhorky@redhat.com)
  - Prevent double-logging of syspurpose cache log statement (mhorky@redhat.com)
  - Update the log message containing response time statistics
    (mhorky@redhat.com)
  - CCT-266: Update TLS flags (mhorky@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.43-1
changelog:
  - [1.29] feat/cct-868: Subset of list command options marked as deprecated *
    Options --available, --all, --ondate, --servicelevel --no-overlap --match-
    install, --pool-only, --afterdate were marked as deprecated in ListCommand
    definition of their help string. (mgrunwal@redhat.com)
  - fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
  - feat: Better automatic registration logging (mhorky@redhat.com)
  - fix: perform autoreg waiting when performing standard autoreg
    (ptoscano@redhat.com)
  - chore: move autoreg waiting code in own function (ptoscano@redhat.com)
  - docs: update proxy details in man page (jvlcek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.44-1
changelog:
  - Revert "feat: Disable anonymous cloud registration temporarily"
    (ptoscano@redhat.com)
  - Revert "feat: forcefully switch automatic cloud registration to v1"
    (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.45-1
changelog:
  - fix: Do not upload profile from DNF, when it is disabled in conf
    (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - feat: Enable register with environment names and environment types
    (jhnidek@redhat.com)
  - feat: support registering specifying environments with activation keys
    (ryanverdile@gmail.com)
  - chore: Remove auto-assign CI job (mhorky@redhat.com)
  - feat: [1.29] Added basic configuration for Packit (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.46-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Italian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (mhorky@redhat.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Update translation files (noreply@weblate.org)
  - fix: Handle improperly closed connections (mhorky@redhat.com)
  - ci: use the right distro for coverage reporting (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - tests: fix mocking of get_terminal_width() in TestColumnize
    (ptoscano@redhat.com)
  - feat: print compliance errors & syspurpose status only in entitlement mode
    (ptoscano@redhat.com)
  - feat: print "registered" as status when using SCA (ptoscano@redhat.com)
  - feat: print "not registered" on status when not registered
    (ptoscano@redhat.com)
  - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
  - refactor: move determination of content access mode in own method
    (ptoscano@redhat.com)
  - tests: move StubIdentity to stubs (ptoscano@redhat.com)
  - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
  - chore: move banner printing to its own function (ptoscano@redhat.com)
  - fix: Append two additional facts to the graylist (pkoprda@redhat.com)
  - refactor: Use class constant instead of variable graylist
    (pkoprda@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.47-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Spanish) (jsefler@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - fix: [1.29] Wait random time before reaching IMDS server (jhnidek@redhat.com)
  - feat: [1.29] Call random.seed() at begining of auto-register
    (jhnidek@redhat.com)
  - feat: [1.29] Better control over auto-reg waiting game (jhnidek@redhat.com)
  - fix: [1.29] Enable content during auto-registration v2 (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.48-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ci: bump actions/upload-artifact from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - feat: [1.29] Added dnf4 warning about skewed clock (jhnidek@redhat.com)
  - fix: [1.29] Require findutils in .spec file (jhnidek@redhat.com)
  - ci: bump actions/checkout from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.49-1
changelog:
  - RHEL-126157: Update GCP to Google Cloud in log messages (crag@redhat.com)
  - fix: Update user-facing GCP refrences to Google Cloud (crag@redhat.com)
  - feat: check if --set arg is empty when the environments module is called
    (manuelcanorojo@gmail.com)
  - feat: Added more debug prints to cloud-what (jhnidek@redhat.com)
  - fix(test): Fix unit test of aws (jhnidek@redhat.com)
  - fix: Fix getting AWS IMDSv2 signature (jhnidek@redhat.com)
  - chore: Make new black happy again (jhnidek@redhat.com)
  - chore: Increased log level of messages (jhnidek@redhat.com)
  - fix: Use IMDSv2 for signature first (jhnidek@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Added translation using Weblate (Finnish) (noreply-addon-
    languages@weblate.org)
  - fix: TypeError in _get_tls_handshake_info type hinting (macano@redhat.com)
  - feat: added signature type log in TLS handshake (macano@redhat.com)
  - feat: added internal method to get tls handshake info
    (manuelcanorojo@gmail.com)
  - ci: bump actions/upload-artifact from 5 to 6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Fix profile upload because of missing self.cp (suttner@atix.de)
  - Fix upload profile if rhsmcertd is not running at all (suttner@atix.de)
  - ci: bump actions/checkout from 5 to 6
    (49699333+dependabot[bot]@users.noreply.github.com)


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Richard Hughes <richard@hughsie.com> 0.3.2-1
changelog:
  - New upstream version
  - Do not use deprecated libusb API
  - Use a 1ms timeout in the Windows event thread


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4.1
changelog:
  - Resolves: RHEL-59876 - EL9/CentOS Stream 9 lost offline smart card authentication
  - Resolves: RHEL-50912 - possible regression of rhbz#2196521


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.6-1
changelog:
  - Resolves: RHEL-70189 - Rebase SSSD for RHEL 9.6
  - Resolves: RHEL-67670 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-9]
  - Resolves: RHEL-68369 - sssd backend process segfaults when krb5.conf is invalid
  - Resolves: RHEL-66266 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-1
changelog:
  - Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
  - Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
  - Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
  - Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
  - Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-3
changelog:
  - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  - Resolves: RHEL-103434 - cache_credentials = true not working


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-4
changelog:
  - Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Tomas Halman <thalman@redhat.com> - 2.9.8-1
changelog:
  - Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
  - Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
  - Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
  - Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
  - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Sahana Prasad <sahana@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream version 1.2.1
  - Remove patch fix MSG_MORE uasge as it is added upstream
  - Remove cppcheck dependency for rhel bz#1931518
  - Add a patch to fix fuzz tests


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5367
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2405
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15112
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15298


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15298
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2405


author: Wen Liang <wenliang@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved from the main package
    to the utils sub package causing a file conflict on multilib systems between the
    old 32 bit main package and the new 64 bit utils sub package.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Hangbin Liu <haliu@redhat.com> - 1.8-1
changelog:
  - 1.8 release (rhbz#1958933)
  - libndp,ndptool: use poll() instead of select()
  - libndp: avoid static buffer for debug string in ndp_sock_recv()
  - ndptool: avoid static buffer for string in ndptool
  - libndp: use thread local variables for static return arguments
  - ndptool: don't use static variable for local context in msgrcv_handler_func()
  - ndptool: fix printing dnssl lifetime in ndptool
  - ndptool: fix potential memory leak caused by strdup
  - ndptool: add -D dest support
  - libndp: fix nd_msg typo when setting target address
  - libndp: close sockfd after using to avoid handle leak
  - ndptool: fix target parameter typo
  - ndptool: add -T target support


author: Phil Sutter <psutter@redhat.com> - 1.0.9-1
changelog:
  - expect/conntrack: Avoid spurious covscan overrun warning
  - conntrack: fix build with kernel 5.15 and musl
  - New version 1.0.9


author: Steve Dickson <steved@redhat.com> 2.5.4-28
changelog:
  -  Makefile.am: allow mount.nfs to be writeable by owner (RHEL-68701)
  -  mount.nfs: retry NFSv3 mount after NFSv4 failure in auto negotiation (RHEL-68574)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-30
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-72823)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-64340)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-31
changelog:
  - nfsdcld: prevent from accessing /var/lib/nfs/nfsdcld in read-only file system during boot (RHEL-78177)
  - Replace functional gating tests with the ones from RHEL10 (RHEL-78110)
  - Add explicit version requirement for libnfsidmap (RHEL-78107)
  - Add --disable-sbin-override for when /sbin is a symlink (RHEL-69771)
  - Move remaining binaries from /sbin to /usr/sbin (RHEL-69771)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Steve Dickson <steved@redhat.com> 2.5.4-35
changelog:
  - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
  - nfsd: allow more than 64 backlogged connections (RHEL-87752)


author: Steve Dickson <steved@redhat.com> 2.5.4-37
changelog:
  - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
  - gssd: do not use krb5_cc_initialize (RHEL-85412)


author: Phil Sutter <psutter@redhat.com> [1.2.6-1.el9]
changelog:
  - set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
  - Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]


author: Phil Sutter <psutter@redhat.com> [1.2.6-3.el9]
changelog:
  - tests: Fix objref test case (Phil Sutter) [RHEL-28515]
  - expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
  - obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
  - obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
  - obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - obj: Return value on setters (Phil Sutter) [RHEL-28515]
  - object: getters take const struct (Phil Sutter) [RHEL-28515]
  - utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
  - obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
  - obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
  - set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
  - obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
  - flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
  - chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
  - expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
  - expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
  - expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
  - expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
  - obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
  - set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
  - set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
  - expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.37-13
changelog:
  - CVE-2025-64720: buffer overflow (RHEL-131594)
  - CVE-2025-65018: heap buffer overflow (RHEL-131603)
  - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294)


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Return "calculated" checksum if requested w/caching
  - Fixed memory leaks and segfault


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.5-1
changelog:
  - Update to 1.14.5
  - Detailed error message when using non-existing TMPDIR (RhBug:2019993)
  - Make error messages about repodata and rpm mismatch more user friendly


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-8
changelog:
  - Correct a License tag to LGPLv2+ (RHEL-16103)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-3
changelog:
  - Enable pkcs11 support
  - Fix broken libsofthsm path on i686
  - Add missing bugzilla references from the rebase commit
  - Related: rhbz#2026449
  - Resolves: rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Pavol Žáčik <pzacik@redhat.com> - 0.10.4-16
changelog:
  - Fix CVE-2025-5987
    Resolves: RHEL-130051
  - Workaround sshd failure rate limiting in tests
    Resolves: RHEL-135506


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Jiri Pirko <jiri@resnulli.us> - 1.31-1
changelog:
  1.31 release
  utils/bond2team: remove TYPE in ifcfg file
  utils/bond2team: keep delivering config to file if stdout not supplied
  teamd/lacp: silence ignore none LACP frames
  teamd: fix ctx->hwaddr value assignment
  Send LACP PDU right after the Actor state has been changed
  Skip setting the same hwaddr to a lag port if not needed
  Make all netlink socket RCVBUF sizes configurable
  Don't return an error when timerfd socket return 0
  Fix ifinfo_link_with_port race condition with newlink
  teamd: fix possible race in master ifname callback


author: Hangbin Liu <haliu@redhat.com> - 1.31-8
changelog:
  - Build util team2bond in teamd rpm [1986788]
  - Add some cautions to util team2bond [1986788]
  - Add team2bond man doc [1986788]


author: Long Xin <lxin@redhat.com> - 1.31-16
changelog:
  - fix the Requires package name for teamd-devel
  - teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Tomas Halman <thalman@redhat.com> - 0.63-5
changelog:
  - Enable audit library in the build
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: David King <dking@redhat.com> - 2.9.13-10
changelog:
  - Fix CVE-2025-6021 (RHEL-96507)
  - Fix CVE-2025-49794 (RHEL-96405)
  - Fix CVE-2025-49796 (RHEL-96431)


author: Richard Hughes <richard@hughsie.com> 0.1.14-1
changelog:
  - New upstream release
  - Do not use libuuid
  - Ignore adaptors added with xb_builder_source_add_converter()


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream release
  - Add xb_builder_source_add_simple_adapter()
  - Allow reversing the query results


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release which breaks API and ABI
  - Add the missing TEXT:INTE XPath support
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag
  - Allow specifying the node cache behaviour for the query
  - Avoid recursion when setting flags if possible
  - Avoid using weak pointers when building the silo
  - Do not allocate opcodes individually
  - Do not show a critical warning for invalid XML
  - Do not unconditionally create GTimer objects
  - Do not use the node cache when building indexes
  - Lazy load more arrays to reduce RSS usage


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Do not assume g_content_type_guess() always returns valid results
  - Fix getting translated results in gnome-software
  - Update the header location to reflect the new API


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: RHEL Packaging Agent <jotnar@redhat.com> - 0.3.24-1
changelog:
  - Rebase to 0.3.24
  - Add missing libzstd-devel BuildRequires
  - Add missing files to the %files tests section
  - Resolves: RHEL-116442


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Vit Mojzis <vmojzis@redhat.com> - 1.0.18-3
changelog:
  - Added a patch to fix netinet/sctp.h not to be installed.
  - Added some fixes for kernel feature detection.
  - Updated to 1.0.18. [1568622]


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-1.gitf1dd9eb
changelog:
  - Rebase to 1.1.1
  - Fix program segfaults after entering the quit command (RHEL-5814)
  - Fix setting interface status not survive reboot (RHEL-5824)
  - Fix some other bugs


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-3.gitf1dd9eb
changelog:
  - Rebase to latest upstream code
  - Remove interface configure if the interface deleted (RHEL-13242)
  - Fix strdup is not freed (RHEL-37524)
  - Fix using uninitialized value (RHEL-37548)
  - Fix copy past error (RHEL-37679)
  - Fix resource leak (RHEL-37685)


author: Kamil Dudka <kdudka@redhat.com> - 3.18.0-4
changelog:
  - make `renamecopy` and `copytruncate` override each other (#1934601)
  - unify documentation of copy/copytruncate/renamecopy (#1934629)
  - fix resource leaks reported by Coverity


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: DJ Delorie <dj@redhat.com> - 1:4.3-5
changelog:
  - Allow users to build with or without guile support as desired.
  - Allow derivative downstreams to default to disabling guile support.


author: Patsy Griffin <patsy@redhat.com> - 6.04-4
changelog:
  - Activate previously added patch to improve mktime documentation and
    add 3 related upstream patches including an example.
    Related: RHEL-58342


author: Patsy Griffin <patsy@redhat.com> - 6.04-7
changelog:
  - Break up man-pages-additional-20140218.tar.xz
  - Add rtas.2, swapcontext.2 and cons.saver.8 man pages as a patch.
    Resolves: RHEL-101596


author: Xiao Ni <xni@redhat.com> - 4.2-7
changelog:
  - Update to latest upstream and keep udev rule close to upstream
  - Resolves rhbz#2107147, rhbz#2129087, rhbz#2126428


author: Xiao Ni <xni@redhat.com> - 4.2-8
changelog:
  - Update to latest upstream
  - Resolves rhbz#2127101, rhbz#2139789, rhbz#2149292, rhbz#2151209, rhbz#2148945


author: Xiao Ni <xni@redhat.com> - 4.2-9
changelog:
  - Update to latest upstream and fix mdcheck service bug
  - Resolves rhbz#2159923, rhbz#2150865, rhbz#2124071, rhbz#2203859


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230516-1
changelog:
  - Update Intel CPU microcode to microcode-20230516 release (#2213124):
    - Addition of 06-be-00/0x01 (ADL-N A0) microcode at revision 0x10;
    - Addition of 06-9a-04/0x40 (AZB A0) microcode at revision 0x4;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006e05 up
      to 0x2006f05;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa6 up to 0xaa;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf4 up to 0xf6;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf4 up
      to 0xf8;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000161
      up to 0x1000171;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003303
      up to 0x4003501;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003303 up to 0x5003501;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002503
      up to 0x7002601;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000389
      up to 0xd000390;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000211
      up to 0x1000230;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb8
      up to 0xba;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x32 up
      to 0x33;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x28 up
      to 0x2a;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x42 up
      to 0x44;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c000170 up to
      0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000181
      up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000170 up to
      0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000181
      up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x429 up to 0x42a;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x429 up to 0x42a;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x429 up to 0x42a;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x429
      up to 0x42a;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf4 up
      to 0xf6;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf4 up to 0xf6;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x57 up
      to 0x58;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x112 up
      to 0x113;
    - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x410e up to 0x4112;
    - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x410e up to 0x4112;
    - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x410e up to 0x4112;
    - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode from revision 0x410e
      up to 0x4112.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230808-1
changelog:
  - Update Intel CPU microcode to microcode-20230808 release, addresses
    CVE-2022-40982, CVE-2022-41804, CVE-2023-23908 (#2213124, #2223992, #2230677,
      - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006f05 up
      to 0x2007006;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xaa up to 0xac;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf6 up to 0xf8;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf8 up
      to 0xfa;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000171
      up to 0x1000181;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003501
      up to 0x4003604;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003501 up to 0x5003604;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002601
      up to 0x7002703;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000390
      up to 0xd0003a5;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xba
      up to 0xbc;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2a up
      to 0x2c;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x44 up
      to 0x46;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c0001d1 up to
      0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000461
      up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c0001d1 up to
      0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000461
      up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2c
      up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x42a up to 0x42c;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x42a up to 0x42c;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x42a up to 0x42c;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42a
      up to 0x42c;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf6 up
      to 0xf8;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf6 up to 0xf8;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x58 up
      to 0x59;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x113 up
      to 0x119;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2c up
      to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2c up
      to 0x2e;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4112
      up to 0x4119 (old pf 0xc0);
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x10 up
      to 0x11 (old pf 0x1).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230808-2
changelog:
  - Add support for the new, more correct, variant of dracut's default
    $fw_dir path in dracut_99microcode_ctl-fw_dir_override_module_init.sh.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20231009-1
changelog:
  - Update Intel CPU microcode to microcode-20231009 release, addresses
    CVE-2023-23583:
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xac up to 0xb4;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003a5
      up to 0xd0003b9;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000230
      up to 0x1000268;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xbc
      up to 0xc2;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2c up
      to 0x34;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x46 up
      to 0x4e;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2e
      up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2e up to 0x32;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x42c up to 0x430;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x42c up to 0x430;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x42c up to 0x430;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42c
      up to 0x430;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x4 up
      to 0x5;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x59 up
      to 0x5d;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x119 up
      to 0x11d;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4119
      up to 0x411c;
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x11 up
      to 0x12;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2e up
      to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2e up
      to 0x32.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20240531-1
changelog:
  - Update Intel CPU microcode to microcode-20240531 release, addresses
    CVE-2023-22655, CVE-2023-23583. CVE-2023-28746, CVE-2023-38575,
    CVE-2023-39368, CVE-2023-42667, CVE-2023-43490, CVE-2023-45733,
    CVE-2023-46103, CVE-2023-49141 (RHEL-30861, RHEL-30864, RHEL-30867,
    RHEL-30870, RHEL-30873, RHEL-41094, RHEL-41109):
    - Addition of 06-aa-04/0xe6 (MTL-H/U C0) microcode at revision 0x1c;
    - Addition of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) at
      revision 0x4121;
    - Addition of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) at
      revision 0x4121;
    - Addition of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) at revision 0x4121;
    - Addition of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) at revision 0x4121;
    - Addition of 06-ba-08/0xe0 microcode at revision 0x4121;
    - Addition of 06-cf-01/0x87 (EMR-SP A0) microcode at revision
      0x21000230;
    - Addition of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) at revision 0x21000230;
    - Addition of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) at revision 0x21000230;
    - Addition of 06-cf-02/0x87 (EMR-SP A1) microcode at revision
      0x21000230;
    - Removal of 06-8f-04/0x10 microcode at revision 0x2c000290;
    - Removal of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
      0x2b0004d0;
    - Removal of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000290;
    - Removal of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Removal of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
      revision 0x2c000290;
    - Removal of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Removal of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000290;
    - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xb4 up to 0xb6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf8 up to 0xfa;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf4 up
      to 0xf8;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf4 up
      to 0xf6;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf4 up
      to 0xf6;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xfa up
      to 0xfc;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000181
      up to 0x1000191;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003604
      up to 0x4003605;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003604 up to 0x5003605;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002703
      up to 0x7002802;
    - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
      0xe000014 up to 0xe000015;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x38 up
      to 0x3e;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003b9
      up to 0xd0003d1;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000268
      up to 0x1000290;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3e up
      to 0x42;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x22 up
      to 0x24;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc2
      up to 0xc4;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x34 up
      to 0x36;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x4e up
      to 0x50;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000290 up to 0x2c000390;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004d0
      up to 0x2b0005c0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000290 up to
      0x2c000390;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004d0
      up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000290 up to 0x2c000390;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x17 up
      to 0x19;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x32 up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x32 up to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x32 up to 0x35;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x32
      up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x32 up to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x32 up to 0x35;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x430 up to 0x433;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x430 up to 0x433;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x430 up to 0x433;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x430
      up to 0x433;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x5 up
      to 0x7;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000024
      up to 0x24000026;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf8 up
      to 0xfa;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf8
      up to 0xfa;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf8
      up to 0xfa;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf8
      up to 0xfa;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf8 up to 0xfa;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5d up
      to 0x5e;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x11d up
      to 0x123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x411c up to 0x4121;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x411c up to 0x4121;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x411c up to 0x4121;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x411c
      up to 0x4121;
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x12 up
      to 0x17;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x32 up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x32 up
      to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x32 up to 0x35;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x32 up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x32 up to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x32 up
      to 0x35.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20240910-1
changelog:
  - Update Intel CPU microcode to microcode-20240910 release, addresses
    CVE-2024-23984, CVE-2024-24853, CVE-2024-24968, CVE-2024-24980,
    CVE-2024-25939 (RHEL-58057):
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xb6 up to 0xb8;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xfa up to 0xfc;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf6 up
      to 0xf8;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf4 up
      to 0xf6;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf6 up
      to 0xf8;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xfc up
      to 0x100;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003605 up to 0x5003707;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002802
      up to 0x7002904;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003d1
      up to 0xd0003e7;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000290
      up to 0x10002b0;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc4
      up to 0xc6;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x50 up
      to 0x52;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x19 up
      to 0x1a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x35
      up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x433 up to 0x434;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x433
      up to 0x434;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfa up
      to 0xfc;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfa
      up to 0xfe;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xfa up to 0xfc;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5e up
      to 0x62;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1c
      up to 0x1f;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x123 up
      to 0x129;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4121
      up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4121 up to 0x4122;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x17 up
      to 0x1a (old pf 0x11).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20241112-1
changelog:
  - Update Intel CPU microcode to microcode-20241112 release, addresses
    CVE-2024-21820, CVE-2024-21853, CVE-2024-23918, CVE-2024-23984 (RHEL-67336):
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0005c0
      up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0005c0
      up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0005c0 up to 0x2b000603;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x36 up to 0x37;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x36
      up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x36 up to 0x37;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x434 up to 0x435;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x434 up to 0x435;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x434 up to 0x435;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x434
      up to 0x435;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1f
      up to 0x20;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x129 up
      to 0x12b;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4122 up to 0x4123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4122
      up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4122 up to 0x4123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4122 up to 0x4123;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x36 up
      to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x36 up to 0x37;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x36 up
      to 0x37;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000230
      up to 0x21000283;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000230 up to 0x21000283;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000230 up to 0x21000283;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000230
      up to 0x21000283.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20250211-1
changelog:
  - Update Intel CPU microcode to microcode-20250211 release, addresses
    CVE-2023-34440, CVE-2023-43758, CVE-2024-24582, CVE-2024-28047,
    CVE-2024-28127, CVE-2024-29214, CVE-2024-31068, CVE-2024-31157,
    CVE-2024-37020, CVE-2024-39279, CVE-2024-39355, CVE-2024-36293 (RHEL-79182,
    RHEL-79186, RHEL-79187, RHEL-79242, RHEL-79243, RHEL-79246, RHEL-79251,
    RHEL-79252):
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) at
      revision 0x38;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) at
      revision 0x38;
    - Addition of 06-af-03/0x01 (SRF-SP C0) microcode at revision 0x3000330;
    - Addition of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) at
      revision 0x12c;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) at
      revision 0x38;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) at
      revision 0x38;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf8 up
      to 0xfa;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0x100 up
      to 0x102;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003e7
      up to 0xd0003f5;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002b0
      up to 0x10002c0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000603
      up to 0x2b000620;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000390 up to
      0x2c0003e0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000603
      up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000603 up to 0x2b000620;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x37 up to 0x38;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x37
      up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x37 up to 0x38;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x435 up to 0x436;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x435 up to 0x436;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x435 up to 0x436;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x7 up
      to 0x9;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x435
      up to 0x436;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x62 up
      to 0x63;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12b up
      to 0x12c;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4123 up to 0x4124;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4123 up to 0x4124;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4123
      up to 0x4124;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4123 up to 0x4124;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4123 up to 0x4124;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1a up
      to 0x1c;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x37 up
      to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x37 up to 0x38;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x37 up
      to 0x38;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000283
      up to 0x21000291;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000283 up to 0x21000291;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000283 up to 0x21000291;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000283
      up to 0x21000291.


author: Denys Vlasenko <dvlasenk@redhat.com> - 4:20250512-1
changelog:
  - Add a caveat to provide ability to persistently disable SPR-EE updates
    beyond 0x2b0005c0 on systems where absence of latency spikes
    is more important than lack of the latest CVE mitigations.
  - Update Intel CPU microcode to microcode-20250512 release, addresses
    CVE-2024-28956, CVE-2025-20103, CVE-2025-20054, CVE-2024-43420,
    CVE-2025-20623, CVE-2024-45332, CVE-2025-24495, CVE-2025-20012
    (RHEL-94294, RHEL-91231, RHEL-91224, RHEL-91224, RHEL-91239)
    - Addition of 06-8f-04/0x10 microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-06/0x10 microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-ad-01/0x20 (GNR-AP/SP H0) microcode at revision
      0xa0000d1;
    - Addition of 06-ad-01/0x95 (GNR-AP/SP B0) microcode at revision
      0x10003a2;
    - Addition of 06-b5-00/0x80 (ARL-U A1) microcode at revision 0xa;
    - Addition of 06-bd-01/0x80 (LNL B0) microcode at revision 0x11f;
    - Addition of 06-c5-02/0x82 (ARL-H A1) microcode at revision 0x118;
    - Addition of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode (in
      intel-ucode/06-c5-02) at revision 0x118;
    - Addition of 06-c6-04/0x82 microcode (in intel-ucode/06-c5-02) at
      revision 0x118;
    - Addition of 06-ca-02/0x82 microcode (in intel-ucode/06-c5-02) at
      revision 0x118;
    - Addition of 06-c5-02/0x82 (ARL-H A1) microcode (in
      intel-ucode/06-c6-02) at revision 0x118;
    - Addition of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode at revision
      0x118;
    - Addition of 06-c6-04/0x82 microcode (in intel-ucode/06-c6-02) at
      revision 0x118;
    - Addition of 06-ca-02/0x82 microcode (in intel-ucode/06-c6-02) at
      revision 0x118;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xb8 up to 0xbc;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xfc up to 0x100;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0x102 up
      to 0x104;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003707 up to 0x5003901;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002904
      up to 0x7002b01;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003f5
      up to 0xd000404;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002c0
      up to 0x10002d0;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x24 up
      to 0x26;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc6
      up to 0xca;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x38 up
      to 0x3c;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x52 up
      to 0x56;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000620
      up to 0x2b000639;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c0003e0 up to
      0x2c0003f7;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000620
      up to 0x2b000639;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000620 up to 0x2b000639;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x38 up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x38
      up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x436 up to 0x437;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x436 up to 0x437;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x436 up to 0x437;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x9 up
      to 0xa;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x436
      up to 0x437;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfc up
      to 0x100;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfc
      up to 0x100;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfc
      up to 0x100;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfe
      up to 0x102;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xfc up to 0x100;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x63 up
      to 0x64;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x20
      up to 0x24;
    - Update of 06-af-03/0x01 (SRF-SP C0) microcode from revision 0x3000330
      up to 0x3000341;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12c up
      to 0x12f;
    - Update of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) from
      revision 0x12c up to 0x12f;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4124 up to 0x4128;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4124 up to 0x4128;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4124 up to 0x4128;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4124 up to 0x4128;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4124
      up to 0x4128;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4124 up to 0x4128;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4124 up to 0x4128;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4124 up to 0x4128;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4124 up to 0x4128;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1c up
      to 0x1d;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x38 up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x38 up
      to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x38 up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x38 up
      to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000291
      up to 0x210002a9;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000291 up to 0x210002a9;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000291 up to 0x210002a9;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000291
      up to 0x210002a9.


author: Denys Vlasenko <dvlasenk@redhat.com> - 4:20250812-1
changelog:
  - Update Intel CPU microcode to microcode-20250812 release
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000404
      up to 0xd000410;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002d0
      up to 0x10002e0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000639 up to 0x2b000643;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0003f7 up to 0x2c000401;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c0003f7 up to 0x2c000401;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0003f7 up to 0x2c000401;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c0003f7 up to 0x2c000401;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000639 up to 0x2b000643;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x24
      up to 0x25;
    - Update of 06-ad-01/0x20 (GNR-AP/SP H0) microcode from revision
      0xa0000d1 up to 0xa000100;
    - Update of 06-ad-01/0x95 (GNR-AP/SP B0) microcode from revision
      0x10003a2 up to 0x10003d0;
    - Update of 06-af-03/0x01 (SRF-SP C0) microcode from revision 0x3000341
      up to 0x3000362;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4128 up to 0x4129;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4128 up to 0x4129;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4128 up to 0x4129;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4128 up to 0x4129;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4128
      up to 0x4129;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4128 up to 0x4129;
    - Update of 06-bd-01/0x80 (LNL B0) microcode from revision 0x11f up
      to 0x123;
    - Update of 06-c5-02/0x82 (ARL-H A1) microcode from revision 0x118 up
      to 0x119;
    - Update of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode (in
      intel-ucode/06-c5-02) from revision 0x118 up to 0x119;
    - Update of 06-c6-04/0x82 microcode (in intel-ucode/06-c5-02) from
      revision 0x118 up to 0x119;
    - Update of 06-ca-02/0x82 microcode (in intel-ucode/06-c5-02) from
      revision 0x118 up to 0x119;
    - Update of 06-c5-02/0x82 (ARL-H A1) microcode (in intel-ucode/06-c6-02)
      from revision 0x118 up to 0x119;
    - Update of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode from revision
      0x118 up to 0x119;
    - Update of 06-c6-04/0x82 microcode (in intel-ucode/06-c6-02) from
      revision 0x118 up to 0x119;
    - Update of 06-ca-02/0x82 microcode (in intel-ucode/06-c6-02) from
      revision 0x118 up to 0x119;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x210002a9 up to 0x210002b3;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x210002a9
      up to 0x210002b3.


author: Denys Vlasenko <dvlasenk@redhat.com> - 4:20251111-1
changelog:
  - Fix typo in /usr/share/microcode_ctl/ucode_with_caveats/intel-06-8f-08/config
  - Update Intel CPU microcode to microcode-20251111 release (RHEL-128199)
  - New microcode files (in hex):
    06-ae-01: Granite Rapids-D: revision 1000273
  - Microcode files (/platform_mask shown) with revision updates (in hex):
    06-8f-07/87: Sapphire Rapids: 2b000643 to 2b000650
    06-8f-08/10: Sapphire Rapids with HBM: 2c000401 to 2c000410
    06-8f-08/87: Sapphire Rapids: 2b000643 to 2b000650
    06-97-02/07: Alder Lake: 003a to 003d
    06-97-05/07: Alder Lake: 003a to 003d
    06-9a-03/80: Alder Lake-L: 0437 to 043a
    06-9a-04/80: Alder Lake-L: 0437 to 043a
    06-9a-04/40: Arizona Beach (Atom C11xx): 000a to 000b
    06-ad-01/95: Granite Rapids-X: 10003d0 to 10003f0
    06-ad-01/20: Granite Rapids-X: a000100 to a000124
    06-af-03/01: Crestmont (Sierra Forest): 3000362 to 3000382
    06-b7-01/32: Raptor Lake: 012f to 0132
    06-ba-02/e0: Raptor Lake-P: 4129 to 6133
    06-ba-03/e0: Raptor Lake-P: 4129 to 6133
    06-bd-01/80: Lunar Lake: 0123 to 0125
    06-be-00/19: Gracemont (Alder Lake-N): 001d to 001e
    06-bf-02/07: Raptor Lake-S: 003a to 003d
    06-bf-05/07: Raptor Lake-S: 003a to 003d
    06-c5-02/82: Arrow Lake-H: 0119 to 011a
    06-c6-02/82: Arrow Lake: 0119 to 011a
    06-cf-02/87: Emerald Rapids: 210002b3 to 210002c0
  - Fixes errata RPL070/ADL083/LNL047/ARL054/SPR154/EMR147:
    "REP SCASB, REP CMPSB may return incorrect results when racing
    memory access with another core or thread" on Raptor Lake,
    Alder Lake, Lunar Lake, Arrow Lake, Sapphire Rapids, Emerald Rapids.


author: Nicola Sella <nsella@redhat.com> - 3.5.0-1
changelog:
  - Update to 3.5.0
  - Add module enable and disable commands
  - Add reports of module changes
  - Add "module enable" command
  - Add subcommands support
  - Print info about obsoleted packages before transaction (RhBug:1855542)


author: Nicola Sella <nsella@redhat.com> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - spec: Sync summary and description from openSUSE
  - Add support for setting a platform module ID
  - Add dependency for DNF configurations skeleton
  - Add support for setting allow_vendor_change


author: Nicola Sella <nsella@redhat.com> - 3.7.1-1
changelog:
  - Update to 3.7.1
  - [download] fix: unwanted dependency on newer glib 
  - [download] Support for "--resolve" and "--alldeps" arguments 
  - [download] New get_packages_query function
  - Support "--setopt=keepcache=0/1"
  - [download] Support "--archlist=" argument
  - [download] Move package download code to "download_packages" function
  - [download] several optimizations
  - Don't set default value of "assumeyes" to TRUE 
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Extend "--setopt" to support repository options 
  - Added alias "update" to "upgrade" command
  - Command "update" renamed to "upgrade"
  - Add support for command aliases
  - dnf-data requirement only for Fedora and future RHEL
  - Relicense to GPLv2+ [errata corrige: not in 3.5.1-1]
  - Sync summary and description from openSUSE [errata corrige: not in 3.6.0-1]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - distrosync: Fix style issues and plugin build with Meson 
  - Add distro-sync subcommand
  - Add "makecache" command


author: Lukas Hrazky <lhrazky@redhat.com> - 3.9.1-1
changelog:
  - Update to 3.9.1
  - leaves: Treat recommends as dependencies when install_weak_deps=True
  - Add leaves command
  - Remove non-breaking space from "Size" column (RhBug:2010676)


author: Nicola Sella <nsella@redhat.com> - 3.9.1-2
changelog:
  - Revert: leaves: Treat recommends as dependencies when install_weak_deps=True
  - Revert: Add leaves command


author: Tomas Popela <tpopela@redhat.com> - 0.26-27
changelog:
  - Don't prune bind mounts on ostree based systems, prune the deployments folder
    there to avoid duplications.
  - Fixes: https://github.com/fedora-silverblue/issue-tracker/issues/76


author: Peter Jones <pjones@redhat.com> - 2:0.5.0-3
changelog:
  - Add support for "mokutil --list-sbat-revocations" and
    "mokutil --set-sbat-policy"
    Related: CVE-2022-28737


author: Leo Sandoval <lsandova@redhat.com> - 0.7.2-2
changelog:
  - Rebase several patches from upstream which:
    - Introduce --is-sb-enabled parameter and better return codes
    - Remove unused int_to_b64()
    - Show help on unsupported systems
  - Resolves: #RHEL-90837


author: Pavel Cahyna <pcahyna@redhat.com> - 4.0.26-4
changelog:
  - Add dependency on glibc-gconv-extra
    mtools need codepage 850, which was split from glibc into a subpackage.
    (Fedora bug #2021637, RHEL bug #2073843)


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Phil Sutter <psutter@redhat.com> [1.0.4-8.el9]
changelog:
  - monitor: Sanitize startup race condition (Phil Sutter) [2130721]
  - evaluate: set eval ctx for add/update statements with integer constants (Phil Sutter) [2094894]
  - src: allow anon set concatenation with ether and vlan (Phil Sutter) [2094887]
  - evaluate: search stacked header list for matching payload dep (Phil Sutter) [2094887]
  - netlink_delinearize: also postprocess OP_AND in set element context (Phil Sutter) [2094887]
  - tests: add a test case for ether and vlan listing (Phil Sutter) [2094887]
  - debug: dump the l2 protocol stack (Phil Sutter) [2094887]
  - proto: track full stack of seen l2 protocols, not just cumulative offset (Phil Sutter) [2094887]
  - netlink_delinearize: postprocess binary ands in concatenations (Phil Sutter) [2094887]
  - netlink_delinearize: allow postprocessing on concatenated elements (Phil Sutter) [2094887]
  - intervals: check for EXPR_F_REMOVE in case of element mismatch (Phil Sutter) [2115627]
  - intervals: fix crash when trying to remove element in empty set (Phil Sutter) [2115627]
  - scanner: don't pop active flex scanner scope (Phil Sutter) [2113874]
  - parser: add missing synproxy scope closure (Phil Sutter) [2113874]
  - tests/py: Add a test for failing ipsec after counter (Phil Sutter) [2113874]
  - doc: Document limitations of ipsec expression with xfrm_interface (Phil Sutter) [1806431]


author: Phil Sutter <psutter@redhat.com> [1.0.4-9.el9]
changelog:
  - tests: add a test case for map update from packet path with concat (Phil Sutter) [2094894]
  - netlink_linearize: fix timeout with map updates (Phil Sutter) [2094894]
  - netlink_delinearize: fix decoding of concat data element (Phil Sutter) [2094894]


author: Phil Sutter <psutter@redhat.com> [1.0.4-10.el9]
changelog:
  - netlink_delinearize: Sanitize concat data element decoding (Phil Sutter) [2160049]
  - optimize: Clarify chain_optimize() array allocations (Phil Sutter) [2160049]
  - optimize: Do not return garbage from stack (Phil Sutter) [2160049]
  - netlink: Fix for potential NULL-pointer deref (Phil Sutter) [2160049]
  - meta: parse_iso_date() returns boolean (Phil Sutter) [2160049]
  - mnl: dump_nf_hooks() leaks memory in error path (Phil Sutter) [2160049]
  - owner: Fix potential array out of bounds access (Phil Sutter) [2160049]


author: Phil Sutter <psutter@redhat.com> [1.0.4-11.el9]
changelog:
  - rule: check address family in set collapse (Phil Sutter) [RHEL-5908]
  - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL]


author: Phil Sutter <psutter@redhat.com> [1.0.9-1.el9]
changelog:
  - spec: Utilize pyproject-rpm-macros for the python sub-package (Phil Sutter) [RHEL-14191]
  - Rebase onto version 1.0.9 (Phil Sutter) [RHEL-14191]


author: Phil Sutter <psutter@redhat.com> [1.0.9-4.el9]
changelog:
  - parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
  - json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]


author: Phil Sutter <psutter@redhat.com> [1.0.9-5.el9]
changelog:
  - tests: py: missing json output in never merge across non-expression statements (Phil Sutter) [RHEL-114095]
  - tests: py: add missing json.output data (Phil Sutter) [RHEL-114095]
  - tests: py: remove huge-limit test cases (Phil Sutter) [RHEL-114095]
  - datatype: rt_symbol_table_init() to search for iproute2 configs (Phil Sutter) [RHEL-114095]
  - tests: shell: connect chains to hook point (Phil Sutter) [RHEL-114095]
  - tests: shell: Fix sets/reset_command_0 for current kernels (Phil Sutter) [RHEL-114095]


author: Phil Sutter <psutter@redhat.com> [1.0.9-6.el9]
changelog:
  - Revert doc/ part of "exthdr: add boolean DCCP option matching" (Phil Sutter) [RHEL-126817]
  - Revert doc/ part of "meta: introduce meta broute support" (Phil Sutter) [RHEL-126817]
  - Revert doc/ part of "src: add tcp option reset support" (Phil Sutter) [RHEL-126817]
  - spec: Update expected test suite results (Phil Sutter) [RHEL-126817]


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.1-6
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: Than Ngo <than@redhat.com> - 3.22.0-2
changelog:
  - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
  Resolves: RHEL-22792


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - Resolves: RHEL-23671, ep11 token: support protected keys for extractable keys
  - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys
  - Resolves: RHEL-23673, update to 3.23.0


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-50064, update to 3.24.0
  - Resolves: RHEL-50063, opencryptoki CCA Token support for x86_64 and ppc64le
  - Resolves: RHEL-50058, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-50056, openCryptoki cca token SHA3 support
  - Resolves: RHEL-50057, openCryptoki cca token RSA OAEP v2.1 support


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-73344, upgrade openCryptoki
  - Resolves: RHEL-90590, basic support of AES-GCM
  - Resolves: RHEL-72965, cca token support cipher keys
  - Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75762, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
  - Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104602


author: Than Ngo <than@redhat.com> - 3.25.0-4
changelog:
  - Fix pkcsslotd fails to start in FIPS
  - Drop tier1 test as it mostly provides duplicate results
  - Enable ci test for FIPS mode
    Resolves: RHEL-109050


author: Than Ngo <than@redhat.com> - 3.26.0-1
changelog:
  - Resolves: RHEL-75139, ep11 token BLS support
  - Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
  - Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
  - Resolves: RHEL-100059, openCryptoki 3.26.0


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71053)
  - Avoid SSL context cleanup during library destruction (RHEL-56502)


author: Jakub Jelen <jjelen@redhat.com> - 0.22.0-2
changelog:
  - Unbreak detection of unentrolled smart cards (#2007029)
  - Enable file caching by default except for pkcs15-init (#2000626)


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-1
changelog:
  - Rebase to latest 0.23.0 release (#2100409)
  - Use separate OpenSSL context to work better from inside of OpenSSL providers


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-2
changelog:
  - Fix regression in handling OpenPGP cards
  - Fix CVE-2023-2977: buffer overrun in pkcs15init for cardos


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-3
changelog:
  - Fix file caching with different offsets (RHEL-4079)
  - Fix CVE-2023-40660: Potential PIN bypass
  - Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init
  - Fix CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption using symmetric keys
  - Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-36
changelog:
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Relax OpenSSH build-time checks for OpenSSL version
    Related: RHEL-4734
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-44
changelog:
  - Add extra help information on ssh early failure
    Resolves: RHEL-33809
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-52293
  - Allow duplicate Subsystem directive
    Resolves: RHEL-47112


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-45
changelog:
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465).
    Resolves: RHEL-78700


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-2
changelog:
  - Fix implicit destination path selection when source path ends with ".."
    Resolves: RHEL-119515
  - Canonicalize username when matching a user
    Resolves: RHEL-118372


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-3
changelog:
  - Enable support for DSA keys
    Resolves: RHEL-127624
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-133959
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-133960


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80854


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-7
changelog:
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76756


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
changelog:
  - Rebasing OpenSSL to 3.5
    Resolves: RHEL-80854
    Resolves: RHEL-50208
    Resolves: RHEL-50210
    Resolves: RHEL-50211
    Resolves: RHEL-85954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-2
changelog:
  - OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9
    Resolves: RHEL-88910
  - PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9
    Resolves: RHEL-88912
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-89860
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-89861
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-89862
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-89859
  - Enable sslkeylog support
    Resolves: RHEL-90854


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80854
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-95239


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-104236
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-104856


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-4
changelog:
  - Make openssl speed test signatures without errors
    Resolves: RHEL-95502
  - Build tests in check and without LTO
    Resolves: RHEL-111633


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.5-1
changelog:
  - Rebase to OpenSSL 3.5.5
    Resolves: RHEL-136895
    Resolves: RHEL-142004
    Resolves: RHEL-142012
    Resolves: RHEL-142020
    Resolves: RHEL-142024
    Resolves: RHEL-142028
    Resolves: RHEL-142032
    Resolves: RHEL-142036
    Resolves: RHEL-142040
    Resolves: RHEL-142044
    Resolves: RHEL-142048
    Resolves: RHEL-142052
    Resolves: RHEL-142056


author: Jakub Jelen <jjelen@redhat.com> - 0.4.11-8
changelog:
  - Fix sending parameters for RSA-OAEP operations (#2063378)
  - Improve logging and fix selection of expired certificates (#2029834)


author: Leo Sandoval <lsandova@redhat.com> - 1.77-11
changelog:
  - 90fallback: include possible kernel parameters from grub's default file
  - common.sh: do not resolve symbolic link on mapped device filesystems
  - Resolves: #RHEL-44705


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.2-1
changelog:
  - Update to new upstream release 0.25.2
    Resolves: RHEL-14834
  - Add IBM specific mechanisms and attributes
    Resolves: RHEL-10570


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.3-3
changelog:
  - Fix regression in trust where file creation fails for long cert labels
    Resolves: RHEL-58899
  - Fix usage message in p11-kit list-tokens command
    Resolves: RHEL-31810


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-14
changelog:
  - pam_lastlog: check localtime_r() return value. Resolves: #2130124
  - pam_faillock: clarify missing user faillock files after reboot. Resolves: #2126632
  - pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2126648


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-16
changelog:
  - libpam: use close_range() to close file descriptors. Resolves: RHEL-5099
  - fix formatting of audit messages. Resolves: RHEL-5100


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-18
changelog:
  - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
  - pam_access: handle hostnames in access.conf. Resolves: RHEL-22300


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-19
changelog:
  - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
    situations. CVE-2024-22365. Resolves: RHEL-21244


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-22
changelog:
  - pam_unix: always run the helper to obtain shadow password file entries.
    CVE-2024-10041. Resolves: RHEL-62879
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-23631 and RHEL-39943


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-24
changelog:
  - pam_unix: sync expiry checks with shadow. Resolves: RHEL-70519
  - pam.conf: remove tallylog. Resolves: RHEL-15324


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-26
changelog:
  - pam_unix: sync expiry checks with shadow.
    Resolves: RHEL-70519, RHEL-95475, RHEL-96955 and RHEL-96973
  - pam.conf: remove tallylog. Resolves: RHEL-15324
  - pam_namespace: fix potential privilege escalation.
    Resolves: CVE-2025-6020 and RHEL-96727


author: Brian C. Lane <bcl@redhat.com> - 3.4-4
changelog:
  - Fix issues that covscan classifies as important
    Resolves: rhbz#1938836
  - Work around a mkswap bug


author: Brian C. Lane <bcl@redhat.com> - 3.5-1
changelog:
  - Rebase to upstream release 3.5
  - Drop patches included in new upstream tar
  - Add upstream patches for new type command
  - Add upstream patch for swap flag on DASD
    Resolves: rhbz#1999333


author: Brian C. Lane <bcl@redhat.com> - 3.5-3
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73217
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73217
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73217
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73217


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Petr Pisar <ppisar@redhat.com> - 10.36-4
changelog:
  - Fix a mismatch if \K was involved in a recursion
  - Restore single character repetition optimization in JIT (upstream bug #2698)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.37-1
changelog:
  - Rebase to the 10.37
  - libpcre2-posix.so.2* SONAME bump to libpcre2-posix.so.3*
  - Enable JIT for s390x arch
  - Patches upstreamed: Patch 1,2,3,4
  - Resolves: rhbz#1970765, BZ#1965025


author: Jakub Jelen <jjelen@redhat.com> - 1.9.4-1
changelog:
  - Rebase to current version from Fedora (#2017828)
  - Use of upstrea polkit policy preventing unneeded prompts


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-2
changelog:
  - Improve man pages (RHEL-672)
  - Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)


author: Petr Lautrbach <lautrbach@redhat.com> - 3.6-5
changelog:
  - sandbox/seunshare: Replace system() with execv() to prevent shell injection
  - seunshare: fix the frail tmpdir cleanup


author: Jan Rybar <jrybar@redhat.com> - 0.117-13
changelog:
  - session-monitor: watch sessions only
  - PolkitPermission: react on really changed sessions
  - allow polkit-pkla-compat to be uninstalled if no .pkla rules
  - Resolves: RHEL-39063


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-6
changelog:
  - free: backport new 'used' calculation
  - sysctl: backport support of systemd glob patterns
  - Resolves: rhbz#2003033
  - Resolves: rhbz#2052536


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-7
changelog:
  - sysctl: backport - keys with dots instead of slashes again
  - Resolves: rhbz#2116977
  - Related: rhbz#2052536


author: Miro Hrončok <mhroncok@redhat.com> - 21.0.1-2
changelog:
  - python-pip-wheel: Remove bundled provides and libcrypt recommends for Python 2
    (The wheel is Python 3 only for a while)


author: Tomas Orsava <torsava@redhat.com> - 21.0.1-5
changelog:
  - Provide the platform-python-pip name for backwards compatibility
    with RHEL 8
  - Related: rhbz#1891487


author: Miro Hrončok <mhroncok@redhat.com> - 51.1.1-1
changelog:
  - Update to 51.1.1
  - Fixes test failures with pip 20.3 as well as with pytest 6.2+
  - Fixes: rhbz#1909575


author: Miro Hrončok <mhroncok@redhat.com> - 51.1.2-1
changelog:
  - Update to 51.1.2
  - Removes tests from the wheel
  - https://setuptools.readthedocs.io/en/latest/history.html#v51-1-2
  - Fixes: rhbz#1914481


author: Miro Hrončok <mhroncok@redhat.com> - 53.0.0-1
changelog:
  - Update to 53.0.0
  - https://setuptools.readthedocs.io/en/latest/history.html#v53-0-0
  - Fixes: rhbz#1923249


author: Tomas Orsava <torsava@redhat.com> - 53.0.0-5
changelog:
  - Provide the platform-python-setuptools name for backwards compatibility
    with RHEL 8
  - Related: rhbz#1891487


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.21-1
changelog:
  - Update to 3.9.21
  - Security fix for CVE-2024-11168 and CVE-2024-9287
  Resolves: RHEL-64889
  Resolves: RHEL-69942


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.23-1
changelog:
  - Update to 3.9.23
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98051, RHEL-98024, RHEL-98242, RHEL-98193, RHEL-98218


author: Tomas Orsava <torsava@redhat.com> - 1.14.5-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Miro Hrončok <mhroncok@redhat.com> - 3.0.4-14
changelog:
  - Subpackage python2-chardet has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 3.4.7-1
changelog:
  - Update to 3.4.7
  - Remove dependency on python-cryptography-vectors package and use vectors
    directly from Github source tar ball. Related: rhbz#1952343


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-6
changelog:
  - Rebase to 36.0.1, related: rhbz#2059630, rhbz#2060787
  - OpenSSL 3.0 FIPS mode is now detected correctly, related: rhbz#2054785
  - Fix error check from EVP_PKEY_CTX_set_signature_md, related: rhbz#2060343
  - Block 3DES in FIPS mode, related: rhbz#2055209
  - Disable DSA tests in FIPS mode
  - Enable SHA1 signatures in test suite
  - Fix serialization of keyusage ext with no bits
  - Re-enable tests that are passing again


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-3
changelog:
  - Fix CVE-2023-23931: Don't allow update_into to mutate immutable objects, resolves rhbz#2172399
  - Fix FTBFS due to failing test_load_invalid_ec_key_from_pem and test_decrypt_invalid_decrypt


author: Miro Hrončok <mhroncok@redhat.com> - 1:2.8.0-7
changelog:
  - Subpackage python2-dateutil has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.8-9
changelog:
  - Subpackage python2-dbus has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 4.4.0-5
changelog:
  - Subpackage python2-decorator has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Christian Heimes <cheimes@redhat.com> - 2.1.0-3
changelog:
  - Add bconds for extras require trio, curio, and doh
  - Move trio and curio backend modules into extras subpackages
  - Enable python3-dns+curio meta package
  - Skip failing test testCanonicalNameDangling


author: Rafael Jeffman <rjeffman@redhat.com> - 2.2.1-1
changelog:
  - Rebase to version 2.2.1
    Resolves: rhbz#2088661
  - Disable DNSSEC tests using SHA1 due to crypto policies
    Resolves: rhbz#2107651


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Miro Hrončok <mhroncok@redhat.com> - 2.8-5
changelog:
  - Subpackage python2-idna has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.4-39
changelog:
  - Subpackage python2-iniparse has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 0.9.6-19
changelog:
  - Subpackages python2-inotify, python2-inotify-examples have been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: John Kacur <jkacur@redhat.com> - 0.6.3-5
changelog:
  - various clean-ups including using 'with' context managers in try-except
  - Fix to ignore UnicodeDecodeError when it occurs
  Resolves: rhbz#2031717


author: John Kacur <jkacur@redhat.com> - 0.7.3-1
changelog:
  - Rebase to upstream python-linux-procfs-0.7.3
  - This rebase removes upstream spec files and
  - syncs the git tag with version
  Resolves: RHEL-7614


author: John Kacur <jkacur@redhat.com> - 0.7.4-2
changelog:
  - Update setup.py for older distributions
  - Use explicit setup.py build commands
  Resolves: RHEL-119895


author: Thomas Moschny <thomas.moschny@gmx.de> - 3.3.4-2
changelog:
  - Apply PR6 by Igor Raits <ignatenkobrain@fedoraproject.org>: Support
    for building on EPEL8 + upstream tests invocation.
  - Remove unused BR on python3-tidy (we'd need pytidylib instead, which
    doesn't seem to be packaged).


author: Dan Radez <dradez@redhat.com> - 4.8.0-6
changelog:
  - adding workaround for https://bugzilla.redhat.com/show_bug.cgi?id=1914843
  - while we wait for upstream fix: https://github.com/pexpect/pexpect/issues/669


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-4
changelog:
  - Make the python-pip-wheel subpackage versioned (python3-pip-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-5
changelog:
  - Conflict with old Python versions that use the old unversioned wheel location
  - Resolves: rhbz#1982668


author: Miro Hrončok <mhroncok@redhat.com> - 0.6.0-8
changelog:
  - Subpackage python2-ptyprocess has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.7.1-3
changelog:
  - Subpackage python2-pysocks has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 5.4.1-6
changelog:
  - Remove some outdated Obsoletes and Provides,
    but keep providing python3-yaml and python3-PyYAML for users
  - Related: rhbz#1990421


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-27
changelog:
  - Fix short circuiting of version strings in expressions (RHEL-15688)
  - Fix description of whatconflicts in the man page (RHEL-6303)
  - Expose and document rpmdb --verifydb operation (RHEL-14591)
  - Fixes to the file handling backport


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-29
changelog:
  - Actually add --verifydb to the man page (RHEL-14591)
  - Don't warn about missing user/group on skipped files (RHEL-18037)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-30
changelog:
  - Don't segfault on missing priority tag (RHEL-35249)
  - Use unsigned integers for buildtime too for Y2K38 safety (RHEL-22602)
  - Rebuild against libimaevm.so.4 (RHEL-32505)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-31
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-22604)
  - Fix potential use of uninitialized pgp struct (RHEL-22605)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)
  - Add SourceLicense tag to spec syntax (RHEL-28798)
  - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-33
changelog:
  - Fix root relocation regression (RHEL-28967)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-35
changelog:
  - Fix %patch N applying Patch0 implicitly (RHEL-6294)
  - Issue deprecation warning for number-less %patch (RHEL-6294)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-37
changelog:
  - Allow parametric macros to opt out of option processing (RHEL-67161)
  - Report unsafe symlinks during installation as a specific case (RHEL-33393)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-38
changelog:
  - Add support for spec local file attributes and generators (RHEL-52772)
  - Store configurable digest(s) on packages in rpmdb (RHEL-35619)
  - Fix a hard link race condition in brp-strip (RHEL-74011)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-40
changelog:
  - Improve error handling on keystore load (RHEL-114837)
  - Sort files before passing to file attr dependency generators (RHEL-95376)


author: Petr Lautrbach <plautrba@redhat.com> - 4.4.0-0.1.20201102git05e90ee
changelog:
  - Update to 05e90ee
  - Add /usr/bin/sechecker
  - Adapt to new libsepol filename transition structures
  - Rebuild with libsepol.so.2


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.3-1
changelog:
  - SETools 4.4.3 release
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Tomas Orsava <torsava@redhat.com> - 53.0.0-7
changelog:
  - Make the python-setuptools-wheel subpackage versioned (python3-setuptools-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Miro Hrončok <mhroncok@redhat.com> - 234-11
changelog:
  - Subpackage python2-systemd has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.25.10-3
changelog:
  - Drop redundant BuildRequires for nose
  - Instead of the mock backport, use unittest.mock from the standard library


author: Karolina Surma <ksurma@redhat.com> - 1.26.5-1
changelog:
  - Update to 1.26.5
  - Fix for CVE-2021-33503 Catastrophic backtracking in URL authority parser
  Resolves: rhbz#1972639


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.26.5-6
changelog:
  - Security fix for CVE-2024-37891
  - Backport upstream patch to fix TypeError for http connection if the PoolManager
  - is instantiated with server_hostname
  Resolves: RHEL-43172
  Resolves: RHEL-39285


author: Miro Hrončok <mhroncok@redhat.com> - 1.26.5-7
changelog:
  - Security fix for CVE-2025-66471
  - Security fix for CVE-2025-66418
  - Security fix for CVE-2026-21441
  Resolves: RHEL-142750, RHEL-139398, RHEL-142767


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: Pavel Reichl <preichl@redhat.com> - 1:4.09-1
changelog:
  - Update to new upstream version
  - Add tmpfs quota support
  - Remove rhel-only patches that were merged upstream


author: Sumit Bose <sbose@redhat.com> - 0.17.0-8
changelog:
  - LDAP socket timeout, fix duplicated logs and new Samba command line options
    Resolves: rhbz#2038260
    Resolves: rhbz#2038268
    Resolves: rhbz#2028530


author: Sumit Bose <sbose@redhat.com>
changelog:
  - Use make macros https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - migrated to SPDX license
  - allow multiple names and _srv_ ad_server option
    Resolves: jira#RHEL-12112
  - fix ccache handling for leave operation
    Resolves: jira#RHEL-5104


author: Fedora Release Engineering <releng@fedoraproject.org> - 1:0.4-0.44.b46
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
  - Use standard make_build and make_install macros in spec file.


author: Jeff Makey <jeff@makey.net> - 1:0.4-0.46.b47
changelog:
  - New upstream release 0.4b47
  - Update main URL.
  - Drop dump-glibc_xattr patch, now applied upstream.
  - Drop documentation conversion from ISO-8859-1 to UTF-8, now applied upstream.
  - Print correct name of archive table of contents file (#1727392).


author: Josef Ridky <jridky@redhat.com> - 1:0.4-0.51.b47
changelog:
  - rename spec file to restore
  - add gating.yaml
  - changes between .47 and .51 had to be stripped due of wrong sync
    between centos and dist-git


author: systemd maintenance team <systemd-maint@redhat.com> - 252-44
changelog:
  - Revert "udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT" (RHEL-50103)
  - fundamental: share constants for confidential virt detection (RHEL-50651)
  - efi: add helper API for detecting confidential virtualization (RHEL-50651)
  - efi: don't pull kernel cmdline from SMBIOS in a confidential VM (RHEL-50651)
  - Fix detection of TDX confidential VM on Azure platform (RHEL-50651)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-49
changelog:
  - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-24340)
  - Fix configuration for Packit 1.0.0 (RHEL-70884)
  - udev/net_id: introduce naming scheme for RHEL-9.6 (RHEL-25515)
  - hwdb: Fix accelerometer mount matrix for ASUS T100TAS (RHEL-49810)
  - hwdb.d/60-keyboard.hwdb: add Clevo mic mute quirk for V5x dGPU (RHEL-49810)
  - hwdb: add entry for Dell AlpsPS/2 ALPS DualPoint TouchPad (RHEL-49810)
  - hwdb: Mark Apple Wireless keyboards as not having NumLock LED (RHEL-49810)
  - update keyboard hwdb to add acer Predator PHN16-72 (RHEL-49810)
  - hwdb: death to tabs! (RHEL-49810)
  -  hwdb.d/60-keyboard.hwdb: add Clevo mic mute quirk for V5x iGPU, NV41PZ (RHEL-49810)
  - Add ACCEL_MOUNT_MATRIX for Chuwi Hi10 Max. (RHEL-49810)
  - Add HUAWEI MateBook D 15 AMD ACCEL properties (RHEL-49810)
  - hwdb: add Kensington SlimBlade Pro trackball (Bluetooth mode) (RHEL-49810)
  - hwdb: Add accel orientation quirk for the IdeaPad Duet 3 10IGL5-LTE (RHEL-49810)
  - hwdb: add keymaps for Acer Nitro 5 AN515-47 (#34493) (RHEL-49810)
  - hwdb: make key map match comment for one laptop (RHEL-49810)
  - hwdb: there's KEY_BRIGHTNESS_AUTO these days, hence hook it up where a FIXME suggests that (RHEL-49810)
  - hwdb: use KEY_ROTATE_DISPLAY for various cases of display rotation keys (RHEL-49810)
  - hwbd: use newer KEY_PICKUP_PHONE, KEY_HANGUP_PHONE, KEY_SELECTIVE_SCREENSHOT, KEY_NOTIFICATION_CENTER keycodes where appropriate (RHEL-49810)
  - hwdb: add SCAI SKU prefix for Samsung keyboard mapping (#34648) (RHEL-49810)
  - tree-wide: drop doubled empty lines (RHEL-49810)
  - hwdb: move key 66/65 handling from specific to generic HP laptop coverage (RHEL-49810)
  - hwdb: fix key toggle touchpad and programmable buttom for Positivo V142N (#34725) (RHEL-49810)
  - hwdb: add Stream Deck Neo (#34903) (RHEL-49810)
  - hwdb: update autosuspend rules (RHEL-49810)
  - hwdb: import newest autosuspend rules from chromeos (RHEL-49810)
  - update hwdb (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: fix broken numpad paren keys on Lenovo Thinkbook 16 G6+ 2024 (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: add new Cube Mix Plus (i18D) rotation info (RHEL-49810)
  - hwdb: Add quirk for Logitech MX Keys for Mac (RHEL-49810)
  - hwdb: add support for PineTab2 to 60-sensor.hwdb (#35304) (RHEL-49810)
  - hwdb: add entry for Chuwi Hi10 X1 (#35331) (RHEL-49810)
  - hwdb: update (RHEL-49810)
  - hwdb: Make 3D mice work out-of-the-box (RHEL-49810)
  - hwdb: Add Chuwi MiniBook X trackpad fuzz (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: disable inclusion of the PCI domain in MANA network interface naming (RHEL-49810)
  - hwdb: move down touchpad toggle section from generic to product specific (RHEL-49810)
  - hwdb: add scancodes for HP Elitebook 2170p runnning coreboot (RHEL-49810)
  - hwdb: Make remote controllable lights work out-of-the-box (RHEL-49810)
  - hwdb: fix key toggle touchpad for VAIO VJFH52 (#35645) (RHEL-49810)
  - hwdb: comment out the entry for Logitech MX Keys for Mac (RHEL-49810)
  - 60-sensor.hwdb: Loosen model mask to include entire series (RHEL-49810)
  - Correct ACCEL_MOUNT_MATRIX for Chuwi Hi10 Max (RHEL-49810)
  - hwdb: Add macro keys for HP 430 Programmable Wireless Keypad (RHEL-49810)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-50
changelog:
  - journal: again create user journals for users with high uids (RHEL-70103)
  - install: don't translate unit instances to paths when reenabling them (RHEL-5956)
  - test-systemctl-enable: fix typo (RHEL-5956)
  - udev: Handle PTP device symlink properly on udev action 'change' (RHEL-59088)
  - systemctl: print warning about missing /proc only as debug message (RHEL-3906)
  - repart: avoid use of uninitialized TPM2B_PUBLIC data (RHEL-56793)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-51
changelog:
  - ci: use ubuntu 22:04 for deploy of man pages (RHEL-70884)
  - man/tmpfiles: fix off-by-one in example (RHEL-74015)
  - test: drop removed SCSI passthrough feature (RHEL-70884)
  - nspawn: call json_dispatch() with a correct pointer (RHEL-55266)
  - varlink,json: introduce new varlink_dispatch() helper (RHEL-55266)
  - json: add json_dispatch_const_user_group_name() (RHEL-55266)
  - sd-varlink: add new sd_varlink_error_is_invalid_parameter() helper (RHEL-55266)
  - userdb: return ESRCH if userdb service refuses a user/group name as invalid (RHEL-55266)
  - test: rename assert.sh to util.sh (RHEL-55301)
  - core: Don't GC unit if it is in cgroup_empty_queue (RHEL-55301)
  - core: Handle cgroup pruning in on_cgroup_empty_event (RHEL-55301)
  - Fix failing test (RHEL-55301)
  - unit: don't gc unit in oom queue (RHEL-55301)
  - core: do not GC units/jobs that are in the D-Bus queue (RHEL-55301)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-52
changelog:
  - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-15051)
  - unit: always return 1 in log_kill (RHEL-78170)
  - ci: enable mkosi workflow for z-stream branches (RHEL-79977)
  - ci(mkosi): bump fedora version from 39 to 41 (RHEL-79977)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-53
changelog:
  - man: mention that rhel-9.0 net naming scheme is the same as v251 (RHEL-86891)
  - backlight: Drop support for actual_brightness (RHEL-86714)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-54
changelog:
  - unit: add conditions and deps to make oomd.socket and .service consistent (RHEL-90417)
  - udev/net_id: introduce naming scheme for RHEL-9.7 (RHEL-25516)
  - Add a set of assertion macros to tests.h (ASSERT_OK(), ASSERT_EQ(), ASSERT_GE(), ASSERT_LE()) that log the failed condition before crashing and convert test-gpt.c test file to use them (RHEL-103753)
  - Follow up with the PR #31819 (RHEL-103753)
  - Added more ASSERT macro and also make some test file to use them (RHEL-103753)
  - sd-event: drop inotify event from buffer when no event source is triggered (RHEL-103753)
  - test: add test case for issue #38265 (RHEL-103753)
  - test: answer 2nd mdadm --create question for compat with new version (RHEL-79977)
  - sysusers: cross-check user and group names too (RHEL-72572)
  - test-sysusers: check group creation with matching user entry (RHEL-72572)
  - user-sessions: do not remove /etc/nologin (RHEL-85467)
  - hwdb: f20 → micmute (RHEL-72697)
  - hwdb: f21 → touchpad_toggle (RHEL-72697)
  - hwdb: f22 → touchpad_on (RHEL-72697)
  - hwdb: f23 → touchpad_off (RHEL-72697)
  - hwdb: drop some now redundant mappings (RHEL-72697)
  - hwdb: Add micmute for System76 (RHEL-72697)
  - hwdb: Add newer System76 Pangolins (RHEL-72697)
  - hwdb: WALTOP International Corp. Slim Tablet Stylus (RHEL-72697)
  - hwdb: add MSI Claw 8 AT Keyboard Scancodes (#36180) (RHEL-72697)
  - Adds asus T103HAF rotation matrix to 60-sensor.hwdb (#36177) (RHEL-72697)
  - hwdb: fix screen rotation for EXO Wings 2in1 w1125 (#36283) (RHEL-72697)
  - hwdb: XBox Series Elite controller modalias entry has been added. (#36305) (RHEL-72697)
  - hwdb: add front button support for MSI Claw 7 AI+ A2VM (RHEL-72697)
  - hwdb: add accel orientation and location for the BMAX Y14 (RHEL-72697)
  - hwdb.d: add support for Akoya P15645 (RHEL-72697)
  - hwdb.d: add ANP09 Intel n100 tablet sensor configuration (#36390) (RHEL-72697)
  - hwdb: add axis range corrections for the Lenovo Yoga Slim 7 14ARE05 (RHEL-72697)
  - hwdb: add GOLD WARRIOR SIM PhoenixRC 10411R (RHEL-72697)
  - hwdb: add Code Mercenaries Hard- und Software GmbH Virtual RC USB (RHEL-72697)
  - hwdb: Add accel orientation quirk for the GPD Pocket 4 (RHEL-72697)
  - hwdb: add rotation profile matrix for Rog Ally X (2024) (#36591) (RHEL-72697)
  - hwdb: fix backspace not working on HP Pavilion laptop (#36777) (RHEL-72697)
  - hwdb/keyboard: Map FN key on TUXEDO NB02 devices (RHEL-72697)
  - hwdb: add G-Mode key support (#37175) (RHEL-72697)
  - hwdb/keyboard: Map FN key on TUXEDO InfinityFlex 14 Gen1 (RHEL-72697)
  - hwdb: add HP 150 Wired Mouse (#37341) (RHEL-72697)
  - Add emulated release to G-Mode key (RHEL-72697)
  - hwdb: keyboard: Add Alienware special keys (RHEL-72697)
  - hwdb: add bladeRF SDR devices (RHEL-72697)
  - hwdb: append ID_SOFTWARE_RADIO to hwdb parser (RHEL-72697)
  - hwdb.d: reword and simplify boilerplate texts (RHEL-72697)
  - hwdb.d: update/expand boilerplate on various hwdb files (RHEL-72697)
  - hwdb: say that settings can be also set to 0 (RHEL-72697)
  - hwdb: add Analog Devices PLUTO SDR (RHEL-72697)
  -  hwdb: append ID_MM_DEVICE_IGNORE to hwdb parser (RHEL-72697)
  - hwdb: run "update-hwdb" (RHEL-72697)
  - hwdb: run "update-hwdb-autosuspend" (RHEL-72697)
  - hwdb: add missing PLUTO SDR vendor name (RHEL-72697)
  - hwdb: add Ettus Research SDR devices (RHEL-72697)
  - hwdb: add RTL-SDR devices (RHEL-72697)
  - hwdb: merge entries for Ettus Research B200 (RHEL-72697)
  - hwdb: make Saitek PLC Pro Flight Rudder Pedals a joystick (#37601) (RHEL-72697)
  - hwdb: fix touchpad for ASUS X1504ZA (#37696) (RHEL-72697)
  - hwdb: add support for Loupedeck devices (RHEL-72697)
  - hwdb: Acer Nitro ANV15-51 Mic Toggle (RHEL-72697)
  - hwdb: Added Beacn and TC-Helicon Audio controllers (#37798) (RHEL-72697)
  - hwdb: Add support for Lenovo IdeaPad Slim 5 series (RHEL-72697)
  - hwdb: Add hwbd definitions for maker tools (RHEL-72697)
  - hwdb: Add accel orientation quirk for the Microtech e-tab Pro (RHEL-72697)
  - hwdb: add 70-maker-tools.hwdb to meson.build (RHEL-72697)
  - hwdb: fix typo in 70-maker-tools.hwdb (RHEL-72697)
  - hwdb: update (RHEL-72697)
  - Fix Positivo K116J search key and www shortcut (RHEL-72697)
  - hwdb: Acer Nitro ANV15-51 Nitro Sense Toggle (RHEL-72697)
  - hwdb: several cleanups (RHEL-72697)
  - hwdb: disable Asus ROG keyboards sending poweroff (RHEL-72697)
  - hwdb: update (RHEL-72697)
  - hwdb: update autosuspend rules (RHEL-72697)
  - hwdb: set touchpad resolution for ThinkPad T14 Gen2a (RHEL-72697)
  - Revert "hwdb: disable Asus ROG keyboards sending poweroff" (RHEL-72697)
  - hwdb: Add launch emoji keyboard mapping for Asus M1607KA (RHEL-72697)
  - Enable KEY_PERFORMANCE key present on Linux 6.17 (RHEL-72697)
  - flush_ports: flush POSIX message queues properly (RHEL-90860)
  - kernel-install: add --entry-type=type1|type2 option to kernel-install (RHEL-83932)
  - kernel-install: add --entry-type=type1|type2 option to kernel-install.in (RHEL-83932)
  - kernel-install: do not mix || and && (RHEL-83932)
  - man/kernel-install: mention --entry-type= option in the man page (RHEL-83932)
  - cgroup: add support for memory.peak (RHEL-95797)
  - core: include peak memory in unit_log_resources() (RHEL-95797)
  - run: include peak memory in output (RHEL-95797)
  - core: ensure init.scope is realized after drop-ins have been loaded (RHEL-103488)
  - core: add possibility to not track certain unit types (RHEL-89796)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-55
changelog:
  - tree-wide: check more log message format in log_struct() and friends (RHEL-100353)
  - build: add some coloring to --version output (RHEL-100353)
  - core: output log cycle path in one log message, not many (RHEL-100353)
  - core: make log cycle messages recognizable via message IDs (RHEL-100353)
  - core: change ordering cycle log message log levels (RHEL-100353)
  - core: cast log_oom() got void (RHEL-100353)
  - core: when removing a job from a transaction, include in structured log message which (RHEL-100353)
  - catalog: add entries for the order cycle log messages (RHEL-100353)
  - tree-wide: check more log message format in log_struct() and friends (RHEL-100353)
  - core/transaction: do not attempt to log "n/a" as a journal field (RHEL-100353)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-57
changelog:
  - Revert "boot: Use EFI_BOOT_MANAGER_POLICY_PROTOCOL to connect console devices" (RHEL-108596)
  - boot: Use correct memory type for allocations (RHEL-108555)
  - meson: /etc/systemd/network is also used by udevd (RHEL-109096)
  - sd-bus: make bus_add_match_full accept timeout (RHEL-31756)
  - core/unit: add get_timeout_start_usec in UnitVTable and define it for service (RHEL-31756)
  - core/unit: increase the NameOwnerChanged/GetNameOwner timeout to the unit's start timeout (RHEL-31756)
  - core,sd-bus: drop empty lines between function call and error check (RHEL-31756)
  - core: do not disconnect from bus when failed to install signal match (RHEL-31756)
  - dbus: stash the subscriber list when we disconenct from the bus (RHEL-31756)
  - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-31756)
  - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-31756)
  - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-31756)
  - core/manager: drop duplicate bus track deserialization (RHEL-31756)
  - sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-31756)
  - shell completion: add kernel-identify/inspect verbs for bootctl (RHEL-108576)
  - test: add tests for format_timestamp() and parse_timestamp() with various timezone (RHEL-109488)
  - test-time-util: disable failing tests (RHEL-109488)
  - test: test parse_timestamp() in various timezone (RHEL-109488)
  - systemctl: logind: add missing asserts (RHEL-109488)
  - systemctl: logind: make logind_schedule_shutdown accept action as param (RHEL-109488)
  - systemctl: add option --when for scheduled shutdown (RHEL-109488)
  - test-time-util: add test cases to invalidate "show" and "cancel" (RHEL-109488)
  - Introduce RET_GATHER and use it in src/shared/ (RHEL-108598)
  - fd-util: don't eat up errors in fd_cloexec_many (RHEL-108598)
  - sd-bus: refuse to send messages with an invalid string (RHEL-108584)
  - test: check if we correctly handle invalid UTF-8 in mount stuff (RHEL-108584)
  - test: fix a typo in the cleanup stuff (RHEL-108584)
  - test: explicitly specify a UTF-8 locale for UTF-8 shenanigans (RHEL-108584)
  - test: use the correct file name when restoring the original fstab (RHEL-108584)
  - core: escape UTF-8 in mount unit Where field before sending to clients (RHEL-108584)
  - Revert "test-time-util: disable failing tests" (RHEL-109488)
  - test: use get_timezones() to iterate all known timezones (RHEL-109488)
  - test-time-util: do not fail on DST change (RHEL-109488)
  - test-time-util: suppress timestamp conversion failures for Africa/Khartoum timezone (RHEL-109488)
  - test-time-util: do more suppression of time zone checks (RHEL-109488)
  - test-time-util: fix truncation of usec to sec (RHEL-109488)
  - test: unset TZ before timezone-sensitive unit tests are run (RHEL-109488)
  - meson: extend timeout for test-time-util (RHEL-109488)
  - time-util: use DEFINE_STRING_TABLE_LOOKUP_TO_STRING() macro (RHEL-109488)
  - time-util: align string table (RHEL-109488)
  - time-util: rename variables (RHEL-109488)
  - time-util: add assertions (RHEL-109488)
  - time-util: drop redundant else (RHEL-109488)
  - time-util: do not use strdupa() (RHEL-109488)
  - time-util: use result from startswith_no_case() (RHEL-109488)
  - time-util: use usec_add() and usec_sub_unsigned() (RHEL-109488)
  - time-util: shorten code a bit (RHEL-109488)
  - time-util: rename variables (RHEL-109488)
  - time-util: drop unnecessary assignment of timezone name (RHEL-109488)
  - time-util: make parse_timestamp() use the RFC-822/ISO 8601 standard timezone spec (RHEL-109488)
  - time-util: fix typo (RHEL-109488)
  - ci: bump the tools tree to F42 (RHEL-109488)
  - journald: extend STDOUT_STREAMS_MAX to 64k (RHEL-111065)
  - Revert "Revert "udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT"" (RHEL-50103)
  - udev-builtin-net_id: ignore firmware_node/sun == 0 (RHEL-50103)
  - fundamental: fix compile check for explicit_bzero (RHEL-108568)
  - time-util: make USEC_TIMESTAMP_FORMATTABLE_MAX for 32bit system off by one day (RHEL-109488)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-59
changelog:
  - test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118215)
  - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118215)
  - test: check the next elapse timer timestamp after deserialization (RHEL-118215)
  - timer: don't run service immediately after restart of a timer (RHEL-118215)
  - test: store and compare just the property value (RHEL-118215)
  - test: make test-fd-util more lenient when using fd_move_above_stdio() (RHEL-114974)
  - basic: add PIDFS magic (#31709) (RHEL-114974)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-60
changelog:
  - man: fix a missing word (RHEL-115182)
  - cryptsetup: Add optional support for linking volume key in keyring. (RHEL-97175)
  - cryptsetup: fix typo (RHEL-97175)
  - cryptsetup: HAVE_CRYPT_SET_KEYRING_TO_LINK is always defined (RHEL-97175)
  - coredump: make check that all argv[] meta data fields are passed strict (RHEL-104138)
  - coredump: restore compatibility with older patterns (RHEL-104138)
  - coredump: use %d in kernel core pattern (RHEL-104138)
  - pidref: add structure that can reference a pid via both pidfd and pid_t (RHEL-104138)
  - fd-util: introduce parse_fd() (RHEL-104138)
  - coredump: add support for new %F PIDFD specifier (RHEL-104138)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-61
changelog:
  - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
  - strv: introduce string_strv_hashmap_remove() (RHEL-14112)
  - unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
  - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
  - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
  - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-62
changelog:
  - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
  - timer: rebase last_trigger timestamp if needed (RHEL-118215)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-63
changelog:
  - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
  - cryptsetup-generator: continue parsing after error (RHEL-127859)
  - cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
  - cryptsetup-generator: always process cmdline devices (RHEL-127859)
  - logind: add "background-light" session class (RHEL-109833)
  - pam_systemd: honor session class provided via PAM environment (RHEL-109833)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-64
changelog:
  - core: fix array size in unit_log_resources() (RHEL-131338)
  - pid1: add env var to override default mount rate limit burst (RHEL-129153)
  - pid1: add env var to override default mount rate limit interval (RHEL-129153)


author: Jiri Hnidek <jhnidek@redhat.com> 4-1
changelog:
  * Tue Jul 26 2022 Jiri Hnidek <jhnidek@redhat.com> 3-1
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - test: drop unused reference-image file (ptoscano@redhat.com)
  - Drop the static npm-shrinkwrap.json (ptoscano@redhat.com)
  - Bump cockpit test API to 273 + run-tests scheduler fix (martin@piware.de)
  - spec: suggest insights-client on RHEL (ptoscano@redhat.com)
  - tito: remove autogenerated spec file before tagging (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 5-1
changelog:
  - Translated using Weblate (French) (vincent.lefebvre59@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - 2077759: invoke cockpit.translate() after document loading
    (ptoscano@redhat.com)
  - test: Drop outdated copy of packagelib.py (martin@piware.de)
  - Added missing keys to react components (jhnidek@redhat.com)
  - Fix the issue, when it is not possible to install insights-client
    (jhnidek@redhat.com)
  - test: Sync packagelib.py with cockpit main (martin@piware.de)
  - New target and added one project directory to .gitignore (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 6-1
changelog:
  - Translated using Weblate (Kannada) (jsefler@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - 2169976: insights: fix spawn_error_to_string in more cases
    (ptoscano@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> - 1.6-1
changelog:
  - new upstream release
  - drop WITH_SELINUX knob and selinux patches, there's built-in support now
  - drop several patches which were incorporated upstream, except for
    changewarnSegv patch (did not apply, and not needed nowadays)


author: Vladis Dronov <vdronov@redhat.com> - 6.13-1
changelog:
  - Update the sources to 6.13
  - Add important fixes from the upstream
  - Remove Provides: jitterentropy-rngd as it was retired in f29.


author: Vladis Dronov <vdronov@redhat.com> - 6.13-3
changelog:
  - Adjust rngd-wake-threshold.service and post section so udevadm
    is not run in a container (bz 1965318)


author: Vladis Dronov <vdronov@redhat.com> - 6.13-4.git.d207e0b6
changelog:
  - Update to the upstream v6.13 + tip of origin/master + onecpu
    branch + revert of 2ce93190 (bz 1965318)
  - Rebuild rng-tools against the latest jitterentropy library
    3.0.2-2.git.409828cf with fixes for an important issue
  - Adjust Source0 to a more proper one


author: Vladis Dronov <vdronov@redhat.com> - 6.15-1
changelog:
  - Update to the upstream v6.15 @ 172bf0e3 (bz 2075977)
  - Allow rngd process to drop privileges with "-D user:group"
  - Fix an error building with jitterentropy-3.4.0
  - Add a requirement for selinux-policy of a certain version
  - Fix a build failure on ppc64
  - Small edits in test scripts


author: Vladis Dronov <vdronov@redhat.com> - 6.15-2
changelog:
  - Update to the upstream v6.15 + tip of origin/master @ 6dcc9ec2 (bz 2124605)
  - Do not require selinux-policy if it is not present


author: Vladis Dronov <vdronov@redhat.com> - 6.15-3
changelog:
  - Update to the upstream v6.15 + tip of origin/master @ cb8cc624 (bz 2156554)
  - Fix a number of issues found by covscan code scanner
  - Add a jitter init timeout for tests
  - Add a start condition for the FIPS mode (bz 2154804)


author: Vladis Dronov <vdronov@redhat.com> - 6.16-1
changelog:
  - Update to the upstream v6.16 + tip of origin/master @ 0e560296 (bz 2174916)
  - Get rid of text relocations in -fPIE build
  - Add a hint for opensc package (bz 1845854)


author: Vladis Dronov <vdronov@redhat.com> - 6.16-7
changelog:
  - Update to the upstream v6.16 + tip of origin/master @ 98cf8d63 (RHEL-30953)
  - Use proper SPDX license identifiers
  - Fix a test failure


author: Vladis Dronov <vdronov@redhat.com> - 6.17-1
changelog:
  - Add Intel CET IBT instrumentation to assembly code
  - Update to the upstream v6.17 @ ac43f912 (RHEL-64951)


author: Till Maas <opensource@till.name> - 8.1-26
changelog:
  - Sync in current files from bash package:
    https://src.fedoraproject.org/rpms/bash/c/739b272e5f5d10cf27a847a44d09eb7f4b6ec89b?branch=master
    https://src.fedoraproject.org/rpms/bash/c/329df36f8bbc303be618f06562ec2c4eebfd1d29?branch=master
    https://src.fedoraproject.org/rpms/bash/c/e3b3cd9cec4a3bd12a792536c0ea131f5ba5bd72?branch=master


author: Steve Dickson <steved@redhat.com> - 1.2.6-1
changelog:
  - Use sysconfig variable in service file (bz 1972094)
  - Make sure policycoreutils is installed before using it (bz 1972133)
  - Make sure /var/lib/rpcbind exists (bz 1972133)
  - Corrected the URL reference (bz 1972117)


author: Steve Dickson <steved@redhat.com> - 1.2.6-4
changelog:
  - Use 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-double-free.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-envfile.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-tmpfiles.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-runstatdir.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-systemd-service.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-systemd-rundir.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-17
changelog:
  - Resolves: #2116669 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-21
changelog:
  - Resolves: RHEL-70265 - Rebase rsync to 3.2.5
  - Resolves: RHEL-67142 - Wrong progress reported by rsync when using copy-devices
  - Resolves: RHEL-29340 - Slowness in rsync due to extra validation steps.
  - Resolves: RHEL-18216 - rysnc script /usr/share/doc/rsync/support/rrsync is unsecure


author: Michal Ruprich <mruprich@redhat.com> - 3.2.5-2
changelog:
  - Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70208 - Path traversal vulnerability in rsync
  - Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71657 - Race Condition in rsync Handling Symbolic Links


author: Andreas Schneider <asn@redhat.com> - 4.19.4-100
changelog:
  - related: RHEL-16476 - Update to version 4.19.4
  - resolves: RHEL-2109 - Add support for certificate auto enrollment
  - resolves: RHEL-20761 - Add missing requirements for samba-gpupdate
  - resolves: RHEL-19566 - Fix smbget interactive authentication
  - resolves: RHEL-21001 - Fix samba-gpupdate paths for RHEL


author: Andreas Schneider <asn@redhat.com> - 4.19.4-102
changelog:
  - resolves: RHEL-22157 - Don't require NDES for samba-gpupdate
  - resolves: RHEL-20897 - Fix site name fetching for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.0-102
changelog:
  - resolves: RHEL-2109  - Support Certificate Auto Enrollment in Samba
  - resolves: RHEL-22157 - Fix root cert import for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.1-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.1
  - resolves: RHEL-26337 - Fix site lookup for samba-gpupdate
  - resolves: RHEL-5846 - Fix warning messages while upgrading libwbclient


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.2-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.2
  - resolves: RHEL-45841 - Fix KDC IP address lookup in case of trusted domain
  - resolves: RHEL-23814 - Fix smbclient to enumerate the printers


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.60-1
changelog:
  - Allow irqbalance execute shell if irqbalance_run_unconfined is on
  Resolves: RHEL-1556
  - Update irqbalance policy for using unconfined scripts
  Resolves: RHEL-1556


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.61-1
changelog:
  - Fix incorrect /run and /usr/bin file context entries
  Resolves: SELINUX-4392
  - Dontaudit irqbalance read sssd public files
  Resolves: RHEL-1556
  - Update sssd_dontaudit_read_public_files()
  Resolves: RHEL-1556
  - Allow insights-client file transition for files in /var/tmp
  Resolves: SELINUX-4392
  - Add the virt_exec_virsh() interface
  Resolves: SELINUX-4392
  - Add the ssh_exec_sshd() interface
  Resolves: SELINUX-4392
  - Add rhsmcertd interfaces
  Resolves: SELINUX-4392
  - Add the bind_exec_named_checkconf() interface
  Resolves: SELINUX-4392
  - Add the auth_write_motd_var_run_files() interface
  Resolves: SELINUX-4392
  - Add the gpg_domtrans_agent() interface
  Resolves: SELINUX-4392
  - Add the gpg_read_user_secrets() interface
  Resolves: SELINUX-4392
  - Add policy for insights-core
  Resolves: SELINUX-4392


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.62-1
changelog:
  - Allow "hostapd_cli ping" run as a systemd service
  Resolves: RHEL-59683
  - Allow systemd-timedated start/stop timemaster services
  Resolves: RHEL-95690
  - Allow lldpd connect to systemd-machined over a unix socket
  Resolves: RHEL-96167
  - Allow power-profiles-daemon get attributes of filesystems with extended attributes
  Resolves: RHEL-100718
  - Allow tuned-ppd watch_reads sysfs directories
  Resolves: RHEL-101687
  - Allow tuned-ppd watch sysfs directories
  Resolves: RHEL-101687


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.63-1
changelog:
  - Allow samba-dcerpcd send sigkills to passwd
  Resolves: RHEL-100032
  - Allow power-profiles-daemon watch sysfs directories
  Resolves: RHEL-100718
  - Allow power-profiles-daemon write sysfs files
  Resolves: RHEL-100718
  - Allow hostapd write to socket files in /tmp
  Resolves: RHEL-59683
  - Allow irqbalance search sssd lib directories
  Resolves: RHEL-1556
  - Add insights_client_delete_lib_dirs() interface
  Related: RHEL-59145


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.64-1
changelog:
  - Add insights_core and insights_client interfaces
  Related: RHEL-59145
  - Label /usr/libexec/postfix/tlsproxy with postfix_smtp_exec_t
  Resolves: RHEL-77101
  - Remove "minimum" as a SELINUXTYPE from /etc/selinux/config
  Resolves: RHEL-101140


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.65-1
changelog:
  - Revert "Add policy for insights-core"
  Resolves: RHEL-110650
  - Revert "Add insights_core interfaces"
  Resolves: RHEL-110650


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.66-1
changelog:
  - Reapply "Add insights_core interfaces"
  Resolves: RHEL-112367
  - Reapply "Add policy for insights-core"
  Resolves: RHEL-112367


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.67-1
changelog:
  - Allow login_userdomain dbus chat with tuned-ppd
  Resolves: RHEL-113906
  - selinux-policy: add allow rule for tuned_ppd_t
  Resolves: RHEL-113906
  - Add ppd_base_profile to file transition to get tuned_rw_etc_t type
  Resolves: RHEL-113906
  - Allow tuned-ppd manage tuned log files
  Resolves: RHEL-113906
  - Allow tuned-ppd connect to sssd over a unix stream socket
  Resolves: RHEL-113906
  - Allow tuned-ppd create ppd_base_profile with a file transition
  Resolves: RHEL-113906
  - Allow init create and use vsock socket
  Resolves: RHEL-113647
  - Add Valkey rules to Redis module
  Resolves: RHEL-108982
  - Allow ras-mc-ctl write to sysfs files
  Resolves: RHEL-103975
  - Allow kdump search kdumpctl_tmp_t directories
  Resolves: RHEL-66119


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.68-1
changelog:
  - Allow insights-client manage /etc symlinks
  Resolves: RHEL-108826
  - Allow insights-client get attributes of the rpm executable
  Resolves: RHEL-127329
  - Allow ras-mc-ctl get attributes of the kmod executable
  Resolves: RHEL-103975
  - Fix files_delete_boot_symlinks() to contain delete_lnk_files_pattern
  Resolves: RHEL-101155
  - Allow bootupd delete symlinks in the /boot directory
  Resolves: RHEL-101155
  - Update policy for bootupd
  Resolves: RHEL-101155
  - Allow create kerberos files in postgresql db home
  Resolves: RHEL-123225


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.69-1
changelog:
  - Allow sysadm access to TPM
  Resolves: RHEL-119055
  - Update policy for dhcpc_hook_t
  Resolves: RHEL-113941
  - Allow stap server read virtual memory sysctls
  Resolves: RHEL-114157
  - Allow login_userdomain watch /home and /var directories
  Resolves: RHEL-119686
  - Allow login_userdomain read lastlog
  Resolves: RHEL-119686
  - Allow staff role read/write cockpit-session unix stream sockets
  Resolves: RHEL-108068
  - Label /usr/libexec/dhcpcd-run-hooks with dhcpc_hook_exec_t
  Resolves: RHEL-113941


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.70-1
changelog:
  - Add the rpm_signal() interface
  Related: RHEL-108826
  - Allow tuned_t use its private tmpfs files
  Related: RHEL-108826
  - Allow kdump search kdumpctl_tmp_t directories
  Resolves: RHEL-66119


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.71-1
changelog:
  - Revert "Allow NM nvme dispatcher script start systemd services"
  Resolves: RHEL-111946
  - Allow ssh_agent_type create a sockfile in /run/user/USERID
  Resolves: RHEL-121936
  - Allow NM nvme dispatcher script start systemd services
  Resolves: RHEL-111946
  - Allow aide get attributes of a filesystem with extended attributes
  Resolves: RHEL-121480
  - Label miscellaneous /dev/papr-* devices
  Resolves: RHEL-129879


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.72-1
changelog:
  - Add insights_client service interfaces
  Related: RHEL-140893
  - Confine rhc-worker-playbook.worker and rhc-playbook-verifier
  Resolves: RHEL-132748
  - Allow gpg manage rpm cache
  Related: RHEL-108775
  - Allow gpg read rpm cache
  Related: RHEL-108775
  - Allow aide get attributes of tmpfs and devtmpfs filesystems
  Resolves: RHEL-121480
  - Allow rules for confined users logged in plasma
  Resolves: RHEL-133898
  - Allow login_userdomain watch lnk_files in /usr
  Resolves: RHEL-133898


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.73-1
changelog:
  - Add the fs_write_tmpfs_files() interface
  Resolves: RHEL-142141
  - Dontaudit aide the execmem permission
  Resolves: RHEL-121480
  - Update gpg policy for interactions with rhc-playbook-verifier
  Resolves: RHEL-132748
  - Allow rhc_playbook_verifier_t stream connect to itself
  Resolves: RHEL-132748
  - Update policy for rhc-worker-playbook
  Resolves: RHEL-132748
  - Allow traceroute_t bind rawip sockets to unreserved ports
  Resolves: RHEL-130267
  - Revert "Allow traceroute_t bind rawip sockets to unreserved ports"
  Related: RHEL-130267
  - Allow sudodomain connect to gkeyringd over a unix stream socket
  Resolves: RHEL-121158
  - Allow samba-bgqd send to smbd over a unix datagram socket
  Resolves: RHEL-95985
  - Allow ssh_agent_type manage generic cache home files
  Resolves: RHEL-121165
  - Label /usr/libexec/openssh/ssh-pkcs11-helper with ssh_agent_exec_t
  Resolves: RHEL-121165
  - Allow boothd connect to systemd-machined over a unix socket
  Resolves: RHEL-140882


author: Martin Osvald <mosvald@redhat.com> - 2.13.7-7
changelog:
  - Move /var/log/lastlog ownership to systemd (#2066753)
  - tcsh sets variable p to /usr/sbin from /etc/csh.login (#2066767)
  - bashrc: Don't set up VTE-specific PROMPT_COMMAND (#2026892)


author: Martin Osvald <mosvald@redhat.com> - 2.13.6-1
changelog:
  - csh.login: set PATH again (if empty) to prevent interpreter error (#1744106)
  - aliases: add pcp user (#1744091)
  - lang.csh: fix several variable substitution bugs and typos (#1746749)
  - don't set LANG as a per-shell variable
  - fix lang.csh script so it doesn't break tcsh -e scripts II (#1620004)
  - use full path for non-builtins in csh.cshrc, csh.login, lang.csh, lang.sh and profile (#1747493)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.47-7
changelog:
  - Fix sg_inq parsing in rescan-scsi-bus.sh (#2036005,#2035362)
  - Fix rescan-scsi-bus.sh summary print (#2035382)
  - sg_readcap --zbc man page switch fix (#2036718)
  - Various Covscan fixes (#2044433)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-7
changelog:
  - useradd: check if subid range exists for user. Resolves: #2179987
  - find_new_[gu]id: Skip over IDs that are reserved for legacy reasons. Resolves: #2179988


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-13
changelog:
  - nss.c: shadow_logfd to stderr. Resolves: RHEL-83431
  - vipw: restore the original terminal pgrp after editing. Resolves: RHEL-70844 and RHEL-72940


author: Javier Martinez Canillas <javierm@redhat.com> - 15-7
changelog:
  - Make EFI variable copying fatal only on secureboot enabled systems
    Resolves: rhbz#1715879
  - Fix booting shim from an EFI shell using a relative path
    Resolves: rhbz#1717061


author: Javier Martinez Canillas <javierm@redhat.com> - 15-12
changelog:
  - Fix firmware update bug in aarch64 caused by shim ignoring arguments
  - Fix a shim crash when attempting to netboot


author: Peter Jones <pjones@redhat.com> - 15-13
changelog:
  - New signing keys
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Martin Gieseking <martin.gieseking@uos.de> - 1.1.8-1
changelog:
  - Updated to new release.
  - Dropped version-related patch which has been applied upstream (BZ #1527850).


author: Jan Jansky <jjansky@redhat.com> = 4.9.1-1
changelog:
  - Update to 4.9.1 in RHEL 9
    Resolves: RHEL-86668
    Resolves: RHEL-86644
    Resolves: RHEL-86647
    Resolves: RHEL-86646


author: Jan Jansky <jjansky@redhat.com> = 4.9.1-2
changelog:
  - Update to 4.9.1-2 in RHEL 9
    Resolves: RHEL-86668
    Resolves: RHEL-86644
    Resolves: RHEL-86647
    Resolves: RHEL-86646


author: Jan Jansky <jjansky@redhat.com> = 4.9.2-1
changelog:
  - Update to 4.9.2 
    Resolves: RHEL-101717
    Resolves: RHEL-101718
    Resolves: RHEL-101719
    Resolves: RHEL-101720


author: Jan Jansky <jjansky@redhat.com> = 4.10.0-1
changelog:
  - Update to 4.10.0
    Resolves: RHEL-110500
    Resolves: RHEL-110501
    Resolves: RHEL-110502
    Resolves: RHEL-110503


author: Ondrej Dubaj <odubaj@redhat.com> - 3.34.0-1
changelog:
  - Updated to version 3.34.0 (https://sqlite.org/releaselog/3_34_0.html)
  - Enabled fts3conf.test on s390x and ppc64 architectures


author: Abhi Das <adas@redhat.com> - 4.4-9.git1
changelog:
  - CVE-2021-40153 squashfs-tools: unvalidated filepaths allow writing outside of destination
    rhbz#2000638


author: Abhi Das <adas@redhat.com> - 4.4-10.git1
changelog:
  - CVE-2021-41072 squashfs-tools: additional write outside destination directory exploit fix
    rhbz#2007304


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.13-3
changelog:
  - Address some issues reported by covscan (#1996691).
  - Replace 0141-tests-disable-sockopt-timestamp-on-new-glibc-with-__.patch
    with upstream v5.13-10-g0211fdc "tests: change sockopt-timestamp test
    to use syscall(__NR_recvmsg)"
    and 0154-tests-call-setsockopt-directly-in-sockopt-timestamp.patch.
  - Undo forceful injection of -m64 into CFLAGS/CPPFLAGS to avoid breaking
    mpers and its tests (#1996676).


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.18-2
changelog:
  - Fix the issues reported by covscan (#2103068).
  - Fix SELinux context matching for the deleted paths (#2087693).
  - Fix sloppy FD usage in the bpf test (#2103137).
  - Cater for RHEL 9 license requirement idiosyncrasies (#2103032).


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-1
changelog:
  - Rebase to v6.7; drop upstream patches on top of 5.18 (RHEL-8646).
  - Updated the SPDX license expression.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-2
changelog:
  - Fix incorrect syscall name reporting in restart_syscall() on attach when
    PTRACE_GET_SYSCALL_INFO is in use (RHEL-65109).
  - Update net-yy-inet* and linkat--secontext_mismatch tests.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.12-1
changelog:
  - Rebase to v6.12; drop upstream patches on top of 6.7, drop the harcoded
    "-isystem /usr/include" from CPPFLAGS (RHEL-8646).


author: Sahana Prasad <sahana@redhat.com> - 5.57-1
changelog:
  - New upstream release 5.57
  - Fixes #1925229 - client certificate not correctly verified
    when redirect and verifyChain options are used


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 5.58-4
changelog:
  - Stunnel cannot use an encrypted private key being built against OpenSSL 3.0
  - Resolves: rhbz#1976854


author: Clemens Lang <cllang@redhat.com> - 5.62-2
changelog:
  - Fix stunnel in FIPS mode
    Resolves: rhbz#2050617
  - Fail build if tests fail
    Resolves: rhbz#2051083


author: Clemens Lang <cllang@redhat.com> - 5.71-1
changelog:
  - New upstream release 5.71
    Resolves: RHEL-2468
  - Enable socket activation support
  - verify upstream source in %prep
  - clean up stale conditionals


author: Clemens Lang <cllang@redhat.com> - 5.71-2
changelog:
  - Speed up loading client CA list from CAfile
    Resolves: RHEL-52321
  - Do not load all CAs in client mode to allow continued use of BEGIN TRUSTED CERTIFICATE format
    Resolves: RHEL-52317


author: William Poteat <wpoteat@redhat.com> 1.29.10-1
changelog:
  - Switch dates returned by D-Bus ListInstalledProducts to ISO 8601
    (ptoscano@redhat.com)
  - 1793501: switch dates returned by D-Bus GetPool to ISO 8601
    (ptoscano@redhat.com)
  - Add format_iso8601_date.format_iso8601_date() (ptoscano@redhat.com)
  - Make sure, re-register works for deb repos (suttner@atix.de)
  - 1863039: Fix issue with dnf/yum variables (jhnidek@redhat.com)
  - 1879856: suppress the warning message when setting syspurpose values
    (tmerry@redhat.com)
  - ENT-2779: call format() on translated string (ptoscano@redhat.com)
  - 1930037: cockpit: ensure /etc/pki/product exist (ptoscano@redhat.com)
  - 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Reword ambiguous message (ptoscano@redhat.com)
  - Properly use ungettext for plural forms (ptoscano@redhat.com)
  - cockpit: fix extraction of plural messages (ptoscano@redhat.com)
  - 1672805: 'Addons' is failing spell check and should be changed to 'Add-ons'
    to match documentation (tmerry@redhat.com)
  - 1731109: improve man page & help for registering with --force option
    (tmerry@redhat.com)
  - 1749395: Proper handling when a user does not have an org
    (wpoteat@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - 1916540: Negative proxy tests occasionally encounter the wrong exception
    handling (tmerry@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (suanand@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ENT-3711: Fix a couple of typos (tmerry@redhat.com)
  - ENT-2468: Use format strings with named arguments for translator context
    (tmerry@redhat.com)
  - ENT-3276: refactor test_managercli.py by modules (ptoscano@redhat.com)
  - 1897767: what does 'No Valid values provided for usage' mean to the user
    (tmerry@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Replace optparse with argparse (wpoteat@redhat.com)
  - Fix variable for RestlibException exception (ptoscano@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Correction for condition that was breaking 3 nosetests (wpoteat@redhat.com)
  - maybe this time? (tmerry@localhost.localdomain)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Remove extra '%' in string (ptoscano@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - cockpit: Adjust for changed services image (martin@piware.de)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (wpoteat@redhat.com)
  - Update translation files (noreply@weblate.org)
  - 1897767: what does 'No valid values provided for usage' mean to the user
    (tmerry@localhost.localdomain)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - 1856832: add --org=ORG to the ROLE OPTIONS, USAGE OPTIONS and ADDONS OPTIONS
    (tmerry@localhost.localdomain)
  - 1880920: check for invalid addons (ptoscano@redhat.com)
  - Add AbstractSyspurposeCommand._are_provided_values_valid helper
    (ptoscano@redhat.com)
  - 1924166: improve man text of syspurpose --show (ptoscano@redhat.com)
  - 1646718 debrand a message so that it doesn't say Red Hat Subscription Manager
    but instead an entitlement server (tmerry@localhost.localdomain)


author: William Poteat <wpoteat@redhat.com> 1.29.11-1
changelog:
  - Add subscription-manager dependency to apt-katello-transport (kolb@atix.de)
  - 1898552: refactor/fix collection of IP v4/v6 address info
    (ptoscano@redhat.com)
  - cockpit: Enable TLS for mock insights server (martin@piware.de)
  - adding timoeout to jenkins pipeline (#2585) (jmolet@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1819555: cockpit: translate untranslatable messages (ptoscano@redhat.com)
  - Replace hardcoded errno value with constant (ptoscano@redhat.com)
  - 1940658: bash: complete also the syspurpose subcommand (ptoscano@redhat.com)
  - 1878736: use our i18n functions instead of dnf ones (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.12-1
changelog:
  - 1953069: bash: fix listing of config options (#2609) (ptoscano@redhat.com)
  - Cleanup old *.egg-info dirs in %post (csnyder@redhat.com)
  - 1953047: bash: drop completion for subscribe & unsubscribe
    (ptoscano@redhat.com)
  - 1952228: fix formatting of log error messages (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.13-1
changelog:
  - Updated translations for Korean, Chinese (simiplified, zh_CN), Italian
  - Refactoring of cloud collector/detector and facts (#2515)
    (jhnidek@redhat.com)
  - 1920020: show error message when setting invalid default_log_level as well as
    on every run until changed to a valid value (tmerry@redhat.com)
  - 1959048: improve wording for missing or empty syspurpose values
    (ptoscano@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1960765: fix typo "explicity" in man page (ptoscano@redhat.com)
  - cockpit: Lower cockpit-ws dependency to Recommends (martin@piware.de)
  - test: Robustify and trim down cockpit-ws installation (martin@piware.de)
  - jenkins: switch stylish job to Python 3 (ptoscano@redhat.com)
  - flake8: add more locally found issues (ptoscano@redhat.com)
  - Remove extra whitespace before '(' (ptoscano@redhat.com)
  - 1952879: extract messages from argparse instead of optparse
    (ptoscano@redhat.com)
  - po: set Project-Id-Version to rhsm (ptoscano@redhat.com)
  - po: fuzzy messages with invalid/missing placeholders (ptoscano@redhat.com)
  - po: ko: manually fix placeholder (ptoscano@redhat.com)
  - Update script reference to base branch to main (wpoteat@redhat.com)
  - 1896715: Set proper read permissions on certs (wpoteat@redhat.com)
  - cockpit: Use PF4 based empty state (mmarusak@redhat.com)
  - cockpit: Drop uglification (mmarusak@redhat.com)
  - cockpit: Use 'noreferrer' for external links (mmarusak@redhat.com)
  - cockpit: Add `standard-jsx` eslint plugin (mmarusak@redhat.com)
  - cockpit: Remove loaders for .es6 files (mmarusak@redhat.com)
  - cockpit: Add package-lock.json to .gitignore (mmarusak@redhat.com)
  - build: drop version requirements for pep8 and flake8 (ptoscano@redhat.com)
  - build: remove pyqver test requirement (ptoscano@redhat.com)
  - Add flake8 configuration (ptoscano@redhat.com)
  - Add missing second empty line after class/function (ptoscano@redhat.com)
  - Fix some over-indented code blocks (ptoscano@redhat.com)
  - jenkins: disambiguate virtualenv names (ptoscano@redhat.com)
  - 1956654: Fix issue with proxy and cockpit plugin (jhnidek@redhat.com)
  - Releaser for Centos (wpoteat@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.14-1
changelog:
  - Drop more files/references of old standalone syspurpose tool
    (ptoscano@redhat.com)
  - 1967780: improve placeholders in help text (ptoscano@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1898563: move syspurpose subcommands within the 'syspurpose' command
    (ptoscano@redhat.com)
  - Rename internal variable for syspurpose --show (ptoscano@redhat.com)
  - Drop command name from args when parsing them (ptoscano@redhat.com)
  - 1941904: disable initial-setup in RHEL >= 9 (ptoscano@redhat.com)
  - 1959048: improve wording for invalid syspurpose values (ptoscano@redhat.com)
  - Enable subman to run normally in containers for development/test
    (csnyder@redhat.com)
  - Fixed reporting of AWS cloud facts (null value) (jhnidek@redhat.com)
  - cockpit: Test also system purpose (mmarusak@redhat.com)
  - cockpit: Use current PF4 components and design (mmarusak@redhat.com)
  - test: Update cockpit test/common library (mmarusak@redhat.com)
  - cockpit: Update babel (mmarusak@redhat.com)
  - cockpit: Sync lib/patternfly with Cockpit (mmarusak@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.15-1
changelog:
  - 1941904: actually disable initial-setup in RHEL >= 9, and Fedora too (#2675)
    (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.16-1
changelog:
  - 1941904: remove packages (#2692)
    (31166354+tlhmerry9@users.noreply.github.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Move cloud detector/collector to cloud-what package (#2680)
    (jhnidek@redhat.com)
  - 1975552: add '[SUBMODULE]' in syspurpose usage string (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1973807: fix wording on error when listing syspurpose values (#2684)
    (ptoscano@redhat.com)
  - 1975552: remove extra '[OPTIONS]' from syspurpose usage string (#2682)
    (ptoscano@redhat.com)
  - Make Azure cloud collector more reliable (#2645) (jhnidek@redhat.com)
  - 1967210: Do not print warning, when valid value is provided
    (jhnidek@redhat.com)
  - 1968420: improve description of rhsm.conf format (ptoscano@redhat.com)
  - Delete server repo file (suttner@atix.de)


