# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-726.el9]
changelog:
  - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189954] {CVE-2025-71147}
  - nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks (Maurizio Lombardi) [RHEL-177561]
  - ALSA: update RHEL kconfigs for 7.1 upstream code (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel Skylake: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (Jaroslav Kysela) [RHEL-183296]
  - ASoC: sdw_utils: fix missing component_name for cs42l43 part_id 0x2A3B (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Cleanup if component_probe fails (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Prevent double-free of debugfs (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Fix missing calls to wm_adsp2_remove() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: timer: Disable work at freeing timer object (Jaroslav Kysela) [RHEL-183296]
  - ALSA: timer: Manage timer object with kref (Jaroslav Kysela) [RHEL-183296]
  - Revert "ALSA: timer: Fix UAF at snd_timer_user_params()" (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1403CDA (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SOF: amd: set ipc flags to zero (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SOF: amd: fix for ipc flags check (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp: Fix NULL dereference when removing firmware controls (Jaroslav Kysela) [RHEL-183296]
  - ALSA: timer: Fix UAF at snd_timer_user_params() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: timer: Forcibly close timer instances at closing (Jaroslav Kysela) [RHEL-183296]
  - ALSA: pcm: Fix unlocked runtime state reads in xfer ioctls (Jaroslav Kysela) [RHEL-183296]
  - ALSA: seq: dummy: fix UMP event stack overread (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio (Jaroslav Kysela) [RHEL-183296]
  - ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: acp70: add standalone RT721 SoundWire machine (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: yc: Add MSI Raider A18 HX A9WJG to quirk table (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_sai: Fix 32 slots TDM broken by integer shift UB in xMR write (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: yc: Enable internal mic on MSI Bravo 17 C7VF (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: acp: Add DMI quirk for Lenovo Yoga Pro 7 15ASH11 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Set the value of potential sticky mixers to maximum (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek:ALC269 fixup for Yoga Pro 7 15ASH11 mic mute LED (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: simple-mux: Fix enum control bounds check (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: add quirk for HP Dragonfly Folio G3 2-in-1 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/cs420x: Add CS4208 fixup for iMac16,1 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add iface reset and delay quirk for TAE1160 USB Audio (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Fix speaker output on ASUS ROG Strix G615LP (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: q6asm-dai: remove unnecessary braces (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: q6asm-dai: fix error handling in prepare and set_params (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: q6asm-dai: close stream only when running (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: q6asm-dai: do not set stream state in event and trigger callbacks (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: bytcht_es8316: Fix MCLK leak on init errors (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Limit mic boost on Positivo DN140 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: scarlett2: Fix 2i2 Gen 4 direct monitor gain on firmware 2417 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: pcm: oss: Fix setup list UAF on proc write error (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: cs35l56: Fix system name string leaks (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Lenovo Yoga Slim 7 14AGP11 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Fix incorrect comment for ALC299_FIXUP_PREDATOR_SPK (Jaroslav Kysela) [RHEL-183296]
  - ALSA: firewire-motu: Protect register DSP event queue positions (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: pcm512x: fix null-ptr dereference in pcm512x_overclock_xxx_put() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: soc-acpi-intel-ptl-match: Remove unnecessary cs42l43 match (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-acpi-intel-ptl-match: Make Chrome matches conditional (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: soc-acpi: Add entry for sof_es8336 in NVL match table. (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: sof_sdw: Add support for nvlrvp in NVL platform (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs-amp-lib: Fix typo in error message: write -> read (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs-amp-lib: Fix missing dput() after debugfs_lookup() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs-amp-lib: Fix wrong sizeof() in _cs_amp_set_efi_calibration_data() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Fix flushing of IRQ work in cs35l56_sdw_remove() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: seq: Serialize UMP output teardown with event_input (Jaroslav Kysela) [RHEL-183296]
  - ALSA: scarlett2: Allow flash writes ending at segment boundary (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add LED quirk for HP ProBook 430 G6 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/intel: Make sure to cancel irq-pending work at closing PCM stream (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: Move irq pending work into hda-intel stream (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-utils: Add missing va_end in snd_soc_ret() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: ua101: Reject too-short USB descriptors (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP 16 Piston OmniBook X (Jaroslav Kysela) [RHEL-183296]
  - ALSA: seq: avoid past-the-end iterator in snd_seq_create_port() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: timer: avoid past-the-end iterator in snd_timer_dev_register() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add quirk for HP Z66 G6 14 laptop (Jaroslav Kysela) [RHEL-183296]
  - ALSA: pcm: Don't setup bogus iov_iter for silencing (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion Plus 14 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: pcm_drm_eld: rate-limit ELD parsing errors (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: Avoid quirk matching with zero PCI SSID (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add quirk for HP 250 G10 (103c:8b34) (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Use ALC287_FIXUP_TXNW2781_I2C for ASUS Strix Gxx5 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: asihpi: Fix potential OOB array access at reading cache (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: acp: Add DMI quirk for ASUS Zenbook S16 UM5606GA (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: acp-sdw-legacy: check CPU DAI name before logging (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: q6apm-dai: Allocate an extra page for PCM buffers (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/ca0132: Disable auto-detect on manual output select (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion Laptop 16-ag0xxx (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: ALC269 fixup for Lenovo Yoga Pro 7 15ASH111 audio (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: Fix NULL pointer dereference in snd_hda_ctl_add() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add quirk for Samsung Galaxy Book5 360 headphone (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: fix mic boost on Framework PTL (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Limit mic boost on Positivo DN50E (Jaroslav Kysela) [RHEL-183296]
  - ALSA: doc: cs35l56: Update path to HDA driver source (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: qcom: Check offload mapping failures (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Fix Legion 7 16ITHG6 speaker amp binding (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add iface reset and delay quirk for TTGK Technology USB-C Audio (Jaroslav Kysela) [RHEL-183296]
  - ALSA: scarlett2: Add missing error check when initialise Autogain Status (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Log SoundWire status updates only on changes (Jaroslav Kysela) [RHEL-183296]
  - ASoC: ti: omap-dmic: Fix IS_ERR() vs NULL check bug in omap_dmic_select_fclk() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Drop malformed default N from Kconfig (Jaroslav Kysela) [RHEL-183296]
  - ASoC: sdw_utils: Check speaker component string allocation (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SOF: amd: Fix error code handling in psp_send_cmd() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: sdw_utils: Add quirk to ignore RT721 CODEC_MIC (Jaroslav Kysela) [RHEL-183296]
  - ASoC: sdw_utils: Add quirk to ignore RT712 CODEC_MIC (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: soc-acpi: add LG Gram 16Z90U RT713 + single RT1320 quirk (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-acpi-intel-arl-match: add rt712_l0_rt1320_l3 support (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: soc-acpi-intel-arl-match: Reorder ACPI machine tables (Jaroslav Kysela) [RHEL-183296]
  - ASoC; dt-bindings: mediatek,mt8173-rt5650-rt5514: Fix mediatek,audio-codec constraints (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: cs35l56: Put ACPI device after setting companion (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: cs35l41: Put ACPI device on missing physical node (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Bound MIDI endpoint descriptor scans (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add codec SSID quirk for Lenovo Yoga Pro 9 16IMH9 (17aa:38d5) (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Destroy workqueue in probe error path (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Don't use devres to unregister component (Jaroslav Kysela) [RHEL-183296]
  - ALSA: sparc/dbri: add missing fallthrough (Jaroslav Kysela) [RHEL-183296]
  - ALSA: core: Serialize deferred fasync state checks (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add mute LED fixup for HP Pavilion 15-cs1xxx (Jaroslav Kysela) [RHEL-183296]
  - ALSA: seq: Fix UMP group 16 filtering (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp_fw_find_test: Clear searched_fw_files in find-by-index test (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp_fw_find_test: Redirect wm_adsp_release_firmware_files() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tas2770: Deal with bogus initial temperature value (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tas2764: Deal with bogus initial temperature register value (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: add clock quirk for Motu 1248 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: midi2: Restart output URBs on resume (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP Envy X360 15-fh0xxx (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add quirk flags for AlphaTheta EUPHONIA (Jaroslav Kysela) [RHEL-183296]
  - ALSA: firewire-tascam: Do not drop unread control events (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add quirk flags for JBL Pebbles (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_xcvr: Fix event generation for cached controls (Jaroslav Kysela) [RHEL-183296]
  - ASoC: sdw_utils: avoid the SDCA companion function not supported failure (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: yc: Add HP OMEN Gaming Laptop 16-ap0xxx product line in quirk table (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Fix out-of-bounds in dev_err() in cs35l56_read_onchip_spkid() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: yc: Add DMI quirk for MSI Bravo 15 C7VE (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Fix hibernate write in runtime resume error path (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: ab8500: Remove suspicious code (Jaroslav Kysela) [RHEL-183296]
  - ALSA: pcmtest: Return -EFAULT on pattern read copy failure (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: add min_mute quirk for Razer Nommo V2 X (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add codec SSID quirk for Lenovo Yoga Pro 9 16IMH9 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Fix speaker silence after S3 resume on Xiaomi Mi Laptop Pro 15 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/tas2781: Fix incorrect bit update for non-book-zero or book 0 pages >1 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: cs35l56: Fix uninitialized value in cs35l56_hda_read_acpi() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/conexant: Fix missing error check for jack detection (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: Avoid WARN_ON() for HDMI chmap slot checks (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Fix quirk entry placement for PreSonus AudioBox USB (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: ab8500: Fix casting of private data (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Fix illegal writes to OTP_MEM registers (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: bytcr_wm5102: Fix MCLK leak on platform_clock_control error (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() (Jaroslav Kysela) [RHEL-183296] {CVE-2026-46146}
  - ALSA: usb-audio: Fix potential leak of pd at parsing UAC3 streams (Jaroslav Kysela) [RHEL-183296]
  - ALSA: caiaq: Don't abort when no input device is available (Jaroslav Kysela) [RHEL-183296]
  - ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path (Jaroslav Kysela) [RHEL-183296]
  - ASoC: aw88395: Fix kernel panic caused by invalid GPIO error pointer (Jaroslav Kysela) [RHEL-183296]
  - ALSA: caiaq: fix usb_dev refcount leak on probe failure (Jaroslav Kysela) [RHEL-183296] {CVE-2026-46048}
  - sound: ua101: fix division by zero at probe (Jaroslav Kysela) [RHEL-183296] {CVE-2026-46184}
  - ALSA: usb-audio: apply quirk for Playstation PDP Riffmaster (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: Remove duplicate cmedia entries in codecs Makefile (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add micmute LED quirk for Acer Aspire A315-44P (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: enable mute LED support on ThinkBook 16p (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Fix UAC3 cluster descriptor size check (Jaroslav Kysela) [RHEL-183296]
  - ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger (Jaroslav Kysela) [RHEL-183296] {CVE-2026-46157}
  - ALSA: hda: cs35l56: Propagate ASP TX source control errors (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: wcd937x: fix AUX PA sequencing and mixer controls (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Remove stale snd-soc-tegra-utils composite module definition (Jaroslav Kysela) [RHEL-183296]
  - ASoC: rt722-sdca: add FU06 Playback Switch for speaker mute control (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tas2764: Mark die temp register as volatile (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tas2770: Fix order of operations for temperature calculation (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SOF: Intel: add an empty adr_link (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: acp: Add DMI quirk for Valve Steam Deck OLED (Jaroslav Kysela) [RHEL-183296]
  - regmap: sdw-mbq: Fix spelling mistake "undeferable" -> "undeferrable" (Jaroslav Kysela) [RHEL-183296]
  - Revert "ALSA: pcmtest: fix reference leak on failed device registration" (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tas2781: Add tas5832 support (Jaroslav Kysela) [RHEL-183296]
  - ASoC: dt-bindings: ti,tas2781: Add TAS5832 support (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Avoid false E-MU sample-rate notifications (Jaroslav Kysela) [RHEL-183296]
  - ASoC: sdw_utils: cs42l43: allow spk component names to be combined (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: x1e80100: limit speaker volumes (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek - Add mute LED support for HP Victus 15-fa2xxx (Jaroslav Kysela) [RHEL-183296]
  - ALSA: pcmtest: Fix resource leaks in module init error paths (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio/line6: Add support for POD HD PRO (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add LED fixup for HP EliteBook 6 G2a Laptops (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: Fix reading of mipi-sdca-control-deferrable (Jaroslav Kysela) [RHEL-183296]
  - regmap: sdw-mbq: Allow defers on undeferrable controls (Jaroslav Kysela) [RHEL-183296]
  - Revert "ALSA: usb-audio: Add quirk for SmartlinkTechnology M01" (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: add quirk for Acer Nitro 16 AN16-41 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: core: Fix potential data race at fasync handling (Jaroslav Kysela) [RHEL-183296]
  - ALSA: als4000: Fix capture trigger chip->mode race (Jaroslav Kysela) [RHEL-183296]
  - ALSA: caiaq: Fix control_put() result and cache rollback (Jaroslav Kysela) [RHEL-183296]
  - ALSA: pcmtest: fix reference leak on failed device registration (Jaroslav Kysela) [RHEL-183296]
  - ALSA: 6fire: Fix input volume change detection (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add quirk entries for NexiGo N930W webcam (Jaroslav Kysela) [RHEL-183296]
  - ALSA: vx: use correct function name in kernel-doc comment (Jaroslav Kysela) [RHEL-183296]
  - ALSA: virtio: drop an extaneous kernel-doc comment (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add quirk for SmartlinkTechnology M01 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES (Jaroslav Kysela) [RHEL-183296] {CVE-2026-46018}
  - ALSA: hda/intel: Move firmware loading into the probe work (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: add quirk for HONOR MRB-XXX M1020 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Tidy up error check for processing unit (Jaroslav Kysela) [RHEL-183296]
  - ALSA: 6fire: Drop unnecessary NULL checks (Jaroslav Kysela) [RHEL-183296]
  - ALSA: 6fire: Reduce multi-level conditionals in usb6fire_chip_disconnect() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-183296]
  - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-183296]
  - ALSA: caiaq: Handle probe errors properly (Jaroslav Kysela) [RHEL-183296] {CVE-2026-46004}
  - ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() (Jaroslav Kysela) [RHEL-183296] {CVE-2026-46088}
  - ALSA: usb-audio: Fix missing error handling for get_min_max*() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek - fixed speaker no sound update (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add quirk for Acer PT316-51S headset mic (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tas2781: fix unused-const-variable warning (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add quirk for Legion S7 15IMH (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add quirk for HP Spectre x360 14-ea (Jaroslav Kysela) [RHEL-183296]
  - ALSA: caiaq: take a reference on the USB device in create_card() (Jaroslav Kysela) [RHEL-183296] {CVE-2026-31701}
  - ALSA: sscape: Add suspend and resume support (Jaroslav Kysela) [RHEL-183296]
  - ALSA: sscape: Cache per-card resources for board reinitialization (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Do not expose sticky mixers (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Move volume control resolution check into a function (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add error checks against get_min_max*() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add quirk for PreSonus AudioBox USB (Jaroslav Kysela) [RHEL-183296]
  - ALSA: interwave: guard PM-only restore helpers with CONFIG_PM (Jaroslav Kysela) [RHEL-183296]
  - ALSA: fireworks: bound device-supplied status before string array lookup (Jaroslav Kysela) [RHEL-183296] {CVE-2026-31619}
  - ALSA: sc6000: Restore board setup across suspend (Jaroslav Kysela) [RHEL-183296]
  - ALSA: sc6000: Keep the programmed board state in card-private data (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usx2y: us144mkii: fix NULL deref on missing interface 0 (Jaroslav Kysela) [RHEL-183296] {CVE-2026-31620}
  - ASoC: SOF: Don't allow pointer operations on unconfigured streams (Jaroslav Kysela) [RHEL-183296] {CVE-2026-46179}
  - ASoC: rt1320-sdw: Add an approach to get new hardware advance gain (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: Update text of FIXME (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: yc: Add MSI Vector A16 HX A8WHG to quirk table (Jaroslav Kysela) [RHEL-183296]
  - ASoC: uda1380: Modernize the driver (Jaroslav Kysela) [RHEL-183296]
  - ASoC: rt1320-sdw: kcontrol for brown-out feature update (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Fix spelling error 'recieved' -> 'received' (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: Tidy up irq_enable_flags()/sdca_irq_disable() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: Fix cleanup inversion in class driver (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/alc269: Drop superfluous GPIO write at resume (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add quirk flags for Feaulle Rainbow (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/senarytech: Clean up with the new GPIO helper (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/sigmatel: Clean up with the new GPIO helper (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: Add sync version of snd_hda_codec_write() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: Add a simple GPIO setup helper function (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Clean up with snd_hda_codec_set_gpio() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/alc662: Simplify the quirk for CSL Unity BF24B (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/analog: Fix GPIO verb orders (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/ca0132: Clean up with the new GPIO helper (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/cirrus: Clean up with the new GPIO helper (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/conexant: Clean up with the new GPIO helper (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add iface reset and delay quirk for HUAWEI USB-C HEADSET (Jaroslav Kysela) [RHEL-183296]
  - ALSA: msnd: add ISA and PnP system sleep callbacks (Jaroslav Kysela) [RHEL-183296]
  - ALSA: msnd: prepare system sleep support (Jaroslav Kysela) [RHEL-183296]
  - ALSA: i2c: ak4xxx-adda: seed AK5365 cache with reset defaults (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add quirk for CSL Unity BF24B (Jaroslav Kysela) [RHEL-183296]
  - ASoC: dt-bindings: hisilicon: Convert hi6210 I2S to dt-schema (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tas2781: Explicit association of Device, Device Name, and Device ID (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: acp-da7219-max98357a: tidyup acp_soc_is_rltk_max() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: qcom: Fix incorrect type in enable_audio_stream (Jaroslav Kysela) [RHEL-183296]
  - ALSA: i2c: ak4xxx-adda: implement AK4529 reset handling (Jaroslav Kysela) [RHEL-183296]
  - ALSA: tea6330t: add mixer state restore helper (Jaroslav Kysela) [RHEL-183296]
  - ALSA: tea6330t: move snd_tea6330t_detect() EXPORT_SYMBOL (Jaroslav Kysela) [RHEL-183296]
  - ALSA: interwave: add ISA and PnP suspend and resume callbacks (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: ps: fix the pcm device numbering for acp pdm dmic (Jaroslav Kysela) [RHEL-183296]
  - ASoC: intel: avs: Fix type mismatch in variable assignment (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: Constify GPR packet being send over GPR interface (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc.h: remove unused card->pmdown_time (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SOF: compress: return the configured codec from get_params (Jaroslav Kysela) [RHEL-183296]
  - ASoC: rt5640: Handle 0Hz sysclk during stream shutdown (Jaroslav Kysela) [RHEL-183296]
  - ALSA: gusmax: add ISA suspend and resume callbacks (Jaroslav Kysela) [RHEL-183296]
  - ALSA: gus: add shared GF1 suspend and resume helpers (Jaroslav Kysela) [RHEL-183296]
  - ALSA: gusclassic: add ISA suspend and resume callbacks (Jaroslav Kysela) [RHEL-183296]
  - ALSA: gusextreme: add ISA suspend and resume callbacks (Jaroslav Kysela) [RHEL-183296]
  - ALSA: ctxfi: Add fallback to default RSR for S/PDIF (Jaroslav Kysela) [RHEL-183296] {CVE-2026-46049}
  - ALSA: ctxfi: Limit PTP to a single page (Jaroslav Kysela) [RHEL-183296] {CVE-2026-31602}
  - ALSA: scarlett2: Add missing sentinel initializer field (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Fix code style error (Jaroslav Kysela) [RHEL-183296]
  - ALSA: aoa: onyx: Update IEC958 sample-rate status for PCM playback (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: Standardize MCLK error logs across RT boards (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: cht_bsw_rt5672: Fix MCLK leak on platform_clock_control error (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: bytcr_rt5651: Fix MCLK leak on platform_clock_control error (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: bytcr_rt5640: Fix MCLK leak on platform_clock_control error (Jaroslav Kysela) [RHEL-183296]
  - ASoC: imx-rpmsg: Add DSD format support with dynamic DAI format switching (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: Export Q7.8 volume control helpers (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: tlv320dac33: remove kmemdup_array (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: Add RJ support to class driver (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: acp-sdw-legacy: remove unnecessary condition check (Jaroslav Kysela) [RHEL-183296]
  - ASoC: intel: sof_sdw: Prepare for configuration without a jack (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: Notify IEC958 Default PCM switch state changes (Jaroslav Kysela) [RHEL-183296]
  - ALSA: aoa/onyx: Fix OF node leak on probe failure (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: q6apm: Add support for early buffer mapping on DSP (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: qdsp6: remove search for module iid in hot path (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: q6apm-lpass-dai: move graph start to trigger (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: qdapm-lpass-dai: correct the error message (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: q6dsp: Add Senary MI2S audio interface support (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: qdsp6: lpass-ports: add support for LPASS LPI MI2S dais (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: common: validate cpu dai id during parsing (Jaroslav Kysela) [RHEL-183296]
  - ASoC: dt-bindings: qcom: add LPASS LPI MI2S dai ids (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: q6apm-dai: reset queue ptr on trigger stop (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens (Jaroslav Kysela) [RHEL-183296] {CVE-2026-46143}
  - ASoC: qcom: qdsp6: topology: check widget type before accessing data (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: q6apm: remove child devices when apm is removed (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: q6apm: move component registration to unmanaged version (Jaroslav Kysela) [RHEL-183296] {CVE-2026-31587}
  - soundwire: debugfs: initialize firmware_file to empty string (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: apply quirk for MOONDROP JU Jiu (Jaroslav Kysela) [RHEL-183296]
  - ALSA: aoa/tas: Fix OF node leak on probe failure (Jaroslav Kysela) [RHEL-183296]
  - ALSA: compress: Pay attention if drivers error out retrieving pointers (Jaroslav Kysela) [RHEL-183296]
  - ALSA: compress: Refuse to update timestamps for unconfigured streams (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_easrc: Change the type for iec958 channel status controls (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_easrc: Fix value type in fsl_easrc_iec958_get_bits() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_easrc: Check the variable range in fsl_easrc_iec958_put_bits() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_mode_put() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_arc_mode_put() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_micfil: Fix event generation in micfil_quality_set() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_micfil: Fix event generation in micfil_put_dc_remover_state() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_micfil: Fix event generation in micfil_range_set() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_micfil: Fix event generation in hwvad_put_init_mode() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_micfil: Fix event generation in hwvad_put_enable() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_micfil: Add access property for "VAD Detected" (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Use dev_err_probe() in tegra_asoc_machine probe (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Use dev_err_probe() for regmap init failures (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Use dev_err_probe() in OPE, PEQ and MBDRC drivers (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Add error logging in tegra210_admaif driver (Jaroslav Kysela) [RHEL-183296]
  - ASoC: mxs-sgtl5000: disable MCLK on error paths of mxs_sgtl5000_probe() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: es1688: add ISA suspend and resume callbacks (Jaroslav Kysela) [RHEL-183296]
  - ALSA: ctxfi: Use correct DAIO type for da_desc (Jaroslav Kysela) [RHEL-183296]
  - ALSA: ctxfi: Rename SPDIFI1 to SPDIFI_BAY (Jaroslav Kysela) [RHEL-183296]
  - ALSA: ctxfi: Precompute SRC allocation loop bound (Jaroslav Kysela) [RHEL-183296]
  - ASoC: ak5558: remove unused snd_soc_component (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc.h: remove snd_soc_of_parse_audio_prefix() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/cmedia: Remove duplicate pin configuration parsing (Jaroslav Kysela) [RHEL-183296]
  - ALSA: aoa: i2sbus: clear stale prepared state (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SOF: Intel: hda: Place check before dereference (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-core: remove duplicate snd_soc_flush_all_delayed_work() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: fix code style (ERROR: else should follow close brace '}') (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: fix bad indentation for alc269 (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: acp-sdw-legacy: rename the dmic component name (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: acp: update dmic_num logic for acp pdm dmic (Jaroslav Kysela) [RHEL-183296]
  - ASoC: jz4770: Convert to devm_clk_get_enabled() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: jz4760: Convert to devm_clk_get_enabled() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: jz4725b: Convert to devm_clk_get_enabled() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: samsung: spdif: Convert to devm_ioremap_resource() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add support for ASUS 2026 Commercial laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/realtek: Add support for HP Laptops (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: cs35l41: Fix boost type for HP Dragonfly 13.5 inch G4 (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: inline i2c_check_functionality checks (Jaroslav Kysela) [RHEL-183296]
  - ALSA: aoa: i2sbus: fix OF node lifetime handling (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/cs8409: Fix error message in cs8409_i2c_bulk_read() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: intel: Drop obsolete probe-work unlock workaround (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: tidy up the AF16Rig quirks (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda: Add missing SET_GPI_* and SET_GPO_* verb definitions (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/proc: show GPI and GPO state in codec proc output (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add quirks for Arturia AF16Rig (Jaroslav Kysela) [RHEL-183296]
  - ALSA: asihpi: detect truncated control names (Jaroslav Kysela) [RHEL-183296]
  - ALSA: core: Validate compress device numbers without dynamic minors (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: ehl_rt5660: remove unused macro definitions (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: fix the register to ctl value conversion for Q7.8 format (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-core: remove unused dobj_list (Jaroslav Kysela) [RHEL-183296]
  - ASoC: ts3a227e: Drop unused include (Jaroslav Kysela) [RHEL-183296]
  - ASoC: rt1318: Drop unused include (Jaroslav Kysela) [RHEL-183296]
  - ASoC: nau8315: Drop unused include (Jaroslav Kysela) [RHEL-183296]
  - ASoC: dt-bindings: mediatek,mt8173-rt5650-rt5514: convert to DT schema (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Extend max number of channels to 64 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Replace hard-coded number with MAX_CHANNELS (Jaroslav Kysela) [RHEL-183296]
  - ALSA: pcm: Serialize snd_pcm_suspend_all() with open_mutex (Jaroslav Kysela) [RHEL-183296]
  - ALSA: pcm: Use pcm_lib_apply_appl_ptr() in x32 sync_ptr (Jaroslav Kysela) [RHEL-183296]
  - ALSA: core/seq: Optimize the return logic in cc_ev_to_ump_midi2 (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: rotate standard MIDI output port scan (Jaroslav Kysela) [RHEL-183296]
  - ALSA: seq_oss: return full count for successful SEQ_FULLSIZE writes (Jaroslav Kysela) [RHEL-183296]
  - ASoC: sdw_utils: add rt1320 and rt1321 dmic dai in codec_info_list (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SOF: Intel: Add a is_amp flag to fix the wrong name prefix (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: soc-acpi-intel-ptl-match: drop rt722 monolithic match tables (Jaroslav Kysela) [RHEL-183296]
  - ASoC: renesas: Fix non-static global variable (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp_fw_find_test: Fix missing NULL terminator on file name list (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Allow factory calibration through ALSA controls (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc.h: Add SOC_SINGLE_BOOL_EXT_ACC() to allow setting access flags (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Use dev_err_probe() in tegra_audio_graph_card probe (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Use dev_err_probe() in tegra_asoc_machine probe (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Use dev_err_probe() in tegra210_sfc probe (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Use dev_err_probe() in tegra210_mvc probe (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Use dev_err_probe() in tegra210_mixer probe (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Add error logging in tegra210_i2s driver (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Use dev_err_probe() in tegra210_dmic probe (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Add error logging in tegra210_amx driver (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Use dev_err_probe() in tegra210_ahub probe (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Add error logging in tegra210_adx driver (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Use dev_err_probe() in tegra186_dspk probe (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Use dev_err_probe() in tegra186_asrc probe (Jaroslav Kysela) [RHEL-183296]
  - ASoC: update outdated comments for removed snd_soc_new_pcms() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: uda1380: use dev_err() and %pe for better error reporting (Jaroslav Kysela) [RHEL-183296]
  - ASoC: uda1380: fix missing return value checks for I2C operations (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SOF: sof-audio: pcm_id is __le32 (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: yc: Add MSI Thin A15 B7VF to quirk table (Jaroslav Kysela) [RHEL-183296]
  - ASoC: sdw_utils: add vendor_id to asoc_sdw_codec_info (Jaroslav Kysela) [RHEL-183296]
  - ASoC: sun4i-spdif: Make reset control non-optional and check for all errors (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-topology: fix __le32 conversion in printed values (Jaroslav Kysela) [RHEL-183296]
  - ASoC: generic: update outdated comment for removed soc_bind_dai_link() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp: select CONFIG_SND_SOC_WM_ADSP from all users (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-component: remove component->val_bytes (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-ops: use snd_soc_component_regmap_val_bytes() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: use snd_soc_component_regmap_val_bytes() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-component: add snd_soc_component_regmap_val_bytes() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: validate full match when resolving quirk aliases (Jaroslav Kysela) [RHEL-183296]
  - ASoC: dt-bindings: adi,ssm2305: Convert to DT schema (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp: Fix crash in kunit tests on arm64 (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: cs42l84: set up PLL for more sample rates (Jaroslav Kysela) [RHEL-183296]
  - soundwire: intel_auxdevice: Add cs42l49 to wake_capable_list (Jaroslav Kysela) [RHEL-183296]
  - ALSA: timer: keep a list of open masters for slave lookup (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: Use named control mux for GE/SU controls (Jaroslav Kysela) [RHEL-183296]
  - ASoC: dapm: Add a named controls variant of a mux widget (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: wcd-clsh: Always update buck/flyback on transitions on transitions (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_easrc: fix comment typo (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc_sdw_utils: remove codec name index of snd_soc_sdca codecs (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc_sdw_utils: remove cs42l45 SmartMic codec name index (Jaroslav Kysela) [RHEL-183296]
  - ALSA: pcm: oss: use proper stream lock for runtime->state access (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-component: remove pcm_construct()/pcm_destruct() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: xtensa: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: xilinx: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: uniphier: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: stm: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: sprd: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: sof: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-generic-dmaengine-pcm: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: samsung: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: qcom: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: pxa: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: kirkwood: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: intel: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: generic: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: dwc: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: rt5xxx-spi: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: cros_ec_codec: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: bcm: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: au1x: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: atmel: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: apple: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: name back to pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-component: re-add pcm_new()/pcm_free() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: aw88166: Support device specific firmware (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tas2770: expose SDOUT bus keeper via set_tdm_idle (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tas2764: expose SDOUT bus keeper via set_tdm_idle operation (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-dai: add common operation to set TDM idle mode (Jaroslav Kysela) [RHEL-183296]
  - ASoC: dt-bindings: add TDM slot idle mode properties (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-dai: define possible idle TDM slot modes (Jaroslav Kysela) [RHEL-183296]
  - ASoC: dt-bindings: update tdm-slot.txt references to tdm-slot.yaml (Jaroslav Kysela) [RHEL-183296]
  - ASoC: dt-bindings: convert tdm-slot to YAML (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: acp3x-rt5682-max9836: Drop unused include (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: acp3x-es83x: Drop unused include (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: acp-rt5645: Drop unused include (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: acp-es8336: Drop unused include (Jaroslav Kysela) [RHEL-183296]
  - ASoC: amd: acp-da7291-max98357a: Drop unused include (Jaroslav Kysela) [RHEL-183296]
  - ASoC: sdw_utils: Add codec_info for cs42l49 (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: Add support for the Cirrus Logic cs42l49 (Jaroslav Kysela) [RHEL-183296]
  - soundwire: cadence: Clear message complete before signaling waiting thread (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: map UAC3 front wide channels in convert_chmap_v3() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Support clock stop mode 1 if enabled in ACPI (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: catpt: Migrate to the new control operations (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: catpt: Do not wake DSP just for volume setup (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: catpt: Simplify procedure of applying user settings (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: catpt: New volume and mute control operations (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Intel: catpt: Synchronize stream access (Jaroslav Kysela) [RHEL-183296]
  - ASoC: da7219: scope AAD suspend and resume helpers to CONFIG_PM (Jaroslav Kysela) [RHEL-183296]
  - ALSA: aoa: Skip devices with no codecs in i2sbus_resume() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SOF: sof-audio: pcm_id is __le32 (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp: Combine some similar code in firmware file search (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp: Use a struct to pass around firmware struct and filename (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp: Add KUnit test cases for '/' in firmware filenames (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp: Convert '/' to '-' when normalizing firmware filenames (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp: Use consistent error checks in wm_adsp_request_firmware_files() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp: Remove duplicated code to find firmware file (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp: Add kunit test for firmware file search (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp: Export function for KUnit test to get firmware filenames (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp: Add KUnit redirection stubs for firmware file search (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp: Remove unused argument to wm_adsp_release_firmware_files() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_xcvr: add bitcount and timestamp controls (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_sai: add bitcount and timestamp controls (Jaroslav Kysela) [RHEL-183296]
  - ASoC: fsl_utils: Add snd_kcontrol functions for specific cases (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/senary: Fix beep error handling and optimize EAPD switching (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: wcd9335: Remove potential undefined behavior in wcd9335_slimbus_irq() (Jaroslav Kysela) [RHEL-183296]
  - ASoC: wm_adsp: Make wm_adsp_fw_text[] const (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Put OTP register defines in correct address order (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: peb2466: Change the +/- 6dB switch to a volume (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56-test: Remove pointless duplicate loop counters (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: add Studio 1824 support (Jaroslav Kysela) [RHEL-183296]
  - mfd: cs42l43: Add support for the B variant (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs42l43: Add support for the B variant (Jaroslav Kysela) [RHEL-183296]
  - ASoC: dt-bindings: cirrus,cs42l43: Add CS42L43B variant (Jaroslav Kysela) [RHEL-183296]
  - ASoC: sdw_utils: Add CS42L43B codec info (Jaroslav Kysela) [RHEL-183296]
  - soundwire: Intel: test bus.bpt_stream before assigning it (Jaroslav Kysela) [RHEL-183296]
  - soundwire: bus: demote UNATTACHED state warnings to dev_dbg() (Jaroslav Kysela) [RHEL-183296]
  - soundwire: stream: Poll for DP prepare to avoid interrupt deadlock (Jaroslav Kysela) [RHEL-183296]
  - soundwire: amd: add clock init control function (Jaroslav Kysela) [RHEL-183296]
  - soundwire: amd: refactor bandwidth calculation logic (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Refine string-descriptor-based quirk matching (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: KUnit tests for reading speaker ID from host GPIOs (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: KUnit tests for setting dsp.system_name (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56: Some KUnit testing of cs35l56_get_speaker_id() (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Use strings in struct usb_dev for manufacturer & co (Jaroslav Kysela) [RHEL-183296]
  - ALSA: hda/senary: Add hardware init verbs and fixup framework (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Improve volume range checks (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add helper function for volume range checks (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Deconflict VID between Focusrite Novation & MV-SILICON (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Support string-descriptor-based quirk table entry (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add QUIRK_FLAG_MIXER_{PLAYBACK,CAPTURE}_LINEAR_VOL (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Add linear volume quirk for Hotone Audio Pulze Mini (Jaroslav Kysela) [RHEL-183296]
  - ALSA: usb-audio: Apply linear volume quirk on MV-SILICON devices (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l56-test: Add test cases without onchip pulls defined (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-core: Use guard()/scoped_guard() for mutex lock (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l45: Hibernate wm_adsp on runtime suspend (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs35l41: Hibernate wm_adsp on runtime suspend (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: wm_adsp: Allow wm_adsp to hibernate without stopping DSP (Jaroslav Kysela) [RHEL-183296]
  - firmware: cs_dsp: Add API to hibernate the DSP (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Support WM8962 by machine driver (Jaroslav Kysela) [RHEL-183296]
  - ASoC: dt-bindings: nvidia,tegra-audio: document WM8962 CODEC (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tegra: Support CPCAP by machine driver (Jaroslav Kysela) [RHEL-183296]
  - ASoC: dt-bindings: nvidia,tegra-audio: document CPCAP CODEC (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs42xx8: add error checks for constraints in TDM mode (Jaroslav Kysela) [RHEL-183296]
  - ALSA: aoa: Constify struct codec_connection (Jaroslav Kysela) [RHEL-183296]
  - ALSA: control: Verify put() result when in debug mode (Jaroslav Kysela) [RHEL-183296]
  - ASoC: remove snd_soc_pcm_subclass (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: Pull the Q7.8 volume helpers out of soc-ops (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: Improve mapping of Q7.8 SDCA volumes (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: Add default value for mipi-sdca-function-reset-max-delay (Jaroslav Kysela) [RHEL-183296]
  - ASoC: cs-amp-lib-test: Stop including platform_device.h (Jaroslav Kysela) [RHEL-183296]
  - soundwire: intel_auxdevice: Add CS47L47 to wake_capable_list (Jaroslav Kysela) [RHEL-183296]
  - soundwire: slave: Don't register devices that are disabled in ACPI (Jaroslav Kysela) [RHEL-183296]
  - ASoC: SDCA: Add CS47L47 to class driver (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc_sdw_utils: Add device info for CS47L47 (Jaroslav Kysela) [RHEL-183296]
  - ASoC: tas2552: Allow audio enable GPIO to sleep (Jaroslav Kysela) [RHEL-183296]
  - soundwire: sdw.h: repair names and format of kernel-doc comments (Jaroslav Kysela) [RHEL-183296]
  - ASoC: ti: davinci-mcasp: Add system suspend/resume support (Jaroslav Kysela) [RHEL-183296]
  - ASoC: soc-compress: use function to clear symmetric params (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Add SPDX ids to many soc files (Jaroslav Kysela) [RHEL-183296]
  - ASoC: rt5677-spi: Add SPI device ID matching table (Jaroslav Kysela) [RHEL-183296]
  - ASoC: rt5677: Reset the codec during probing (Jaroslav Kysela) [RHEL-183296]
  - ASoC: rt5677: Set up ACPI GPIO pins mapping table (Jaroslav Kysela) [RHEL-183296]
  - ASoC: rt5677: Report error if the ID register cannot be read (Jaroslav Kysela) [RHEL-183296]
  - ASoC: rt5677: Allow it to be defined as an I2C board (Jaroslav Kysela) [RHEL-183296]
  - ASoC: rt5677: Fix typo in the header file (Jaroslav Kysela) [RHEL-183296]
  - ASoC: rt5677: Add 10EC5677 ACPI ID as supported (Jaroslav Kysela) [RHEL-183296]
  - ASoC: codecs: aw88261: Add firmware-name support (Jaroslav Kysela) [RHEL-183296]
  - ASoC: dt-bindings: awinic,aw88395: Document firmware-name property (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Add quirk for Lecoo Bellator N176 (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Drop RPL driver (Jaroslav Kysela) [RHEL-183296]
  - ASoC: Add DMIC support for the AMD RPL platform (Jaroslav Kysela) [RHEL-183296]
  - overflow: Introduce struct_offset() to get offset of member (Jaroslav Kysela) [RHEL-183296]
  - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-185517]
  - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-185517]
  - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-185517]
  - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-185517]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-727.el9]
changelog:
  - s390/sclp: Allow PCI reports for NVMe SMART data (Jan Polensky) [RHEL-188090]
  - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-190412]
  - vsock: initialize child_ns_mode_locked in vsock_net_init() (Stefano Garzarella) [RHEL-155389]
  - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Jan Polensky) [RHEL-190426]
  - s390/pkey: Check length in pkey_pckmo handler implementation (Jan Polensky) [RHEL-190425]
  - x86/mce: Restore MCA polling interval halving (David Arcari) [RHEL-208634]
  - powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked() (David Arcari) [RHEL-192478]
  - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179295] {CVE-2026-46099}
  - cpufreq: intel_pstate: Use correct scaling factor on Raptor Lake-E (Mark Langsdorf) [RHEL-185961]
  - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189960] {CVE-2026-22979}
  - Bluetooth: btintel_pcie: Fix incorrect MAC access programming (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: treat boot stage bit 12 as warning (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: use strscpy to copy plain strings (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: Align shared DMA memory to 128 bytes (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pci: Fix btintel_pcie_read_hwexp code style (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: Add device id of Scorpious2, Nova Lake-PCD-S (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: Add device id of Scorpius Peak2, Nova Lake-PCD-H (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: Add support for exception dump for ScP2F (David Marlin) [RHEL-117330]
  - Bluetooth: btintel: Add support for Scorpious Peak2F support (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: Add support for exception dump for ScP2 (David Marlin) [RHEL-117330]
  - Bluetooth: btintel: Add DSBR support for ScP2 onwards (David Marlin) [RHEL-117330]
  - Bluetooth: btintel: Add support for Scorpious Peak2 support (David Marlin) [RHEL-117330]
  - Bluetooth: btintel: Replace CNVi id with hardware variant (David Marlin) [RHEL-117330]
  - Bluetooth: btintel: Add support for hybrid signature for ScP2 onwards (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: Replace snprintf("%s") with strscpy (David Marlin) [RHEL-117330]
  - x86/microcode: Add platform mask to Intel microcode "old" list (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/cpu: Add platform ID to CPU matching structure (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/cpu: Add platform ID to CPU info structure (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/microcode: Refactor platform ID enumeration into a helper (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/cpu/intel: Replace early Family 6 checks with VFM ones (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/mtrr: Modify a x86_model check to an Intel VFM check (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/microcode: Update the Intel processor flag scan check (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/cpu/intel: Fix the MOVSL alignment preference for extended Families (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/apic: Fix 32-bit APIC initialization for extended Intel Families (Luis Claudio R. Goncalves) [RHEL-184789]
  - ceph: fix NULL pointer dereference in ceph_mds_auth_match() (Alex Markuze) [RHEL-180666]
  - ceph: fix multifs mds auth caps issue (Alex Markuze) [RHEL-180666]
  - ceph: fix memory leak in ceph_mds_auth_match() (Alex Markuze) [RHEL-180666]
  - ceph: fix cred leak in ceph_mds_check_access() (Alex Markuze) [RHEL-180666]
  - ceph: pass cred pointer to ceph_mds_auth_match() (Alex Markuze) [RHEL-180666]
  - ceph: fix a memory leak on cap_auths in MDS client (Alex Markuze) [RHEL-180666]
  - doc: ceph: update userspace command to get CephFS metadata (Alex Markuze) [RHEL-180666]
  - ceph: add CEPHFS_FEATURE_MDS_AUTH_CAPS_CHECK feature bit (Alex Markuze) [RHEL-180666]
  - ceph: check the cephx mds auth access for async dirop (Alex Markuze) [RHEL-180666]
  - ceph: check the cephx mds auth access for open (Alex Markuze) [RHEL-180666]
  - ceph: check the cephx mds auth access for setattr (Alex Markuze) [RHEL-180666]
  - ceph: add ceph_mds_check_access() helper (Alex Markuze) [RHEL-180666]
  - ceph: save cap_auths in MDS client when session is opened (Alex Markuze) [RHEL-180666]
  - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180065] {CVE-2026-46150}
  - efi: Allow to expose the workqueue via sysfs (Luis Claudio R. Goncalves) [RHEL-175657]
  - workqueue: Allow to expose ordered workqueues via sysfs (Luis Claudio R. Goncalves) [RHEL-175657]
  - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168069] {CVE-2026-31419}
  - net: add proper RCU protection to /proc/net/ptype (Paolo Abeni) [RHEL-152699]
  - net: sock: fix hardened usercopy panic in sock_recv_errqueue (Paolo Abeni) [RHEL-152699]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-728.el9]
changelog:
  - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193519] {CVE-2026-52973}
  - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190343] {CVE-2026-53281}
  - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190343]
  - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191440] {CVE-2026-53185}
  - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-100912]
  - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-100912]
  - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-100912]
  - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188545] {CVE-2026-53059}
  - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188460] {CVE-2026-53016}
  - RAS/AMD/ATL: Require PRM support for future systems (Joel Savitz) [RHEL-122804]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-729.el9]
changelog:
  - ppc/fadump: invoke kmsg_dump in fadump panic path (Mamatha Inamdar) [RHEL-211104]
  - selinux: fix incorrect execmem checks on overlayfs (Ondrej Mosnacek) [RHEL-210856]
  - Revert "selinux: RHEL-only hotfix for execmem regression" (Ondrej Mosnacek) [RHEL-210856]
  - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189963] {CVE-2026-23002}
  - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-185518]
  - icmp: fix NULL pointer dereference in icmp_tag_validation() (Guillaume Nault) [RHEL-152680]
  - net: nexthop: fix percpu use-after-free in remove_nh_grp_entry (Guillaume Nault) [RHEL-152680]
  - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Guillaume Nault) [RHEL-152680]
  - dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (Guillaume Nault) [RHEL-152680]
  - ipv4: Fix reference count leak when using error routes with nexthop objects (Guillaume Nault) [RHEL-152680]
  - ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (Guillaume Nault) [RHEL-152680]
  - arp: use RCU protection in arp_xmit() (Guillaume Nault) [RHEL-152680]
  - ipv4: icmp: convert to dev_net_rcu() (Guillaume Nault) [RHEL-152680]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-730.el9]
changelog:
  - iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (Dennis Chen) [RHEL-208620]
  - platform/x86: intel-hid: Protect ACPI notify handler against recursion (David Arcari) [RHEL-212712]
  - i2c: i801: fix hardware state machine corruption in error path (David Arcari) [RHEL-212646]
  - scsi: megaraid_sas: Fix NULL pointer dereference on firmware duplicate completion (Chandrakanth Patil) [RHEL-141219]
  - scsi: megaraid_sas: Protect more code with instance->reset_mutex (Chandrakanth Patil) [RHEL-141219]
  - scsi: megaraid_sas: struct MR_HOST_DEVICE_LIST: Replace 1-element array with flexible array (Chandrakanth Patil) [RHEL-141219]
  - redhat/configs: new configs in phy (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: add stmmac_mac_irq_modify() (Izabela Bakollari) [RHEL-128158]
  - net: ethtool: mm: extract stmmac verification logic into common library (Izabela Bakollari) [RHEL-128158]
  - treewide, timers: Rename from_timer() to timer_container_of() (Izabela Bakollari) [RHEL-128158]
  - net: phylink: provide mac_get_caps() method (Izabela Bakollari) [RHEL-128158]
  - net: pcs: xpcs: Add support for FBNIC 25G, 50G, 100G PMD (Izabela Bakollari) [RHEL-128158]
  - net: pcs: xpcs: Add support for 25G, 50G, and 100G interfaces (Izabela Bakollari) [RHEL-128158]
  - net: phy: Add MDIO_PMA_CTRL1_SPEED for 2.5G and 5G to reflect PMA values (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: convert to init()/exit() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move probe/remove calling of init/exit (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: qcom-ethqos: remove mac_base (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove mac_interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rework mac_interface and phy_interface documentation (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove eee_usecs_rate (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Fix CSR divider comment (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: fix stm32 (and potentially others) resume regression (Izabela Bakollari) [RHEL-128158]
  - net: pcs: pcs-mtk-lynxi: report in-band capability for 2500Base-X (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: fix resume: calculate tso last_segment (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: fix the crash issue for zero copy XDP_TX action (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: fix rx limit check in stmmac_rx_zc() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac: Disable flushing frames on Rx Buffer Unavailable (Izabela Bakollari) [RHEL-128158]
  - net: pcs: xpcs: Fix PMA identifier handling in XPCS (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: pci: Use generic PCI suspend/resume routines (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: loongson: Use generic PCI suspend/resume routines (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Add generic suspend/resume helper for PCI-based controllers (Izabela Bakollari) [RHEL-128158]
  - net: mdio: remove redundant fwnode cleanup (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: qcom-ethqos: use read_poll_timeout_atomic() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: qcom-ethqos: add rgmii set/clear functions (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: qcom-ethqos: use u32 for rgmii read/write/update (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove axi_blen array (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move stmmac_axi_blen_to_mask() to axi_blen init sites (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move stmmac_axi_blen_to_mask() to stmmac_main.c (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: provide common stmmac_axi_blen_to_mask() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move common DMA AXI register bits to common.h (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwc-qos-eth: simplify switch() in dwc_eth_dwmac_config_dt() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: use phylink's interface mode for set_clk_tx_rate() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: pass struct device to init()/exit() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: stmmac_is_jumbo_frm() returns boolean (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: stmmac_is_jumbo_frm() len should be unsigned (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: convert priv->sph* to boolean and rename (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Disable EEE RX clock stop when VLAN is enabled (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Fix VLAN 0 deletion in vlan_del_hw_rx_fltr() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac-sophgo: Add phy interface filter (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: use PHY_INTF_SEL_x in functions (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: use PHY_INTF_SEL_x constants (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: convert all bitfields to GRF_FIELD*() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: replace HIWORD_UPDATE() with GRF_FIELD() (Izabela Bakollari) [RHEL-128158]
  - net: pcs: xpcs-plat: fix MODULE_AUTHOR (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: clean up stmmac_reset() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: visconti: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: visconti: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: stm32: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: stm32: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: stm32: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: starfive: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: starfive: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mediatek: simplify set_interface() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mediatek: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mediatek: use PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: loongson1: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: loongson1: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: loongson1: use PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: improve ndev->max_mtu setup readability (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: meson8b: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: meson8b: use phy_intf_sel directly (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: meson8b: use PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: use ->set_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: pass ingenic_mac struct rather than plat_dat (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: simplify x2000 mac_set_mode() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: simplify mac_set_mode() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: move "MAC PHY control register" debug (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: prep PHY_INTF_SEL_x field after switch() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: simplify jz4775 mac_set_mode() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: move ingenic_mac_init() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: sti: use ->set_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: sti: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: sti: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: sti: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: lpc18xx: use ->set_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: lpc18xx: validate phy_intf_sel (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: lpc18xx: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: lpc18xx: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: lpc18xx: convert to PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: socfpga: Add hardware supported cross-timestamp (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: socfpga: Enable TSO for Agilex5 platform (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: socfpga: Enable TBS support for Agilex5 (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: socfpga: Agilex5 EMAC platform configuration (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: imx: use ->set_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: imx: cleanup arguments for set_intf_mode() method (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: imx: simplify set_intf_mode() implementations (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: imx: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: imx: use FIELD_PREP()/FIELD_GET() for PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: imx: convert to PHY_INTF_SEL_xxx (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: add support for configuring the phy_intf_sel inputs (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: add stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: add phy_intf_sel and ACTPHYIF definitions (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: s32: move PHY_INTF_SEL_x definitions out of the way (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: imx: use phylink's interface mode for set_clk_tx_rate() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: qcom-ethqos: remove MAC_CTRL_REG modification (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: fix incorrect phy address check (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: est: Fix GCL bounds checks (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Consider Tx VLAN offload tag length for maxSDU (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: vlan: Disable 802.1AD tag insertion offload (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: reorganise stmmac_hwif_init() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: use != rather than ^ for comparing dev_id (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: provide function to lookup hwif (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: use FIELD_GET() for version register (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move stmmac_get_*id() into stmmac_get_version() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: consolidate version reading and validation (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: simplify stmmac_get_version() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move version handling into own function (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Move subsecond increment configuration in dedicated helper (Izabela Bakollari) [RHEL-128158]
  - ethernet: stmmac: dwmac-rk: Add RK3506 GMAC support (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: convert to phylink managed WoL PHY speed (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: convert to phylink-managed Wake-on-Lan (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: replace has_xxxx with core_type (Izabela Bakollari) [RHEL-128158]
  - net: phy: Remove probe_capabilities (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: use phy_find_first to simplify stmmac_mdio_register (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: provide PCS initialisation hook (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: only call stmmac_pcs_ctrl_ane() for integrated SGMII PCS (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: do not require snps,ps-speed for SGMII (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: hw->ps becomes hw->reverse_sgmii_enable (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: simplify stmmac_check_pcs_mode() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move reverse-"pcs" mode setup to stmmac_check_pcs_mode() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove RGMII "pcs" mode (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove hw->ps xxx_core_init() hardware setup (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove unused PCS loopback support (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove PCS "mode" pause handling (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove SGMII/RGMII/SMII interrupt handling (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove xstats.pcs_* members (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove broken PCS code (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac-rk: Fix disabling set_clock_selection (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: add Eswin EIC7700 glue driver (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rename stmmac_phy_setup() to include phylink (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rearrange tc_init() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: avoid PHY speed change when configuring MTU (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: place .mac_finish() method more appropriately (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwc-qos-eth: move MDIO bus locking into stmmac_mdio (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Add support for Allwinner A523 GMAC200 (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove stmmac_hw_setup() excess documentation parameter (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Convert open-coded register polling to helper macro (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: tc: Add HLBS drop count to taprio stats (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: est: Drop frames causing HLBS error (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: simplify stmmac_init_phy() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move PHY handling out of __stmmac_open()/release() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move initialisation of priv->tx_lpi_timer to stmmac_open() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move PHY attachment error message into stmmac_init_phy() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move xpcs clause 73 test into stmmac_init_phy() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move stmmac_bus_clks_config() to stmmac_platform.c (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: thead: convert to use phy_interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: sun8i: convert to use phy_interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: stm32: convert to use phy_interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: starfive: convert to use phy_interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: socfpga: convert to use phy_interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: convert to use phy_interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: imx: convert to use phy_interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: use phy_interface in stmmac_check_pcs_mode() (Izabela Bakollari) [RHEL-128158]
  - net: pcs: Kconfig: Fix unmet dependency warning (Izabela Bakollari) [RHEL-128158]
  - net: pcs: rzn1-miic: Add RZ/T2H MIIC support (Izabela Bakollari) [RHEL-128158]
  - net: pcs: rzn1-miic: Add per-SoC control for MIIC register unlock/lock (Izabela Bakollari) [RHEL-128158]
  - net: pcs: rzn1-miic: Add support to handle resets (Izabela Bakollari) [RHEL-128158]
  - net: pcs: rzn1-miic: Make switch mode mask SoC-specific (Izabela Bakollari) [RHEL-128158]
  - net: pcs: rzn1-miic: move port range handling into SoC data (Izabela Bakollari) [RHEL-128158]
  - net: pcs: rzn1-miic: Move configuration data to SoC-specific struct (Izabela Bakollari) [RHEL-128158]
  - net: pcs: rzn1-miic: Add missing include files (Izabela Bakollari) [RHEL-128158]
  - net: pcs: rzn1-miic: Drop trailing comma from of_device_id table (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move timestamping/ptp init to stmmac_hw_setup() caller (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move PTP support check into stmmac_init_timestamping() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: add stmmac_setup_ptp() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rename stmmac_init_ptp() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move stmmac_init_ptp() messages into function (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: add __stmmac_release() to complement __stmmac_open() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: unexport stmmac_init_tstamp_counter() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: fix stmmac_xdp_open() clk_ptp_ref error cleanup (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: fix PTP error cleanup in __stmmac_open() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: disable PTP clock after unregistering PTP (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ptp: improve handling of aux_ts_lock lifetime (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac-renesas-gbeth: Add support for RZ/T2H SoC (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac-renesas-gbeth: Use OF data for configuration (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwc-qos: use PHY WoL (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: use STMMAC_CSR_xxx definitions in platform glue (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: remove redundant clock rate tests (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: return clk_csr value from stmmac_clk_csr_set() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: move initialisation of priv->clk_csr to stmmac_mdio (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: improve mdio register field definitions (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: move runtime PM into stmmac_mdio_access() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: merge stmmac_mdio_read() and stmmac_mdio_write() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: move stmmac_mdio_format_addr() into read/write (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: provide priv->gmii_address_bus_config (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: provide stmmac_mdio_wait() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: provide address register formatter (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: intel: only populate plat->crosststamp when supported (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ptp: conditionally populate getcrosststamp() method (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: imx: add i.MX91 support (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac-rk: switch to FIELD_PREP_WM16 macro (Izabela Bakollari) [RHEL-128158]
  - net: pcs: rzn1-miic: Correct MODCTRL register offset (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: update runtime PM (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: clean up c22/c45 accessor split (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: minor cleanups to stmmac_bus_clks_config() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: use netdev_priv() directly (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: sun8i: drop unneeded default syscon value (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: remove incorrect _DLY_DISABLE bit definition (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Set CIC bit only for TX queues with COE (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: xgmac: Correct supported speed modes (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: fix stmmac_simple_pm_ops build errors (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac4: stop hardware from dropping checksum-error packets (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac4: report Rx checksum errors in status (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Correctly handle Rx checksum offload errors (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: thead: Enable TX clock before MAC initialization (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: explain the phylink_speed_down() call in stmmac_release() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: add helpers to indicate WoL enable status (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: use core wake IRQ support (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove unnecessary "stmmac: wakeup enable" print (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove redundant WoL option validation (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove write-only mac->pmt (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove unnecessary checks in ethtool eee ops (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Return early if invalid in loongson_dwmac_fix_reset() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Change first parameter of fix_soc_reset() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Check stmmac_hw_setup() in stmmac_resume() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mediatek: convert to resume() method (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: stm32: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: pci: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: loongson: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: intel: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: platform: legacy hooks for suspend()/resume() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: provide a set of simple PM ops (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: add suspend()/resume() platform ops (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: make variable data a u32 (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: thead: Get and enable APB clock on initialization (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: put the PHY clock on remove (Izabela Bakollari) [RHEL-128158]
  - stmmac: xsk: fix negative overflow of budget in zerocopy mode (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac-socfpga: Add xgmac support for Agilex5 (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac-renesas-gbeth: Add PM suspend/resume callbacks (Izabela Bakollari) [RHEL-128158]
  - net: pcs: xpcs: mask readl() return value to 16 bits (Izabela Bakollari) [RHEL-128158]
  - net: pcs: xpcs: Use devm_clk_get_optional (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac-sophgo: Add support for Sophgo SG2042 SoC (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: lpc18xx: use plat_dat->phy_interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: loongson1: get ls1b resource only once (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: loongson1: provide match data struct (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: replace ioaddr with stmmac_priv for pcs_set_ane() method (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: visconti: make phy_intf_sel local (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: visconti: clean up code formatting (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: visconti: reorganise visconti_eth_set_clk_tx_rate() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: visconti: re-arrange speed decode (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: remove unnecessary clk_mac (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: use device rather than platform device in rk_priv_data (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: fix code formmating issue (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove pcs_get_adv_lp() support (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: qcom-ethqos: add ethqos_pcs_set_inband() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: remove obsolete .set_*_speed() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: convert px30_set_rmii_speed() to .set_speed() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: simplify px30_set_rmii_speed() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: combine .set_*_speed() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: combine clk_mac_speed rate setting functions (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: combine rv1126 set_*_speed() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: add struct for programming register based speeds (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: simplify set_*_speed() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: add get_interfaces() implementation (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: improve .set_clk_tx_rate() method error message (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: extend use of snps,multicast-filter-bins property to xgmac (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: intel: populate entire system_counterval_t in get_time_fn() callback (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Fix interrupt handling for level-triggered mode in DWC_XGMAC2 (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: make sure that ptp_rate is not 0 before configuring EST (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: platform: guarantee uniqueness of bus_id (Izabela Bakollari) [RHEL-100498]
  - net: dwmac-sun8i: Use parsed internal PHY address instead of 1 (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: generate software timestamp just before the doorbell (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwxgmac2: Add support for HW-accelerated VLAN stripping (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: stmmac_vlan: rename VLAN functions and symbol to generic symbol. (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Refactor VLAN implementation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove speed_mode_2500() method (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: intel: convert speed_mode_2500() to get_interfaces() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: intel: move phy_interface init to tgl_common_data() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: add get_interfaces() platform method (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: use priv->plat->phy_interface directly (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: use a local variable for priv->phylink_config (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Add new GMAC's PCI device ID support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Add new multi-chan IP core support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: socfpga: Remove unused pcs-mdiodev field (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: socfpga: Don't check for phy to enable the SGMII adapter (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: socfpga: Enable internal GMII when using 1000BaseX (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Move queue number init to common function (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: fix multiplication overflow when reading timestamp (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: fix dwmac1000 ptp timestamp status offset (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwc-qos: calibrate tegra with mdio bus idle (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: visconti: convert to set_clk_tx_rate() method (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Add DWMAC glue layer for Renesas GBETH (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: socfpga: convert to devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: socfpga: call set_phy_mode() before registration (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: socfpga: convert to stmmac_pltfr_pm_ops (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: socfpga: provide init function (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: socfpga: init dwmac->stmmac_rst before registration (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: move frag_size handling out of spin_lock (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: mediatek: stop initialising plat->mac_interface (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwc-qos: use PHY clock-stop capability (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sunxi: use devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sunxi: use stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sunxi: convert to set_clk_tx_rate() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sti: convert to stmmac_pltfr_pm_ops (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sti: convert to devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sti: use phy_interface_mode_is_rgmii() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sun8i: use stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: intel: remove unnecessary setting max_speed (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: ingenic: convert to devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: ingenic: convert to stmmac_pltfr_pm_ops (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: imx: use stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: anarion: use devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: anarion: use stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: anarion: clean up interface parsing (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: anarion: clean up anarion_config_dt() error handling (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: qcom-ethqos: remove speed_mode_2500() method (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: qcom-ethqos: remove unnecessary setting max_speed (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: qcom-ethqos: remove ethqos->speed (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: qcom-ethqos: set serdes speed using serdes_speed (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove GMAC_1US_TIC_COUNTER definition (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: intel-plat: remove eee_usecs_rate and hardware write (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: intel: remove eee_usecs_rate and hardware write (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwc-qos: remove tegra_eqos_init() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: stm32: simplify clock handling (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwc-qos: use stmmac_pltfr_find_clk() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: provide stmmac_pltfr_find_clk() (Izabela Bakollari) [RHEL-100498]
  - stmmac: intel: interface switching support for RPL-P platform (Izabela Bakollari) [RHEL-100498]
  - stmmac: Replace deprecated PCI functions (Izabela Bakollari) [RHEL-100498]
  - stmmac: Remove pcim_* functions for driver detach (Izabela Bakollari) [RHEL-100498]
  - stmmac: loongson: Remove surplus loop (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-rk: Add initial support for RK3528 integrated PHY (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-rk: Add integrated_phy_powerdown operation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-rk: Move integrated_phy_powerup/down functions (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-rk: Add GMAC support for RK3528 (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: block PHY RXC clock-stop (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: socfpga: remove phy_resume() call (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: address non-LPI resume failures properly (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Call xpcs_config_eee_mult_fact() only when xpcs is present (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Fix accessing freed irq affinity_hint (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwc-qos-eth: use devm_kzalloc() for AXI data (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-rk: Provide FIFO sizes for DWMAC 1000 (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: deprecate "snps,en-tx-lpi-clockgating" property (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: stm32: use PHY capability for TX clock stop (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: starfive: use PHY capability for TX clock stop (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: allow platforms to use PHY tx clock stop capability (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sunxi: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sun8i: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sti: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: rk: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: meson8b: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: ipq806x: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: anarion: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: mediatek: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: qcom-ethqos: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove unnecessary stmmac_mac_set() in stmmac_release() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove redundant racy tear-down in stmmac_dvr_remove() (Izabela Bakollari) [RHEL-100498]
  - stmmac: intel: Fix warning message for return value in intel_tsn_lane_is_available() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-rk: Remove unneeded GRF and peripheral GRF checks (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-rk: Validate GRF and peripheral GRF during probe (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove write-only priv->speed (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Add glue layer for Sophgo SG2044 SoC (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: simplify phylink_suspend() and phylink_resume() calls (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: avoid shadowing global buf_sz (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: mostly remove "buf_sz" (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwc-qos: Add FSD EQoS support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: interface switching support for ADL-N platform (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: configure SerDes according to the interface mode (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: configure SerDes on mac_finish (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: re-initiate clause 37 Auto-negotiation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: thead: switch to use set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: meson: switch to use set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: ipq806x: switch to use set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: rk: switch to use set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: imx: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: intel: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: s32: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: starfive: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwc-qos: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: provide generic implementation for set_clk_tx_rate method (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: provide set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100498]
  - stmmac: loongson: Pass correct arg to PCI function (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwc-qos: clean up clock initialisation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwc-qos: name struct plat_stmmacenet_data consistently (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: thead: ensure divisor gives proper rate (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: thead: use rgmii_clock() for RGMII clock rate (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Correct usage of maximum queue number macros (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: qcom-ethqos: use rgmii_clock() to set the link clock (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: print stmmac_init_dma_engine() errors using netdev_err() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Add fix_soc_reset() callback (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Add launch time support to XDP ZC (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: "speed" passed to fix_mac_speed is an int (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove useless priv->flow_ctrl (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: clarify priv->pause and pause module parameter (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Use str_enabled_disabled() helper (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Switch to use hrtimer_setup() (Izabela Bakollari) [RHEL-100498]
  - net: xpcs: group EEE code together (Izabela Bakollari) [RHEL-100498]
  - net: xpcs: clean up xpcs_config_eee() (Izabela Bakollari) [RHEL-100498]
  - net: xpcs: remove xpcs_config_eee() from global scope (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove calls to xpcs_config_eee() (Izabela Bakollari) [RHEL-100498]
  - net: xpcs: convert to phylink managed EEE (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: call xpcs_config_eee_mult_fact() (Izabela Bakollari) [RHEL-100498]
  - net: xpcs: add function to configure EEE clock multiplying factor (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: refactor clock management in EQoS driver (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Set correct {tx,rx}_fifo_size (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Apply new page pool parameters when SPH is enabled (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove old EEE methods (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: use stmmac_set_lpi_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac4: clear LPI_CTRL_STATUS_LPITCSE too (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: add new MAC method set_lpi_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: use common LPI_CTRL_STATUS bit definitions (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove unnecessary LPI disable when enabling LPI (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: clear priv->tx_path_in_lpi_mode when disabling LPI (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove unnecessary priv->eee_enabled tests (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove unnecessary priv->eee_active tests (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove priv->dma_cap.eee test in tx_lpi methods (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: split stmmac_init_eee() and move to phylink methods (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac4: ensure LPIATE is cleared (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: ensure LPI is disabled when disabling EEE (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: delete software timer before disabling LPI (Izabela Bakollari) [RHEL-100498]
  - net: pcs: rzn1-miic: Convert to for_each_available_child_of_node() helper (Izabela Bakollari) [RHEL-100498]
  - net: pcs: rzn1-miic: fill in PCS supported_interfaces (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Limit FIFO size by hardware capability (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Limit the number of MTL queues to hardware capability (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Drop redundant skb_mark_for_recycle() for SKB frags (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: convert to phylink managed EEE support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Convert prefetch() to net_prefetch() for received frames (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Optimize cache prefetch in RX path (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Set page_pool_params.max_len to a precise size (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Switch to zero-copy in non-XDP RX path (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: actively unset DW_VR_MII_DIG_CTRL1_2G5_EN for 1G SGMII (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: fix DW_VR_MII_DIG_CTRL1_2G5_EN bit being set for 1G SGMII w/o inband (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: restart LPI timer after cleaning transmit descriptors (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: combine stmmac_enable_eee_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: provide function for restarting sw LPI timer (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: provide stmmac_eee_tx_busy() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: add stmmac_try_to_start_sw_lpi() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: check priv->eee_sw_timer_en in suspend path (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: simplify TX cleanup decision for ending sw LPI mode (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: correct priv->eee_sw_timer_en setting (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: rename stmmac_disable_sw_eee_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: stm32: Use syscon_regmap_lookup_by_phandle_args (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sti: Use syscon_regmap_lookup_by_phandle_args (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: imx: Use syscon_regmap_lookup_by_phandle_args (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sti: Switch from CONFIG_PM_SLEEP guards to pm_sleep_ptr() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove stmmac_lpi_entry_timer_config() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: split hardware LPI timer control (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove unnecessary EEE handling in stmmac_release() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: move setup of eee_ctrl_timer to stmmac_dvr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: use boolean for eee_enabled and eee_active (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: move priv->eee_active into stmmac_eee_init() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: move priv->eee_enabled into stmmac_eee_init() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove priv->eee_tw_timer (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: convert to use phy_eee_rx_clock_stop() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: report EEE error statistics if EEE is supported (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove priv->tx_lpi_enabled (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: clean up stmmac_disable_eee_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove redundant code from ethtool EEE ops (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: make EEE depend on phy->enable_tx_lpi (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: use unsigned int for eee_timer (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: use correct type for tx_lpi_timer (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: move tx_lpi_timer tracking to phylib (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Unexport stmmac_rx_offset() from stmmac.h (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Set dma_sync_size to zero for discarded frames (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: make xpcs_get_interfaces() static (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: use PCS supported_interfaces (Izabela Bakollari) [RHEL-100498]
  - net: pcs: mtk-lynxi: fill in PCS supported_interfaces (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: fill in PCS supported_interfaces (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: TSO: Simplify the code flow of DMA descriptor allocations (Izabela Bakollari) [RHEL-100498]
  - net: pcs: pcs-mtk-lynxi: correctly report in-band status capabilities (Izabela Bakollari) [RHEL-100498]
  - net: dwmac-imx: add imx93 clock input support in RMII mode (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: restructure the error path of stmmac_probe_config_dt() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Drop useless code related to ethtool rx-copybreak (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Drop redundant dwxgmac_tc_ops variable (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Relocate extern declarations in common.h and hwif.h (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-s32: add basic NXP S32G/S32R glue driver (Izabela Bakollari) [RHEL-100498]
  - net: dwmac-sti: Use helper rgmii_clock (Izabela Bakollari) [RHEL-100498]
  - net: dwmac-starfive: Use helper rgmii_clock (Izabela Bakollari) [RHEL-100498]
  - net: dwmac-rk: Use helper rgmii_clock (Izabela Bakollari) [RHEL-100498]
  - net: dwmac-intel-plat: Use helper rgmii_clock (Izabela Bakollari) [RHEL-100498]
  - net: dwmac-imx: Use helper rgmii_clock (Izabela Bakollari) [RHEL-100498]
  - net: dwmac-dwc-qos-eth: Use helper rgmii_clock (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Fix clock rate variables size (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Extend CSR calc support (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: implement pcs_inband_caps() method (Izabela Bakollari) [RHEL-100498]
  - net: pcs: pcs-mtk-lynxi: implement pcs_inband_caps() method (Izabela Bakollari) [RHEL-100498]
  - net: pcs: pcs-lynx: implement pcs_inband_caps() method (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: set initial EEE policy configuration (Izabela Bakollari) [RHEL-100498]
  - stmmac: dwmac-intel-plat: fix call balance of tx_clk handling routines (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-mediatek: Fix inverted handling of mediatek,mac-wol (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac_socfpga: This platform has GMAC (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Configure only the relevant bits for timestamping setup (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Don't include dwmac4 definitions in stmmac_ptp (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Enable timestamping interrupt on dwmac1000 (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Introduce dwmac1000 timestamping operations (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Introduce dwmac1000 ptp_clock_info and operations (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Only update the auto-discovered PTP clock features (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Use per-hw ptp clock ops (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Don't modify the global ptp ops directly (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac4: Receive Watchdog Timeout is not in abnormal interrupt summary (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac4: Fix the MTL_OP_MODE_*_MASK operation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac4: Fix MTL_OP_MODE_RTC mask and shift macros (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Add glue layer for T-HEAD TH1520 SoC (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: add support for dwmac 3.72a (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: xgmac: Enable FPE for tc-mqprio/tc-taprio (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: xgmac: Complete FPE support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: xgmac: Rename XGMAC_RQ to XGMAC_FPRQ (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Get the TC number of net_device by netdev_get_num_tc() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Refactor FPE functions to generic version (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Introduce stmmac_fpe_supported() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Rework macro definitions for gmac4 and xgmac (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Introduce separate files for FPE implementation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: rearrange xpcs_link_up_1000basex() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: remove switch() in xpcs_link_up_1000basex() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Programming sequence for VLAN packets with split header (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Add DW QoS Eth v4/v5 ip payload error statistics (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: move Wangxun VR_XS_PCS_DIG_CTRL1 configuration (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: correctly place DW_VR_MII_DIG_CTRL1_2G5_EN (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: use dev_*() to print messages (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: convert to use read_poll_timeout() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: add _modify() accessors (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: use FIELD_PREP() and FIELD_GET() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: move searching ID list out of line (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: rename xpcs_get_id() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: move definition of struct dw_xpcs to private header (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: provide a helper to get the phylink pcs given xpcs (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: pass xpcs instead of xpcs->id to xpcs_find_compat() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: don't use array for interface (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: remove dw_xpcs_compat enum (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: make xpcs_do_config() and xpcs_link_up() internal (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: drop interface argument from xpcs_create*() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: add xpcs_destroy_pcs() and xpcs_create_pcs_mdiodev() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: get rid of xpcs_init_iface() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: drop interface argument from internal functions (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: move PCS reset to .pcs_pre_config() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: fix the wrong register that was written back (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: silence FPE kernel logs (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: support fp parameter of tc-taprio (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: support fp parameter of tc-mqprio (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: configure FPE via ethtool-mm (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: refactor FPE verification process (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: drop stmmac_fpe_handshake (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: move stmmac_fpe_cfg to stmmac_priv data (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Batch set RX OWN flag and other flags (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-sun8i: Use for_each_child_of_node_scoped() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: drop the ethtool begin() callback (Izabela Bakollari) [RHEL-100498]
  - ethernet: stmmac: dwmac-rk: Add GMAC support for RK3576 (Izabela Bakollari) [RHEL-100498]
  - ethernet: stmmac: dwmac-rk: Fix typo for RK3588 code (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Add loongson module author (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Add Loongson GNET support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Add Loongson Multi-channels GMAC support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Add DT-less GMAC PCI-device support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Introduce PCI device info data (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Add phy_interface for Loongson GMAC (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Init ref and PTP clocks rate (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Detach GMAC-specific platform data init (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Use PCI_DEVICE_DATA() macro for device identification (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Drop pci_enable/disable_msi calls (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Drop duplicated hash-based filter size init (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Export dwmac1000_dma_ops (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Add multi-channel support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Move the atds flag to the stmmac_dma_cfg structure (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: xgmac: use const char arrays for string constants (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac4: fix PCS duplex mode decode (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Correct byte order of perfect_match (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Add DW XPCS specified via "pcs-handle" support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Create DW XPCS device with particular address (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Add fwnode-based descriptor creation method (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Add Synopsys DW xPCS platform device driver (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Introduce DW XPCS info structure (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Convert xpcs_compat to dw_xpcs_compat (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Convert xpcs_id to dw_xpcs_desc (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Split up xpcs_create() body to sub-functions (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Move native device ID macro to linux/pcs/pcs-xpcs.h (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: update err status in case different of stm32mp13 (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: Add test to verify if ETHCK is used before checking clk rate (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: stm32: add management of stm32mp25 for stm32 (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: unexport stmmac_pltfr_init/exit() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Enable TSO on VLANs (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: clean up stmmac_mac_select_pcs() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-socfpga: provide select_pcs() implementation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-rzn1: provide select_pcs() implementation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-intel: provide a select_pcs() implementation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: add select_pcs() platform method (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: add management of stm32mp13 for stm32 (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: Mask support for PMCR configuration (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: Fix Mhz to MHz (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: Clean up the debug prints (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: Extract PMCR configuration (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: Separate out external clock selector (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: Separate out external clock rate validation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-intel: remove checking for fixed link (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: rename xpcs_an_inband to default_an_inband (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: ethqos: clean up setting serdes speed (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: include linux/io.h rather than asm/io.h (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove unnecessary netif_carrier_off() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove pcs_rane() method (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwxgmac2: remove useless NULL pointer initialisations (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Drop TBI/RTBI PCS flags (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Move MAC caps init to phylink MAC caps getter (Izabela Bakollari) [RHEL-100498]
  - net: pcs: rzn1-miic: Init RX clock early if MAC requires it (Izabela Bakollari) [RHEL-100498]
  - net: pcs: rzn1-miic: update PCS driver to use neg_mode (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Explicitly return error on caps validation (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Return EINVAL in the internal methods (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Drop redundant workqueue.h include directive (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Drop sentinel entry from 2500basex ifaces list (Izabela Bakollari) [RHEL-100498]
  - net: fill in MODULE_DESCRIPTION()s for PCS drivers (Izabela Bakollari) [RHEL-100498]
  - net: pcs: rzn1-miic: Convert to platform remove callback returning void (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Add 2500BASE-X case in get state for XPCS drivers (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: adapt Wangxun NICs for SGMII mode (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: add 1000BASE-X AN interrupt support (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: support to switch mode for Wangxun NICs (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: add specific vendor supoprt for Wangxun 10Gb NICs (Izabela Bakollari) [RHEL-100498]
  - net: pcs: lynxi: implement pcs_disable op (Izabela Bakollari) [RHEL-100498]
  - net: pcs: Add missing put_device call in miic_create (Izabela Bakollari) [RHEL-100498]
  - net: pcs: lynxi: update PCS driver to use neg_mode (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: update PCS driver to use neg_mode (Izabela Bakollari) [RHEL-100498]
  - net: pcs: Add 10GBASE-R mode for Synopsys Designware XPCS (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: remove xpcs_create() from public view (Izabela Bakollari) [RHEL-100498]
  - net: pcs: Drop the TSE PCS driver (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: avoid reading STAT1 more than once (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: use phylink_resolve_c73() helper (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: correct pause resolution (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: correct lp_advertising contents (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: use mii_c73_to_linkmode() helper (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: clean up reading clause 73 link partner advertisement (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: fix C73 AN not getting enabled (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: fix incorrect number of interfaces (Izabela Bakollari) [RHEL-100498]
  - net: pcs: add driver for MediaTek SGMII PCS (Izabela Bakollari) [RHEL-100498]
  - net: pcs: lynx: don't print an_enabled in pcs_get_state() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: rzn1-miic: remove unused struct members and use miic variable (Izabela Bakollari) [RHEL-100498]
  - net: pcs: altera-tse: remove unnecessary register definitions (Izabela Bakollari) [RHEL-100498]
  - net: pcs: altera-tse: don't set the speed for 1000BaseX (Izabela Bakollari) [RHEL-100498]
  - net: pcs: altera-tse: use read_poll_timeout to wait for reset (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: use mdiodev accessors (Izabela Bakollari) [RHEL-100498]
  - net: pcs: add new PCS driver for altera TSE PCS (Izabela Bakollari) [RHEL-100498]
  - net: pcs: rzn1-miic: update speed only if interface is changed (Izabela Bakollari) [RHEL-100498]
  - net: pcs-rzn1-miic: fix return value check in miic_probe() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: add Renesas MII converter driver (Izabela Bakollari) [RHEL-100498]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-731.el9]
changelog:
  - crypto: rng - Enable pre-emption ASAP (Herbert Xu) [RHEL-92680]
  - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213301] {CVE-2026-64530}
  - platform/x86/intel-uncore-freq: Fix current_freq_khz after CPU hotplug (David Arcari) [RHEL-212713]
  - platform/x86/intel-uncore-freq: Rename instance_id (David Arcari) [RHEL-212713]
  - tools/power/x86/intel-speed-select: Harden daemon pidfile open (David Arcari) [RHEL-192479]
  - platform/x86: ISST: Restore SST-PP control to all domains (David Arcari) [RHEL-192479]
  - tools/power/x86/intel-speed-select: Fix output when running on unsupported CLX platforms (David Arcari) [RHEL-192479]
  - tools/power/x86/intel-speed-select: Fix some program return value (David Arcari) [RHEL-192479]
  - tools/power/x86/intel-speed-select: Fix cpu extended family ID decoding (David Arcari) [RHEL-192479]
  - x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling() (Dennis Chen) [RHEL-208627]
  - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193940]
  - KVM: s390: Fix S390_USER_OPEREXEC enablement without STFLE 74 (Christoph Schlameuss) [RHEL-158930]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-732.el9]
changelog:
  - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-168738]
  - xfrm: esp: restore combined single-frag length gate (Xin Long) [RHEL-178340]
  - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Xin Long) [RHEL-180173] {CVE-2026-46116}
  - espintcp: Fix race condition in espintcp_close() (Xin Long) [RHEL-154906] {CVE-2026-23239}
  - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Xin Long) [RHEL-180034] {CVE-2025-39797}
  - xfrm: Duplicate SPI Handling (Xin Long) [RHEL-180034] {CVE-2025-39797}
  - redhat: Add DENYLIST.rhel to BPF selftests (Veronika Molnarova) [RHEL-213547]
  - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
  - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-190801]
  - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-190801]
  - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-190801]
  - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-190801]
  - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-190801]
  - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-190801]
  - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-190801]
  - timers: Fix NULL function pointer race in timer_shutdown_sync() (Waiman Long) [RHEL-189941] {CVE-2025-68214}
  - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-213745]
  - scsi: core: wake eh reliably when using scsi_schedule_eh (David Jeffery) [RHEL-113832]
  - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213155] {CVE-2026-64017}
  - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213155] {CVE-2026-64017}
  - cpufreq: intel_pstate: Set non-turbo capacity to HWP_GUARANTEED_PERF() (David Arcari) [RHEL-212691]
  - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212684]
  - watchdog: Fix kmemleak in watchdog_cdev_register (David Arcari) [RHEL-192487]
  - watchdog: set cdev owner before adding (David Arcari) [RHEL-192487]
  - watchdog: fix watchdog may detect false positive of softlockup (David Arcari) [RHEL-192487]
  - kernel/watchdog: always restore watchdog_softlockup(,hardlockup)_user_enabled after proc show (David Arcari) [RHEL-192487]
  - usb: typec: ucsi: skip connector validation before init (Desnes Nunes) [RHEL-147798]
  - usb: host: xhci-sideband: delegate offload_usage tracking to class drivers (Desnes Nunes) [RHEL-147798]
  - usb: core: use dedicated spinlock for offload state (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: imx8mp: fix memory leak on probe failure path (Desnes Nunes) [RHEL-147798]
  - usb: ulpi: fix memory leak on ulpi_register() error paths (Desnes Nunes) [RHEL-147798] {CVE-2026-46109}
  - usb: ulpi: fix double free in ulpi_register_interface() error path (Desnes Nunes) [RHEL-147798] {CVE-2026-31759}
  - USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam (Desnes Nunes) [RHEL-147798]
  - usb: add quirks for Lenovo OneLink+ Dock (Desnes Nunes) [RHEL-147798]
  - usb: core: phy: avoid double use of 'usb3-phy' (Desnes Nunes) [RHEL-147798]
  - USB: serial: option: add MeiG Smart SRM825WN (Desnes Nunes) [RHEL-147798]
  - dt-bindings: connector: add pd-disable dependency (Desnes Nunes) [RHEL-147798]
  - dt-bindings: Drop remaining unneeded quotes (Desnes Nunes) [RHEL-147798]
  - usb: typec: thunderbolt: Set enter_vdo during initialization (Desnes Nunes) [RHEL-147798]
  - usb: typec: Remove alt->adev.dev.class assignment (Desnes Nunes) [RHEL-147798]
  - usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive (Desnes Nunes) [RHEL-147798]
  - cdc-acm: new quirk for EPSON HMD (Desnes Nunes) [RHEL-147798]
  - usb: typec: ucsi: validate connector number in ucsi_notify_common() (Desnes Nunes) [RHEL-147798] {CVE-2026-31729}
  - usb: usbtmc: Flush anchored URBs in usbtmc_release (Desnes Nunes) [RHEL-147798] {CVE-2026-31758}
  - USB: serial: io_edgeport: add support for Blackbox IC135A (Desnes Nunes) [RHEL-147798]
  - USB: serial: option: add missing RSVD(5) flag for Rolling RW135R-GL (Desnes Nunes) [RHEL-147798]
  - USB: serial: option: add support for Rolling Wireless RW135R-GL (Desnes Nunes) [RHEL-147798]
  - USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed (Desnes Nunes) [RHEL-147798]
  - usb: typec: altmode/displayport: set displayport signaling rate in configure message (Desnes Nunes) [RHEL-147798]
  - usb/core/quirks: Add Huawei ME906S-device to wakeup quirk (Desnes Nunes) [RHEL-147798]
  - usb: xhci: Prevent interrupt storm on host controller error (HCE) (Desnes Nunes) [RHEL-147798] {CVE-2026-43488}
  - usb: xhci: Fix memory leak in xhci_disable_slot() (Desnes Nunes) [RHEL-147798] {CVE-2026-43432}
  - usb: class: cdc-wdm: fix reordering issue in read code path (Desnes Nunes) [RHEL-147798] {CVE-2026-43427}
  - usb: cdc-acm: Restore CAP_BRK functionnality to CH343 (Desnes Nunes) [RHEL-147798]
  - usb: core: new quirk to handle devices with zero configurations (Desnes Nunes) [RHEL-147798]
  - usb: misc: uss720: properly clean up reference in uss720_probe() (Desnes Nunes) [RHEL-147798]
  - USB: core: Limit the length of unkillable synchronous timeouts (Desnes Nunes) [RHEL-147798] {CVE-2026-43428}
  - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts (Desnes Nunes) [RHEL-147798] {CVE-2026-43429}
  - USB: usbcore: Introduce usb_bulk_msg_killable() (Desnes Nunes) [RHEL-147798]
  - usb: core: don't power off roothub PHYs if phy_set_mode() fails (Desnes Nunes) [RHEL-147798]
  - thunderbolt: Fix property read in nhi_wake_supported() (Desnes Nunes) [RHEL-147798]
  - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size (Desnes Nunes) [RHEL-147798]
  - usbnet: limit max_mtu based on device's hard_mtu (Desnes Nunes) [RHEL-147798]
  - net: usb: r8152: add TRENDnet TUC-ET2G (Desnes Nunes) [RHEL-147798]
  - usb: image: mdc800: kill download URB on timeout (Desnes Nunes) [RHEL-147798] {CVE-2026-43425}
  - usb: mdc800: handle signal and read racing (Desnes Nunes) [RHEL-147798]
  - USB: add QUIRK_NO_BOS for video capture several devices (Desnes Nunes) [RHEL-147798]
  - usb: typec: ucsi: Add Thunderbolt alternate mode support (Desnes Nunes) [RHEL-147798]
  - usb: phy: tegra: parametrize PORTSC1 register offset (Desnes Nunes) [RHEL-147798]
  - usb: phy: tegra: parametrize HSIC PTS value (Desnes Nunes) [RHEL-147798]
  - usb: phy: tegra: return error value from utmi_wait_register (Desnes Nunes) [RHEL-147798]
  - usb: phy: tegra: cosmetic fixes (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: gadget: Move vbus draw to workqueue context (Desnes Nunes) [RHEL-147798] {CVE-2026-43170}
  - phy: tegra: xusb: Remove unused powered_on variable (Desnes Nunes) [RHEL-147798]
  - usb: typec: fusb302: Remove IRQF_ONESHOT (Desnes Nunes) [RHEL-147798]
  - genirq: Set IRQF_COND_ONESHOT in devm_request_irq(). (Desnes Nunes) [RHEL-147798]
  - USB: serial: option: add Telit FN920C04 RNDIS compositions (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: Log dwc3 address in traces (Desnes Nunes) [RHEL-147798]
  - usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN (Desnes Nunes) [RHEL-147798]
  - usb: phy: tegra: add HSIC support (Desnes Nunes) [RHEL-147798]
  - usb: phy: tegra: use phy type directly (Desnes Nunes) [RHEL-147798]
  - usb: typec: ucsi: Support mode selection to activate altmodes (Desnes Nunes) [RHEL-147798]
  - usb: typec: Introduce mode_selection bit (Desnes Nunes) [RHEL-147798]
  - usb: typec: Implement mode selection (Desnes Nunes) [RHEL-147798]
  - usb: typec: Expose alternate mode priority via sysfs (Desnes Nunes) [RHEL-147798]
  - usb: typec: Add mode_control field to port property (Desnes Nunes) [RHEL-147798]
  - usb: phy: generic: Convert to device property API (Desnes Nunes) [RHEL-147798]
  - usb: phy: generic: Convert to dev_err_probe() (Desnes Nunes) [RHEL-147798]
  - usb: phy: generic: Convert to devm_clk_get_optional() (Desnes Nunes) [RHEL-147798]
  - usb: phy: generic: Always use dev in usb_phy_generic_probe() (Desnes Nunes) [RHEL-147798]
  - usbip: Reduce CONNRESET message noise in dmesg from stub (Desnes Nunes) [RHEL-147798]
  - tools: usb: usbip: remove dead-link from README (Desnes Nunes) [RHEL-147798]
  - xhci: dbc: allow setting manufacturer string through sysfs (Desnes Nunes) [RHEL-147798]
  - xhci: dbc: allow setting product string through sysfs (Desnes Nunes) [RHEL-147798]
  - xhci: dbc: allow setting device serial number through sysfs (Desnes Nunes) [RHEL-147798]
  - xhci: dbc: prepare to expose strings through sysfs (Desnes Nunes) [RHEL-147798]
  - phy: fsl-imx8mq-usb: enable RX Termination override (Desnes Nunes) [RHEL-147798]
  - phy: fsl-imx8mq-usb: set platform driver data (Desnes Nunes) [RHEL-147798] {CVE-2026-43259}
  - phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature (Desnes Nunes) [RHEL-147798]
  - net: ethtool: Add support for 80Gbps speed (Desnes Nunes) [RHEL-147798]
  - net: thunderbolt: Allow reading link settings (Desnes Nunes) [RHEL-147798]
  - bonding: 3ad: Add support for SPEED_80000 (Desnes Nunes) [RHEL-147798]
  - net: thunderbolt: Allow changing MAC address of the device (Desnes Nunes) [RHEL-147798]
  - pinctrl: tegra-xusb: Simplify locking with guard() (Desnes Nunes) [RHEL-147798]
  - pinctrl: tegra-xusb: Return void in padctl enable/disable functions (Desnes Nunes) [RHEL-147798]
  - usb: misc: onboard_dev: Add WCH CH334 USB2.0 Hub (1a86:8091) (Desnes Nunes) [RHEL-147798]
  - dt-bindings: usb: Add binding for WCH CH334/CH335 hub controller (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: fix dwc3_readl() and dwc3_writel() calls in dwc3_ulpi_setup() (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: Support USB3340x ULPI PHY high-speed negotiation. (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: Add dwc pointer to dwc3_readl/writel (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: Remove of dep->regs (Desnes Nunes) [RHEL-147798]
  - usb: chipidea: ci_hdrc_imx: use "wakeup" suffix for wakeup interrupt name (Desnes Nunes) [RHEL-147798]
  - USB: HCD: remove logic about which hcd is loaded (Desnes Nunes) [RHEL-147798]
  - usb: isp1362-hcd: remove Philips ISP1362 USB OTG controller driver (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: imx8mp: disable auto suspend for host role (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: imx8mp: rename dwc3 to dwc3_pdev in struct dwc3_imx8mp (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: drd: extend dwc3_pre_set_role() to extcon and otg usecase (Desnes Nunes) [RHEL-147798]
  - PCI: Add PCI_BRIDGE_NO_ALIAS quirk for ASPEED AST1150 (Desnes Nunes) [RHEL-147798]
  - PCI: Add ASPEED vendor ID to pci_ids.h (Desnes Nunes) [RHEL-147798]
  - USB: core: Discard pm_runtime_put() return value (Desnes Nunes) [RHEL-147798]
  - usb: typec: ucsi: drop an unused Kconfig symbol (Desnes Nunes) [RHEL-147798]
  - USB: host: drop unneeded dependency on OF_GPIO (Desnes Nunes) [RHEL-147798]
  - USB: typec: tcpm: Fix a typo (Desnes Nunes) [RHEL-147798]
  - thunderbolt: Log path activation failures without WARN backtraces (Desnes Nunes) [RHEL-147798]
  - phy: core: Simplify with scoped for each OF child loop (Desnes Nunes) [RHEL-147798]
  - phy: core: Reinstate pm_runtime_enabled() check in phy_pm_runtime_put() (Desnes Nunes) [RHEL-147798]
  - docs: admin-guide: thunderbolt: Replace ifconfig with ip (Desnes Nunes) [RHEL-147798]
  - phy: fsl-imx8mq-usb: change ssc_range value for i.MX8MQ (Desnes Nunes) [RHEL-147798]
  - phy: core: Discard pm_runtime_put() return values (Desnes Nunes) [RHEL-147798]
  - usb: linux/usb.h: Correct the description of the usb_device_driver member (Desnes Nunes) [RHEL-147798]
  - usb: typec: ucsi: psy: Fix voltage and current max for non-Fixed PDOs (Desnes Nunes) [RHEL-147798]
  - usb: typec: ucsi: psy: Fix ucsi_psy_get_current_now in non-PD cases (Desnes Nunes) [RHEL-147798]
  - dt-bindings: usb: ehci/ohci: Allow "dma-coherent" (Desnes Nunes) [RHEL-147798]
  - usb: typec: Export typec bus and typec altmode device type (Desnes Nunes) [RHEL-147798]
  - usb: typec: Set the bus also for the port and plug altmodes (Desnes Nunes) [RHEL-147798]
  - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Aidan Wallace) [RHEL-192402] {CVE-2026-53359}
  - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186696] {CVE-2026-46113}
  - nvme-apple: drop invalid put of admin queue reference count (Maurizio Lombardi) [RHEL-210643]
  - nvme-core: warn on allocating admin tag set with existing queue (Maurizio Lombardi) [RHEL-210643]
  - nvme: fix admin queue leak on controller reset (Maurizio Lombardi) [RHEL-210643]
  - nvme-core: fix unsigned comparison warning in nvme_wait_freeze_timeout (Maurizio Lombardi) [RHEL-210643]
  - nvmet-loop: do not alloc admin tag set during reset (Maurizio Lombardi) [RHEL-210643]
  - nvme-core: align fabrics_q teardown with admin_q in nvme_free_ctrl (Maurizio Lombardi) [RHEL-210643]
  - nvme: fix admin request_queue lifetime (Maurizio Lombardi) [RHEL-210643]
  - nvme: add sysfs attribute to change IO timeout per controller (Maurizio Lombardi) [RHEL-210643]
  - nvme: add sysfs attribute to change admin timeout per nvme controller (Maurizio Lombardi) [RHEL-210643]
  - nvme: remove redundant timeout argument from nvme_wait_freeze_timeout (Maurizio Lombardi) [RHEL-210643]
  - nvme: Let the blocklayer set timeouts for requests (Maurizio Lombardi) [RHEL-210643]
  - Reapply "Bluetooth: revert TX timestamping" for kernel v6.18.y update (David Marlin) [RHEL-194201]
  - Bluetooth: MGMT: Fix backward compatibility with userspace (David Marlin) [RHEL-194201]
  - Bluetooth: SCO: Fix data-race on sco_pi fields in sco_connect (David Marlin) [RHEL-194201]
  - Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls (David Marlin) [RHEL-194201]
  - Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync (David Marlin) [RHEL-194201]
  - Bluetooth: fix memory leak in error path of hci_alloc_dev() (David Marlin) [RHEL-194201]
  - Bluetooth: bnep: reject short frames before parsing (David Marlin) [RHEL-194201]
  - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (David Marlin) [RHEL-194201]
  - Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig (David Marlin) [RHEL-194201]
  - Bluetooth: RFCOMM: validate skb length in MCC handlers (David Marlin) [RHEL-194201]
  - Bluetooth: MGMT: validate advertising TLV before type checks (David Marlin) [RHEL-194201]
  - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (David Marlin) [RHEL-194201]
  - Bluetooth: hci_sync: Reset device counters in hci_dev_close_sync() (David Marlin) [RHEL-194201]
  - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (David Marlin) [RHEL-194201]
  - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (David Marlin) [RHEL-194201]
  - Bluetooth: ISO: fix UAF in iso_recv_frame (David Marlin) [RHEL-194201]
  - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (David Marlin) [RHEL-194201]
  - Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success (David Marlin) [RHEL-194201]
  - Bluetooth: hci_qca: Use 100 ms SSR delay for rampatch and NVM loading (David Marlin) [RHEL-194201]
  - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (David Marlin) [RHEL-194201]
  - Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt() (David Marlin) [RHEL-194201]
  - Bluetooth: btusb: Allow firmware re-download when version matches (David Marlin) [RHEL-194201]
  - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (David Marlin) [RHEL-194201]
  - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-194201]
  - Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn (David Marlin) [RHEL-194201]
  - Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate() (David Marlin) [RHEL-194201]
  - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (David Marlin) [RHEL-194201]
  - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (David Marlin) [RHEL-194201]
  - Bluetooth: MGMT: validate Add Extended Advertising Data length (David Marlin) [RHEL-194201]
  - Bluetooth: btmtk: fix urb->setup_packet leak in error paths (David Marlin) [RHEL-194201]
  - Bluetooth: ISO: drop ISO_END frames received without prior ISO_START (David Marlin) [RHEL-194201]
  - Bluetooth: bnep: Fix UAF read of dev->name (David Marlin) [RHEL-194201]
  - Bluetooth: hci_qca: Convert timeout from jiffies to ms (David Marlin) [RHEL-194201]
  - Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer (David Marlin) [RHEL-194201]
  - Bluetooth: serialize accept_q access (David Marlin) [RHEL-194201]
  - Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension handling (David Marlin) [RHEL-194201]
  - Bluetooth: hci_qca: Migrate to serdev specific shutdown function (David Marlin) [RHEL-194201]
  - Revert "Reapply "Bluetooth: revert TX timestamping" for kernel v6.18.y update" (David Marlin) [RHEL-194201]
  - dpll: allow fwnode pins to attempt state change without capability bit (Michal Schmidt) [RHEL-193749]
  - dpll: extend pin notifier with notification source ID (Michal Schmidt) [RHEL-193749]
  - dpll: balance create/delete notifications in __dpll_pin_(un)register (Michal Schmidt) [RHEL-193749]
  - dpll: guard sync-pair removal on full pin unregister (Michal Schmidt) [RHEL-193749]
  - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Michal Schmidt) [RHEL-193749]
  - dpll: send delete notification before unregister in on-pin rollback (Michal Schmidt) [RHEL-193749]
  - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Michal Schmidt) [RHEL-193749]
  - dpll: allow registering FW-identified pin with a different DPLL (Michal Schmidt) [RHEL-193749]
  - dpll: add generic DPLL type (Michal Schmidt) [RHEL-193749]
  - dpll: zl3073x: make frequency monitor a per-device attribute (Michal Schmidt) [RHEL-193749]
  - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Michal Schmidt) [RHEL-193749]
  - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Michal Schmidt) [RHEL-193749]
  - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Michal Schmidt) [RHEL-193749]
  - dpll: zl3073x: fix memory leak on pin registration failure (Michal Schmidt) [RHEL-193749]
  - dpll: zl3073x: Use named initializers for struct i2c_device_id (Michal Schmidt) [RHEL-193749]
  - dpll: Prevent duplicate registrations (Michal Schmidt) [RHEL-193749]
  - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Michal Schmidt) [RHEL-177450]
  - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Michal Schmidt) [RHEL-177450]
  - ice: call netif_keep_dst() once when entering switchdev mode (Michal Schmidt) [RHEL-177450]
  - ice: fix ice_init_link() error return preventing probe (Michal Schmidt) [RHEL-177450]
  - ice: fix AQ error code comparison in ice_set_pauseparam() (Michal Schmidt) [RHEL-177450]
  - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Michal Schmidt) [RHEL-177450]
  - ice: remove redundant checks from PTP init (Michal Schmidt) [RHEL-177450]
  - ice: fix missing priority callbacks for U.FL DPLL pins (Michal Schmidt) [RHEL-177450]
  - ice: restore PTP Rx timestamp config after ethtool set-channels (Michal Schmidt) [RHEL-177450]
  - ice: ptp: use primary NAC semaphore on E825 (Michal Schmidt) [RHEL-177450]
  - ice: ptp: serialize E825 PHY timer start with PTP lock (Michal Schmidt) [RHEL-177450]
  - ice: fix setting promisc mode while adding VID filter (Michal Schmidt) [RHEL-177450]
  - ice: fix VF queue configuration with low MTU values (Michal Schmidt) [RHEL-177450]
  - ice: fix locking around wait_event_interruptible_locked_irq (Michal Schmidt) [RHEL-177450]
  - ice: fix locking in ice_dcb_rebuild() (Michal Schmidt) [RHEL-177450]
  - ice: fix setting RSS VSI hash for E830 (Michal Schmidt) [RHEL-177450]
  - ice: dpll: Fix compilation warning (Michal Schmidt) [RHEL-177450]
  - ice: mention fw_activate action along with devlink reload (Michal Schmidt) [RHEL-177450]
  - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Michal Schmidt) [RHEL-177450] {CVE-2026-53007}
  - ice: fix race condition in TX timestamp ring cleanup (Michal Schmidt) [RHEL-177450] {CVE-2026-53008}
  - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Michal Schmidt) [RHEL-177450]
  - ice: fix PHY config on media change with link-down-on-close (Michal Schmidt) [RHEL-177450]
  - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-177450] {CVE-2026-53009}
  - ice: fix double free in ice_sf_eth_activate() error path (Michal Schmidt) [RHEL-177450] {CVE-2026-46162}
  - ice: update PCS latency settings for E825 10G/25Gb modes (Michal Schmidt) [RHEL-177450]
  - ice: fix 'adjust' timer programming for E830 devices (Michal Schmidt) [RHEL-177450]
  - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Michal Schmidt) [RHEL-177450]
  - ice: ptp: don't WARN when controlling PF is unavailable (Michal Schmidt) [RHEL-177450] {CVE-2026-43346}
  - drivers: net: ice: fix devlink parameters get without irdma (Michal Schmidt) [RHEL-177450]
  - ice: Fix memory leak in ice_set_ringparam() (Michal Schmidt) [RHEL-177450] {CVE-2026-23389}
  - ice: fix retry for AQ command 0x06EE (Michal Schmidt) [RHEL-177450]
  - ice: reintroduce retry mechanism for indirect AQ (Michal Schmidt) [RHEL-177450]
  - ice: fix adding AQ LLDP filter for VF (Michal Schmidt) [RHEL-177450]
  - ice: Make name member of struct ice_cgu_pin_desc const (Michal Schmidt) [RHEL-177450]
  - ice: recap the VSI and QoS info after rebuild (Michal Schmidt) [RHEL-177450]
  - ice: stop counting UDP csum mismatch as rx_errors (Michal Schmidt) [RHEL-177450]
  - ice: convert all ring stats to u64_stats_t (Michal Schmidt) [RHEL-177450]
  - ice: shorten ring stat names and add accessors (Michal Schmidt) [RHEL-177450]
  - ice: use u64_stats API to access pkts/bytes in dim sample (Michal Schmidt) [RHEL-177450]
  - ice: remove ice_q_stats struct and use struct_group (Michal Schmidt) [RHEL-177450]
  - ice: pass pointer to ice_fetch_u64_stats_per_ring (Michal Schmidt) [RHEL-177450]
  - ice: unify PHY FW loading status handler for E800 devices (Michal Schmidt) [RHEL-177450]
  - ice: dpll: fix misplaced header macros (Michal Schmidt) [RHEL-177450]
  - ice: dpll: fix rclk pin state get for E810 (Michal Schmidt) [RHEL-177450]
  - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Michal Schmidt) [RHEL-177450]
  - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Nico Pache) [RHEL-189902] {CVE-2025-68211}
  - net: tls: prevent chain-after-chain in plain text SG (Sabrina Dubroca) [RHEL-152694]
  - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Sabrina Dubroca) [RHEL-152694]
  - net: tls: fix silent data drop under pipe back-pressure (Sabrina Dubroca) [RHEL-152694]
  - net: tls: fix strparser anchor skb leak on offload RX setup failure (Sabrina Dubroca) [RHEL-152694]
  - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Sabrina Dubroca) [RHEL-152694]
  - tls: Purge async_hold in tls_decrypt_async_wait() (Sabrina Dubroca) [RHEL-152694]
  - tls: Fix race condition in tls_sw_cancel_work_tx() (Sabrina Dubroca) [RHEL-154836] {CVE-2026-23240}
  - tls: don't rely on tx_work during send() (Sabrina Dubroca) [RHEL-152694]
  - tls: always set record_type in tls_process_cmsg (Sabrina Dubroca) [RHEL-152694]
  - tls: wait for async encrypt in case of error during latter iterations of sendmsg (Sabrina Dubroca) [RHEL-152694]
  - net: tls: wait for async completion on last message (Sabrina Dubroca) [RHEL-152694]
  - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (Sabrina Dubroca) [RHEL-189938] {CVE-2025-40149}
  - ktls, sockmap: Fix missing uncharge operation (Sabrina Dubroca) [RHEL-152694]
  - net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Sabrina Dubroca) [RHEL-192925]
  - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177879] {CVE-2026-46323}
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-178626] {CVE-2026-43503}
  - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-178626] {CVE-2026-43503}
  - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176061] {CVE-2026-46300}
  - i2c: tegra: Fix NOIRQ suspend/resume (Charles Mirabile) [RHEL-174251]
  - i2c: tegra: Update Tegra410 I2C timing parameters (Charles Mirabile) [RHEL-174251]
  - i2c: tegra: Disable fair arbitration for non-MCTP buses (Charles Mirabile) [RHEL-174251]
  - i2c: tegra: use dmaengine_get_dma_device() for DMA buffer allocation (Charles Mirabile) [RHEL-174251]
  - ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (Florian Westphal) [RHEL-186601]
  - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (Florian Westphal) [RHEL-186601]
  - netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (Florian Westphal) [RHEL-186601]
  - netfilter: nf_nat_sip: reload possible stale data pointer (Florian Westphal) [RHEL-186601]
  - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_sip: remove net variable shadowing (Florian Westphal) [RHEL-186601]
  - netfilter: ipset: fix race between dump and ip_set_list resize (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_expect: zero at allocation time (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-186601]
  - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_expect: run expectation eviction with no helper (Florian Westphal) [RHEL-186601]
  - netfilter: ctnetlink: do not allow to reset helper on existing conntrack (Florian Westphal) [RHEL-186601]
  - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-186601]
  - neigh: let neigh_xmit take skb ownership (Florian Westphal) [RHEL-186601] {CVE-2026-52981}
  - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-186601]
  - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-186601]
  - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-186601]
  - netfilter: ipset: make sure gc is properly stopped (Florian Westphal) [RHEL-186601]
  - netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (Florian Westphal) [RHEL-186601]
  - netfilter: ipset: Don't use test_bit() in lockless RCU readers in bitmap types (Florian Westphal) [RHEL-186601]
  - netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types (Florian Westphal) [RHEL-186601]
  - netfilter: ipset: annotate "pos" for concurrent readers/writers (Florian Westphal) [RHEL-186601]
  - netfilter: ipset: Fix data race between add and dump in all hash types (Florian Westphal) [RHEL-186601]
  - netfilter: xt_cluster: reject template conntracks in hash match (Florian Westphal) [RHEL-186601]
  - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (Florian Westphal) [RHEL-186601]
  - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-186601]
  - netfilter: conntrack: check NULL when retrieving ct extension (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conncount: gc and rcu fixes (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conncount: add sequence counter to detect tree modifications (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conncount: split count_tree_node rbtree walk into helper (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conncount: use per nf_conncount_data spinlocks (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conncount: callers must hold rcu read lock (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conncount: use per-rule hash initval (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conncount: fix wrong variable type (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (Florian Westphal) [RHEL-186601]
  - netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_expect: skip expectations in other netns via proc (Florian Westphal) [RHEL-186601] {CVE-2026-31496}
  - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-186601]
  - netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock (Florian Westphal) [RHEL-186601]
  - netfilter: synproxy: fix unaligned memory access in timestamp adjustment (Florian Westphal) [RHEL-186601]
  - netfilter: synproxy: adjust duplicate timestamp options (Florian Westphal) [RHEL-186601]
  - netfilter: synproxy: drop packets if timestamp adjustment fails (Florian Westphal) [RHEL-186601]
  - netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures (Florian Westphal) [RHEL-186601]
  - ipvs: clear the svc scheduler ptr early on edit (Florian Westphal) [RHEL-186601] {CVE-2026-53270}
  - netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (Florian Westphal) [RHEL-186601]
  - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-186601]
  - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-186601] {CVE-2026-53134}
  - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-186601] {CVE-2026-53218}
  - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-186601] {CVE-2026-52942}
  - netfilter: x_tables: avoid leaking percpu counter pointers (Florian Westphal) [RHEL-186601] {CVE-2026-53219}
  - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-186601]
  - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-186601] {CVE-2026-53220}
  - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-186601] {CVE-2026-53267}
  - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-186601] {CVE-2026-53212}
  - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-186601] {CVE-2026-53268}
  - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-186601] {CVE-2026-53269}
  - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-186601]
  - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-186601]
  - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-186601]
  - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-186601] {CVE-2026-52912}
  - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-186601]
  - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-186601] {CVE-2026-52915}
  - netfilter: ipset: stop hash:* range iteration at end (Florian Westphal) [RHEL-186601]
  - netfilter: ipset: fix a potential dump-destroy race (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-186601]
  - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-186601] {CVE-2026-52970}
  - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-186601]
  - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-186601]
  - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-186601]
  - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-186601]
  - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-186601]
  - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-186601]
  - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-186601]
  - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-186601] {CVE-2026-52986}
  - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-186601] {CVE-2026-52920}
  - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-186601] {CVE-2026-46324}
  - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-186601]
  - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-186601] {CVE-2026-52998}
  - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-186601] {CVE-2026-52999}
  - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-186601] {CVE-2026-53001}
  - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-186601] {CVE-2026-53002}
  - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-186601] {CVE-2026-45841}
  - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-186601]
  - netfilter: require Ethernet MAC header before using eth_hdr() (Florian Westphal) [RHEL-186601] {CVE-2026-53131}
  - netfilter: x_physdev: reject empty or not-nul terminated device names (Florian Westphal) [RHEL-186601]
  - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-186601] {CVE-2026-31665}
  - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-186601] {CVE-2026-31681}
  - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-186601] {CVE-2026-43085}
  - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-186601] {CVE-2026-43024}
  - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-186601] {CVE-2026-31424}
  - netfilter: ipset: drop logically empty buckets in mtype_del (Florian Westphal) [RHEL-186601] {CVE-2026-31418}
  - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-186601] {CVE-2026-43025}
  - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-186601] {CVE-2026-43026}
  - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-186601]
  - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-186601] {CVE-2026-43028}
  - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-186601] {CVE-2026-31416}
  - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-186601]
  - netfilter: Reorder fields in 'struct nf_conntrack_expect' (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-186601] {CVE-2026-31414}
  - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-186601]
  - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-186601] {CVE-2026-31674}
  - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-186601] {CVE-2026-23278}
  - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-186601] {CVE-2026-23351}
  - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-186601] {CVE-2026-23385}
  - netfilter: nf_conntrack_h323: don't pass uninitialised l3num value (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-186601]
  - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-186601]
  - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-186601] {CVE-2025-68206}
  - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-186601] {CVE-2025-40206}
  - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-186601]
  - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-186601]
  - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-186601]
  - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-186601]
  - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-186601]
  - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-186601] {CVE-2024-56655}
  - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-186601] {CVE-2025-38201}
  - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-186601] {CVE-2025-38162}
  - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-186601]
  - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184267]
  - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-182043]
  - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-182043]
  - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-182043]
  - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-182043]
  - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-182043]
  - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-182043]
  - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-183881]
  - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183881]
  - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180269] {CVE-2026-43276}
  - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180269] {CVE-2026-43276}
  - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180161] {CVE-2026-46117}
  - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180088] {CVE-2026-46145}
  - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171507] {CVE-2026-31669}
  - tipc: fix double-free in tipc_buf_append() (Xin Long) [RHEL-152706]
  - tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG (Xin Long) [RHEL-152706]
  - tipc: fix divide-by-zero in tipc_sk_filter_connect() (Xin Long) [RHEL-152706]
  - tipc: fix duplicate publication key in tipc_service_insert_publ() (Xin Long) [RHEL-152706]
  - tipc: fix RCU dereference race in tipc_aead_users_dec() (Xin Long) [RHEL-152706]
  - tipc: use kfree_sensitive() for session key material (Xin Long) [RHEL-152706]
  - tipc: Fix use-after-free in tipc_mon_reinit_self(). (Xin Long) [RHEL-152706]
  - sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (Xin Long) [RHEL-152695]
  - sctp: disable BH before calling udp_tunnel_xmit_skb() (Xin Long) [RHEL-152695]
  - sctp: fix missing encap_port propagation for GSO fragments (Xin Long) [RHEL-152695]
  - sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT (Xin Long) [RHEL-152695]
  - sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto (Xin Long) [RHEL-152695]
  - sctp: Hold sock lock while iterating over address list (Xin Long) [RHEL-152695]
  - sctp: Prevent TOCTOU out-of-bounds write (Xin Long) [RHEL-152695]
  - sctp: Hold RCU read lock while iterating over address list (Xin Long) [RHEL-152695]
  - net: sctp: fix KMSAN uninit-value in sctp_inq_pop (Xin Long) [RHEL-152695]
  - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). (Xin Long) [RHEL-152695]
  - net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (Xin Long) [RHEL-152695]
  - scsi: mpt3sas: Limit NVMe request size to 2 MiB (Chandrakanth Patil) [RHEL-141217] {CVE-2026-46105}
  - scsi: mpt3sas: Simplify the workqueue allocation code (Chandrakanth Patil) [RHEL-141217]
  - scsi: mpt3sas: Fixed the W=1 compilation warning (Chandrakanth Patil) [RHEL-141217]
  - scsi: mpt3sas: Add configurable command retry limit for slow-to-respond devices (Chandrakanth Patil) [RHEL-141217]
  - scsi: mpt3sas: Add firmware event requeue support for busy devices (Chandrakanth Patil) [RHEL-141217]
  - scsi: mpt3sas: Improve device discovery and readiness handling for slow devices (Chandrakanth Patil) [RHEL-141217]
  - scsi: mpt3sas: Added no_turs flag to device unblock logic (Chandrakanth Patil) [RHEL-141217]
  - scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Fix typo and grammar (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Fix kernel-doc issues in mpi3mr_app.c (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Fix typo (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Add retry mechanism for IOC shutdown with timeout reset (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Add queue-full tracking for operational request queues (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Reset controller on invalid I/O completion (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Clear reset history on ready and recheck state after timeout (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Add NULL checks when resetting request and reply queues (Chandrakanth Patil) [RHEL-141218] {CVE-2026-43473}
  - scsi: mpi3mr: Make driver probing asynchronous (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Driver version update to 8.17.0.3.50 (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Fixed the W=1 compilation warning (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Record and report controller firmware faults (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Update MPI Headers to revision 39 (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Use negotiated link rate from DevicePage0 (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Avoid redundant diag-fault resets (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Rename log data save helper to reflect threaded/BH context (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Add module parameter to control threaded IRQ polling (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Simplify the workqueue allocation code (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Read missing IOCFacts flag for reply queue full overflow (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Prevent duplicate SAS/SATA device entries in channel 1 (Chandrakanth Patil) [RHEL-141218]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-733.el9]
changelog:
  - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219617] {CVE-2026-64320}
  - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-212990]
  - drm/i915/display: enable ccs modifiers on dg2 (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Write REFCLK to 48MHz on DCN21 (Anusha Srivatsa) [RHEL-180329]
  - drm/panthor: Extend VM locked region for remap case to be a superset (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: Check if there are kfd porcesses using adev by kfd_processes_count (Anusha Srivatsa) [RHEL-180329]
  - dma-buf: fix UAF in dma_buf_put() tracepoint (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm: fix runtime PM imbalance issue in amdgpu_pm.c (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval() (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: add missing CSC entries for BT.2020 for DCE IPs (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Bound VBIOS record-chain walk loops (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm: smu_v14_0_0: use SoftMin for gfxclk in set_soft_freq_limited_range (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm: mark metrics.energy_accumulator is invalid for smu 14.0.2 (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm: fix smu13 power limit default/cap calculation (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm: apply SMU 13.0.10 workaround during MP1 unload (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Fix incorrect VRAM GART mappings on non-4K page size systems (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: set noretry=1 as default for GFX 10.1.x (Navi10/12/14) (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: restart the CS if some parts of the VM are still invalidated (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: fix waiting for all submissions for userptrs (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Clear pending_disable before signaling suspend fence (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/multi_queue: skip submit when primary queue is suspended (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/display: fix oops in suspend/shutdown without display (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: fix NULL dereference in get_queue_ids() (Anusha Srivatsa) [RHEL-180329]
  - drm/i915: Fix color blob reference handling in intel_plane_state (Anusha Srivatsa) [RHEL-180329]
  - drm/gem: Try to fix change_handle ioctl, attempt 4 (Anusha Srivatsa) [RHEL-180329]
  - accel/ethosu: reject NPU_OP_RESIZE commands from userspace (Anusha Srivatsa) [RHEL-180329]
  - accel/ethosu: reject DMA commands with uninitialized length (Anusha Srivatsa) [RHEL-180329]
  - accel/ethosu: fix arithmetic issues in dma_length() (Anusha Srivatsa) [RHEL-180329]
  - accel/ethosu: fix wrong weight index in NPU_SET_SCALE1_LENGTH on U85 (Anusha Srivatsa) [RHEL-180329]
  - accel/ethosu: fix IFM region index out-of-bounds in command stream parser (Anusha Srivatsa) [RHEL-180329]
  - accel/ethosu: fix OOB write in ethosu_gem_cmdstream_copy_and_validate() (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Reject gpio_bitshift >= 32 in bios_parser_get_gpio_pin_info() (Anusha Srivatsa) [RHEL-180329]
  - drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait() (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/gem: Fix phys BO pread/pwrite with offset (Anusha Srivatsa) [RHEL-180329]
  - Revert "drm/xe: Skip exec queue schedule toggle if queue is idle during suspend" (Anusha Srivatsa) [RHEL-180329]
  - accel/ivpu: Fix signed integer truncation in IPC receive (Anusha Srivatsa) [RHEL-180329]
  - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (Anusha Srivatsa) [RHEL-180329]
  - accel/ivpu: Add bounds checks for firmware log indices (Anusha Srivatsa) [RHEL-180329]
  - accel/ivpu: Add bounds check for firmware runtime memory (Anusha Srivatsa) [RHEL-180329]
  - Revert "drm/xe/nvls: Define GuC firmware for NVL-S" (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: fix job timeout recovery for unstarted jobs and kernel queues (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: fix refcount leak in xe_range_fence_insert() (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: use plane color_mgmt_changed to track colorop changes (Anusha Srivatsa) [RHEL-180329]
  - drm/atomic: track individual colorop updates (Anusha Srivatsa) [RHEL-180329]
  - drm/colorop: make lut(1/3)d_interpolation props correctly behave as mutable (Anusha Srivatsa) [RHEL-180329]
  - drm/colorop: Remove read-only comments from interpolation fields (Anusha Srivatsa) [RHEL-180329]
  - drm/virtio: Fix driver removal with disabled KMS (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/edp: Check supported link rates DPCD read (Anusha Srivatsa) [RHEL-180329]
  - drm/imx: Fix three kernel-doc warnings in dcss-scaler.c (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: check num_entries in GEM_OP GET_MAPPING_INFO (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: fix calling VM invalidation in amdgpu_hmm_invalidate_gfx (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: fix lock leak on ENOMEM in AMDGPU_GEM_OP_GET_MAPPING_INFO (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: Check for pdd drm file first in CRIU restore path (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: fix NULL pointer bug in svm_range_set_attr (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm/si: Disregard vblank time when no displays are connected (Anusha Srivatsa) [RHEL-180329]
  - drm/i915: Fix potential UAF in TTM object purge (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/color: Fix HDR pre-CSC LUT programming loop (Anusha Srivatsa) [RHEL-180329]
  - drm/gem: fix race between change_handle and handle_delete (Anusha Srivatsa) [RHEL-180329]
  - drm/hyperv: validate VMBus packet size in receive callback (Anusha Srivatsa) [RHEL-180329]
  - drm/hyperv: validate resolution_count and fix WIN8 fallback (Anusha Srivatsa) [RHEL-180329]
  - dma-buf: fix UAF in dma_buf_fd() tracepoint (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/psr: Apply Intel DPCD workaround when SDP on prior line used (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/psr: Read Intel DPCD workaround register (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/psr: Add defininitions for INTEL_WA_REGISTER_CAPS DPCD register (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Restore IDLEDLY regiter on engine reset (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/aux: use polling when irqs are unavailable (Anusha Srivatsa) [RHEL-180329]
  - accel/ivpu: prevent uninitialized data bug in debugfs (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/oa: Fix exec_queue leak on width check in stream open (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vce1: Check that the GPU address is < 128 MiB (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Align amdgpu_gtt_mgr entries to TLB size on Tahiti (v2) (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/dp: Fix readback for target_rr in Adaptive Sync SDP (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN4 (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/tuning: Apply windower hardware filtering setting on Xe3 and Xe3p (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN1 (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Consolidate workaround entries for Wa_18033852989 (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Consolidate workaround entries for Wa_14019988906 (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/pf: Fix CFI failure in debugfs access (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/vf: Fix signature of print functions (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/gsc: Fix double-free of managed BO in error path (Anusha Srivatsa) [RHEL-180329]
  - drm/gem: Make the GEM LRU lock part of drm_device (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Validate GPIO pin LUT table size before iterating (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Fix integer overflow in bios_get_image() (Anusha Srivatsa) [RHEL-180329]
  - drm/bridge: megachips: remove bridge when irq request fails (Anusha Srivatsa) [RHEL-180329]
  - drm/bridge: it66121: acquire reset GPIO in probe (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vpe: Force collaborate sync after TRAP (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/multi_queue: Fix secondary queue error case (Anusha Srivatsa) [RHEL-180329]
  - drm/virtio: use uninterruptible resv lock for plane updates (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/display: Copy color pipeline from plane in the primary joiner pipe (Anusha Srivatsa) [RHEL-180329]
  - drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe (Anusha Srivatsa) [RHEL-180329]
  - drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init (Anusha Srivatsa) [RHEL-180329]
  - drm/gma500/oaktrail_lvds: fix hang on init failure (Anusha Srivatsa) [RHEL-180329]
  - drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup (Anusha Srivatsa) [RHEL-180329]
  - drm/ttm: Fix ttm_bo_shrink() infinite LRU walk on backup failure (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-180329]
  - drm/i915: skip __i915_request_skip() for already signaled requests (Anusha Srivatsa) [RHEL-180329]
  - drm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout failure (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/dp: Fix VSC dynamic range signaling for RGB formats (Anusha Srivatsa) [RHEL-180329]
  - drm/bridge: imx8qxp-pxl2dpi: avoid ERR_PTR with device_node cleanup (Anusha Srivatsa) [RHEL-180329]
  - drm: Replace old pointer to new idr (Anusha Srivatsa) [RHEL-180329]
  - drm/loongson: Use managed KMS polling (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/xelp: Fix Wa_18022495364 (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/gsc: Fix BO leak on error in query_compatibility_version() (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Fix potential NULL deref in xe_exec_queue_tlb_inval_last_fence_put_unlocked (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/debugfs: Correct printing of register whitelist ranges (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Drop registration of guc_submit_wedged_fini from xe_guc_submit_wedge() (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Use XE_WEDGED_MODE_UPON_ANY_HANG_NO_RESET enum instead of magic number (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Use EDID from VBIOS embedded panel info (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Read EDID from VBIOS embedded panel info (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Allow constructing DCE8 link encoder without DDC (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Allow constructing DCE6 link encoder without DDC (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Allow DCE link encoder without AUX registers (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Allow embedded connectors without DDC (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm: Add fine grained flag to SMU v13.0.6 (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.3.0 ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.1 ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.0 ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn: set no_user_fence for VCN v5.0.1 enc ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.5 enc ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: properly handle family setting for early GC 11.5.4 (Anusha Srivatsa) [RHEL-180329]
  - drm/color-mgmt: Typo s/R332/RGB332/ (Anusha Srivatsa) [RHEL-180329]
  - drm/sysfb: ofdrm: fix PCI device reference leaks (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Only send RMA CPER when threshold is exceeded (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2) (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/uvd3.1: Don't validate the firmware when already validated (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm: fix missing fine-grained dpm table flag on aldebaran (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/gmc: Fix AMDGPU_GART_PLACEMENT_LOW to not overlap with VRAM (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: avoid double drm_exec_fini() in userq validate (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/wm: Verify the correct plane DDB entry (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Fix parameter mismatch in panel self-refresh helper (Anusha Srivatsa) [RHEL-180329]
  - drm/fb-helper: Fix a locking bug in an error path (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/uvd4.2: Don't initialize UVD 4.2 when DPM is disabled (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm/ci: Fill DW8 fields from SMC (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm/ci: Clear EnabledForActivity field for memory levels (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0 (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths (Anusha Srivatsa) [RHEL-180329]
  - drm/panel: simple: Correct G190EAN01 prepare timing (Anusha Srivatsa) [RHEL-180329]
  - drm/panel: sharp-ls043t1le01: make use of prepare_prev_first (Anusha Srivatsa) [RHEL-180329]
  - drm/imagination: Switch reset_reason fields from enum to u32 (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/gfx11: look at the right prop for gfx queue priority (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/gfx10: look at the right prop for gfx queue priority (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/ras: Remove redundant NULL check in pending bad-bank list iteration (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Remove dead negative offset check in amdgpu_virt_init_critical_region() (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Drop redundant queue NULL check in hang detect worker (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/ras: Fix NULL deref in ras_core_get_utc_second_timestamp() (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Add default case in DVI mode validation (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/ras: Fix NULL deref in ras_core_ras_interrupt_detected() (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: Update queue properties for metadata ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm: Fix xgmi max speed reporting (Anusha Srivatsa) [RHEL-180329]
  - drm/bridge: cadence: cdns-mhdp8546-core: Handle HDCP state in bridge atomic check (Anusha Srivatsa) [RHEL-180329]
  - drm/bridge: cadence: cdns-mhdp8546-core: Add mode_valid hook to drm_bridge_funcs (Anusha Srivatsa) [RHEL-180329]
  - drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable() (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: GFX12.1 scratch memory limit up to 57-bit (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/ras: Fix type size of remainder argument (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: Removed commented line for MQD queue priority (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/xe2_hpg: Drop invalid workaround Wa_15010599737 (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Consolidate workaround entries for Wa_14019386621 (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Consolidate workaround entries for Wa_14019877138 (Anusha Srivatsa) [RHEL-180329]
  - drm/virtio: Allow importing prime buffers when 3D is enabled (Anusha Srivatsa) [RHEL-180329]
  - drm/gpusvm: Fix unbalanced unlock in drm_gpusvm_scan_mm() (Anusha Srivatsa) [RHEL-180329]
  - dma-fence: Fix sparse warnings due __rcu annotations (Anusha Srivatsa) [RHEL-180329]
  - drm/panel: ilitek-ili9882t: Select DRM_DISPLAY_DSC_HELPER (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/pm: align Hawaii mclk workaround with radeon (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/pm: add missing revision check for CI (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: Make all TLB-flushes heavy-weight (Anusha Srivatsa) [RHEL-180329]
  - drm/panel: boe-tv101wum-nl6: restore MODE_LPM after sending disable cmds (Anusha Srivatsa) [RHEL-180329]
  - drm/bridge: tda998x: Use __be32 for audio port OF property pointer (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ (Anusha Srivatsa) [RHEL-180329]
  - drm/panel: himax-hx83102: restore MODE_LPM after sending disable cmds (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/userq: fix access to stale wptr mapping (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: zero-initialize GART table on allocation (Anusha Srivatsa) [RHEL-180329]
  - drm/radeon: add missing revision check for CI (Anusha Srivatsa) [RHEL-180329]
  - drm: Set old handle to NULL before prime swap in change_handle (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/bo: Fix bo leak on unaligned size validation in xe_bo_init_locked() (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/bo: Fix bo leak on GGTT flag validation in xe_bo_init_locked() (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-180329]
  - drm/udl: Increase GET_URB_TIMEOUT (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Avoid reset in AMDGPU unload path for APUs with GFX V11 and higher. (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: validate SVM ioctl nattr against buffer size (Anusha Srivatsa) [RHEL-180329]
  - drm/appletbdrm: Use kvzalloc for big allocations (Anusha Srivatsa) [RHEL-180329]
  - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Change dither policy for 10 bpc output back to dithering (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vce: Prevent partial address patches (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Add bounds checking to ib_{get,set}_value (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: Add upper bound check for num_of_nodes (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: gate VM CPU HDP flush on reset lock (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower count. (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Use NBIF offset for register RCC_STRAP0_RCC_DEV0_EPF0_STRAP0 . (Anusha Srivatsa) [RHEL-180329]
  - drm/amd: Add missing firmware declaration for PSP v15.0.0 (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: fix math_mod() using arg1 instead of arg2 (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/psr: Init variable to avoid early exit from et alignment loop (Anusha Srivatsa) [RHEL-180329]
  - drm/imx: parallel-display: Prefer bus format set via legacy "interface-pix-fmt" DT property (Anusha Srivatsa) [RHEL-180329]
  - drm/colorop: Fix blob property reference tracking in state lifecycle (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status() (Anusha Srivatsa) [RHEL-180329]
  - drm/atomic: Add affected colorops with affected planes (Anusha Srivatsa) [RHEL-180329]
  - drm/colorop: Preserve bypass value in duplicate_state() (Anusha Srivatsa) [RHEL-180329]
  - drm/gpusvm: Force unmapping on error in drm_gpusvm_get_pages (Anusha Srivatsa) [RHEL-180329]
  - drm/gpusvm: Allow device pages to be mapped in mixed mappings after system pages (Anusha Srivatsa) [RHEL-180329]
  - accel/ivpu: Disallow re-exporting imported GEM objects (Anusha Srivatsa) [RHEL-180329]
  - drm/imagination: Fix segfault when updating ftrace mask (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: fix zero-size GDS range init on RDNA4 (Anusha Srivatsa) [RHEL-180329]
  - amdgpu/jpeg: fix deepsleep register for jpeg 5_0_0 and 5_0_2 (Anusha Srivatsa) [RHEL-180329]
  - drm/arcpgu: fix device node leak (Anusha Srivatsa) [RHEL-180329]
  - drm/nouveau: fix nvkm_device leak on aperture removal failure (Anusha Srivatsa) [RHEL-180329]
  - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: replace PASID IDR with XArray (Anusha Srivatsa) [RHEL-180329]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-734.el9]
changelog:
  - redhat/configs: disable CONFIG_SMB_KUNIT_TESTS (Paulo Alcantara) [RHEL-216926]
  - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-216926]
  - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-216926]
  - smb: client: simplify cifs_fscache_get_super_cookie() (Paulo Alcantara) [RHEL-216926]
  - cifs: validate idmap key payload length (Paulo Alcantara) [RHEL-216926]
  - smb: client: remove conditional return with no effect (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix buffer leaks in SMB1 read and write (Paulo Alcantara) [RHEL-216926]
  - smb: client: use GFP_KERNEL for registry allocation (Paulo Alcantara) [RHEL-216926]
  - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-216926]
  - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-216926]
  - smb: client: handle STATUS_STOPPED_ON_SYMLINK responses without a symlink target (Paulo Alcantara) [RHEL-216926]
  - smb: client: bound dirent name against end of SMB response in cifs_filldir (Paulo Alcantara) [RHEL-216926]
  - smb: client: validate DFS referral PathConsumed (Paulo Alcantara) [RHEL-216926]
  - smb/client: flush dirty data before punching a hole (Paulo Alcantara) [RHEL-216926]
  - smb: client: reject overlapping data areas in SMB2 responses (Paulo Alcantara) [RHEL-216926]
  - smb/client: refresh allocation after EOF-extending fallocate (Paulo Alcantara) [RHEL-216926]
  - smb/client: emulate small EOF-extending mode 0 fallocate ranges (Paulo Alcantara) [RHEL-216926]
  - smb/client: reduce fallocate zero buffer allocation (Paulo Alcantara) [RHEL-216926]
  - smb/client: handle overlapping allocated ranges in fallocate (Paulo Alcantara) [RHEL-216926]
  - smb/client: refresh allocation size after duplicate extents (Paulo Alcantara) [RHEL-216926]
  - smb: client: use kvzalloc() for megabyte buffer in simple fallocate (Paulo Alcantara) [RHEL-216926]
  - smb: client: mask server-provided mode to 07777 in modefromsid (Paulo Alcantara) [RHEL-216926]
  - smb/client: fix incorrect nlink returned by fstat() (Paulo Alcantara) [RHEL-216926]
  - smb/client: zero-initialize stack-allocated cifs_open_info_data (Paulo Alcantara) [RHEL-216926]
  - smb/client: pass cifs_open_info_data to SMB2_open() (Paulo Alcantara) [RHEL-216926]
  - smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink() (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix overflow in passthrough ioctl bounds check (Paulo Alcantara) [RHEL-216926]
  - cifs: Fix support for creating SFU fifo (Paulo Alcantara) [RHEL-216926]
  - cifs: Fix support for creating SFU socket (Paulo Alcantara) [RHEL-216926]
  - cifs: validate DFS referral string offsets (Paulo Alcantara) [RHEL-216926]
  - smb: client: use GFP_KERNEL for DFS cache allocations (Paulo Alcantara) [RHEL-216926]
  - smb: client: restrict implied bcc[0] exemption to responses without data area (Paulo Alcantara) [RHEL-216926]
  - smb: client: preserve leading slash for POSIX absolute symlink targets (Paulo Alcantara) [RHEL-216926]
  - smb: client: refactor cifs_revalidate_mapping() to use clear_and_wake_up_bit() (Paulo Alcantara) [RHEL-216926]
  - smb: client: use unaligned reads in parse_posix_ctxt() (Paulo Alcantara) [RHEL-216926]
  - smb: client: harden POSIX SID length parsing (Paulo Alcantara) [RHEL-216926]
  - cifs: define variable sized buffer for querydir responses (Paulo Alcantara) [RHEL-216926]
  - smb/client: do not account EOF extension as allocation (Paulo Alcantara) [RHEL-216926]
  - smb/client: preserve errors from smb2_set_sparse() (Paulo Alcantara) [RHEL-216926]
  - smb: client: Fix next buffer leak in receive_encrypted_standard() (Paulo Alcantara) [RHEL-216926]
  - smb/client: use %pe to print error pointer (Paulo Alcantara) [RHEL-216926]
  - smb/client: name the default fallocate mode (Paulo Alcantara) [RHEL-216926]
  - smb common: add missing AAPL defines (Paulo Alcantara) [RHEL-216926]
  - smb/client: fix chown/chgrp with SMB3 POSIX Extensions (Paulo Alcantara) [RHEL-216926]
  - smb/client: fix security flag calculation when setting security descriptors (Paulo Alcantara) [RHEL-216926]
  - smb: client: refactor ACL setting control flow in id_mode_to_cifs_acl() (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix query directory replay double-free (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix change notify replay double-free (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix query_info() replay double-free (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix double-free in SMB2_ioctl() replay (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix double-free in SMB2_open() replay (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix double-free in SMB2_flush() replay (Paulo Alcantara) [RHEL-216926]
  - smb: move compression definitions into common/fscc.h (Paulo Alcantara) [RHEL-216926]
  - smb: client: Use more common code in SMB2_tcon() (Paulo Alcantara) [RHEL-216926]
  - smb: client: Use more common error handling code in smb3_reconfigure() (Paulo Alcantara) [RHEL-216926]
  - smb/client: clean up a type issue in cifs_xattr_get() (Paulo Alcantara) [RHEL-216926]
  - smb/client: allow FS_IOC_SETFLAGS to clear compression (Paulo Alcantara) [RHEL-216926]
  - smb/client: use writable handle for FS_IOC_SETFLAGS compression (Paulo Alcantara) [RHEL-216926]
  - smb/client: always return a value for FS_IOC_GETFLAGS (Paulo Alcantara) [RHEL-216926]
  - smb/client: update i_blocks after contiguous writes (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix races in cifsd thread creation (Paulo Alcantara) [RHEL-216926]
  - cifs: validate full SID length in security descriptors (Paulo Alcantara) [RHEL-216926]
  - smb: client: resolve SWN tcon from live registrations (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix conflicting option validation for new mount API (Paulo Alcantara) [RHEL-216926]
  - cifs: invalidate cfid on unlink/rename/rmdir (Paulo Alcantara) [RHEL-216926]
  - smb: client: convert cifs_smb3_do_mount() to sget_fc() (Paulo Alcantara) [RHEL-216926]
  - smb: client: change allocation requirements in DUP_CTX_STR macro (Paulo Alcantara) [RHEL-216926]
  - smb: client: require net admin for CIFS SWN netlink (Paulo Alcantara) [RHEL-216926]
  - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (Paulo Alcantara) [RHEL-216926]
  - smb: client: avoid integer overflow in SMB2 READ length check (Paulo Alcantara) [RHEL-216926]
  - cifs: client: stage smb3_reconfigure() updates and restore ctx on failure (Paulo Alcantara) [RHEL-216926]
  - smb/client: fix possible infinite loop and oob read in symlink_data() (Paulo Alcantara) [RHEL-216926]
  - SMB3.1.1: add missing QUERY_DIR info levels (Paulo Alcantara) [RHEL-216926]
  - smb/client: fix out-of-bounds read in symlink_data() (Paulo Alcantara) [RHEL-216926]
  - smb: client: Zero-pad short GSS session keys per MS-SMB2 (Paulo Alcantara) [RHEL-216926]
  - smb: client: Use FullSessionKey for AES-256 encryption key derivation (Paulo Alcantara) [RHEL-216926]
  - cifs: abort open_cached_dir if we don't request leases (Paulo Alcantara) [RHEL-216926]
  - cifs: change_conf needs to be called for session setup (Paulo Alcantara) [RHEL-216926]
  - smb: client: change allocation requirements in smb2_compound_op (Paulo Alcantara) [RHEL-216926]
  - smb/client: remove unused smb3_parse_opt() (Paulo Alcantara) [RHEL-216926]
  - smb: common: add SMB3_COMPRESS_MAX_ALGS (Paulo Alcantara) [RHEL-216926]
  - smb: client: compress: add code docs to lz77.c (Paulo Alcantara) [RHEL-216926]
  - smb: client: compress: LZ77 optimizations (Paulo Alcantara) [RHEL-216926]
  - smb: client: compress: increase LZ77_MATCH_MAX_DIST (Paulo Alcantara) [RHEL-216926]
  - smb: client: compress: fix counting in LZ77 match finding (Paulo Alcantara) [RHEL-216926]
  - smb: client: compress: fix buffer overrun in lz77_compress() (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix (remove) drop_dir_cache module parameter (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (Paulo Alcantara) [RHEL-216926]
  - smb: client: compress: fix bad encoding on last LZ77 flag (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix integer underflow in receive_encrypted_read() (Paulo Alcantara) [RHEL-216926]
  - smb: client: add tracepoints for deferred handle caching (Paulo Alcantara) [RHEL-216926]
  - smb: client: add oplock level to smb3_open_done tracepoint (Paulo Alcantara) [RHEL-216926]
  - smb: client: add tracepoint for local lock conflicts (Paulo Alcantara) [RHEL-216926]
  - smb: client: add tracepoints for lock operations (Paulo Alcantara) [RHEL-216926]
  - smb: client: allow both 'lease' and 'nolease' mount options (Paulo Alcantara) [RHEL-216926]
  - smb: move filesystem_vol_info into common/fscc.h (Paulo Alcantara) [RHEL-216926]
  - smb: move file_basic_info into common/fscc.h (Paulo Alcantara) [RHEL-216926]
  - smb: move some definitions from common/smb2pdu.h into common/fscc.h (Paulo Alcantara) [RHEL-216926]
  - vfs: get rid of BUG_ON() in d_mark_tmpfile_name() (Paulo Alcantara) [RHEL-216926]
  - smb: client: get rid of d_drop()+d_add() (Paulo Alcantara) [RHEL-216926]
  - smb: client: set ATTR_TEMPORARY with O_TMPFILE | O_EXCL (Paulo Alcantara) [RHEL-216926]
  - smb: client: add support for O_TMPFILE (Paulo Alcantara) [RHEL-216926]
  - vfs: introduce d_mark_tmpfile_name() (Paulo Alcantara) [RHEL-216926]
  - smb: client: add missing MODULE_DESCRIPTION() to smb1maperror_test (Paulo Alcantara) [RHEL-216926]
  - smb: client: Remove unnecessary selection of CRYPTO_ECB (Paulo Alcantara) [RHEL-216926]
  - smb/client: move smb2maperror declarations to smb2proto.h (Paulo Alcantara) [RHEL-216926]
  - smb/client: introduce KUnit tests to check DOS/SRV err mapping search (Paulo Alcantara) [RHEL-216926]
  - smb/client: check if SMB1 DOS/SRV error mapping arrays are sorted (Paulo Alcantara) [RHEL-216926]
  - smb/client: use binary search for SMB1 DOS/SRV error mapping (Paulo Alcantara) [RHEL-216926]
  - smb/client: autogenerate SMB1 DOS/SRV to POSIX error mapping (Paulo Alcantara) [RHEL-216926]
  - smb/client: annotate smberr.h with POSIX error codes (Paulo Alcantara) [RHEL-216926]
  - smb/client: move ERRnetlogonNotStarted to DOS error class (Paulo Alcantara) [RHEL-216926]
  - smb/client: introduce KUnit test to check ntstatus_to_dos_map search (Paulo Alcantara) [RHEL-216926]
  - smb/client: check if ntstatus_to_dos_map is sorted (Paulo Alcantara) [RHEL-216926]
  - smb/client: use binary search for NT status to DOS mapping (Paulo Alcantara) [RHEL-216926]
  - smb/client: refactor ntstatus_to_dos() to return mapping entry (Paulo Alcantara) [RHEL-216926]
  - smb/client: replace nt_errs with ntstatus_to_dos_map (Paulo Alcantara) [RHEL-216926]
  - smb/client: autogenerate SMB1 NT status to DOS error mapping (Paulo Alcantara) [RHEL-216926]
  - smb/client: annotate nterr.h with DOS error codes (Paulo Alcantara) [RHEL-216926]
  - smb/client: avoid null-ptr-deref when tests fail in test_cmp_map() (Paulo Alcantara) [RHEL-216926]
  - fs/smb/client: add verbose error logging for UNC parsing (Paulo Alcantara) [RHEL-216926]
  - smb/client: ensure smb2_mapping_table rebuild on cmd changes (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix generic/694 due to wrong ->i_blocks (Paulo Alcantara) [RHEL-216926]
  - cifs: smb1: fix comment typo (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix open handle lookup in cifs_open() (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix iface port assignment in parse_server_interfaces (Paulo Alcantara) [RHEL-216926]
  - smb/client: only export symbol for 'smb2maperror-test' module (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix atomic open with O_DIRECT & O_SYNC (Paulo Alcantara) [RHEL-216926]
  - smb/client: make SMB2 maperror KUnit tests a separate module (Paulo Alcantara) [RHEL-216926]
  - smb: client: Use snprintf in cifs_set_cifscreds (Paulo Alcantara) [RHEL-216926]
  - smb: client: Don't log plaintext credentials in cifs_set_cifscreds (Paulo Alcantara) [RHEL-216926]
  - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix cifs_pick_channel when channels are equally loaded (Paulo Alcantara) [RHEL-216926]
  - smb: client: terminate session upon failed client required signing (Paulo Alcantara) [RHEL-216926]
  - smb/client: move NT_STATUS_MORE_ENTRIES (Paulo Alcantara) [RHEL-216926]
  - smb/client: rename to NT_ERROR_INVALID_DATATYPE (Paulo Alcantara) [RHEL-216926]
  - smb/client: rename to NT_STATUS_SOME_NOT_MAPPED (Paulo Alcantara) [RHEL-216926]
  - smb/client: map NT_STATUS_PRIVILEGE_NOT_HELD (Paulo Alcantara) [RHEL-216926]
  - smb/client: map NT_STATUS_MORE_PROCESSING_REQUIRED (Paulo Alcantara) [RHEL-216926]
  - smb/client: map NT_STATUS_BUFFER_OVERFLOW (Paulo Alcantara) [RHEL-216926]
  - smb/client: map NT_STATUS_NOTIFY_ENUM_DIR (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Remove duplicate include of cifs_debug.h (Paulo Alcantara) [RHEL-216926]
  - smb client: Add generated file to gitignore file (Paulo Alcantara) [RHEL-216926]
  - cifs: Fix the copyright banner on smb1maperror.c (Paulo Alcantara) [RHEL-216926]
  - smb: common: add header guards to fs/smb/common/smb2status.h (Paulo Alcantara) [RHEL-216926]
  - smb: client: Avoid a dozen -Wflex-array-member-not-at-end warnings (Paulo Alcantara) [RHEL-216926]
  - smb/client: remove useless comment in mapping_table_ERRSRV (Paulo Alcantara) [RHEL-216926]
  - smb/client: remove some literal NT error codes from ntstatus_to_dos_map (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_VOLUME_NOT_UPGRADED (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_NO_USER_KEYS (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_WRONG_EFS (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_NO_EFS (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_NO_RECOVERY_POLICY (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_RANGE_NOT_FOUND (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_DECRYPTION_FAILED (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_ENCRYPTION_FAILED (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_DIRECTORY_IS_A_REPARSE_POINT (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_VOLUME_DISMOUNTED (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_BIOS_FAILED_TO_CONNECT_INTERRUPT (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_VARIABLE_NOT_FOUND (Paulo Alcantara) [RHEL-216926]
  - smb/client: rename ERRinvlevel to ERRunknownlevel (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_OS2_INVALID_LEVEL (Paulo Alcantara) [RHEL-216926]
  - smb/client: map NT_STATUS_INVALID_INFO_CLASS to ERRbadpipe (Paulo Alcantara) [RHEL-216926]
  - smb/client: introduce KUnit test to check search result of smb2_error_map_table (Paulo Alcantara) [RHEL-216926]
  - smb/client: use bsearch() to find target in smb2_error_map_table (Paulo Alcantara) [RHEL-216926]
  - smb/client: check whether smb2_error_map_table is sorted in ascending order (Paulo Alcantara) [RHEL-216926]
  - cifs: Autogenerate SMB2 error mapping table (Paulo Alcantara) [RHEL-216926]
  - smb: client: correct value for smbd_max_fragmented_recv_size (Paulo Alcantara) [RHEL-216926]
  - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-216926]
  - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-216926]
  - cifs: Label SMB2 statuses with errors (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Make BCC accessors conditional (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: connect.c (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: sess.c (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: cifsencrypt.c (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: netmisc.c (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: misc.c (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: cifs_debug.c (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Move inline funcs (Paulo Alcantara) [RHEL-216926]
  - cifs: Fix cifs_dump_mids() to call ->dump_detail (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Don't return smb_hdr from cifs_{,small_}buf_get() (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Move BCC access functions (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Adjust #includes (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Split SMB1 protocol defs into smb1pdu.h (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Add some #includes (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Move some SMB1 received PDU checking bits to smb1transport.c (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Move some SMB1 receive bits to smb1transport.c (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Separate out SMB1 decls into smb1proto.h (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Create smb1proto.h for SMB1 declarations (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Rename cifstransport.c (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/ntlmssp.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/reparse.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/smb2proto.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/cifs_debug.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/cifs_swn.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/compress.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/cifs_spnego.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/fs_context.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/fscache.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/cifsglob.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/dns_resolve.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/dfs_cache.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/cifsfs.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/netlink.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/cifs_unicode.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/cifsproto.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/dfs.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/cached_dir.h (Paulo Alcantara) [RHEL-216926]
  - smb: client: introduce multichannel async work during mount (Paulo Alcantara) [RHEL-216926]
  - cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-216926]
  - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-207773]
  - rtla: Stop the record trace on interrupt (Tomas Glozar) [RHEL-207773]
  - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213219] {CVE-2026-63888}
  - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212062]
  - ice: implement E825 TX ref clock control and TXC hardware sync status (Michal Schmidt) [RHEL-193816]
  - ice: add Tx reference clock index handling to AN restart command (Michal Schmidt) [RHEL-193816]
  - ice: implement CPI support for E825C (Michal Schmidt) [RHEL-193816]
  - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Michal Schmidt) [RHEL-193816]
  - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193044]
  - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188795] {CVE-2025-54518}
  - redhat: sign UKI's inner vmlinuz with modules signing key (Vitaly Kuznetsov) [RHEL-223629]


author: Tao Liu <ltao@redhat.com> - 2.0.29-6
changelog:
  - 99-kdump.conf: Omit rdma module
  - Fallback to get NIC driver by /sys/class/net/NIC/device/driver/module
  - Note user-specified crashkernel value will be overwritten by default value


author: Tao Liu <ltao@redhat.com> - 2.0.29-7
changelog:
  - 99-kdump.conf: Omit clevis related dracut modules
  - kdump-lib.sh: rounded up the total_mem to 128M in get_system_size
  - kdump-lib.sh: Adjust default crashkernel reservation for x86_64 and s390x
  - doc/kdump.conf: correctly align the options


author: Tao Liu <ltao@redhat.com> - 2.0.29-8
changelog:
  - kdumpctl: check and generate /etc/vconsole.conf
  - kdump-lib.sh: Reserve crashkernel by default for systems with 1G-2G memory


author: Tao Liu <ltao@redhat.com> - 2.0.29-12
changelog:
  - Allow "sudo kdumpctl" for LUKS dump target
  - Restore SELinux label of crypttab file
  - Allow kdump.service to access LUKS volume keys
  - Wait for LUKS configfs API to be ready
  - Change LUKS volume key prefix to kdump-cryptsetup:vk-
  - Remove unused LUKS volume keys from keyring
  - Limit LUKS support to x86_64
  - Add kdumpctl setup-crypttab subcommand
  - Return LUKS devices in the form of UUIDs directly
  - Fix SC2181 issues in kdump-udev-throttler
  - LUKS: make /usr writable
  - Address CPU/memory hot plugging for kdump LUKS support
  - shfmt kdump-udev-throttler
  - Use cryptsetup --link-vk-to-keyring to save volume keys
  - Support dumping to a LUKS-encrypted target
  - Add a helper function to get uuid by MAJ:MIN


author: Pingfan Liu <piliu@redhat.com> - 2.0.29-14
changelog:
  - powerpc: Set nr_cpus=16 for kdump kernel
  - powerpc: consider CPU count while calculating crashkernel value
  - Use all available CPUs to collect dump


author: Lichen Liu <lichliu@redhat.com> - 2.0.29-15
changelog:
  - sysconfig: use initramfs_options to reduce memory usage
  - kdump-lib-initramfs: rewrite kdump_get_conf_val
  - kdump-lib-initramfs: Fix performance regression in kdump_get_conf_val


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Julien Rische <jrische@redhat.com> - 1.21.1-8
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88704
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88048
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-82647


author: Julien Rische <jrische@redhat.com> - 1.21.1-9
changelog:
  - krad: packet ID fetched from uninitialized variable
    Resolves: RHEL-145355
  - Create sub-package for xrealmauthz KDC plugin
    Resolves: RHEL-67468
  - Improving kerberos ulog resize efficiency
    Resolves: RHEL-145359


author: Julien Rische <jrische@redhat.com> - 1.21.1-10
changelog:
  - Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
    Resolves: RHEL-171591 RHEL-171593


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Steve Dickson <steved@redhat.com> 0.10-0
changelog:
  - Initial package
  - Upstream contributions by:
      - Chuck Lever <chuck.lever@oracle.com>
      - Hannes Reinecke <hare@suse.de>
      - Jeff Layton <jlayton@kernel.org>
      - Benjamin Coddington <bcodding@redhat.com>
      - David Härdeman <david@hardeman.nu>
      - Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
      - Moritz "WanzenBug" Wanzenböck <moritz.wanzenboeck@linbit.com>


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-1
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114548 - Update to version 4.23.4
  - resolves: RHEL-132995 - Fix Time Machine backup
  - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-1
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-143401 - Fix winbind group resolution
  - resolves: RHEL-141027 - Fix winbind crash


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.24.3-1
changelog:
  - Update to version 4.24.3
  - resolves: RHEL-156320 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
    various flaws
  - resolves: RHEL-161658 - CVE-2026-4480 Samba: Remote Code Execution in
    printing
  - resolves: RHEL-170594 - CVE-2026-40170 samba: ngtcp2
  - resolves: RHEL-177925 - CVE-2026-4408 samba: Remote Code Execution in
    SAMR
  - resolves: RHEL-166869 - build hardening with FORTIFY_SOURCE


author: Honza Horak <hhorak@redhat.com> - 590-1
changelog:
  - Update to the version 590
  - Also solves the "message overlay" in the terminal
    Resolves: #2062188


author: Marek Polacek <polacek@redhat.com> 11.5.0-2
changelog:
  - fix TARGET_CPU_DEFAULT (PR target/105157, RHEL-50037)
  - libstdc++: Workaround kernel-headers on s390x-linux (RHEL-50054)
  - fix wrong code with memcpy from _Complex (PR tree-optimization/116034)


author: Florian Weimer <fweimer@redhat.com> - 11.5.0-10
changelog:
  - Exception handling performance improvements (RHEL-105072)
  - libgcc: Use _dl_find_object to find DWARF data in unwinder
  - libgcc: Use lock-free data structures for run-time unwinder registration


author: David Malcolm <dmalcolm@redhat.com> - 11.5.0-14
changelog:
  - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
    branches and calls to gcov output, but not conditions (RHEL-105416).


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Marek Polacek <polacek@redhat.com> 11.5.0-1
changelog:
  - update from releases/gcc-11 branch (RHEL-35635)
    - GCC 11.5 release
    - PRs ada/113893, ada/113979, analyzer/104042, c/113262, c/114007, c/114493,
  	c++/89224, c++/92145, c++/92407, c++/97990, c++/99710, c++/100667,
  	c++/100772, c++/101765, c++/103185, c++/104051, c++/111485,
  	c++/111529, c++/113598, c++/113674, c++/114537, c++/114561,
  	c++/114562, c++/114572, c++/114634, c++/114691, d/113125, d/113758,
  	d/114171, debug/111080, debug/112718, driver/115440, fortran/50410,
  	fortran/103715, fortran/104908, fortran/107426, fortran/114474,
  	fortran/114825, gcov-profile/114115, libfortran/110651,
  	libgomp/113192, libquadmath/114533, libstdc++/104259,
  	libstdc++/104606, libstdc++/105417, libstdc++/110054,
  	libstdc++/113250, libstdc++/114147, libstdc++/114401,
  	libstdc++/114750, libstdc++/114803, libstdc++/115269,
  	libstdc++/115454, libstdc++/115575, middle-end/90348,
  	middle-end/95351, middle-end/107385, middle-end/108789,
  	middle-end/110027, middle-end/110115, middle-end/110176,
  	middle-end/111422, middle-end/111632, middle-end/112732,
  	middle-end/113907, middle-end/113921, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/115527,
  	middle-end/115836, objc/101666, objc/101718, preprocessor/105608,
  	rtl-optimization/100303, rtl-optimization/108086,
  	rtl-optimization/110079, rtl-optimization/114768,
  	rtl-optimization/114902, rtl-optimization/115092, sanitizer/97696,
  	sanitizer/111736, sanitizer/114956, sanitizer/115172, target/88309,
  	target/101737, target/101865, target/105522, target/108120,
  	target/108743, target/110411, target/111610, target/111677,
  	target/112397, target/113122, target/113281, target/114049,
  	target/114098, target/114130, target/114184, target/114310,
  	target/114837, target/114846, target/115253, target/115297,
  	target/115360, target/115457, target/115475, target/115611,
  	target/115691, testsuite/113175, testsuite/114034, testsuite/114036,
  	tree-optimization/110386, tree-optimization/110422,
  	tree-optimization/111039, tree-optimization/111070,
  	tree-optimization/111331, tree-optimization/111407,
  	tree-optimization/111445, tree-optimization/111736,
  	tree-optimization/112495, tree-optimization/112505,
  	tree-optimization/112793, tree-optimization/113372,
  	tree-optimization/113552, tree-optimization/113603,
  	tree-optimization/114027, tree-optimization/114115,
  	tree-optimization/114566, tree-optimization/114876,
  	tree-optimization/115192, tree-optimization/115337,
  	tree-optimization/115843
  - fix FLUSH IOSTAT value (PR libfortran/101255, RHEL-32536)
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960)


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Karel Zak <kzak@redhat.com> 2.37.4-22
changelog:
  - fix RHEL-113638 - lscpu: update ARM identifiers
  - fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification


author: Karel Zak <kzak@redhat.com> 2.37.4-23
changelog:
  - fix RHEL-123527 - mount: improve --all documentation
  - fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
  - fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation


author: Miro Hrončok <mhroncok@redhat.com> - 1.0.9-10
changelog:
  - Accept output_buffer_limit as an alias for max_output_length
    in Decompressor.process() for forward compatibility with upstream 1.2.0
  - Resolves: RHEL-221150


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Jaroslav Rohel <jrohel@redhat.com> - 0.69.0-7
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-12123)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279, RHEL-6304)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-12124)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-9
changelog:
  - Grow memory if applying a query after increasing a number of available
    packages (RHEL-27657)
  - Fix a memory leak in get_best_solution() (RHEL-26226)
  - Fix destructing libdnf::TransactionItem from a base class (RHEL-26240)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-11
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-1454)


author: Evan Goode <egoode@redhat.com> - 0.69.0-16
changelog:
  - Introduce $releasever_major, $releasever_minor variables, shell-style
    variable substitution (RHEL-95006)


author: Ales Matej <amatej@redhat.com> - 0.69.0-18
changelog:
  - Fix a crash when parsing multiple key files fails (RHEL-145618)
  - Mark all protected packages as user installed for all transactions (RHEL-76112)
  - Add `filterUnneededExtraUserinstalled` and Python version to the API
  - Describe all problems even when there are protected removals (RHEL-115194)
  - Clearer error for protected package broken dependencies


author: Pino Toscano <ptoscano@redhat.com> 1.29.39-1
changelog:
  - tito: drop bz requirement (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)
  - RHEL-7206: Small change of message printed by dnf plugin (jhnidek@redhat.com)
  - CCT-118: Fix flake8 error E721 (mhorky@redhat.com)
  - Fix type hint in rhsm (mhorky@redhat.com)
  - Simplify autoregistration test setup (mhorky@redhat.com)
  - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com)
  - Fixed inappropriate logical expression (ataf@openrefactory.com)
  - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com)
  - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com)
  - RPM: Avoid needless runtime requirement on python3-setuptools
    (miro@hroncok.cz)
  - cli: normalize hostname in error message (ptoscano@redhat.com)
  - connection: normalize hostname in ConnectionOSErrorException
    (ptoscano@redhat.com)
  - Improved printing of addresses and URLs (jhnidek@redhat.com)
  - Use username and password from --proxy=URL (jhnidek@redhat.com)
  - Use parse_url() from utils.py for parsing URL, when --proxy is used.
    (jhnidek@redhat.com)
  - 2225403: Parse URL properly (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.40-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
    (mariocanfly@hotmail.com)
  - spec: Add missing GLib dependency when building without DNF
    (debarshir@gnome.org)
  - Remove deprecated `locale.*()` functions (mhorky@redhat.com)
  - Remove version constraint of pytest (mhorky@redhat.com)
  - RHEL-15110: RegisterServer is stopped, when not needed (jhnidek@redhat.com)
  - RHEL-15110: Fix issue with registration using gsd-subman (jhnidek@redhat.com)
  - Fix an error in debug logging of cloud-what (mhorky@redhat.com)
  - ci: bump actions/upload-artifact from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Improve debug logging to make it faster to understand (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.41-1
changelog:
  - feat: update man page with deprecation notices (jajerome@redhat.com)
  - feat: Disable anonymous cloud registration temporarily (mhorky@redhat.com)
  - feat: Deprecate 'syspurpose addons' (mhorky@redhat.com)
  - fix: make SyspurposeComplianceStatusCache.get_overall_status() always usable
    (ptoscano@redhat.com)
  - fix: Change order of checks (jhnidek@redhat.com)
  - fix: Cache shouldn't try to get data from server without UUID
    (jhnidek@redhat.com)
  - feat: Deprecate import command (zpetrace@redhat.com)
  - fix: 1.29 modify section about remove command in man page
    (jhnidek@redhat.com)
  - feat: 1.29 Deprecate redeem sub-command (jhnidek@redhat.com)
  - fix: Reformated man page of subscription-manager (jhnidek@redhat.com)
  - fix: [1.29] Remove command should not be primary command (jhnidek@redhat.com)
  - feat: deprecate autosubscribe/auto-attach register options
    (jajerome@redhat.com)
  - feat: deprecate attach/auto-attach modules (jajerome@redhat.com)
  - docs: deprecate attach/auto-attach in man page (jajerome@redhat.com)
  - fix: Hide subscription management "errors" in container mode
    (mhorky@redhat.com)
  - feat: 1.29 Deprecate remove sub-command (jhnidek@redhat.com)
  - fix: 1.29 Do not try to test this branch for Fedora latest
    (jhnidek@redhat.com)
  - fix: 1.29 Do not try to test this branch for Fedora rawhide
    (jhnidek@redhat.com)
  - fix(test): Properly stop method mock (mhorky@redhat.com)
  - feat: Azure: added extended location and type of location fact
    (jhnidek@redhat.com)
  - fix: Update version of Azure metadata (jhnidek@redhat.com)
  - feat: Added Azure location to facts (jhnidek@redhat.com)
  - feat: Added zone GCP fact (jhnidek@redhat.com)
  - feat: Added more AWS cloud facts (jhnidek@redhat.com)
  - fix: Change type hint according returned value. (jhnidek@redhat.com)
  - feat: Add warning message about release version to dnf plugin
    (jhnidek@redhat.com)
  - Bump black from 23.3.0 to 24.3.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Format code with black==24.3.0 (ptoscano@redhat.com)
  - Fix memory leaks in test-productdb.c (jhnidek@redhat.com)
  - Fix memory leaks in productdb.c (jhnidek@redhat.com)
  - fix: Function prototype without declaration is deprecated
    (jhnidek@redhat.com)
  - Removed unused includes of .h files (jhnidek@redhat.com)
  - libdnf: switch from g_error_free() to g_clear_error() in tests
    (ptoscano@redhat.com)
  - libdnf: do not build test code in plugin (ptoscano@redhat.com)
  - Change handling of deprecated `datetime.datetime.utcnow()`
    (mhorky@redhat.com)
  - CCT-66: Update identity reporting in DNF plugin during autoregistration
    (mhorky@redhat.com)
  - Remove automatic registration delay for rhsmcertd (mhorky@redhat.com)
  - Remove API endpoint for automatic cloud registration v1 (mhorky@redhat.com)
  - CCT-67: Use automatic registration v2 (mhorky@redhat.com)
  - IdentityUpdateAction: Improve logging for updating identity certificates
    (mhorky@redhat.com)
  - Identity: Add method to extract current owner (mhorky@redhat.com)
  - rhsmcertd: Define exit codes (mhorky@redhat.com)
  - rhsmcertd: Use module-level logger (mhorky@redhat.com)
  - Add AnonymousCertificateManager (mhorky@redhat.com)
  - Add CloudTokenCache for Candlepin JWT (mhorky@redhat.com)
  - Implement API endpoints for Automatic registration v2 (mhorky@redhat.com)
  - Update documentation for one API call in connection.py (mhorky@redhat.com)
  - Fix type hint of RegisterService.register() (mhorky@redhat.com)
  - rhsmcertd: Drop D-Bus loop code (mhorky@redhat.com)
  - rhsmcertd: Add type hints (mhorky@redhat.com)
  - rhsmcertd: Remove forgotten old comment (mhorky@redhat.com)
  - Stop logging full lscpu output (mhorky@redhat.com)
  - Prevent double-logging of syspurpose cache log statement (mhorky@redhat.com)
  - Update the log message containing response time statistics
    (mhorky@redhat.com)
  - CCT-266: Update TLS flags (mhorky@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.43-1
changelog:
  - [1.29] feat/cct-868: Subset of list command options marked as deprecated *
    Options --available, --all, --ondate, --servicelevel --no-overlap --match-
    install, --pool-only, --afterdate were marked as deprecated in ListCommand
    definition of their help string. (mgrunwal@redhat.com)
  - fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
  - feat: Better automatic registration logging (mhorky@redhat.com)
  - fix: perform autoreg waiting when performing standard autoreg
    (ptoscano@redhat.com)
  - chore: move autoreg waiting code in own function (ptoscano@redhat.com)
  - docs: update proxy details in man page (jvlcek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.44-1
changelog:
  - Revert "feat: Disable anonymous cloud registration temporarily"
    (ptoscano@redhat.com)
  - Revert "feat: forcefully switch automatic cloud registration to v1"
    (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.45-1
changelog:
  - fix: Do not upload profile from DNF, when it is disabled in conf
    (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - feat: Enable register with environment names and environment types
    (jhnidek@redhat.com)
  - feat: support registering specifying environments with activation keys
    (ryanverdile@gmail.com)
  - chore: Remove auto-assign CI job (mhorky@redhat.com)
  - feat: [1.29] Added basic configuration for Packit (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.46-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Italian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (mhorky@redhat.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Update translation files (noreply@weblate.org)
  - fix: Handle improperly closed connections (mhorky@redhat.com)
  - ci: use the right distro for coverage reporting (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - tests: fix mocking of get_terminal_width() in TestColumnize
    (ptoscano@redhat.com)
  - feat: print compliance errors & syspurpose status only in entitlement mode
    (ptoscano@redhat.com)
  - feat: print "registered" as status when using SCA (ptoscano@redhat.com)
  - feat: print "not registered" on status when not registered
    (ptoscano@redhat.com)
  - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
  - refactor: move determination of content access mode in own method
    (ptoscano@redhat.com)
  - tests: move StubIdentity to stubs (ptoscano@redhat.com)
  - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
  - chore: move banner printing to its own function (ptoscano@redhat.com)
  - fix: Append two additional facts to the graylist (pkoprda@redhat.com)
  - refactor: Use class constant instead of variable graylist
    (pkoprda@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.47-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Spanish) (jsefler@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - fix: [1.29] Wait random time before reaching IMDS server (jhnidek@redhat.com)
  - feat: [1.29] Call random.seed() at begining of auto-register
    (jhnidek@redhat.com)
  - feat: [1.29] Better control over auto-reg waiting game (jhnidek@redhat.com)
  - fix: [1.29] Enable content during auto-registration v2 (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.48-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ci: bump actions/upload-artifact from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - feat: [1.29] Added dnf4 warning about skewed clock (jhnidek@redhat.com)
  - fix: [1.29] Require findutils in .spec file (jhnidek@redhat.com)
  - ci: bump actions/checkout from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.49-1
changelog:
  - RHEL-126157: Update GCP to Google Cloud in log messages (crag@redhat.com)
  - fix: Update user-facing GCP refrences to Google Cloud (crag@redhat.com)
  - feat: check if --set arg is empty when the environments module is called
    (manuelcanorojo@gmail.com)
  - feat: Added more debug prints to cloud-what (jhnidek@redhat.com)
  - fix(test): Fix unit test of aws (jhnidek@redhat.com)
  - fix: Fix getting AWS IMDSv2 signature (jhnidek@redhat.com)
  - chore: Make new black happy again (jhnidek@redhat.com)
  - chore: Increased log level of messages (jhnidek@redhat.com)
  - fix: Use IMDSv2 for signature first (jhnidek@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Added translation using Weblate (Finnish) (noreply-addon-
    languages@weblate.org)
  - fix: TypeError in _get_tls_handshake_info type hinting (macano@redhat.com)
  - feat: added signature type log in TLS handshake (macano@redhat.com)
  - feat: added internal method to get tls handshake info
    (manuelcanorojo@gmail.com)
  - ci: bump actions/upload-artifact from 5 to 6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Fix profile upload because of missing self.cp (suttner@atix.de)
  - Fix upload profile if rhsmcertd is not running at all (suttner@atix.de)
  - ci: bump actions/checkout from 5 to 6
    (49699333+dependabot[bot]@users.noreply.github.com)


author: Jason Jerome <jajerome@redhat.com> 1.29.51-1
changelog:
  - integration-tests: Run the subman-cockpit tests with 2 GB RAM
    (marius.vollmer@gmail.com)
  - fix(backport): skip package profile upload when disabled in config
    (jajerome@redhat.com)
  - fix: allow system to be registered with broken insights-client
    (jlocash@redhat.com)
  - ci: bump actions/upload-artifact from 6 to 7
    (49699333+dependabot[bot]@users.noreply.github.com)
  - fix: Handle non-existence of /var/cache/cloud-what gracefully
    (jhnidek@redhat.com)
  - fix(unit-tests): Fixed unit tests for rhsm-debug (jhnidek@redhat.com)
  - feat: Add /var/cache/cloud-what/ to sos-report (jhnidek@redhat.com)


author: Jason Jerome <jajerome@redhat.com> 1.29.52-1
changelog:
  - Translated using Weblate (Italian) (ali.ciloqlu@murena.io)
  - Translated using Weblate (Czech) (pavel.borecki@gmail.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Czech) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.53-1
changelog:
  - docs: add caution for certificate_algorithms configuration (CCT-2704)
    (jsefler@redhat.com)
  - chore: Added more debug prints about closing connections (jhnidek@redhat.com)
  - fix: Set timeout before trying to close TLS connection (jhnidek@redhat.com)
  - fix(test): Update StubUEP updateConsumer() (jhnidek@redhat.com)
  - feat(pqc): update crypto capabilities from 'refresh' command
    (jlocash@redhat.com)
  - feat(pqc): update crypto capabilities from 'identity --regenerate' command
    (jlocash@redhat.com)
  - style: fix flake8 lint error (jlocash@redhat.com)
  - test: Fixed one unit test related to inotify (jhnidek@redhat.com)
  - feat(pqc): update crypto capabilities in candlepin from rhsmcertd-worker
    (jlocash@redhat.com)
  - fix: Do not send JSON document with empty signature (jhnidek@redhat.com)
  - chore: style formatting fixes in rhsmcertd worker (jajerome@redhat.com)
  - fix: updated rhsmcertd to detect when auto-registration is terminated early
    (jajerome@redhat.com)
  - fix: updated rhsmcertd to detect when system is already registered
    (jajerome@redhat.com)
  - feat(pqc): implement cache for crypto capabilities (jlocash@redhat.com)
  - fix(unit-tests): mock isdir so rhsm_debug tests are env agnostic
    (csnyder@redhat.com)
  - fix(test): Fixed unit tests to be compatible with 1.29 branch
    (jhnidek@redhat.com)
  - fix(pqc): update warning to indicate fallback (jlocash@redhat.com)
  - fix(pqc): raise RuntimeError when get_signature_algorithms or
    get_public_key_algorithms throw (jlocash@redhat.com)
  - feat(pqc): print warning when setting invalid `certificate_algorithms` value
    (jlocash@redhat.com)
  - docs: Document `rhsm.certificate_algorithms` config option in rhsm.conf man
    pages (jlocash@redhat.com)
  - fix: drop __smoke_test__ and __main__ from pqc.py (jlocash@redhat.com)
  - style: fix linting error in connection.py (jlocash@redhat.com)
  - test: fix broken tests for registerConsumer (jlocash@redhat.com)
  - feat(pqc): Use C bindings to retrieve public-key and signature algorithms in
    pqc.py (jlocash@redhat.com)
  - feat: POC: Add support for PQC (jhnidek@redhat.com)
  - test: Added C unit tests of _certificate.so (jhnidek@redhat.com)
  - feat: Added .pyi file for certificate.c (jhnidek@redhat.com)
  - chore: Not all .py* files should be ignored (jhnidek@redhat.com)
  - test: Created unit tests for certificate.c (jhnidek@redhat.com)
  - feat: Added 2 methods for listing crypto algorithms (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.54-1
changelog:
  - fix: Invalidate and update CurrentOwnerCache when owner change is detected
    (csnyder@redhat.com)
  - ci: bump actions/checkout from 6 to 7
    (49699333+dependabot[bot]@users.noreply.github.com)


author: José Expósito <jexposit@redhat.com> - 2.4.123-2
changelog:
  - Revert upstream commit ffaa3ce144be ("2.4.122, Build Intel on all arches")
    libpciaccess is not available in RHEL 9 aarch64, ppc64le and s390x
    Resolves: https://issues.redhat.com/browse/RHEL-53869


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Richard Hughes <richard@hughsie.com> 0.3.2-1
changelog:
  - New upstream version
  - Do not use deprecated libusb API
  - Use a 1ms timeout in the Windows event thread


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-1
changelog:
  - Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
  - Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
  - Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
  - Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
  - Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-3
changelog:
  - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  - Resolves: RHEL-103434 - cache_credentials = true not working


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-4
changelog:
  - Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Tomas Halman <thalman@redhat.com> - 2.9.8-1
changelog:
  - Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
  - Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
  - Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
  - Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
  - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache


author: Iker Pedrosa <ipedrosa@redhat.com> - 2.9.9-1
changelog:
  - Resolves: RHEL-173741 - SSSD Rebase for RHEL 9.9
  - Resolves: RHEL-173740 - CVE-2026-6245 sssd: out-of-bounds read in the sssd
  - Resolves: RHEL-150439 - Poor performance of `BE_REQ_INITGROUPS` handling by 'sssd_be' (LDAP RFC2307, no nested groups)
  - Resolves: RHEL-143416 - Performance impact with enumerate in SSSD > 2.7.3
  - Resolves: RHEL-152067 - [RFE] SSSD PAM: Support Microsoft AD PKINIT authentication indicator (ms-pkca) for pam_gssapi_indicators_map
  - Resolves: RHEL-173742 - Man page update: man sssd_krb5_localauth_plugin – Missing disable = an2ln
  - Resolves: RHEL-173743 - Concurrent child processes trigger unnecessarily backtrace
  - Resolves: RHEL-173744 - Detect foreign security principals in AD group members and silently ignore them
  - Resolves: RHEL-156519 - GDM Support for IdM IdP feature and MFA [SSSD]


author: Justin Stephenson <jstephen@redhat.com> - 2.9.9-3
changelog:
  - Resolves: RHEL-192062 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
  - Resolves: RHEL-192072 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Sahana Prasad <sahana@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream version 1.2.1
  - Remove patch fix MSG_MORE uasge as it is added upstream
  - Remove cppcheck dependency for rhel bz#1931518
  - Add a patch to fix fuzz tests


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5367
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2405
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15112
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15298


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15298
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2405


author: Wen Liang <wenliang@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved from the main package
    to the utils sub package causing a file conflict on multilib systems between the
    old 32 bit main package and the new 64 bit utils sub package.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Hangbin Liu <haliu@redhat.com> - 1.8-1
changelog:
  - 1.8 release (rhbz#1958933)
  - libndp,ndptool: use poll() instead of select()
  - libndp: avoid static buffer for debug string in ndp_sock_recv()
  - ndptool: avoid static buffer for string in ndptool
  - libndp: use thread local variables for static return arguments
  - ndptool: don't use static variable for local context in msgrcv_handler_func()
  - ndptool: fix printing dnssl lifetime in ndptool
  - ndptool: fix potential memory leak caused by strdup
  - ndptool: add -D dest support
  - libndp: fix nd_msg typo when setting target address
  - libndp: close sockfd after using to avoid handle leak
  - ndptool: fix target parameter typo
  - ndptool: add -T target support


author: Phil Sutter <psutter@redhat.com> - 1.0.9-1
changelog:
  - expect/conntrack: Avoid spurious covscan overrun warning
  - conntrack: fix build with kernel 5.15 and musl
  - New version 1.0.9


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Steve Dickson <steved@redhat.com> 2.5.4-35
changelog:
  - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
  - nfsd: allow more than 64 backlogged connections (RHEL-87752)


author: Steve Dickson <steved@redhat.com> 2.5.4-37
changelog:
  - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
  - gssd: do not use krb5_cc_initialize (RHEL-85412)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-42
changelog:
  - Replace statfs64 with statfs (RHEL-127105)
  - NFS export symlink vulnerability fix (RHEL-127105)
  - mountd: Minor refactor of get_rootfh() (RHEL-127105)
  - mountd: Separate lookup of the exported directory and the mount path (RHEL-127105)
  - support: Add a mini-library to extract and apply RPC credentials (RHEL-127105)
  - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127105)
  - Add requires for selinux-policy (RHEL-127105)
    Resolves: CVE-2025-12801


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-43
changelog:
  - nfsrahead: enable event-driven mountinfo monitoring and skip non-NFS devices (RHEL-158527)
  - nfsrahead: zero-initialise device_info struct (RHEL-158527)
  - nfsrahead: quieten misleading error for non-NFS block devices (RHEL-158527)


author: Phil Sutter <psutter@redhat.com> [1.2.6-1.el9]
changelog:
  - set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
  - Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]


author: Phil Sutter <psutter@redhat.com> [1.2.6-3.el9]
changelog:
  - tests: Fix objref test case (Phil Sutter) [RHEL-28515]
  - expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
  - obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
  - obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
  - obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - obj: Return value on setters (Phil Sutter) [RHEL-28515]
  - object: getters take const struct (Phil Sutter) [RHEL-28515]
  - utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
  - obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
  - obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
  - set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
  - obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
  - flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
  - chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
  - expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
  - expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
  - expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
  - expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
  - obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
  - set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
  - set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
  - expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.37-13
changelog:
  - CVE-2025-64720: buffer overflow (RHEL-131594)
  - CVE-2025-65018: heap buffer overflow (RHEL-131603)
  - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.37-14
changelog:
  - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147356)
  - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-149000)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.37-17
changelog:
  - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161456)


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Return "calculated" checksum if requested w/caching
  - Fixed memory leaks and segfault


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.5-1
changelog:
  - Update to 1.14.5
  - Detailed error message when using non-existing TMPDIR (RhBug:2019993)
  - Make error messages about repodata and rpm mismatch more user friendly


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-8
changelog:
  - Correct a License tag to LGPLv2+ (RHEL-16103)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Vit Mojzis <vmojzis@redhat.com> - 3.6-4
changelog:
  - Ignore files removed during relabeling (RHEL-123884)
  - Ignore directories removed during relabeling (RHEL-123884)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Marek Blaha <mblaha@redhat.com> - 0.7.24-5
changelog:
  - Backport "choice rules: also do solver_choicerulecheck for package downgrades"
    Resolves: RHEL-141449


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-3
changelog:
  - Enable pkcs11 support
  - Fix broken libsofthsm path on i686
  - Add missing bugzilla references from the rebase commit
  - Related: rhbz#2026449
  - Resolves: rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Pavol Žáčik <pzacik@redhat.com> - 0.10.4-16
changelog:
  - Fix CVE-2025-5987
    Resolves: RHEL-130051
  - Workaround sshd failure rate limiting in tests
    Resolves: RHEL-135506


author: Pavol Žáčik <pzacik@redhat.com> - 0.10.4-18
changelog:
  - Resolves: RHEL-150661
  - Resolves: CVE-2025-4877
  - Resolves: CVE-2025-4878
  - Resolves: CVE-2025-5351
  - Resolves: CVE-2025-8114
  - Resolves: CVE-2025-8277
  - Resolves: CVE-2026-0964
  - Resolves: CVE-2026-0965
  - Resolves: CVE-2026-0966
  - Resolves: CVE-2026-0967
  - Resolves: CVE-2026-0968


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Jiri Pirko <jiri@resnulli.us> - 1.31-1
changelog:
  1.31 release
  utils/bond2team: remove TYPE in ifcfg file
  utils/bond2team: keep delivering config to file if stdout not supplied
  teamd/lacp: silence ignore none LACP frames
  teamd: fix ctx->hwaddr value assignment
  Send LACP PDU right after the Actor state has been changed
  Skip setting the same hwaddr to a lag port if not needed
  Make all netlink socket RCVBUF sizes configurable
  Don't return an error when timerfd socket return 0
  Fix ifinfo_link_with_port race condition with newlink
  teamd: fix possible race in master ifname callback


author: Hangbin Liu <haliu@redhat.com> - 1.31-8
changelog:
  - Build util team2bond in teamd rpm [1986788]
  - Add some cautions to util team2bond [1986788]
  - Add team2bond man doc [1986788]


author: Long Xin <lxin@redhat.com> - 1.31-16
changelog:
  - fix the Requires package name for teamd-devel
  - teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Kate Hsuan <hpa@redhat.com> - 1.0.30-1
changelog:
  - Update to upstream version 1.0.30 to include the major bug fixes
  - Include the necessary API for fwupd backporting to RHEL9.
    Resolves: RHEL-182598


author: Tomas Halman <thalman@redhat.com> - 0.63-5
changelog:
  - Enable audit library in the build
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: David King <dking@redhat.com> - 2.9.13-10
changelog:
  - Fix CVE-2025-6021 (RHEL-96507)
  - Fix CVE-2025-49794 (RHEL-96405)
  - Fix CVE-2025-49796 (RHEL-96431)


author: Richard Hughes <richard@hughsie.com> 0.1.14-1
changelog:
  - New upstream release
  - Do not use libuuid
  - Ignore adaptors added with xb_builder_source_add_converter()


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream release
  - Add xb_builder_source_add_simple_adapter()
  - Allow reversing the query results


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release which breaks API and ABI
  - Add the missing TEXT:INTE XPath support
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag
  - Allow specifying the node cache behaviour for the query
  - Avoid recursion when setting flags if possible
  - Avoid using weak pointers when building the silo
  - Do not allocate opcodes individually
  - Do not show a critical warning for invalid XML
  - Do not unconditionally create GTimer objects
  - Do not use the node cache when building indexes
  - Lazy load more arrays to reduce RSS usage


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Do not assume g_content_type_guess() always returns valid results
  - Fix getting translated results in gnome-software
  - Update the header location to reflect the new API


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: RHEL Packaging Agent <jotnar@redhat.com> - 0.3.24-1
changelog:
  - Rebase to 0.3.24
  - Add missing libzstd-devel BuildRequires
  - Add missing files to the %files tests section
  - Resolves: RHEL-116442


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Vit Mojzis <vmojzis@redhat.com> - 1.0.18-3
changelog:
  - Added a patch to fix netinet/sctp.h not to be installed.
  - Added some fixes for kernel feature detection.
  - Updated to 1.0.18. [1568622]


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-1.gitf1dd9eb
changelog:
  - Rebase to 1.1.1
  - Fix program segfaults after entering the quit command (RHEL-5814)
  - Fix setting interface status not survive reboot (RHEL-5824)
  - Fix some other bugs


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-3.gitf1dd9eb
changelog:
  - Rebase to latest upstream code
  - Remove interface configure if the interface deleted (RHEL-13242)
  - Fix strdup is not freed (RHEL-37524)
  - Fix using uninitialized value (RHEL-37548)
  - Fix copy past error (RHEL-37679)
  - Fix resource leak (RHEL-37685)


author: Kamil Dudka <kdudka@redhat.com> - 3.18.0-4
changelog:
  - make `renamecopy` and `copytruncate` override each other (#1934601)
  - unify documentation of copy/copytruncate/renamecopy (#1934629)
  - fix resource leaks reported by Coverity


author: Paul Evans <pevans@redhat.com> - 0.32-7
changelog:
  - lsscsi: Fixes for SBP (Firewire) host in transport_h_init() (RHEL-164341)
  - lsscsi: Change default output trailing space after each device entry (RHEL-164345)
  - lsscsi: Transport type FC and FCOE output inconsistencies (RHEL-84793)
  - lsscsi: Device name spacing before major:minor when dev name exceeds 9 chars (RHEL-157864)


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: DJ Delorie <dj@redhat.com> - 1:4.3-5
changelog:
  - Allow users to build with or without guile support as desired.
  - Allow derivative downstreams to default to disabling guile support.


author: Patsy Griffin <patsy@redhat.com> - 6.04-4
changelog:
  - Activate previously added patch to improve mktime documentation and
    add 3 related upstream patches including an example.
    Related: RHEL-58342


author: Patsy Griffin <patsy@redhat.com> - 6.04-7
changelog:
  - Break up man-pages-additional-20140218.tar.xz
  - Add rtas.2, swapcontext.2 and cons.saver.8 man pages as a patch.
    Resolves: RHEL-101596


author: Patsy Griffin <patsy@redhat.com> - 6.04-10
changelog:
  - suffixes(7): Add zstd format to the suffixes file
  - core(5): Document dump file format change from lz4 format to zstd format
    Resolves: RHEL-152440


author: Xiao Ni <xni@redhat.com> - 4.2-7
changelog:
  - Update to latest upstream and keep udev rule close to upstream
  - Resolves rhbz#2107147, rhbz#2129087, rhbz#2126428


author: Xiao Ni <xni@redhat.com> - 4.2-8
changelog:
  - Update to latest upstream
  - Resolves rhbz#2127101, rhbz#2139789, rhbz#2149292, rhbz#2151209, rhbz#2148945


author: Xiao Ni <xni@redhat.com> - 4.2-9
changelog:
  - Update to latest upstream and fix mdcheck service bug
  - Resolves rhbz#2159923, rhbz#2150865, rhbz#2124071, rhbz#2203859


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230516-1
changelog:
  - Update Intel CPU microcode to microcode-20230516 release (#2213124):
    - Addition of 06-be-00/0x01 (ADL-N A0) microcode at revision 0x10;
    - Addition of 06-9a-04/0x40 (AZB A0) microcode at revision 0x4;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006e05 up
      to 0x2006f05;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa6 up to 0xaa;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf4 up to 0xf6;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf4 up
      to 0xf8;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000161
      up to 0x1000171;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003303
      up to 0x4003501;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003303 up to 0x5003501;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002503
      up to 0x7002601;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000389
      up to 0xd000390;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000211
      up to 0x1000230;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb8
      up to 0xba;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x32 up
      to 0x33;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x28 up
      to 0x2a;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x42 up
      to 0x44;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c000170 up to
      0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000181
      up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000170 up to
      0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000181
      up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x429 up to 0x42a;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x429 up to 0x42a;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x429 up to 0x42a;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x429
      up to 0x42a;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf4 up
      to 0xf6;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf4 up to 0xf6;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x57 up
      to 0x58;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x112 up
      to 0x113;
    - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x410e up to 0x4112;
    - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x410e up to 0x4112;
    - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x410e up to 0x4112;
    - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode from revision 0x410e
      up to 0x4112.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230808-1
changelog:
  - Update Intel CPU microcode to microcode-20230808 release, addresses
    CVE-2022-40982, CVE-2022-41804, CVE-2023-23908 (#2213124, #2223992, #2230677,
      - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006f05 up
      to 0x2007006;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xaa up to 0xac;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf6 up to 0xf8;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf8 up
      to 0xfa;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000171
      up to 0x1000181;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003501
      up to 0x4003604;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003501 up to 0x5003604;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002601
      up to 0x7002703;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000390
      up to 0xd0003a5;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xba
      up to 0xbc;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2a up
      to 0x2c;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x44 up
      to 0x46;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c0001d1 up to
      0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000461
      up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c0001d1 up to
      0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000461
      up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2c
      up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x42a up to 0x42c;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x42a up to 0x42c;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x42a up to 0x42c;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42a
      up to 0x42c;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf6 up
      to 0xf8;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf6 up to 0xf8;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x58 up
      to 0x59;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x113 up
      to 0x119;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2c up
      to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2c up
      to 0x2e;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4112
      up to 0x4119 (old pf 0xc0);
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x10 up
      to 0x11 (old pf 0x1).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230808-2
changelog:
  - Add support for the new, more correct, variant of dracut's default
    $fw_dir path in dracut_99microcode_ctl-fw_dir_override_module_init.sh.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20231009-1
changelog:
  - Update Intel CPU microcode to microcode-20231009 release, addresses
    CVE-2023-23583:
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xac up to 0xb4;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003a5
      up to 0xd0003b9;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000230
      up to 0x1000268;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xbc
      up to 0xc2;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2c up
      to 0x34;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x46 up
      to 0x4e;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2e
      up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2e up to 0x32;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x42c up to 0x430;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x42c up to 0x430;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x42c up to 0x430;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42c
      up to 0x430;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x4 up
      to 0x5;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x59 up
      to 0x5d;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x119 up
      to 0x11d;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4119
      up to 0x411c;
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x11 up
      to 0x12;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2e up
      to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2e up
      to 0x32.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20240531-1
changelog:
  - Update Intel CPU microcode to microcode-20240531 release, addresses
    CVE-2023-22655, CVE-2023-23583. CVE-2023-28746, CVE-2023-38575,
    CVE-2023-39368, CVE-2023-42667, CVE-2023-43490, CVE-2023-45733,
    CVE-2023-46103, CVE-2023-49141 (RHEL-30861, RHEL-30864, RHEL-30867,
    RHEL-30870, RHEL-30873, RHEL-41094, RHEL-41109):
    - Addition of 06-aa-04/0xe6 (MTL-H/U C0) microcode at revision 0x1c;
    - Addition of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) at
      revision 0x4121;
    - Addition of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) at
      revision 0x4121;
    - Addition of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) at revision 0x4121;
    - Addition of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) at revision 0x4121;
    - Addition of 06-ba-08/0xe0 microcode at revision 0x4121;
    - Addition of 06-cf-01/0x87 (EMR-SP A0) microcode at revision
      0x21000230;
    - Addition of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) at revision 0x21000230;
    - Addition of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) at revision 0x21000230;
    - Addition of 06-cf-02/0x87 (EMR-SP A1) microcode at revision
      0x21000230;
    - Removal of 06-8f-04/0x10 microcode at revision 0x2c000290;
    - Removal of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
      0x2b0004d0;
    - Removal of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000290;
    - Removal of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Removal of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
      revision 0x2c000290;
    - Removal of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Removal of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000290;
    - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xb4 up to 0xb6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf8 up to 0xfa;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf4 up
      to 0xf8;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf4 up
      to 0xf6;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf4 up
      to 0xf6;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xfa up
      to 0xfc;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000181
      up to 0x1000191;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003604
      up to 0x4003605;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003604 up to 0x5003605;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002703
      up to 0x7002802;
    - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
      0xe000014 up to 0xe000015;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x38 up
      to 0x3e;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003b9
      up to 0xd0003d1;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000268
      up to 0x1000290;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3e up
      to 0x42;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x22 up
      to 0x24;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc2
      up to 0xc4;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x34 up
      to 0x36;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x4e up
      to 0x50;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000290 up to 0x2c000390;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004d0
      up to 0x2b0005c0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000290 up to
      0x2c000390;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004d0
      up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000290 up to 0x2c000390;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x17 up
      to 0x19;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x32 up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x32 up to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x32 up to 0x35;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x32
      up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x32 up to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x32 up to 0x35;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x430 up to 0x433;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x430 up to 0x433;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x430 up to 0x433;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x430
      up to 0x433;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x5 up
      to 0x7;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000024
      up to 0x24000026;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf8 up
      to 0xfa;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf8
      up to 0xfa;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf8
      up to 0xfa;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf8
      up to 0xfa;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf8 up to 0xfa;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5d up
      to 0x5e;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x11d up
      to 0x123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x411c up to 0x4121;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x411c up to 0x4121;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x411c up to 0x4121;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x411c
      up to 0x4121;
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x12 up
      to 0x17;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x32 up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x32 up
      to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x32 up to 0x35;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x32 up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x32 up to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x32 up
      to 0x35.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20240910-1
changelog:
  - Update Intel CPU microcode to microcode-20240910 release, addresses
    CVE-2024-23984, CVE-2024-24853, CVE-2024-24968, CVE-2024-24980,
    CVE-2024-25939 (RHEL-58057):
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xb6 up to 0xb8;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xfa up to 0xfc;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf6 up
      to 0xf8;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf4 up
      to 0xf6;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf6 up
      to 0xf8;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xfc up
      to 0x100;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003605 up to 0x5003707;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002802
      up to 0x7002904;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003d1
      up to 0xd0003e7;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000290
      up to 0x10002b0;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc4
      up to 0xc6;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x50 up
      to 0x52;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x19 up
      to 0x1a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x35
      up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x433 up to 0x434;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x433
      up to 0x434;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfa up
      to 0xfc;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfa
      up to 0xfe;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xfa up to 0xfc;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5e up
      to 0x62;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1c
      up to 0x1f;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x123 up
      to 0x129;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4121
      up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4121 up to 0x4122;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x17 up
      to 0x1a (old pf 0x11).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20241112-1
changelog:
  - Update Intel CPU microcode to microcode-20241112 release, addresses
    CVE-2024-21820, CVE-2024-21853, CVE-2024-23918, CVE-2024-23984 (RHEL-67336):
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0005c0
      up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0005c0
      up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0005c0 up to 0x2b000603;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x36 up to 0x37;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x36
      up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x36 up to 0x37;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x434 up to 0x435;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x434 up to 0x435;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x434 up to 0x435;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x434
      up to 0x435;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1f
      up to 0x20;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x129 up
      to 0x12b;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4122 up to 0x4123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4122
      up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4122 up to 0x4123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4122 up to 0x4123;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x36 up
      to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x36 up to 0x37;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x36 up
      to 0x37;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000230
      up to 0x21000283;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000230 up to 0x21000283;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000230 up to 0x21000283;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000230
      up to 0x21000283.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20250211-1
changelog:
  - Update Intel CPU microcode to microcode-20250211 release, addresses
    CVE-2023-34440, CVE-2023-43758, CVE-2024-24582, CVE-2024-28047,
    CVE-2024-28127, CVE-2024-29214, CVE-2024-31068, CVE-2024-31157,
    CVE-2024-37020, CVE-2024-39279, CVE-2024-39355, CVE-2024-36293 (RHEL-79182,
    RHEL-79186, RHEL-79187, RHEL-79242, RHEL-79243, RHEL-79246, RHEL-79251,
    RHEL-79252):
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) at
      revision 0x38;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) at
      revision 0x38;
    - Addition of 06-af-03/0x01 (SRF-SP C0) microcode at revision 0x3000330;
    - Addition of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) at
      revision 0x12c;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) at
      revision 0x38;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) at
      revision 0x38;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf8 up
      to 0xfa;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0x100 up
      to 0x102;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003e7
      up to 0xd0003f5;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002b0
      up to 0x10002c0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000603
      up to 0x2b000620;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000390 up to
      0x2c0003e0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000603
      up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000603 up to 0x2b000620;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x37 up to 0x38;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x37
      up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x37 up to 0x38;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x435 up to 0x436;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x435 up to 0x436;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x435 up to 0x436;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x7 up
      to 0x9;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x435
      up to 0x436;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x62 up
      to 0x63;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12b up
      to 0x12c;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4123 up to 0x4124;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4123 up to 0x4124;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4123
      up to 0x4124;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4123 up to 0x4124;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4123 up to 0x4124;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1a up
      to 0x1c;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x37 up
      to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x37 up to 0x38;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x37 up
      to 0x38;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000283
      up to 0x21000291;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000283 up to 0x21000291;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000283 up to 0x21000291;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000283
      up to 0x21000291.


author: Denys Vlasenko <dvlasenk@redhat.com> - 4:20250512-1
changelog:
  - Add a caveat to provide ability to persistently disable SPR-EE updates
    beyond 0x2b0005c0 on systems where absence of latency spikes
    is more important than lack of the latest CVE mitigations.
  - Update Intel CPU microcode to microcode-20250512 release, addresses
    CVE-2024-28956, CVE-2025-20103, CVE-2025-20054, CVE-2024-43420,
    CVE-2025-20623, CVE-2024-45332, CVE-2025-24495, CVE-2025-20012
    (RHEL-94294, RHEL-91231, RHEL-91224, RHEL-91224, RHEL-91239)
    - Addition of 06-8f-04/0x10 microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-06/0x10 microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-ad-01/0x20 (GNR-AP/SP H0) microcode at revision
      0xa0000d1;
    - Addition of 06-ad-01/0x95 (GNR-AP/SP B0) microcode at revision
      0x10003a2;
    - Addition of 06-b5-00/0x80 (ARL-U A1) microcode at revision 0xa;
    - Addition of 06-bd-01/0x80 (LNL B0) microcode at revision 0x11f;
    - Addition of 06-c5-02/0x82 (ARL-H A1) microcode at revision 0x118;
    - Addition of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode (in
      intel-ucode/06-c5-02) at revision 0x118;
    - Addition of 06-c6-04/0x82 microcode (in intel-ucode/06-c5-02) at
      revision 0x118;
    - Addition of 06-ca-02/0x82 microcode (in intel-ucode/06-c5-02) at
      revision 0x118;
    - Addition of 06-c5-02/0x82 (ARL-H A1) microcode (in
      intel-ucode/06-c6-02) at revision 0x118;
    - Addition of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode at revision
      0x118;
    - Addition of 06-c6-04/0x82 microcode (in intel-ucode/06-c6-02) at
      revision 0x118;
    - Addition of 06-ca-02/0x82 microcode (in intel-ucode/06-c6-02) at
      revision 0x118;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xb8 up to 0xbc;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xfc up to 0x100;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0x102 up
      to 0x104;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003707 up to 0x5003901;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002904
      up to 0x7002b01;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003f5
      up to 0xd000404;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002c0
      up to 0x10002d0;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x24 up
      to 0x26;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc6
      up to 0xca;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x38 up
      to 0x3c;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x52 up
      to 0x56;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000620
      up to 0x2b000639;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c0003e0 up to
      0x2c0003f7;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000620
      up to 0x2b000639;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000620 up to 0x2b000639;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x38 up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x38
      up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x436 up to 0x437;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x436 up to 0x437;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x436 up to 0x437;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x9 up
      to 0xa;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x436
      up to 0x437;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfc up
      to 0x100;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfc
      up to 0x100;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfc
      up to 0x100;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfe
      up to 0x102;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xfc up to 0x100;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x63 up
      to 0x64;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x20
      up to 0x24;
    - Update of 06-af-03/0x01 (SRF-SP C0) microcode from revision 0x3000330
      up to 0x3000341;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12c up
      to 0x12f;
    - Update of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) from
      revision 0x12c up to 0x12f;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4124 up to 0x4128;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4124 up to 0x4128;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4124 up to 0x4128;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4124 up to 0x4128;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4124
      up to 0x4128;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4124 up to 0x4128;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4124 up to 0x4128;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4124 up to 0x4128;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4124 up to 0x4128;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1c up
      to 0x1d;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x38 up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x38 up
      to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x38 up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x38 up
      to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000291
      up to 0x210002a9;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000291 up to 0x210002a9;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000291 up to 0x210002a9;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000291
      up to 0x210002a9.


author: Denys Vlasenko <dvlasenk@redhat.com> - 4:20250812-1
changelog:
  - Update Intel CPU microcode to microcode-20250812 release
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000404
      up to 0xd000410;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002d0
      up to 0x10002e0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000639 up to 0x2b000643;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0003f7 up to 0x2c000401;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c0003f7 up to 0x2c000401;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0003f7 up to 0x2c000401;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c0003f7 up to 0x2c000401;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000639 up to 0x2b000643;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x24
      up to 0x25;
    - Update of 06-ad-01/0x20 (GNR-AP/SP H0) microcode from revision
      0xa0000d1 up to 0xa000100;
    - Update of 06-ad-01/0x95 (GNR-AP/SP B0) microcode from revision
      0x10003a2 up to 0x10003d0;
    - Update of 06-af-03/0x01 (SRF-SP C0) microcode from revision 0x3000341
      up to 0x3000362;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4128 up to 0x4129;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4128 up to 0x4129;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4128 up to 0x4129;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4128 up to 0x4129;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4128
      up to 0x4129;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4128 up to 0x4129;
    - Update of 06-bd-01/0x80 (LNL B0) microcode from revision 0x11f up
      to 0x123;
    - Update of 06-c5-02/0x82 (ARL-H A1) microcode from revision 0x118 up
      to 0x119;
    - Update of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode (in
      intel-ucode/06-c5-02) from revision 0x118 up to 0x119;
    - Update of 06-c6-04/0x82 microcode (in intel-ucode/06-c5-02) from
      revision 0x118 up to 0x119;
    - Update of 06-ca-02/0x82 microcode (in intel-ucode/06-c5-02) from
      revision 0x118 up to 0x119;
    - Update of 06-c5-02/0x82 (ARL-H A1) microcode (in intel-ucode/06-c6-02)
      from revision 0x118 up to 0x119;
    - Update of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode from revision
      0x118 up to 0x119;
    - Update of 06-c6-04/0x82 microcode (in intel-ucode/06-c6-02) from
      revision 0x118 up to 0x119;
    - Update of 06-ca-02/0x82 microcode (in intel-ucode/06-c6-02) from
      revision 0x118 up to 0x119;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x210002a9 up to 0x210002b3;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x210002a9
      up to 0x210002b3.


author: Denys Vlasenko <dvlasenk@redhat.com> - 4:20251111-1
changelog:
  - Fix typo in /usr/share/microcode_ctl/ucode_with_caveats/intel-06-8f-08/config
  - Update Intel CPU microcode to microcode-20251111 release (RHEL-128199)
  - New microcode files (in hex):
    06-ae-01: Granite Rapids-D: revision 1000273
  - Microcode files (/platform_mask shown) with revision updates (in hex):
    06-8f-07/87: Sapphire Rapids: 2b000643 to 2b000650
    06-8f-08/10: Sapphire Rapids with HBM: 2c000401 to 2c000410
    06-8f-08/87: Sapphire Rapids: 2b000643 to 2b000650
    06-97-02/07: Alder Lake: 003a to 003d
    06-97-05/07: Alder Lake: 003a to 003d
    06-9a-03/80: Alder Lake-L: 0437 to 043a
    06-9a-04/80: Alder Lake-L: 0437 to 043a
    06-9a-04/40: Arizona Beach (Atom C11xx): 000a to 000b
    06-ad-01/95: Granite Rapids-X: 10003d0 to 10003f0
    06-ad-01/20: Granite Rapids-X: a000100 to a000124
    06-af-03/01: Crestmont (Sierra Forest): 3000362 to 3000382
    06-b7-01/32: Raptor Lake: 012f to 0132
    06-ba-02/e0: Raptor Lake-P: 4129 to 6133
    06-ba-03/e0: Raptor Lake-P: 4129 to 6133
    06-bd-01/80: Lunar Lake: 0123 to 0125
    06-be-00/19: Gracemont (Alder Lake-N): 001d to 001e
    06-bf-02/07: Raptor Lake-S: 003a to 003d
    06-bf-05/07: Raptor Lake-S: 003a to 003d
    06-c5-02/82: Arrow Lake-H: 0119 to 011a
    06-c6-02/82: Arrow Lake: 0119 to 011a
    06-cf-02/87: Emerald Rapids: 210002b3 to 210002c0
  - Fixes errata RPL070/ADL083/LNL047/ARL054/SPR154/EMR147:
    "REP SCASB, REP CMPSB may return incorrect results when racing
    memory access with another core or thread" on Raptor Lake,
    Alder Lake, Lunar Lake, Arrow Lake, Sapphire Rapids, Emerald Rapids.


author: Denys Vlasenko <dvlasenk@redhat.com> - 4:20260210-1
changelog:
  - Update Intel CPU microcode to microcode-20260210 release (RHEL-151757)
  - Microcode files (/platform_mask shown) with revision updates (in hex):
    06-6a-06/87: Ice Lake-X: d000410 to d000421
    06-6c-01/10: Ice Lake-D: 10002e0 to 10002f1
    06-7e-05/80: Ice Lake-L: 00ca to 00cc
    06-8c-01/80: Tiger Lake: 00bc to 00be
    06-8c-02/c2: Tiger Lake: 003c to 003e
    06-8d-01/c2: Tiger Lake-H: 0056 to 0058
    06-8f-07/87: Sapphire Rapids: 2b000650 to 2b000661
    06-8f-08/10: Sapphire Rapids with HBM: 2c000410 to 2c000421
    06-8f-08/87: Sapphire Rapids: 2b000650 to 2b000661
    06-97-02/07: Alder Lake: 003d to 003e
    06-97-05/07: Alder Lake: 003d to 003e
    06-9a-03/80: Alder Lake-L: 043a to 043b
    06-9a-04/80: Alder Lake-L: 043a to 043b
    06-9a-04/40: Arizona Beach (Atom C11xx): 000b to 000c
    06-9a-04/80: Alder Lake-L: 043a to 043b
    06-a7-01/02: Rocket Lake: 0064 to 0065
    06-aa-04/e6: Meteor Lake-L: 0025 to 0028
    06-ad-01/20: Granite Rapids-X: a000124 to a000133
    06-ad-01/95: Granite Rapids-X: 10003f0 to 1000405
    06-ae-01/97: Granite Rapids-D: 1000273 to 10002f3
    06-b5-00/80: Arrow Lake-U: 000a to 000d
    06-b7-01/32: Raptor Lake: 0132 to 0133
    06-ba-02/e0: Raptor Lake-P: 6133 to 6134
    06-ba-03/e0: Raptor Lake-P: 6133 to 6134
    06-be-00/19: Gracemont (Alder Lake-N): 001e to 0021
    06-bf-02/07: Raptor Lake-S: 003d to 003e
    06-bf-05/07: Raptor Lake-S: 003d to 003e
    06-c5-02/82: Arrow Lake-H: 011a to 011b
    06-c6-02/82: Arrow Lake: 011a to 011b
    06-cf-02/87: Emerald Rapids: 210002c0 to 210002d3
  Resolves: RHEL-151757


author: Nicola Sella <nsella@redhat.com> - 3.5.0-1
changelog:
  - Update to 3.5.0
  - Add module enable and disable commands
  - Add reports of module changes
  - Add "module enable" command
  - Add subcommands support
  - Print info about obsoleted packages before transaction (RhBug:1855542)


author: Nicola Sella <nsella@redhat.com> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - spec: Sync summary and description from openSUSE
  - Add support for setting a platform module ID
  - Add dependency for DNF configurations skeleton
  - Add support for setting allow_vendor_change


author: Nicola Sella <nsella@redhat.com> - 3.7.1-1
changelog:
  - Update to 3.7.1
  - [download] fix: unwanted dependency on newer glib 
  - [download] Support for "--resolve" and "--alldeps" arguments 
  - [download] New get_packages_query function
  - Support "--setopt=keepcache=0/1"
  - [download] Support "--archlist=" argument
  - [download] Move package download code to "download_packages" function
  - [download] several optimizations
  - Don't set default value of "assumeyes" to TRUE 
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Extend "--setopt" to support repository options 
  - Added alias "update" to "upgrade" command
  - Command "update" renamed to "upgrade"
  - Add support for command aliases
  - dnf-data requirement only for Fedora and future RHEL
  - Relicense to GPLv2+ [errata corrige: not in 3.5.1-1]
  - Sync summary and description from openSUSE [errata corrige: not in 3.6.0-1]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - distrosync: Fix style issues and plugin build with Meson 
  - Add distro-sync subcommand
  - Add "makecache" command


author: Lukas Hrazky <lhrazky@redhat.com> - 3.9.1-1
changelog:
  - Update to 3.9.1
  - leaves: Treat recommends as dependencies when install_weak_deps=True
  - Add leaves command
  - Remove non-breaking space from "Size" column (RhBug:2010676)


author: Nicola Sella <nsella@redhat.com> - 3.9.1-2
changelog:
  - Revert: leaves: Treat recommends as dependencies when install_weak_deps=True
  - Revert: Add leaves command


author: Tomas Popela <tpopela@redhat.com> - 0.26-27
changelog:
  - Don't prune bind mounts on ostree based systems, prune the deployments folder
    there to avoid duplications.
  - Fixes: https://github.com/fedora-silverblue/issue-tracker/issues/76


author: Peter Jones <pjones@redhat.com> - 2:0.5.0-3
changelog:
  - Add support for "mokutil --list-sbat-revocations" and
    "mokutil --set-sbat-policy"
    Related: CVE-2022-28737


author: Leo Sandoval <lsandova@redhat.com> - 0.7.2-2
changelog:
  - Rebase several patches from upstream which:
    - Introduce --is-sb-enabled parameter and better return codes
    - Remove unused int_to_b64()
    - Show help on unsupported systems
  - Resolves: #RHEL-90837


author: Pavel Cahyna <pcahyna@redhat.com> - 4.0.26-4
changelog:
  - Add dependency on glibc-gconv-extra
    mtools need codepage 850, which was split from glibc into a subpackage.
    (Fedora bug #2021637, RHEL bug #2073843)


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Phil Sutter <psutter@redhat.com> [1.0.9-1.el9]
changelog:
  - spec: Utilize pyproject-rpm-macros for the python sub-package (Phil Sutter) [RHEL-14191]
  - Rebase onto version 1.0.9 (Phil Sutter) [RHEL-14191]


author: Phil Sutter <psutter@redhat.com> [1.0.9-4.el9]
changelog:
  - parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
  - json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]


author: Phil Sutter <psutter@redhat.com> [1.0.9-5.el9]
changelog:
  - tests: py: missing json output in never merge across non-expression statements (Phil Sutter) [RHEL-114095]
  - tests: py: add missing json.output data (Phil Sutter) [RHEL-114095]
  - tests: py: remove huge-limit test cases (Phil Sutter) [RHEL-114095]
  - datatype: rt_symbol_table_init() to search for iproute2 configs (Phil Sutter) [RHEL-114095]
  - tests: shell: connect chains to hook point (Phil Sutter) [RHEL-114095]
  - tests: shell: Fix sets/reset_command_0 for current kernels (Phil Sutter) [RHEL-114095]


author: Phil Sutter <psutter@redhat.com> [1.0.9-6.el9]
changelog:
  - Revert doc/ part of "exthdr: add boolean DCCP option matching" (Phil Sutter) [RHEL-126817]
  - Revert doc/ part of "meta: introduce meta broute support" (Phil Sutter) [RHEL-126817]
  - Revert doc/ part of "src: add tcp option reset support" (Phil Sutter) [RHEL-126817]
  - spec: Update expected test suite results (Phil Sutter) [RHEL-126817]


author: Phil Sutter <psutter@redhat.com> [1.0.9-7.el9]
changelog:
  - src: fix reset element support for interval set type (Phil Sutter) [RHEL-153461]
  - src: netlink: fix crash when ops doesn't support udata (Phil Sutter) [RHEL-153461]


author: Phil Sutter <psutter@redhat.com> [1.0.9-8.el9]
changelog:
  - spec: Update expected test suite results (Phil Sutter) [RHEL-190549]
  - tests: monitor: Fix for out-of-path call (Phil Sutter) [RHEL-190549]
  - tests: monitor: Excercise all syntaxes and variants by default (Phil Sutter) [RHEL-190549]
  - tests: monitor: Test JSON echo mode as well (Phil Sutter) [RHEL-190549]
  - tests: monitor: Become $PWD agnostic (Phil Sutter) [RHEL-190549]
  - tests: monitor: Run in own netns (Phil Sutter) [RHEL-190549]
  - tests: monitor: Label diffs to help users (Phil Sutter) [RHEL-190549]
  - tests: monitor: Extend testcases a bit (Phil Sutter) [RHEL-190549]
  - tests: monitor: enclose device names in quotes (Phil Sutter) [RHEL-190549]
  - json: Dump flowtable hook spec only if present (Phil Sutter) [RHEL-190549]
  - tests: py: Fix some JSON equivalents (Phil Sutter) [RHEL-190549]
  - rule: constify set_is_non_concat_range() (Phil Sutter) [RHEL-190549]
  - datatype: don't return a const string from cgroupv2_get_path() (Phil Sutter) [RHEL-190549]
  - tests: py: Fix --keep test runner option (Phil Sutter) [RHEL-190549]
  - segtree: fix get element command with open intervals (Phil Sutter) [RHEL-190549]
  - segtree: replace default case by specific types in get_set_intervals() (Phil Sutter) [RHEL-190549]
  - src: remove EXPR_SET_ELEM in range_expr_value_{low,high}() (Phil Sutter) [RHEL-190549]
  - segtree: rename set_elem_add() to set_elem_expr_add() (Phil Sutter) [RHEL-190549]
  - parser_json: fix map/set type confusion crash in map statement parser (Phil Sutter) [RHEL-190549]
  - cache: honor -c/--check for reset commands (Phil Sutter) [RHEL-190549]
  - tests: py: osf is ip-only (Phil Sutter) [RHEL-190549]
  - tests: py: print the file name as intended (Phil Sutter) [RHEL-190549]
  - tests: py: don't use a fixed filename (Phil Sutter) [RHEL-190549]
  - mnl: Fix ordering of hooks in 'list hooks' output (Phil Sutter) [RHEL-190549]
  - segtree: Fix for variable-sized object may not be initialized (Phil Sutter) [RHEL-190549]
  - cache: Filter for table when listing flowtables (Phil Sutter) [RHEL-190549]
  - cache: Filter for table when listing sets or maps (Phil Sutter) [RHEL-190549]
  - cache: Respect family in all list commands (Phil Sutter) [RHEL-190549]
  - cache: Include chains, flowtables and objects in netlink debug output (Phil Sutter) [RHEL-190549]
  - cache: Relax chain_cache_dump filter application (Phil Sutter) [RHEL-190549]
  - parser_bison: add range check for synproxy wscale (Phil Sutter) [RHEL-190549]
  - json: complete multi-statement set element support (Phil Sutter) [RHEL-190549]
  - segtree: Fix range aggregation on Big Endian (Phil Sutter) [RHEL-190549]
  - mergesort: Align concatenation sort order with Big Endian (Phil Sutter) [RHEL-190549]
  - mergesort: Fix sorting of string values (Phil Sutter) [RHEL-190549]
  - tests: py: any/tcpopt.t.json: Fix JSON equivalent (Phil Sutter) [RHEL-190549]
  - expression: expr_build_udata_recurse should recurse (Phil Sutter) [RHEL-190549]
  - expression: propagate key datatype for anonymous sets (Phil Sutter) [RHEL-190549]
  - netlink_delinearize: also consider exthdr type when trimming binops (Phil Sutter) [RHEL-190549]
  - tcpopt: add symbol table for mptcp suboptions (Phil Sutter) [RHEL-190549]
  - monitor: fix memleak in setelem cb (Phil Sutter) [RHEL-190549]
  - tests: json_echo: Drop rule handle before multi-add (Phil Sutter) [RHEL-190549]
  - rule: skip CMD_OBJ_SETELEMS with no elements after set flush (Phil Sutter) [RHEL-190549]
  - doc: libnftables-json: Describe RULESET object (Phil Sutter) [RHEL-190549]
  - doc: don't suggest to disable GSO (Phil Sutter) [RHEL-190549]
  - tests: py: Implement payload_record() (Phil Sutter) [RHEL-190549]
  - tests: py: inet/osf.t: Fix element ordering in JSON equivalents (Phil Sutter) [RHEL-190549]
  - tests: py: Do not rely upon '[end]' marker (Phil Sutter) [RHEL-190549]
  - tests: py: Fix for using wrong payload path (Phil Sutter) [RHEL-190549]
  - tests: py: any/ct.t.json.output: Drop leftover entry (Phil Sutter) [RHEL-190549]
  - datatype: Fix boolean type on Big Endian (Phil Sutter) [RHEL-190549]
  - optimize: Fix verdict expression comparison (Phil Sutter) [RHEL-190549]
  - src: parser_json: fix format string bugs (Phil Sutter) [RHEL-190549]
  - doc: fix tcpdump example (Phil Sutter) [RHEL-190549]
  - tests: py: objects.t: must use input, not output (Phil Sutter) [RHEL-190549]
  - fib: Fix for existence check on Big Endian (Phil Sutter) [RHEL-190549]
  - tests: Prepare exit codes for automake (Phil Sutter) [RHEL-190549]
  - monitor: Inform JSON printer when reporting an object delete event (Phil Sutter) [RHEL-190549]
  - monitor: Recognize flowtable add/del events (Phil Sutter) [RHEL-190549]
  - tests: monitor: Fix regex collecting expected echo output (Phil Sutter) [RHEL-190549]
  - monitor: Quote device names in chain declarations, too (Phil Sutter) [RHEL-190549]
  - mnl: continue on ENOBUFS errors when processing batch (Phil Sutter) [RHEL-190549]
  - tests: monitor: Fix for flag arrays in JSON output (Phil Sutter) [RHEL-190549]
  - mnl: silence compiler warning (Phil Sutter) [RHEL-190549]
  - fib: restore JSON output for relational expressions (Phil Sutter) [RHEL-190549]
  - src: ensure chain policy evaluation when specified (Phil Sutter) [RHEL-190549]
  - segtree: incorrect type when aggregating concatenated set ranges (Phil Sutter) [RHEL-190549]
  - json: Do not reduce single-item arrays on output (Phil Sutter) [RHEL-190549]
  - tests: py: Fix tests added for 'icmpv6 taddr' support (Phil Sutter) [RHEL-190549]
  - tests: py: Drop stale entry from ip/snat.t.payload (Phil Sutter) [RHEL-190549]
  - tests: py: Drop stale entries from ip6/{ct,meta}.t.json (Phil Sutter) [RHEL-190549]
  - tests: py: Drop stale entry from ip/snat.t.json (Phil Sutter) [RHEL-190549]
  - tests: py: Drop duplicate test from inet/vxlan.t (Phil Sutter) [RHEL-190549]
  - tests: py: Drop stale entry from inet/tcp.t.json (Phil Sutter) [RHEL-190549]
  - tests: py: Drop duplicate test from inet/gretap.t (Phil Sutter) [RHEL-190549]
  - tests: py: Drop duplicate test from inet/gre.t (Phil Sutter) [RHEL-190549]
  - tests: py: Drop duplicate test from inet/geneve.t (Phil Sutter) [RHEL-190549]
  - tests: py: Drop stale entries since redundant test case removal (Phil Sutter) [RHEL-190549]
  - src: netlink: netlink_delinearize_table() may return NULL (Phil Sutter) [RHEL-190549]
  - doc: nft.8: Minor NAT STATEMENTS section review (Phil Sutter) [RHEL-190549]
  - mnl: Call mnl_attr_nest_end() just once (Phil Sutter) [RHEL-190549]
  - evaluate: validate set expression type before accessing flags (Phil Sutter) [RHEL-190549]
  - rule: print chain and flowtable devices in quotes (Phil Sutter) [RHEL-190549]
  - tests: py: re-enables nft-test.py to load the local nftables.py (Phil Sutter) [RHEL-190549]
  - fib: allow to use it in set statements (Phil Sutter) [RHEL-190549]
  - fib: allow to check if route exists in maps (Phil Sutter) [RHEL-190549]
  - tests: shell: Fix ifname_based_hooks feature check (Phil Sutter) [RHEL-190549]
  - json: reject too long interface names (Phil Sutter) [RHEL-190549]
  - tests/py: clean up set backend support fallout (Phil Sutter) [RHEL-190549]
  - cache: assert name is non-nul when looking up (Phil Sutter) [RHEL-190549]
  - parser_bison: only reset by name is supported by now (Phil Sutter) [RHEL-190549]
  - rule: skip fuzzy lookup if object name is not available (Phil Sutter) [RHEL-190549]
  - parser_bison: allow delete command with map via handle (Phil Sutter) [RHEL-190549]
  - debug: include kernel set information on cache fill (Phil Sutter) [RHEL-190549]
  - tests/py: prepare for set debug change (Phil Sutter) [RHEL-190549]
  - src: BASECHAIN flag no longer implies presence of priority expression (Phil Sutter) [RHEL-190549]
  - netlink: Avoid crash upon missing NFTNL_OBJ_CT_TIMEOUT_ARRAY attribute (Phil Sutter) [RHEL-190549]
  - tests: py: Properly fix JSON equivalents for netdev/reject.t (Phil Sutter) [RHEL-190549]
  - tests: shell: Adjust to ifname-based hooks (Phil Sutter) [RHEL-190549]
  - tests: shell: combine dormant flag with netdevice removal (Phil Sutter) [RHEL-190549]
  - tests: monitor: Fix for single flag array avoidance (Phil Sutter) [RHEL-190549]
  - netlink: Do not allocate a bogus flowtable priority expr (Phil Sutter) [RHEL-190549]
  - netlink: Fix for potential crash parsing a flowtable (Phil Sutter) [RHEL-190549]
  - json: work around fuzzer-induced assert crashes (Phil Sutter) [RHEL-190549]
  - json: prevent null deref if chain->policy is not set (Phil Sutter) [RHEL-190549]
  - tests: py: fix json single-flag output for fib & synproxy (Phil Sutter) [RHEL-190549]
  - tests: shell: check for features not available in 5.4 (Phil Sutter) [RHEL-190549]
  - netlink: Avoid potential NULL-ptr deref parsing set elem expressions (Phil Sutter) [RHEL-190549]
  - netlink: Catch unknown types when deserializing objects (Phil Sutter) [RHEL-190549]
  - json: Introduce json_add_array_new() (Phil Sutter) [RHEL-190549]
  - json: Fix for memleak in __binop_expr_json (Phil Sutter) [RHEL-190549]
  - json: Accept more than two operands in binary expressions (Phil Sutter) [RHEL-190549]
  - json: Print single fib flag as non-array (Phil Sutter) [RHEL-190549]
  - tests: shell: Add test case for JSON 'flags' arrays (Phil Sutter) [RHEL-190549]
  - json: Print single set flag as non-array (Phil Sutter) [RHEL-190549]
  - json: Print single synproxy flags as non-array (Phil Sutter) [RHEL-190549]
  - parser_json: Introduce parse_flags_array() (Phil Sutter) [RHEL-190549]
  - doc: Fix typo in nat statement 'prefix' description (Phil Sutter) [RHEL-190549]
  - netlink: bogus concatenated set ranges with netlink message overrun (Phil Sutter) [RHEL-190549]
  - parser_bison: add selector_expr rule to restrict typeof_expr (Phil Sutter) [RHEL-190549]
  - optimize: invalidate merge in case of duplicated key in set/map (Phil Sutter) [RHEL-190549]
  - evaluate: bail out if ct saddr/daddr dependency cannot be inserted (Phil Sutter) [RHEL-190549]
  - parser_json: bail out on malformed statement in set (Phil Sutter) [RHEL-190549]
  - parser_json: reject empty jump/goto chain (Phil Sutter) [RHEL-190549]
  - parser_json: allow statement stateful statement only in set elements (Phil Sutter) [RHEL-190549]
  - cache: prevent possible crash rule filter is NULL (Phil Sutter) [RHEL-190549]
  - optimize: expand expression list when merging into concatenation (Phil Sutter) [RHEL-190549]
  - cache: don't crash when filter is NULL (Phil Sutter) [RHEL-190549]
  - evaluate: only allow stateful statements in set and map definitions (Phil Sutter) [RHEL-190549]
  - evaluate: compact STMT_F_STATEFUL checks (Phil Sutter) [RHEL-190549]
  - json: don't BUG when asked to list synproxies (Phil Sutter) [RHEL-190549]
  - optimize: incorrect comparison for reject statement (Phil Sutter) [RHEL-190549]
  - optimize: compact bitmask matching in set/map (Phil Sutter) [RHEL-190549]
  - tests: shell: missing ct count elements in new set_stmt test (Phil Sutter) [RHEL-190549]
  - evaluate: don't update cache for anonymous chains (Phil Sutter) [RHEL-190549]
  - json: make sure timeout list is initialised (Phil Sutter) [RHEL-190549]
  - parser_bison: consolidate connlimit grammar rule for set elements (Phil Sutter) [RHEL-190549]
  - parser_bison: consolidate last grammar rule for set elements (Phil Sutter) [RHEL-190549]
  - parser_bison: consolidate quota grammar rule for set elements (Phil Sutter) [RHEL-190549]
  - parser_bison: consolidate limit grammar rule for set elements (Phil Sutter) [RHEL-190549]
  - parser_bison: consolidate counter grammar rule for set elements (Phil Sutter) [RHEL-190549]
  - tests: shell: extend coverage for set element statements (Phil Sutter) [RHEL-190549]
  - evaluate: fix assertion failure with malformed map definitions (Phil Sutter) [RHEL-190549]
  - evaluate: don't allow nat map with specified protocol (Phil Sutter) [RHEL-190549]
  - parser_bison: reject non-serializeable typeof expressions (Phil Sutter) [RHEL-190549]
  - netlink: fix stack buffer overrun when emitting ranged expressions (Phil Sutter) [RHEL-190549]
  - src: print set element with multi-word description in single one line (Phil Sutter) [RHEL-190549]
  - tests: shell: detach synproxy test (Phil Sutter) [RHEL-190549]
  - src: do not merge a set with a erroneous one (Phil Sutter) [RHEL-190549]
  - segtree: incomplete output in get element command with maps (Phil Sutter) [RHEL-190549]
  - evaluate: release existing datatype when evaluating unary expression (Phil Sutter) [RHEL-190549]
  - segtree: fix string data initialisation (Phil Sutter) [RHEL-190549]
  - payload: honor inner payload description in payload_expr_cmp() (Phil Sutter) [RHEL-190549]
  - payload: return early if dependency is not a payload expression (Phil Sutter) [RHEL-190549]
  - evaluate: optimize zero length range (Phil Sutter) [RHEL-190549]
  - fib: Change data type of fib oifname to "ifname" (Phil Sutter) [RHEL-190549]
  - evaluate: auto-merge is only available for singleton interval sets (Phil Sutter) [RHEL-190549]
  - parser_bison: compact and simplify list and reset syntax (Phil Sutter) [RHEL-190549]
  - parser_bison: turn redundant ip option type field match into boolean (Phil Sutter) [RHEL-190549]
  - datatype: clamp boolean value to 0 and 1 (Phil Sutter) [RHEL-190549]
  - tests: shell: delete netdev chain after test (Phil Sutter) [RHEL-190549]
  - ipopt: use ipv4 address datatype for address field in ip options (Phil Sutter) [RHEL-190549]
  - netlink_delinarize: fix bogus munging of mask value (Phil Sutter) [RHEL-190549]
  - evaluate: remove variable shadowing (Phil Sutter) [RHEL-190549]
  - intervals: do not merge intervals with different timeout (Phil Sutter) [RHEL-190549]
  - src: add EXPR_RANGE_VALUE expression and use it (Phil Sutter) [RHEL-190549]
  - intervals: add helper function to set previous element (Phil Sutter) [RHEL-190549]
  - parser_bison: fix UaF when reporting table parse error (Phil Sutter) [RHEL-190549]
  - intervals: set internal element location with the deletion trigger (Phil Sutter) [RHEL-190549]
  - optimize: compare expression length (Phil Sutter) [RHEL-190549]
  - tests: py: Fix for storing payload into missing file (Phil Sutter) [RHEL-190549]
  - json: Support typeof in set and map types (Phil Sutter) [RHEL-190549]
  - json: collapse set element commands from parser (Phil Sutter) [RHEL-190549]
  - doc: extend description of fib expression (Phil Sutter) [RHEL-190549]
  - tests: monitor: fix up test case breakage (Phil Sutter) [RHEL-190549]
  - src: fix extended netlink error reporting with large set elements (Phil Sutter) [RHEL-190549]
  - mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc() (Phil Sutter) [RHEL-190549]
  - mnl: update cmd_add_loc() to take struct nlmsghdr (Phil Sutter) [RHEL-190549]
  - rule: netlink attribute offset is uint32_t for struct nlerr_loc (Phil Sutter) [RHEL-190549]
  - src: collapse set element commands from parser (Phil Sutter) [RHEL-190549]
  - libnftables-json: fix raw payload expression documentation (Phil Sutter) [RHEL-190549]
  - cache: initialize filter when fetching implicit chains (Phil Sutter) [RHEL-190549]
  - tests: py: fix up udp csum fixup output (Phil Sutter) [RHEL-190549]
  - proto: use NFT_PAYLOAD_L4CSUM_PSEUDOHDR flag to mangle UDP checksum (Phil Sutter) [RHEL-190549]
  - tests: shell: stabilize packetpath/payload (Phil Sutter) [RHEL-190549]
  - libnftables: Zero ctx->vars after freeing it (Phil Sutter) [RHEL-190549]
  - cache: position does not require full cache (Phil Sutter) [RHEL-190549]
  - cache: relax requirement for replace rule command (Phil Sutter) [RHEL-190549]
  - cache: remove full cache requirement when echo flag is set on (Phil Sutter) [RHEL-190549]
  - cache: assert filter when calling nft_cache_evaluate() (Phil Sutter) [RHEL-190549]
  - cache: consolidate reset command (Phil Sutter) [RHEL-190549]
  - cache: add filtering support for objects (Phil Sutter) [RHEL-190549]
  - cache: only dump rules for the given table (Phil Sutter) [RHEL-190549]
  - cache: accumulate flags in batch (Phil Sutter) [RHEL-190549]
  - cache: reset filter for each command (Phil Sutter) [RHEL-190549]
  - parser_json: fix several expression memleaks from error path (Phil Sutter) [RHEL-190549]
  - parser_json: release buffer returned by json_dumps (Phil Sutter) [RHEL-190549]
  - json: Support maps with concatenated data (Phil Sutter) [RHEL-190549]
  - parser_json: fix crash in json_parse_set_stmt_list (Phil Sutter) [RHEL-190549]
  - parser_bison: allow 0 burst in limit rate byte mode (Phil Sutter) [RHEL-190549]
  - datatype: improve error reporting when time unit is not correct (Phil Sutter) [RHEL-190549]
  - cache: rule by index requires full cache (Phil Sutter) [RHEL-190549]
  - datatype: reject rate in quota statement (Phil Sutter) [RHEL-190549]
  - optimize: skip variables in nat statements (Phil Sutter) [RHEL-190549]
  - parser_json: use stdin buffer if available (Phil Sutter) [RHEL-190549]
  - libnftables: skip useable checks for /dev/stdin (Phil Sutter) [RHEL-190549]
  - optimize: clone counter before insertion into set element (Phil Sutter) [RHEL-190549]
  - segtree: set on EXPR_F_KERNEL flag for catchall elements in the cache (Phil Sutter) [RHEL-190549]
  - evaluate: set on expr->len for catchall set elements (Phil Sutter) [RHEL-190549]
  - parser_bison: recursive table declaration in deprecated meter statement (Phil Sutter) [RHEL-190549]
  - intervals: fix element deletions with maps (Phil Sutter) [RHEL-190549]
  - src: add string preprocessor and use it for log prefix string (Phil Sutter) [RHEL-190549]
  - tests: shell: skip ip option tests if kernel does not support it (Phil Sutter) [RHEL-190549]
  - cmd: skip variable set elements when collapsing commands (Phil Sutter) [RHEL-190549]
  - cmd: provide better hint if chain is already declared with different type/hook/priority (Phil Sutter) [RHEL-190549]
  - monitor: too large shift exponent displaying payload expression (Phil Sutter) [RHEL-190549]
  - scanner: inet_pton() allows for broader IPv4-Mapped IPv6 addresses (Phil Sutter) [RHEL-190549]
  - evaluate: Fix incorrect checking the `base` variable in case of IPV6 (Phil Sutter) [RHEL-190549]
  - evaluate: bogus protocol conflicts in vlan with implicit dependencies (Phil Sutter) [RHEL-190549]
  - cache: check for NFT_CACHE_REFRESH in current requested cache too (Phil Sutter) [RHEL-190549]
  - doc: nft.8: Fix markup in ct expectation synopsis (Phil Sutter) [RHEL-190549]
  - mergesort: Avoid accidental set element reordering (Phil Sutter) [RHEL-190549]
  - doc: nft.8: Two minor synopsis fixups (Phil Sutter) [RHEL-190549]
  - tests: shell: check for reset tcp options support (Phil Sutter) [RHEL-190549]
  - tests: shell: payload matching requires egress support (Phil Sutter) [RHEL-190549]
  - tests: py: complete icmp and icmpv6 update (Phil Sutter) [RHEL-190549]
  - src: disentangle ICMP code types (Phil Sutter) [RHEL-190549]
  - evaluate: display "Range negative size" error (Phil Sutter) [RHEL-190549]
  - netlink_delinearize: restore binop syntax when listing ruleset for flags (Phil Sutter) [RHEL-190549]
  - doc: libnftables-json: Drop invalid ops from match expression (Phil Sutter) [RHEL-190549]
  - parser: json: Support for synproxy objects (Phil Sutter) [RHEL-190549]
  - tests: py: add payload merging test cases (Phil Sutter) [RHEL-190549]
  - nftables: do mot merge payloads on negation (Phil Sutter) [RHEL-190549]
  - rule: fix ASAN errors in chain priority to textual names (Phil Sutter) [RHEL-190549]
  - parser: compact type/typeof set rules (Phil Sutter) [RHEL-190549]
  - parser: compact interval typeof rules (Phil Sutter) [RHEL-190549]
  - src: improve error reporting for destroy command (Phil Sutter) [RHEL-190549]
  - tests: shell: permit use of host-endian constant values in set lookup keys (Phil Sutter) [RHEL-190549]
  - evaluate: permit use of host-endian constant values in set lookup keys (Phil Sutter) [RHEL-190549]
  - expression: missing line in describe command with invalid expression (Phil Sutter) [RHEL-190549]
  - netlink_delinearize: move concat and value postprocessing to helpers (Phil Sutter) [RHEL-190549]
  - evaluate: skip byteorder conversion for selector smaller than 2 bytes (Phil Sutter) [RHEL-190549]
  - cache: Optimize caching for 'list tables' command (Phil Sutter) [RHEL-190549]
  - evaluate: fix check for unknown in cmd_op_to_name (Phil Sutter) [RHEL-190549]
  - evaluate: don't assert on net/transport header conflict (Phil Sutter) [RHEL-190549]
  - json: Support sets' auto-merge option (Phil Sutter) [RHEL-190549]
  - rule: fix sym refcount assertion (Phil Sutter) [RHEL-190549]
  - evaluate: error out when store needs more than one 128bit register of align fixup (Phil Sutter) [RHEL-190549]
  - evaluate: do not fetch next expression on runaway number of concatenation components (Phil Sutter) [RHEL-190549]
  - evaluate: skip anonymous set optimization for concatenations (Phil Sutter) [RHEL-190549]
  - evaluate: add missing range checks for dup,fwd and payload statements (Phil Sutter) [RHEL-190549]
  - doc: incorrect datatype description for icmpv6_type and icmpvx_code (Phil Sutter) [RHEL-190549]
  - tests: shell: prefer project nft to system-wide nft (Phil Sutter) [RHEL-190549]
  - parser_bison: ensure all timeout policy names are released (Phil Sutter) [RHEL-190549]
  - netlink: fix stack overflow due to erroneous rounding (Phil Sutter) [RHEL-190549]
  - parser_bison: error out on duplicated type/typeof/element keywords (Phil Sutter) [RHEL-190549]
  - tests: shell: add test to cover payload transport match and mangle (Phil Sutter) [RHEL-190549]
  - evaluate: fix stack overflow with huge priority string (Phil Sutter) [RHEL-190549]
  - src: reject large raw payload and concat expressions (Phil Sutter) [RHEL-190549]
  - evaluate: exthdr: statement arg must be not be a range (Phil Sutter) [RHEL-190549]
  - meta: fix tc classid parsing out-of-bounds access (Phil Sutter) [RHEL-190549]
  - parser_bison: close chain scope before chain release (Phil Sutter) [RHEL-190549]
  - evaluate: fix bogus assertion failure with boolean datatype (Phil Sutter) [RHEL-190549]
  - parser_bison: fix objref statement corruption (Phil Sutter) [RHEL-190549]
  - tests: py: missing json output in meta.t with vlan mapping (Phil Sutter) [RHEL-190549]
  - evaluate: reset statement length context before evaluating statement (Phil Sutter) [RHEL-190549]
  - parser: tcpopt: fix tcp option parsing with NUM + length field (Phil Sutter) [RHEL-190549]
  - evaluate: reject set definition with no key (Phil Sutter) [RHEL-190549]
  - monitor: add support for concatenated set ranges (Phil Sutter) [RHEL-190549]
  - evaluate: disable meta set with ranges (Phil Sutter) [RHEL-190549]
  - evaluate: prevent assert when evaluating very large shift values (Phil Sutter) [RHEL-190549]
  - evaluate: reject sets with no key (Phil Sutter) [RHEL-190549]
  - evaluate: clone unary expression datatype to deal with dynamic datatype (Phil Sutter) [RHEL-190549]
  - tests: shell: split nat inet tests (Phil Sutter) [RHEL-190549]
  - evaluate: bogus error when adding devices to flowtable (Phil Sutter) [RHEL-190549]
  - tests: shell: flush connlimit sets (Phil Sutter) [RHEL-190549]
  - tests: shell: adjust add-after-delete flowtable for older kernels (Phil Sutter) [RHEL-190549]
  - evaluate: fix rule replacement with anon sets (Phil Sutter) [RHEL-190549]
  - tests: shell: skip if kernel does not support flowtable counter (Phil Sutter) [RHEL-190549]
  - tests: shell: restore pipapo and chain binding coverage in standalone 30s-stress (Phil Sutter) [RHEL-190549]
  - json: fix use after free in table_flags_json() (Phil Sutter) [RHEL-190549]
  - src: expand create commands (Phil Sutter) [RHEL-190549]
  - tests: shell: split set NAT interval test (Phil Sutter) [RHEL-190549]
  - tests: shell: split merge nat optimization in two tests (Phil Sutter) [RHEL-190549]
  - netlink: fix buffer size for user data in netlink_delinearize_chain() (Phil Sutter) [RHEL-190549]
  - src: remove xfree() and use plain free() (Phil Sutter) [RHEL-190549]
  - src: add free_const() and use it instead of xfree() (Phil Sutter) [RHEL-190549]
  - evaluate: place byteorder conversion before rshift in payload expressions (Phil Sutter) [RHEL-190549]
  - evaluate: reset statement length context only for set mappings (Phil Sutter) [RHEL-190549]
  - meta: fix hour decoding when timezone offset is negative (Phil Sutter) [RHEL-190549]
  - tproxy: Drop artificial port printing restriction (Phil Sutter) [RHEL-190549]
  - tests/shell: fix mount command in "test-wrapper.sh" (Phil Sutter) [RHEL-190549]
  - parser_bison: fix length check for ifname in ifname_expr_alloc() (Phil Sutter) [RHEL-190549]
  - tests/shell: cover long interface name in "0042chain_variable_0" test (Phil Sutter) [RHEL-190549]
  - tests/shell: add missing "elem_opts_compat_0.nodump" file (Phil Sutter) [RHEL-190549]
  - parser_bison: Fix for broken compatibility with older dumps (Phil Sutter) [RHEL-190549]


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.1-6
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - Resolves: RHEL-23671, ep11 token: support protected keys for extractable keys
  - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys
  - Resolves: RHEL-23673, update to 3.23.0


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-50064, update to 3.24.0
  - Resolves: RHEL-50063, opencryptoki CCA Token support for x86_64 and ppc64le
  - Resolves: RHEL-50058, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-50056, openCryptoki cca token SHA3 support
  - Resolves: RHEL-50057, openCryptoki cca token RSA OAEP v2.1 support


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-73344, upgrade openCryptoki
  - Resolves: RHEL-90590, basic support of AES-GCM
  - Resolves: RHEL-72965, cca token support cipher keys
  - Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75762, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
  - Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104602


author: Than Ngo <than@redhat.com> - 3.25.0-4
changelog:
  - Fix pkcsslotd fails to start in FIPS
  - Drop tier1 test as it mostly provides duplicate results
  - Enable ci test for FIPS mode
    Resolves: RHEL-109050


author: Than Ngo <than@redhat.com> - 3.26.0-1
changelog:
  - Resolves: RHEL-75139, ep11 token BLS support
  - Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
  - Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
  - Resolves: RHEL-100059, openCryptoki 3.26.0


author: Than Ngo <than@redhat.com> - 3.27.0-1
changelog:
  - Resolves: RHEL-136096, Update to 3.27.0
  - Resolves: RHEL-157524, openCryptoki soft token: support PKCS #11 V3.2 ML-DSA and ML-KEM
  - Resolves: RHEL-157679, openCryptoki CCA token: support PKCS #11 V3.2 ML-DSA
  - Resolves: RHEL-157806, openCryptoki EP11 token: support PKCS #11 V3.2 ML-DSA and ML-KEM
  - Resolves: RHEL-169485, openCryptoki: ep11_specific.c syslog warning even for identically configured control points
  - Resolves: RHEL-171563, Fix CVE-2026-40253


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71053)
  - Avoid SSL context cleanup during library destruction (RHEL-56502)


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-1
changelog:
  - Rebase to latest 0.23.0 release (#2100409)
  - Use separate OpenSSL context to work better from inside of OpenSSL providers


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-2
changelog:
  - Fix regression in handling OpenPGP cards
  - Fix CVE-2023-2977: buffer overrun in pkcs15init for cardos


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-3
changelog:
  - Fix file caching with different offsets (RHEL-4079)
  - Fix CVE-2023-40660: Potential PIN bypass
  - Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init
  - Fix CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption using symmetric keys
  - Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-2
changelog:
  - Fix implicit destination path selection when source path ends with ".."
    Resolves: RHEL-119515
  - Canonicalize username when matching a user
    Resolves: RHEL-118372


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-3
changelog:
  - Enable support for DSA keys
    Resolves: RHEL-127624
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-133959
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-133960


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-5 + 0.10.4-8
changelog:
  - CVE-2026-3497: Fix information disclosure or denial of service due
    to uninitialized variables in gssapi-keyex
    Resolves: RHEL-155825
  - Fix incorrect claim about SSH_AUTH_SOCK in pam_ssh_agent_auth manual page
    Resolves: RHEL-122302


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-8
changelog:
  - Fix static analysis issues
    Resolves: RHEL-163366
  - Ssh should refuse connection when mlkem kex is specified in FIPS
    Resolves: RHEL-155161
  - CVE-2026-35385: Fix privilege escalation via scp legacy protocol
    when not in preserving file mode
    Resolves: RHEL-164754
  - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
    multiplexing sessions
    Resolves: RHEL-166251
  - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
    and HostbasedAcceptedAlgorithms with regard to ECDSA keys
    Resolves: RHEL-166235
  - CVE-2026-35414: Fix mishandling of authorized_keys principals option
    Resolves: RHEL-166203
  - CVE-2026-35386: Add validation rules to usernames and hostnames
    set for ProxyJump/-J on the commandline
    Resolves: RHEL-166219


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-9
changelog:
  - CVE-2026-55653: Fix double free in openssh DH-GEX client path during
    FIPS known-group validation that leads to client-side denial of service
    Resolves: RHEL-186440
  - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator
    cleanup due to missing NULL terminator
    Resolves: RHEL-185835
  - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket
    pre-binding
    Resolves: RHEL-185850


