# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-727.el9]
changelog:
  - s390/sclp: Allow PCI reports for NVMe SMART data (Jan Polensky) [RHEL-188090]
  - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-190412]
  - vsock: initialize child_ns_mode_locked in vsock_net_init() (Stefano Garzarella) [RHEL-155389]
  - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Jan Polensky) [RHEL-190426]
  - s390/pkey: Check length in pkey_pckmo handler implementation (Jan Polensky) [RHEL-190425]
  - x86/mce: Restore MCA polling interval halving (David Arcari) [RHEL-208634]
  - powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked() (David Arcari) [RHEL-192478]
  - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179295] {CVE-2026-46099}
  - cpufreq: intel_pstate: Use correct scaling factor on Raptor Lake-E (Mark Langsdorf) [RHEL-185961]
  - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189960] {CVE-2026-22979}
  - Bluetooth: btintel_pcie: Fix incorrect MAC access programming (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: treat boot stage bit 12 as warning (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: use strscpy to copy plain strings (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: Align shared DMA memory to 128 bytes (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pci: Fix btintel_pcie_read_hwexp code style (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: Add device id of Scorpious2, Nova Lake-PCD-S (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: Add device id of Scorpius Peak2, Nova Lake-PCD-H (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: Add support for exception dump for ScP2F (David Marlin) [RHEL-117330]
  - Bluetooth: btintel: Add support for Scorpious Peak2F support (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: Add support for exception dump for ScP2 (David Marlin) [RHEL-117330]
  - Bluetooth: btintel: Add DSBR support for ScP2 onwards (David Marlin) [RHEL-117330]
  - Bluetooth: btintel: Add support for Scorpious Peak2 support (David Marlin) [RHEL-117330]
  - Bluetooth: btintel: Replace CNVi id with hardware variant (David Marlin) [RHEL-117330]
  - Bluetooth: btintel: Add support for hybrid signature for ScP2 onwards (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: Replace snprintf("%s") with strscpy (David Marlin) [RHEL-117330]
  - x86/microcode: Add platform mask to Intel microcode "old" list (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/cpu: Add platform ID to CPU matching structure (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/cpu: Add platform ID to CPU info structure (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/microcode: Refactor platform ID enumeration into a helper (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/cpu/intel: Replace early Family 6 checks with VFM ones (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/mtrr: Modify a x86_model check to an Intel VFM check (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/microcode: Update the Intel processor flag scan check (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/cpu/intel: Fix the MOVSL alignment preference for extended Families (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/apic: Fix 32-bit APIC initialization for extended Intel Families (Luis Claudio R. Goncalves) [RHEL-184789]
  - ceph: fix NULL pointer dereference in ceph_mds_auth_match() (Alex Markuze) [RHEL-180666]
  - ceph: fix multifs mds auth caps issue (Alex Markuze) [RHEL-180666]
  - ceph: fix memory leak in ceph_mds_auth_match() (Alex Markuze) [RHEL-180666]
  - ceph: fix cred leak in ceph_mds_check_access() (Alex Markuze) [RHEL-180666]
  - ceph: pass cred pointer to ceph_mds_auth_match() (Alex Markuze) [RHEL-180666]
  - ceph: fix a memory leak on cap_auths in MDS client (Alex Markuze) [RHEL-180666]
  - doc: ceph: update userspace command to get CephFS metadata (Alex Markuze) [RHEL-180666]
  - ceph: add CEPHFS_FEATURE_MDS_AUTH_CAPS_CHECK feature bit (Alex Markuze) [RHEL-180666]
  - ceph: check the cephx mds auth access for async dirop (Alex Markuze) [RHEL-180666]
  - ceph: check the cephx mds auth access for open (Alex Markuze) [RHEL-180666]
  - ceph: check the cephx mds auth access for setattr (Alex Markuze) [RHEL-180666]
  - ceph: add ceph_mds_check_access() helper (Alex Markuze) [RHEL-180666]
  - ceph: save cap_auths in MDS client when session is opened (Alex Markuze) [RHEL-180666]
  - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180065] {CVE-2026-46150}
  - efi: Allow to expose the workqueue via sysfs (Luis Claudio R. Goncalves) [RHEL-175657]
  - workqueue: Allow to expose ordered workqueues via sysfs (Luis Claudio R. Goncalves) [RHEL-175657]
  - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168069] {CVE-2026-31419}
  - net: add proper RCU protection to /proc/net/ptype (Paolo Abeni) [RHEL-152699]
  - net: sock: fix hardened usercopy panic in sock_recv_errqueue (Paolo Abeni) [RHEL-152699]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-728.el9]
changelog:
  - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193519] {CVE-2026-52973}
  - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190343] {CVE-2026-53281}
  - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190343]
  - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191440] {CVE-2026-53185}
  - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-100912]
  - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-100912]
  - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-100912]
  - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188545] {CVE-2026-53059}
  - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188460] {CVE-2026-53016}
  - RAS/AMD/ATL: Require PRM support for future systems (Joel Savitz) [RHEL-122804]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-729.el9]
changelog:
  - ppc/fadump: invoke kmsg_dump in fadump panic path (Mamatha Inamdar) [RHEL-211104]
  - selinux: fix incorrect execmem checks on overlayfs (Ondrej Mosnacek) [RHEL-210856]
  - Revert "selinux: RHEL-only hotfix for execmem regression" (Ondrej Mosnacek) [RHEL-210856]
  - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189963] {CVE-2026-23002}
  - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-185518]
  - icmp: fix NULL pointer dereference in icmp_tag_validation() (Guillaume Nault) [RHEL-152680]
  - net: nexthop: fix percpu use-after-free in remove_nh_grp_entry (Guillaume Nault) [RHEL-152680]
  - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Guillaume Nault) [RHEL-152680]
  - dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (Guillaume Nault) [RHEL-152680]
  - ipv4: Fix reference count leak when using error routes with nexthop objects (Guillaume Nault) [RHEL-152680]
  - ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (Guillaume Nault) [RHEL-152680]
  - arp: use RCU protection in arp_xmit() (Guillaume Nault) [RHEL-152680]
  - ipv4: icmp: convert to dev_net_rcu() (Guillaume Nault) [RHEL-152680]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-730.el9]
changelog:
  - iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (Dennis Chen) [RHEL-208620]
  - platform/x86: intel-hid: Protect ACPI notify handler against recursion (David Arcari) [RHEL-212712]
  - i2c: i801: fix hardware state machine corruption in error path (David Arcari) [RHEL-212646]
  - scsi: megaraid_sas: Fix NULL pointer dereference on firmware duplicate completion (Chandrakanth Patil) [RHEL-141219]
  - scsi: megaraid_sas: Protect more code with instance->reset_mutex (Chandrakanth Patil) [RHEL-141219]
  - scsi: megaraid_sas: struct MR_HOST_DEVICE_LIST: Replace 1-element array with flexible array (Chandrakanth Patil) [RHEL-141219]
  - redhat/configs: new configs in phy (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: add stmmac_mac_irq_modify() (Izabela Bakollari) [RHEL-128158]
  - net: ethtool: mm: extract stmmac verification logic into common library (Izabela Bakollari) [RHEL-128158]
  - treewide, timers: Rename from_timer() to timer_container_of() (Izabela Bakollari) [RHEL-128158]
  - net: phylink: provide mac_get_caps() method (Izabela Bakollari) [RHEL-128158]
  - net: pcs: xpcs: Add support for FBNIC 25G, 50G, 100G PMD (Izabela Bakollari) [RHEL-128158]
  - net: pcs: xpcs: Add support for 25G, 50G, and 100G interfaces (Izabela Bakollari) [RHEL-128158]
  - net: phy: Add MDIO_PMA_CTRL1_SPEED for 2.5G and 5G to reflect PMA values (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: convert to init()/exit() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move probe/remove calling of init/exit (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: qcom-ethqos: remove mac_base (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove mac_interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rework mac_interface and phy_interface documentation (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove eee_usecs_rate (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Fix CSR divider comment (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: fix stm32 (and potentially others) resume regression (Izabela Bakollari) [RHEL-128158]
  - net: pcs: pcs-mtk-lynxi: report in-band capability for 2500Base-X (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: fix resume: calculate tso last_segment (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: fix the crash issue for zero copy XDP_TX action (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: fix rx limit check in stmmac_rx_zc() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac: Disable flushing frames on Rx Buffer Unavailable (Izabela Bakollari) [RHEL-128158]
  - net: pcs: xpcs: Fix PMA identifier handling in XPCS (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: pci: Use generic PCI suspend/resume routines (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: loongson: Use generic PCI suspend/resume routines (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Add generic suspend/resume helper for PCI-based controllers (Izabela Bakollari) [RHEL-128158]
  - net: mdio: remove redundant fwnode cleanup (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: qcom-ethqos: use read_poll_timeout_atomic() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: qcom-ethqos: add rgmii set/clear functions (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: qcom-ethqos: use u32 for rgmii read/write/update (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove axi_blen array (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move stmmac_axi_blen_to_mask() to axi_blen init sites (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move stmmac_axi_blen_to_mask() to stmmac_main.c (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: provide common stmmac_axi_blen_to_mask() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move common DMA AXI register bits to common.h (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwc-qos-eth: simplify switch() in dwc_eth_dwmac_config_dt() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: use phylink's interface mode for set_clk_tx_rate() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: pass struct device to init()/exit() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: stmmac_is_jumbo_frm() returns boolean (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: stmmac_is_jumbo_frm() len should be unsigned (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: convert priv->sph* to boolean and rename (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Disable EEE RX clock stop when VLAN is enabled (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Fix VLAN 0 deletion in vlan_del_hw_rx_fltr() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac-sophgo: Add phy interface filter (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: use PHY_INTF_SEL_x in functions (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: use PHY_INTF_SEL_x constants (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: convert all bitfields to GRF_FIELD*() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: replace HIWORD_UPDATE() with GRF_FIELD() (Izabela Bakollari) [RHEL-128158]
  - net: pcs: xpcs-plat: fix MODULE_AUTHOR (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: clean up stmmac_reset() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: visconti: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: visconti: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: stm32: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: stm32: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: stm32: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: starfive: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: starfive: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mediatek: simplify set_interface() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mediatek: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mediatek: use PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: loongson1: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: loongson1: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: loongson1: use PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: improve ndev->max_mtu setup readability (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: meson8b: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: meson8b: use phy_intf_sel directly (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: meson8b: use PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: use ->set_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: pass ingenic_mac struct rather than plat_dat (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: simplify x2000 mac_set_mode() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: simplify mac_set_mode() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: move "MAC PHY control register" debug (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: prep PHY_INTF_SEL_x field after switch() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: simplify jz4775 mac_set_mode() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: move ingenic_mac_init() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: sti: use ->set_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: sti: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: sti: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: sti: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: lpc18xx: use ->set_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: lpc18xx: validate phy_intf_sel (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: lpc18xx: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: lpc18xx: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: lpc18xx: convert to PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: socfpga: Add hardware supported cross-timestamp (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: socfpga: Enable TSO for Agilex5 platform (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: socfpga: Enable TBS support for Agilex5 (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: socfpga: Agilex5 EMAC platform configuration (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: imx: use ->set_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: imx: cleanup arguments for set_intf_mode() method (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: imx: simplify set_intf_mode() implementations (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: imx: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: imx: use FIELD_PREP()/FIELD_GET() for PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: imx: convert to PHY_INTF_SEL_xxx (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: add support for configuring the phy_intf_sel inputs (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: add stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: add phy_intf_sel and ACTPHYIF definitions (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: s32: move PHY_INTF_SEL_x definitions out of the way (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: imx: use phylink's interface mode for set_clk_tx_rate() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: qcom-ethqos: remove MAC_CTRL_REG modification (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: fix incorrect phy address check (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: est: Fix GCL bounds checks (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Consider Tx VLAN offload tag length for maxSDU (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: vlan: Disable 802.1AD tag insertion offload (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: reorganise stmmac_hwif_init() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: use != rather than ^ for comparing dev_id (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: provide function to lookup hwif (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: use FIELD_GET() for version register (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move stmmac_get_*id() into stmmac_get_version() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: consolidate version reading and validation (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: simplify stmmac_get_version() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move version handling into own function (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Move subsecond increment configuration in dedicated helper (Izabela Bakollari) [RHEL-128158]
  - ethernet: stmmac: dwmac-rk: Add RK3506 GMAC support (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: convert to phylink managed WoL PHY speed (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: convert to phylink-managed Wake-on-Lan (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: replace has_xxxx with core_type (Izabela Bakollari) [RHEL-128158]
  - net: phy: Remove probe_capabilities (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: use phy_find_first to simplify stmmac_mdio_register (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: provide PCS initialisation hook (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: only call stmmac_pcs_ctrl_ane() for integrated SGMII PCS (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: do not require snps,ps-speed for SGMII (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: hw->ps becomes hw->reverse_sgmii_enable (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: simplify stmmac_check_pcs_mode() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move reverse-"pcs" mode setup to stmmac_check_pcs_mode() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove RGMII "pcs" mode (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove hw->ps xxx_core_init() hardware setup (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove unused PCS loopback support (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove PCS "mode" pause handling (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove SGMII/RGMII/SMII interrupt handling (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove xstats.pcs_* members (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove broken PCS code (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac-rk: Fix disabling set_clock_selection (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: add Eswin EIC7700 glue driver (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rename stmmac_phy_setup() to include phylink (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rearrange tc_init() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: avoid PHY speed change when configuring MTU (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: place .mac_finish() method more appropriately (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwc-qos-eth: move MDIO bus locking into stmmac_mdio (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Add support for Allwinner A523 GMAC200 (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove stmmac_hw_setup() excess documentation parameter (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Convert open-coded register polling to helper macro (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: tc: Add HLBS drop count to taprio stats (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: est: Drop frames causing HLBS error (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: simplify stmmac_init_phy() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move PHY handling out of __stmmac_open()/release() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move initialisation of priv->tx_lpi_timer to stmmac_open() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move PHY attachment error message into stmmac_init_phy() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move xpcs clause 73 test into stmmac_init_phy() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move stmmac_bus_clks_config() to stmmac_platform.c (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: thead: convert to use phy_interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: sun8i: convert to use phy_interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: stm32: convert to use phy_interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: starfive: convert to use phy_interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: socfpga: convert to use phy_interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: convert to use phy_interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: imx: convert to use phy_interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: use phy_interface in stmmac_check_pcs_mode() (Izabela Bakollari) [RHEL-128158]
  - net: pcs: Kconfig: Fix unmet dependency warning (Izabela Bakollari) [RHEL-128158]
  - net: pcs: rzn1-miic: Add RZ/T2H MIIC support (Izabela Bakollari) [RHEL-128158]
  - net: pcs: rzn1-miic: Add per-SoC control for MIIC register unlock/lock (Izabela Bakollari) [RHEL-128158]
  - net: pcs: rzn1-miic: Add support to handle resets (Izabela Bakollari) [RHEL-128158]
  - net: pcs: rzn1-miic: Make switch mode mask SoC-specific (Izabela Bakollari) [RHEL-128158]
  - net: pcs: rzn1-miic: move port range handling into SoC data (Izabela Bakollari) [RHEL-128158]
  - net: pcs: rzn1-miic: Move configuration data to SoC-specific struct (Izabela Bakollari) [RHEL-128158]
  - net: pcs: rzn1-miic: Add missing include files (Izabela Bakollari) [RHEL-128158]
  - net: pcs: rzn1-miic: Drop trailing comma from of_device_id table (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move timestamping/ptp init to stmmac_hw_setup() caller (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move PTP support check into stmmac_init_timestamping() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: add stmmac_setup_ptp() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rename stmmac_init_ptp() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move stmmac_init_ptp() messages into function (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: add __stmmac_release() to complement __stmmac_open() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: unexport stmmac_init_tstamp_counter() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: fix stmmac_xdp_open() clk_ptp_ref error cleanup (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: fix PTP error cleanup in __stmmac_open() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: disable PTP clock after unregistering PTP (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ptp: improve handling of aux_ts_lock lifetime (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac-renesas-gbeth: Add support for RZ/T2H SoC (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac-renesas-gbeth: Use OF data for configuration (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwc-qos: use PHY WoL (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: use STMMAC_CSR_xxx definitions in platform glue (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: remove redundant clock rate tests (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: return clk_csr value from stmmac_clk_csr_set() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: move initialisation of priv->clk_csr to stmmac_mdio (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: improve mdio register field definitions (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: move runtime PM into stmmac_mdio_access() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: merge stmmac_mdio_read() and stmmac_mdio_write() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: move stmmac_mdio_format_addr() into read/write (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: provide priv->gmii_address_bus_config (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: provide stmmac_mdio_wait() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: provide address register formatter (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: intel: only populate plat->crosststamp when supported (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ptp: conditionally populate getcrosststamp() method (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: imx: add i.MX91 support (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac-rk: switch to FIELD_PREP_WM16 macro (Izabela Bakollari) [RHEL-128158]
  - net: pcs: rzn1-miic: Correct MODCTRL register offset (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: update runtime PM (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: clean up c22/c45 accessor split (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: minor cleanups to stmmac_bus_clks_config() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: use netdev_priv() directly (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: sun8i: drop unneeded default syscon value (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: remove incorrect _DLY_DISABLE bit definition (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Set CIC bit only for TX queues with COE (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: xgmac: Correct supported speed modes (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: fix stmmac_simple_pm_ops build errors (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac4: stop hardware from dropping checksum-error packets (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac4: report Rx checksum errors in status (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Correctly handle Rx checksum offload errors (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: thead: Enable TX clock before MAC initialization (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: explain the phylink_speed_down() call in stmmac_release() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: add helpers to indicate WoL enable status (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: use core wake IRQ support (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove unnecessary "stmmac: wakeup enable" print (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove redundant WoL option validation (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove write-only mac->pmt (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove unnecessary checks in ethtool eee ops (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Return early if invalid in loongson_dwmac_fix_reset() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Change first parameter of fix_soc_reset() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Check stmmac_hw_setup() in stmmac_resume() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mediatek: convert to resume() method (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: stm32: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: pci: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: loongson: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: intel: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: platform: legacy hooks for suspend()/resume() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: provide a set of simple PM ops (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: add suspend()/resume() platform ops (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: make variable data a u32 (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: thead: Get and enable APB clock on initialization (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: put the PHY clock on remove (Izabela Bakollari) [RHEL-128158]
  - stmmac: xsk: fix negative overflow of budget in zerocopy mode (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac-socfpga: Add xgmac support for Agilex5 (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac-renesas-gbeth: Add PM suspend/resume callbacks (Izabela Bakollari) [RHEL-128158]
  - net: pcs: xpcs: mask readl() return value to 16 bits (Izabela Bakollari) [RHEL-128158]
  - net: pcs: xpcs: Use devm_clk_get_optional (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac-sophgo: Add support for Sophgo SG2042 SoC (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: lpc18xx: use plat_dat->phy_interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: loongson1: get ls1b resource only once (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: loongson1: provide match data struct (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: replace ioaddr with stmmac_priv for pcs_set_ane() method (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: visconti: make phy_intf_sel local (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: visconti: clean up code formatting (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: visconti: reorganise visconti_eth_set_clk_tx_rate() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: visconti: re-arrange speed decode (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: remove unnecessary clk_mac (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: use device rather than platform device in rk_priv_data (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: fix code formmating issue (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove pcs_get_adv_lp() support (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: qcom-ethqos: add ethqos_pcs_set_inband() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: remove obsolete .set_*_speed() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: convert px30_set_rmii_speed() to .set_speed() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: simplify px30_set_rmii_speed() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: combine .set_*_speed() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: combine clk_mac_speed rate setting functions (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: combine rv1126 set_*_speed() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: add struct for programming register based speeds (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: simplify set_*_speed() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: add get_interfaces() implementation (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: improve .set_clk_tx_rate() method error message (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: extend use of snps,multicast-filter-bins property to xgmac (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: intel: populate entire system_counterval_t in get_time_fn() callback (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Fix interrupt handling for level-triggered mode in DWC_XGMAC2 (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: make sure that ptp_rate is not 0 before configuring EST (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: platform: guarantee uniqueness of bus_id (Izabela Bakollari) [RHEL-100498]
  - net: dwmac-sun8i: Use parsed internal PHY address instead of 1 (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: generate software timestamp just before the doorbell (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwxgmac2: Add support for HW-accelerated VLAN stripping (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: stmmac_vlan: rename VLAN functions and symbol to generic symbol. (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Refactor VLAN implementation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove speed_mode_2500() method (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: intel: convert speed_mode_2500() to get_interfaces() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: intel: move phy_interface init to tgl_common_data() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: add get_interfaces() platform method (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: use priv->plat->phy_interface directly (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: use a local variable for priv->phylink_config (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Add new GMAC's PCI device ID support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Add new multi-chan IP core support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: socfpga: Remove unused pcs-mdiodev field (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: socfpga: Don't check for phy to enable the SGMII adapter (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: socfpga: Enable internal GMII when using 1000BaseX (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Move queue number init to common function (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: fix multiplication overflow when reading timestamp (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: fix dwmac1000 ptp timestamp status offset (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwc-qos: calibrate tegra with mdio bus idle (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: visconti: convert to set_clk_tx_rate() method (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Add DWMAC glue layer for Renesas GBETH (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: socfpga: convert to devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: socfpga: call set_phy_mode() before registration (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: socfpga: convert to stmmac_pltfr_pm_ops (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: socfpga: provide init function (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: socfpga: init dwmac->stmmac_rst before registration (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: move frag_size handling out of spin_lock (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: mediatek: stop initialising plat->mac_interface (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwc-qos: use PHY clock-stop capability (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sunxi: use devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sunxi: use stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sunxi: convert to set_clk_tx_rate() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sti: convert to stmmac_pltfr_pm_ops (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sti: convert to devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sti: use phy_interface_mode_is_rgmii() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sun8i: use stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: intel: remove unnecessary setting max_speed (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: ingenic: convert to devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: ingenic: convert to stmmac_pltfr_pm_ops (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: imx: use stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: anarion: use devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: anarion: use stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: anarion: clean up interface parsing (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: anarion: clean up anarion_config_dt() error handling (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: qcom-ethqos: remove speed_mode_2500() method (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: qcom-ethqos: remove unnecessary setting max_speed (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: qcom-ethqos: remove ethqos->speed (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: qcom-ethqos: set serdes speed using serdes_speed (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove GMAC_1US_TIC_COUNTER definition (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: intel-plat: remove eee_usecs_rate and hardware write (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: intel: remove eee_usecs_rate and hardware write (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwc-qos: remove tegra_eqos_init() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: stm32: simplify clock handling (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwc-qos: use stmmac_pltfr_find_clk() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: provide stmmac_pltfr_find_clk() (Izabela Bakollari) [RHEL-100498]
  - stmmac: intel: interface switching support for RPL-P platform (Izabela Bakollari) [RHEL-100498]
  - stmmac: Replace deprecated PCI functions (Izabela Bakollari) [RHEL-100498]
  - stmmac: Remove pcim_* functions for driver detach (Izabela Bakollari) [RHEL-100498]
  - stmmac: loongson: Remove surplus loop (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-rk: Add initial support for RK3528 integrated PHY (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-rk: Add integrated_phy_powerdown operation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-rk: Move integrated_phy_powerup/down functions (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-rk: Add GMAC support for RK3528 (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: block PHY RXC clock-stop (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: socfpga: remove phy_resume() call (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: address non-LPI resume failures properly (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Call xpcs_config_eee_mult_fact() only when xpcs is present (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Fix accessing freed irq affinity_hint (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwc-qos-eth: use devm_kzalloc() for AXI data (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-rk: Provide FIFO sizes for DWMAC 1000 (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: deprecate "snps,en-tx-lpi-clockgating" property (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: stm32: use PHY capability for TX clock stop (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: starfive: use PHY capability for TX clock stop (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: allow platforms to use PHY tx clock stop capability (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sunxi: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sun8i: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sti: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: rk: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: meson8b: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: ipq806x: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: anarion: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: mediatek: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: qcom-ethqos: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove unnecessary stmmac_mac_set() in stmmac_release() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove redundant racy tear-down in stmmac_dvr_remove() (Izabela Bakollari) [RHEL-100498]
  - stmmac: intel: Fix warning message for return value in intel_tsn_lane_is_available() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-rk: Remove unneeded GRF and peripheral GRF checks (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-rk: Validate GRF and peripheral GRF during probe (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove write-only priv->speed (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Add glue layer for Sophgo SG2044 SoC (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: simplify phylink_suspend() and phylink_resume() calls (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: avoid shadowing global buf_sz (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: mostly remove "buf_sz" (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwc-qos: Add FSD EQoS support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: interface switching support for ADL-N platform (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: configure SerDes according to the interface mode (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: configure SerDes on mac_finish (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: re-initiate clause 37 Auto-negotiation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: thead: switch to use set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: meson: switch to use set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: ipq806x: switch to use set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: rk: switch to use set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: imx: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: intel: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: s32: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: starfive: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwc-qos: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: provide generic implementation for set_clk_tx_rate method (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: provide set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100498]
  - stmmac: loongson: Pass correct arg to PCI function (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwc-qos: clean up clock initialisation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwc-qos: name struct plat_stmmacenet_data consistently (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: thead: ensure divisor gives proper rate (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: thead: use rgmii_clock() for RGMII clock rate (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Correct usage of maximum queue number macros (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: qcom-ethqos: use rgmii_clock() to set the link clock (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: print stmmac_init_dma_engine() errors using netdev_err() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Add fix_soc_reset() callback (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Add launch time support to XDP ZC (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: "speed" passed to fix_mac_speed is an int (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove useless priv->flow_ctrl (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: clarify priv->pause and pause module parameter (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Use str_enabled_disabled() helper (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Switch to use hrtimer_setup() (Izabela Bakollari) [RHEL-100498]
  - net: xpcs: group EEE code together (Izabela Bakollari) [RHEL-100498]
  - net: xpcs: clean up xpcs_config_eee() (Izabela Bakollari) [RHEL-100498]
  - net: xpcs: remove xpcs_config_eee() from global scope (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove calls to xpcs_config_eee() (Izabela Bakollari) [RHEL-100498]
  - net: xpcs: convert to phylink managed EEE (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: call xpcs_config_eee_mult_fact() (Izabela Bakollari) [RHEL-100498]
  - net: xpcs: add function to configure EEE clock multiplying factor (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: refactor clock management in EQoS driver (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Set correct {tx,rx}_fifo_size (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Apply new page pool parameters when SPH is enabled (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove old EEE methods (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: use stmmac_set_lpi_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac4: clear LPI_CTRL_STATUS_LPITCSE too (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: add new MAC method set_lpi_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: use common LPI_CTRL_STATUS bit definitions (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove unnecessary LPI disable when enabling LPI (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: clear priv->tx_path_in_lpi_mode when disabling LPI (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove unnecessary priv->eee_enabled tests (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove unnecessary priv->eee_active tests (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove priv->dma_cap.eee test in tx_lpi methods (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: split stmmac_init_eee() and move to phylink methods (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac4: ensure LPIATE is cleared (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: ensure LPI is disabled when disabling EEE (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: delete software timer before disabling LPI (Izabela Bakollari) [RHEL-100498]
  - net: pcs: rzn1-miic: Convert to for_each_available_child_of_node() helper (Izabela Bakollari) [RHEL-100498]
  - net: pcs: rzn1-miic: fill in PCS supported_interfaces (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Limit FIFO size by hardware capability (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Limit the number of MTL queues to hardware capability (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Drop redundant skb_mark_for_recycle() for SKB frags (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: convert to phylink managed EEE support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Convert prefetch() to net_prefetch() for received frames (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Optimize cache prefetch in RX path (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Set page_pool_params.max_len to a precise size (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Switch to zero-copy in non-XDP RX path (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: actively unset DW_VR_MII_DIG_CTRL1_2G5_EN for 1G SGMII (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: fix DW_VR_MII_DIG_CTRL1_2G5_EN bit being set for 1G SGMII w/o inband (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: restart LPI timer after cleaning transmit descriptors (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: combine stmmac_enable_eee_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: provide function for restarting sw LPI timer (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: provide stmmac_eee_tx_busy() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: add stmmac_try_to_start_sw_lpi() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: check priv->eee_sw_timer_en in suspend path (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: simplify TX cleanup decision for ending sw LPI mode (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: correct priv->eee_sw_timer_en setting (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: rename stmmac_disable_sw_eee_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: stm32: Use syscon_regmap_lookup_by_phandle_args (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sti: Use syscon_regmap_lookup_by_phandle_args (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: imx: Use syscon_regmap_lookup_by_phandle_args (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sti: Switch from CONFIG_PM_SLEEP guards to pm_sleep_ptr() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove stmmac_lpi_entry_timer_config() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: split hardware LPI timer control (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove unnecessary EEE handling in stmmac_release() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: move setup of eee_ctrl_timer to stmmac_dvr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: use boolean for eee_enabled and eee_active (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: move priv->eee_active into stmmac_eee_init() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: move priv->eee_enabled into stmmac_eee_init() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove priv->eee_tw_timer (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: convert to use phy_eee_rx_clock_stop() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: report EEE error statistics if EEE is supported (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove priv->tx_lpi_enabled (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: clean up stmmac_disable_eee_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove redundant code from ethtool EEE ops (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: make EEE depend on phy->enable_tx_lpi (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: use unsigned int for eee_timer (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: use correct type for tx_lpi_timer (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: move tx_lpi_timer tracking to phylib (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Unexport stmmac_rx_offset() from stmmac.h (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Set dma_sync_size to zero for discarded frames (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: make xpcs_get_interfaces() static (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: use PCS supported_interfaces (Izabela Bakollari) [RHEL-100498]
  - net: pcs: mtk-lynxi: fill in PCS supported_interfaces (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: fill in PCS supported_interfaces (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: TSO: Simplify the code flow of DMA descriptor allocations (Izabela Bakollari) [RHEL-100498]
  - net: pcs: pcs-mtk-lynxi: correctly report in-band status capabilities (Izabela Bakollari) [RHEL-100498]
  - net: dwmac-imx: add imx93 clock input support in RMII mode (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: restructure the error path of stmmac_probe_config_dt() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Drop useless code related to ethtool rx-copybreak (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Drop redundant dwxgmac_tc_ops variable (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Relocate extern declarations in common.h and hwif.h (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-s32: add basic NXP S32G/S32R glue driver (Izabela Bakollari) [RHEL-100498]
  - net: dwmac-sti: Use helper rgmii_clock (Izabela Bakollari) [RHEL-100498]
  - net: dwmac-starfive: Use helper rgmii_clock (Izabela Bakollari) [RHEL-100498]
  - net: dwmac-rk: Use helper rgmii_clock (Izabela Bakollari) [RHEL-100498]
  - net: dwmac-intel-plat: Use helper rgmii_clock (Izabela Bakollari) [RHEL-100498]
  - net: dwmac-imx: Use helper rgmii_clock (Izabela Bakollari) [RHEL-100498]
  - net: dwmac-dwc-qos-eth: Use helper rgmii_clock (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Fix clock rate variables size (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Extend CSR calc support (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: implement pcs_inband_caps() method (Izabela Bakollari) [RHEL-100498]
  - net: pcs: pcs-mtk-lynxi: implement pcs_inband_caps() method (Izabela Bakollari) [RHEL-100498]
  - net: pcs: pcs-lynx: implement pcs_inband_caps() method (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: set initial EEE policy configuration (Izabela Bakollari) [RHEL-100498]
  - stmmac: dwmac-intel-plat: fix call balance of tx_clk handling routines (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-mediatek: Fix inverted handling of mediatek,mac-wol (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac_socfpga: This platform has GMAC (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Configure only the relevant bits for timestamping setup (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Don't include dwmac4 definitions in stmmac_ptp (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Enable timestamping interrupt on dwmac1000 (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Introduce dwmac1000 timestamping operations (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Introduce dwmac1000 ptp_clock_info and operations (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Only update the auto-discovered PTP clock features (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Use per-hw ptp clock ops (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Don't modify the global ptp ops directly (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac4: Receive Watchdog Timeout is not in abnormal interrupt summary (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac4: Fix the MTL_OP_MODE_*_MASK operation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac4: Fix MTL_OP_MODE_RTC mask and shift macros (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Add glue layer for T-HEAD TH1520 SoC (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: add support for dwmac 3.72a (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: xgmac: Enable FPE for tc-mqprio/tc-taprio (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: xgmac: Complete FPE support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: xgmac: Rename XGMAC_RQ to XGMAC_FPRQ (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Get the TC number of net_device by netdev_get_num_tc() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Refactor FPE functions to generic version (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Introduce stmmac_fpe_supported() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Rework macro definitions for gmac4 and xgmac (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Introduce separate files for FPE implementation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: rearrange xpcs_link_up_1000basex() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: remove switch() in xpcs_link_up_1000basex() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Programming sequence for VLAN packets with split header (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Add DW QoS Eth v4/v5 ip payload error statistics (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: move Wangxun VR_XS_PCS_DIG_CTRL1 configuration (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: correctly place DW_VR_MII_DIG_CTRL1_2G5_EN (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: use dev_*() to print messages (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: convert to use read_poll_timeout() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: add _modify() accessors (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: use FIELD_PREP() and FIELD_GET() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: move searching ID list out of line (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: rename xpcs_get_id() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: move definition of struct dw_xpcs to private header (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: provide a helper to get the phylink pcs given xpcs (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: pass xpcs instead of xpcs->id to xpcs_find_compat() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: don't use array for interface (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: remove dw_xpcs_compat enum (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: make xpcs_do_config() and xpcs_link_up() internal (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: drop interface argument from xpcs_create*() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: add xpcs_destroy_pcs() and xpcs_create_pcs_mdiodev() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: get rid of xpcs_init_iface() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: drop interface argument from internal functions (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: move PCS reset to .pcs_pre_config() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: fix the wrong register that was written back (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: silence FPE kernel logs (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: support fp parameter of tc-taprio (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: support fp parameter of tc-mqprio (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: configure FPE via ethtool-mm (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: refactor FPE verification process (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: drop stmmac_fpe_handshake (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: move stmmac_fpe_cfg to stmmac_priv data (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Batch set RX OWN flag and other flags (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-sun8i: Use for_each_child_of_node_scoped() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: drop the ethtool begin() callback (Izabela Bakollari) [RHEL-100498]
  - ethernet: stmmac: dwmac-rk: Add GMAC support for RK3576 (Izabela Bakollari) [RHEL-100498]
  - ethernet: stmmac: dwmac-rk: Fix typo for RK3588 code (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Add loongson module author (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Add Loongson GNET support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Add Loongson Multi-channels GMAC support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Add DT-less GMAC PCI-device support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Introduce PCI device info data (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Add phy_interface for Loongson GMAC (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Init ref and PTP clocks rate (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Detach GMAC-specific platform data init (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Use PCI_DEVICE_DATA() macro for device identification (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Drop pci_enable/disable_msi calls (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Drop duplicated hash-based filter size init (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Export dwmac1000_dma_ops (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Add multi-channel support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Move the atds flag to the stmmac_dma_cfg structure (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: xgmac: use const char arrays for string constants (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac4: fix PCS duplex mode decode (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Correct byte order of perfect_match (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Add DW XPCS specified via "pcs-handle" support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Create DW XPCS device with particular address (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Add fwnode-based descriptor creation method (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Add Synopsys DW xPCS platform device driver (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Introduce DW XPCS info structure (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Convert xpcs_compat to dw_xpcs_compat (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Convert xpcs_id to dw_xpcs_desc (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Split up xpcs_create() body to sub-functions (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Move native device ID macro to linux/pcs/pcs-xpcs.h (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: update err status in case different of stm32mp13 (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: Add test to verify if ETHCK is used before checking clk rate (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: stm32: add management of stm32mp25 for stm32 (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: unexport stmmac_pltfr_init/exit() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Enable TSO on VLANs (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: clean up stmmac_mac_select_pcs() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-socfpga: provide select_pcs() implementation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-rzn1: provide select_pcs() implementation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-intel: provide a select_pcs() implementation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: add select_pcs() platform method (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: add management of stm32mp13 for stm32 (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: Mask support for PMCR configuration (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: Fix Mhz to MHz (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: Clean up the debug prints (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: Extract PMCR configuration (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: Separate out external clock selector (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: Separate out external clock rate validation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-intel: remove checking for fixed link (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: rename xpcs_an_inband to default_an_inband (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: ethqos: clean up setting serdes speed (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: include linux/io.h rather than asm/io.h (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove unnecessary netif_carrier_off() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove pcs_rane() method (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwxgmac2: remove useless NULL pointer initialisations (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Drop TBI/RTBI PCS flags (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Move MAC caps init to phylink MAC caps getter (Izabela Bakollari) [RHEL-100498]
  - net: pcs: rzn1-miic: Init RX clock early if MAC requires it (Izabela Bakollari) [RHEL-100498]
  - net: pcs: rzn1-miic: update PCS driver to use neg_mode (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Explicitly return error on caps validation (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Return EINVAL in the internal methods (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Drop redundant workqueue.h include directive (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Drop sentinel entry from 2500basex ifaces list (Izabela Bakollari) [RHEL-100498]
  - net: fill in MODULE_DESCRIPTION()s for PCS drivers (Izabela Bakollari) [RHEL-100498]
  - net: pcs: rzn1-miic: Convert to platform remove callback returning void (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Add 2500BASE-X case in get state for XPCS drivers (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: adapt Wangxun NICs for SGMII mode (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: add 1000BASE-X AN interrupt support (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: support to switch mode for Wangxun NICs (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: add specific vendor supoprt for Wangxun 10Gb NICs (Izabela Bakollari) [RHEL-100498]
  - net: pcs: lynxi: implement pcs_disable op (Izabela Bakollari) [RHEL-100498]
  - net: pcs: Add missing put_device call in miic_create (Izabela Bakollari) [RHEL-100498]
  - net: pcs: lynxi: update PCS driver to use neg_mode (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: update PCS driver to use neg_mode (Izabela Bakollari) [RHEL-100498]
  - net: pcs: Add 10GBASE-R mode for Synopsys Designware XPCS (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: remove xpcs_create() from public view (Izabela Bakollari) [RHEL-100498]
  - net: pcs: Drop the TSE PCS driver (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: avoid reading STAT1 more than once (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: use phylink_resolve_c73() helper (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: correct pause resolution (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: correct lp_advertising contents (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: use mii_c73_to_linkmode() helper (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: clean up reading clause 73 link partner advertisement (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: fix C73 AN not getting enabled (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: fix incorrect number of interfaces (Izabela Bakollari) [RHEL-100498]
  - net: pcs: add driver for MediaTek SGMII PCS (Izabela Bakollari) [RHEL-100498]
  - net: pcs: lynx: don't print an_enabled in pcs_get_state() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: rzn1-miic: remove unused struct members and use miic variable (Izabela Bakollari) [RHEL-100498]
  - net: pcs: altera-tse: remove unnecessary register definitions (Izabela Bakollari) [RHEL-100498]
  - net: pcs: altera-tse: don't set the speed for 1000BaseX (Izabela Bakollari) [RHEL-100498]
  - net: pcs: altera-tse: use read_poll_timeout to wait for reset (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: use mdiodev accessors (Izabela Bakollari) [RHEL-100498]
  - net: pcs: add new PCS driver for altera TSE PCS (Izabela Bakollari) [RHEL-100498]
  - net: pcs: rzn1-miic: update speed only if interface is changed (Izabela Bakollari) [RHEL-100498]
  - net: pcs-rzn1-miic: fix return value check in miic_probe() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: add Renesas MII converter driver (Izabela Bakollari) [RHEL-100498]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-731.el9]
changelog:
  - crypto: rng - Enable pre-emption ASAP (Herbert Xu) [RHEL-92680]
  - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213301] {CVE-2026-64530}
  - platform/x86/intel-uncore-freq: Fix current_freq_khz after CPU hotplug (David Arcari) [RHEL-212713]
  - platform/x86/intel-uncore-freq: Rename instance_id (David Arcari) [RHEL-212713]
  - tools/power/x86/intel-speed-select: Harden daemon pidfile open (David Arcari) [RHEL-192479]
  - platform/x86: ISST: Restore SST-PP control to all domains (David Arcari) [RHEL-192479]
  - tools/power/x86/intel-speed-select: Fix output when running on unsupported CLX platforms (David Arcari) [RHEL-192479]
  - tools/power/x86/intel-speed-select: Fix some program return value (David Arcari) [RHEL-192479]
  - tools/power/x86/intel-speed-select: Fix cpu extended family ID decoding (David Arcari) [RHEL-192479]
  - x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling() (Dennis Chen) [RHEL-208627]
  - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193940]
  - KVM: s390: Fix S390_USER_OPEREXEC enablement without STFLE 74 (Christoph Schlameuss) [RHEL-158930]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-732.el9]
changelog:
  - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-168738]
  - xfrm: esp: restore combined single-frag length gate (Xin Long) [RHEL-178340]
  - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Xin Long) [RHEL-180173] {CVE-2026-46116}
  - espintcp: Fix race condition in espintcp_close() (Xin Long) [RHEL-154906] {CVE-2026-23239}
  - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Xin Long) [RHEL-180034] {CVE-2025-39797}
  - xfrm: Duplicate SPI Handling (Xin Long) [RHEL-180034] {CVE-2025-39797}
  - redhat: Add DENYLIST.rhel to BPF selftests (Veronika Molnarova) [RHEL-213547]
  - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
  - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-190801]
  - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-190801]
  - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-190801]
  - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-190801]
  - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-190801]
  - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-190801]
  - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-190801]
  - timers: Fix NULL function pointer race in timer_shutdown_sync() (Waiman Long) [RHEL-189941] {CVE-2025-68214}
  - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-213745]
  - scsi: core: wake eh reliably when using scsi_schedule_eh (David Jeffery) [RHEL-113832]
  - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213155] {CVE-2026-64017}
  - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213155] {CVE-2026-64017}
  - cpufreq: intel_pstate: Set non-turbo capacity to HWP_GUARANTEED_PERF() (David Arcari) [RHEL-212691]
  - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212684]
  - watchdog: Fix kmemleak in watchdog_cdev_register (David Arcari) [RHEL-192487]
  - watchdog: set cdev owner before adding (David Arcari) [RHEL-192487]
  - watchdog: fix watchdog may detect false positive of softlockup (David Arcari) [RHEL-192487]
  - kernel/watchdog: always restore watchdog_softlockup(,hardlockup)_user_enabled after proc show (David Arcari) [RHEL-192487]
  - usb: typec: ucsi: skip connector validation before init (Desnes Nunes) [RHEL-147798]
  - usb: host: xhci-sideband: delegate offload_usage tracking to class drivers (Desnes Nunes) [RHEL-147798]
  - usb: core: use dedicated spinlock for offload state (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: imx8mp: fix memory leak on probe failure path (Desnes Nunes) [RHEL-147798]
  - usb: ulpi: fix memory leak on ulpi_register() error paths (Desnes Nunes) [RHEL-147798] {CVE-2026-46109}
  - usb: ulpi: fix double free in ulpi_register_interface() error path (Desnes Nunes) [RHEL-147798] {CVE-2026-31759}
  - USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam (Desnes Nunes) [RHEL-147798]
  - usb: add quirks for Lenovo OneLink+ Dock (Desnes Nunes) [RHEL-147798]
  - usb: core: phy: avoid double use of 'usb3-phy' (Desnes Nunes) [RHEL-147798]
  - USB: serial: option: add MeiG Smart SRM825WN (Desnes Nunes) [RHEL-147798]
  - dt-bindings: connector: add pd-disable dependency (Desnes Nunes) [RHEL-147798]
  - dt-bindings: Drop remaining unneeded quotes (Desnes Nunes) [RHEL-147798]
  - usb: typec: thunderbolt: Set enter_vdo during initialization (Desnes Nunes) [RHEL-147798]
  - usb: typec: Remove alt->adev.dev.class assignment (Desnes Nunes) [RHEL-147798]
  - usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive (Desnes Nunes) [RHEL-147798]
  - cdc-acm: new quirk for EPSON HMD (Desnes Nunes) [RHEL-147798]
  - usb: typec: ucsi: validate connector number in ucsi_notify_common() (Desnes Nunes) [RHEL-147798] {CVE-2026-31729}
  - usb: usbtmc: Flush anchored URBs in usbtmc_release (Desnes Nunes) [RHEL-147798] {CVE-2026-31758}
  - USB: serial: io_edgeport: add support for Blackbox IC135A (Desnes Nunes) [RHEL-147798]
  - USB: serial: option: add missing RSVD(5) flag for Rolling RW135R-GL (Desnes Nunes) [RHEL-147798]
  - USB: serial: option: add support for Rolling Wireless RW135R-GL (Desnes Nunes) [RHEL-147798]
  - USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed (Desnes Nunes) [RHEL-147798]
  - usb: typec: altmode/displayport: set displayport signaling rate in configure message (Desnes Nunes) [RHEL-147798]
  - usb/core/quirks: Add Huawei ME906S-device to wakeup quirk (Desnes Nunes) [RHEL-147798]
  - usb: xhci: Prevent interrupt storm on host controller error (HCE) (Desnes Nunes) [RHEL-147798] {CVE-2026-43488}
  - usb: xhci: Fix memory leak in xhci_disable_slot() (Desnes Nunes) [RHEL-147798] {CVE-2026-43432}
  - usb: class: cdc-wdm: fix reordering issue in read code path (Desnes Nunes) [RHEL-147798] {CVE-2026-43427}
  - usb: cdc-acm: Restore CAP_BRK functionnality to CH343 (Desnes Nunes) [RHEL-147798]
  - usb: core: new quirk to handle devices with zero configurations (Desnes Nunes) [RHEL-147798]
  - usb: misc: uss720: properly clean up reference in uss720_probe() (Desnes Nunes) [RHEL-147798]
  - USB: core: Limit the length of unkillable synchronous timeouts (Desnes Nunes) [RHEL-147798] {CVE-2026-43428}
  - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts (Desnes Nunes) [RHEL-147798] {CVE-2026-43429}
  - USB: usbcore: Introduce usb_bulk_msg_killable() (Desnes Nunes) [RHEL-147798]
  - usb: core: don't power off roothub PHYs if phy_set_mode() fails (Desnes Nunes) [RHEL-147798]
  - thunderbolt: Fix property read in nhi_wake_supported() (Desnes Nunes) [RHEL-147798]
  - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size (Desnes Nunes) [RHEL-147798]
  - usbnet: limit max_mtu based on device's hard_mtu (Desnes Nunes) [RHEL-147798]
  - net: usb: r8152: add TRENDnet TUC-ET2G (Desnes Nunes) [RHEL-147798]
  - usb: image: mdc800: kill download URB on timeout (Desnes Nunes) [RHEL-147798] {CVE-2026-43425}
  - usb: mdc800: handle signal and read racing (Desnes Nunes) [RHEL-147798]
  - USB: add QUIRK_NO_BOS for video capture several devices (Desnes Nunes) [RHEL-147798]
  - usb: typec: ucsi: Add Thunderbolt alternate mode support (Desnes Nunes) [RHEL-147798]
  - usb: phy: tegra: parametrize PORTSC1 register offset (Desnes Nunes) [RHEL-147798]
  - usb: phy: tegra: parametrize HSIC PTS value (Desnes Nunes) [RHEL-147798]
  - usb: phy: tegra: return error value from utmi_wait_register (Desnes Nunes) [RHEL-147798]
  - usb: phy: tegra: cosmetic fixes (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: gadget: Move vbus draw to workqueue context (Desnes Nunes) [RHEL-147798] {CVE-2026-43170}
  - phy: tegra: xusb: Remove unused powered_on variable (Desnes Nunes) [RHEL-147798]
  - usb: typec: fusb302: Remove IRQF_ONESHOT (Desnes Nunes) [RHEL-147798]
  - genirq: Set IRQF_COND_ONESHOT in devm_request_irq(). (Desnes Nunes) [RHEL-147798]
  - USB: serial: option: add Telit FN920C04 RNDIS compositions (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: Log dwc3 address in traces (Desnes Nunes) [RHEL-147798]
  - usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN (Desnes Nunes) [RHEL-147798]
  - usb: phy: tegra: add HSIC support (Desnes Nunes) [RHEL-147798]
  - usb: phy: tegra: use phy type directly (Desnes Nunes) [RHEL-147798]
  - usb: typec: ucsi: Support mode selection to activate altmodes (Desnes Nunes) [RHEL-147798]
  - usb: typec: Introduce mode_selection bit (Desnes Nunes) [RHEL-147798]
  - usb: typec: Implement mode selection (Desnes Nunes) [RHEL-147798]
  - usb: typec: Expose alternate mode priority via sysfs (Desnes Nunes) [RHEL-147798]
  - usb: typec: Add mode_control field to port property (Desnes Nunes) [RHEL-147798]
  - usb: phy: generic: Convert to device property API (Desnes Nunes) [RHEL-147798]
  - usb: phy: generic: Convert to dev_err_probe() (Desnes Nunes) [RHEL-147798]
  - usb: phy: generic: Convert to devm_clk_get_optional() (Desnes Nunes) [RHEL-147798]
  - usb: phy: generic: Always use dev in usb_phy_generic_probe() (Desnes Nunes) [RHEL-147798]
  - usbip: Reduce CONNRESET message noise in dmesg from stub (Desnes Nunes) [RHEL-147798]
  - tools: usb: usbip: remove dead-link from README (Desnes Nunes) [RHEL-147798]
  - xhci: dbc: allow setting manufacturer string through sysfs (Desnes Nunes) [RHEL-147798]
  - xhci: dbc: allow setting product string through sysfs (Desnes Nunes) [RHEL-147798]
  - xhci: dbc: allow setting device serial number through sysfs (Desnes Nunes) [RHEL-147798]
  - xhci: dbc: prepare to expose strings through sysfs (Desnes Nunes) [RHEL-147798]
  - phy: fsl-imx8mq-usb: enable RX Termination override (Desnes Nunes) [RHEL-147798]
  - phy: fsl-imx8mq-usb: set platform driver data (Desnes Nunes) [RHEL-147798] {CVE-2026-43259}
  - phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature (Desnes Nunes) [RHEL-147798]
  - net: ethtool: Add support for 80Gbps speed (Desnes Nunes) [RHEL-147798]
  - net: thunderbolt: Allow reading link settings (Desnes Nunes) [RHEL-147798]
  - bonding: 3ad: Add support for SPEED_80000 (Desnes Nunes) [RHEL-147798]
  - net: thunderbolt: Allow changing MAC address of the device (Desnes Nunes) [RHEL-147798]
  - pinctrl: tegra-xusb: Simplify locking with guard() (Desnes Nunes) [RHEL-147798]
  - pinctrl: tegra-xusb: Return void in padctl enable/disable functions (Desnes Nunes) [RHEL-147798]
  - usb: misc: onboard_dev: Add WCH CH334 USB2.0 Hub (1a86:8091) (Desnes Nunes) [RHEL-147798]
  - dt-bindings: usb: Add binding for WCH CH334/CH335 hub controller (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: fix dwc3_readl() and dwc3_writel() calls in dwc3_ulpi_setup() (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: Support USB3340x ULPI PHY high-speed negotiation. (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: Add dwc pointer to dwc3_readl/writel (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: Remove of dep->regs (Desnes Nunes) [RHEL-147798]
  - usb: chipidea: ci_hdrc_imx: use "wakeup" suffix for wakeup interrupt name (Desnes Nunes) [RHEL-147798]
  - USB: HCD: remove logic about which hcd is loaded (Desnes Nunes) [RHEL-147798]
  - usb: isp1362-hcd: remove Philips ISP1362 USB OTG controller driver (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: imx8mp: disable auto suspend for host role (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: imx8mp: rename dwc3 to dwc3_pdev in struct dwc3_imx8mp (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: drd: extend dwc3_pre_set_role() to extcon and otg usecase (Desnes Nunes) [RHEL-147798]
  - PCI: Add PCI_BRIDGE_NO_ALIAS quirk for ASPEED AST1150 (Desnes Nunes) [RHEL-147798]
  - PCI: Add ASPEED vendor ID to pci_ids.h (Desnes Nunes) [RHEL-147798]
  - USB: core: Discard pm_runtime_put() return value (Desnes Nunes) [RHEL-147798]
  - usb: typec: ucsi: drop an unused Kconfig symbol (Desnes Nunes) [RHEL-147798]
  - USB: host: drop unneeded dependency on OF_GPIO (Desnes Nunes) [RHEL-147798]
  - USB: typec: tcpm: Fix a typo (Desnes Nunes) [RHEL-147798]
  - thunderbolt: Log path activation failures without WARN backtraces (Desnes Nunes) [RHEL-147798]
  - phy: core: Simplify with scoped for each OF child loop (Desnes Nunes) [RHEL-147798]
  - phy: core: Reinstate pm_runtime_enabled() check in phy_pm_runtime_put() (Desnes Nunes) [RHEL-147798]
  - docs: admin-guide: thunderbolt: Replace ifconfig with ip (Desnes Nunes) [RHEL-147798]
  - phy: fsl-imx8mq-usb: change ssc_range value for i.MX8MQ (Desnes Nunes) [RHEL-147798]
  - phy: core: Discard pm_runtime_put() return values (Desnes Nunes) [RHEL-147798]
  - usb: linux/usb.h: Correct the description of the usb_device_driver member (Desnes Nunes) [RHEL-147798]
  - usb: typec: ucsi: psy: Fix voltage and current max for non-Fixed PDOs (Desnes Nunes) [RHEL-147798]
  - usb: typec: ucsi: psy: Fix ucsi_psy_get_current_now in non-PD cases (Desnes Nunes) [RHEL-147798]
  - dt-bindings: usb: ehci/ohci: Allow "dma-coherent" (Desnes Nunes) [RHEL-147798]
  - usb: typec: Export typec bus and typec altmode device type (Desnes Nunes) [RHEL-147798]
  - usb: typec: Set the bus also for the port and plug altmodes (Desnes Nunes) [RHEL-147798]
  - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Aidan Wallace) [RHEL-192402] {CVE-2026-53359}
  - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186696] {CVE-2026-46113}
  - nvme-apple: drop invalid put of admin queue reference count (Maurizio Lombardi) [RHEL-210643]
  - nvme-core: warn on allocating admin tag set with existing queue (Maurizio Lombardi) [RHEL-210643]
  - nvme: fix admin queue leak on controller reset (Maurizio Lombardi) [RHEL-210643]
  - nvme-core: fix unsigned comparison warning in nvme_wait_freeze_timeout (Maurizio Lombardi) [RHEL-210643]
  - nvmet-loop: do not alloc admin tag set during reset (Maurizio Lombardi) [RHEL-210643]
  - nvme-core: align fabrics_q teardown with admin_q in nvme_free_ctrl (Maurizio Lombardi) [RHEL-210643]
  - nvme: fix admin request_queue lifetime (Maurizio Lombardi) [RHEL-210643]
  - nvme: add sysfs attribute to change IO timeout per controller (Maurizio Lombardi) [RHEL-210643]
  - nvme: add sysfs attribute to change admin timeout per nvme controller (Maurizio Lombardi) [RHEL-210643]
  - nvme: remove redundant timeout argument from nvme_wait_freeze_timeout (Maurizio Lombardi) [RHEL-210643]
  - nvme: Let the blocklayer set timeouts for requests (Maurizio Lombardi) [RHEL-210643]
  - Reapply "Bluetooth: revert TX timestamping" for kernel v6.18.y update (David Marlin) [RHEL-194201]
  - Bluetooth: MGMT: Fix backward compatibility with userspace (David Marlin) [RHEL-194201]
  - Bluetooth: SCO: Fix data-race on sco_pi fields in sco_connect (David Marlin) [RHEL-194201]
  - Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls (David Marlin) [RHEL-194201]
  - Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync (David Marlin) [RHEL-194201]
  - Bluetooth: fix memory leak in error path of hci_alloc_dev() (David Marlin) [RHEL-194201]
  - Bluetooth: bnep: reject short frames before parsing (David Marlin) [RHEL-194201]
  - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (David Marlin) [RHEL-194201]
  - Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig (David Marlin) [RHEL-194201]
  - Bluetooth: RFCOMM: validate skb length in MCC handlers (David Marlin) [RHEL-194201]
  - Bluetooth: MGMT: validate advertising TLV before type checks (David Marlin) [RHEL-194201]
  - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (David Marlin) [RHEL-194201]
  - Bluetooth: hci_sync: Reset device counters in hci_dev_close_sync() (David Marlin) [RHEL-194201]
  - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (David Marlin) [RHEL-194201]
  - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (David Marlin) [RHEL-194201]
  - Bluetooth: ISO: fix UAF in iso_recv_frame (David Marlin) [RHEL-194201]
  - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (David Marlin) [RHEL-194201]
  - Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success (David Marlin) [RHEL-194201]
  - Bluetooth: hci_qca: Use 100 ms SSR delay for rampatch and NVM loading (David Marlin) [RHEL-194201]
  - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (David Marlin) [RHEL-194201]
  - Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt() (David Marlin) [RHEL-194201]
  - Bluetooth: btusb: Allow firmware re-download when version matches (David Marlin) [RHEL-194201]
  - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (David Marlin) [RHEL-194201]
  - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-194201]
  - Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn (David Marlin) [RHEL-194201]
  - Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate() (David Marlin) [RHEL-194201]
  - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (David Marlin) [RHEL-194201]
  - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (David Marlin) [RHEL-194201]
  - Bluetooth: MGMT: validate Add Extended Advertising Data length (David Marlin) [RHEL-194201]
  - Bluetooth: btmtk: fix urb->setup_packet leak in error paths (David Marlin) [RHEL-194201]
  - Bluetooth: ISO: drop ISO_END frames received without prior ISO_START (David Marlin) [RHEL-194201]
  - Bluetooth: bnep: Fix UAF read of dev->name (David Marlin) [RHEL-194201]
  - Bluetooth: hci_qca: Convert timeout from jiffies to ms (David Marlin) [RHEL-194201]
  - Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer (David Marlin) [RHEL-194201]
  - Bluetooth: serialize accept_q access (David Marlin) [RHEL-194201]
  - Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension handling (David Marlin) [RHEL-194201]
  - Bluetooth: hci_qca: Migrate to serdev specific shutdown function (David Marlin) [RHEL-194201]
  - Revert "Reapply "Bluetooth: revert TX timestamping" for kernel v6.18.y update" (David Marlin) [RHEL-194201]
  - dpll: allow fwnode pins to attempt state change without capability bit (Michal Schmidt) [RHEL-193749]
  - dpll: extend pin notifier with notification source ID (Michal Schmidt) [RHEL-193749]
  - dpll: balance create/delete notifications in __dpll_pin_(un)register (Michal Schmidt) [RHEL-193749]
  - dpll: guard sync-pair removal on full pin unregister (Michal Schmidt) [RHEL-193749]
  - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Michal Schmidt) [RHEL-193749]
  - dpll: send delete notification before unregister in on-pin rollback (Michal Schmidt) [RHEL-193749]
  - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Michal Schmidt) [RHEL-193749]
  - dpll: allow registering FW-identified pin with a different DPLL (Michal Schmidt) [RHEL-193749]
  - dpll: add generic DPLL type (Michal Schmidt) [RHEL-193749]
  - dpll: zl3073x: make frequency monitor a per-device attribute (Michal Schmidt) [RHEL-193749]
  - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Michal Schmidt) [RHEL-193749]
  - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Michal Schmidt) [RHEL-193749]
  - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Michal Schmidt) [RHEL-193749]
  - dpll: zl3073x: fix memory leak on pin registration failure (Michal Schmidt) [RHEL-193749]
  - dpll: zl3073x: Use named initializers for struct i2c_device_id (Michal Schmidt) [RHEL-193749]
  - dpll: Prevent duplicate registrations (Michal Schmidt) [RHEL-193749]
  - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Michal Schmidt) [RHEL-177450]
  - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Michal Schmidt) [RHEL-177450]
  - ice: call netif_keep_dst() once when entering switchdev mode (Michal Schmidt) [RHEL-177450]
  - ice: fix ice_init_link() error return preventing probe (Michal Schmidt) [RHEL-177450]
  - ice: fix AQ error code comparison in ice_set_pauseparam() (Michal Schmidt) [RHEL-177450]
  - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Michal Schmidt) [RHEL-177450]
  - ice: remove redundant checks from PTP init (Michal Schmidt) [RHEL-177450]
  - ice: fix missing priority callbacks for U.FL DPLL pins (Michal Schmidt) [RHEL-177450]
  - ice: restore PTP Rx timestamp config after ethtool set-channels (Michal Schmidt) [RHEL-177450]
  - ice: ptp: use primary NAC semaphore on E825 (Michal Schmidt) [RHEL-177450]
  - ice: ptp: serialize E825 PHY timer start with PTP lock (Michal Schmidt) [RHEL-177450]
  - ice: fix setting promisc mode while adding VID filter (Michal Schmidt) [RHEL-177450]
  - ice: fix VF queue configuration with low MTU values (Michal Schmidt) [RHEL-177450]
  - ice: fix locking around wait_event_interruptible_locked_irq (Michal Schmidt) [RHEL-177450]
  - ice: fix locking in ice_dcb_rebuild() (Michal Schmidt) [RHEL-177450]
  - ice: fix setting RSS VSI hash for E830 (Michal Schmidt) [RHEL-177450]
  - ice: dpll: Fix compilation warning (Michal Schmidt) [RHEL-177450]
  - ice: mention fw_activate action along with devlink reload (Michal Schmidt) [RHEL-177450]
  - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Michal Schmidt) [RHEL-177450] {CVE-2026-53007}
  - ice: fix race condition in TX timestamp ring cleanup (Michal Schmidt) [RHEL-177450] {CVE-2026-53008}
  - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Michal Schmidt) [RHEL-177450]
  - ice: fix PHY config on media change with link-down-on-close (Michal Schmidt) [RHEL-177450]
  - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-177450] {CVE-2026-53009}
  - ice: fix double free in ice_sf_eth_activate() error path (Michal Schmidt) [RHEL-177450] {CVE-2026-46162}
  - ice: update PCS latency settings for E825 10G/25Gb modes (Michal Schmidt) [RHEL-177450]
  - ice: fix 'adjust' timer programming for E830 devices (Michal Schmidt) [RHEL-177450]
  - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Michal Schmidt) [RHEL-177450]
  - ice: ptp: don't WARN when controlling PF is unavailable (Michal Schmidt) [RHEL-177450] {CVE-2026-43346}
  - drivers: net: ice: fix devlink parameters get without irdma (Michal Schmidt) [RHEL-177450]
  - ice: Fix memory leak in ice_set_ringparam() (Michal Schmidt) [RHEL-177450] {CVE-2026-23389}
  - ice: fix retry for AQ command 0x06EE (Michal Schmidt) [RHEL-177450]
  - ice: reintroduce retry mechanism for indirect AQ (Michal Schmidt) [RHEL-177450]
  - ice: fix adding AQ LLDP filter for VF (Michal Schmidt) [RHEL-177450]
  - ice: Make name member of struct ice_cgu_pin_desc const (Michal Schmidt) [RHEL-177450]
  - ice: recap the VSI and QoS info after rebuild (Michal Schmidt) [RHEL-177450]
  - ice: stop counting UDP csum mismatch as rx_errors (Michal Schmidt) [RHEL-177450]
  - ice: convert all ring stats to u64_stats_t (Michal Schmidt) [RHEL-177450]
  - ice: shorten ring stat names and add accessors (Michal Schmidt) [RHEL-177450]
  - ice: use u64_stats API to access pkts/bytes in dim sample (Michal Schmidt) [RHEL-177450]
  - ice: remove ice_q_stats struct and use struct_group (Michal Schmidt) [RHEL-177450]
  - ice: pass pointer to ice_fetch_u64_stats_per_ring (Michal Schmidt) [RHEL-177450]
  - ice: unify PHY FW loading status handler for E800 devices (Michal Schmidt) [RHEL-177450]
  - ice: dpll: fix misplaced header macros (Michal Schmidt) [RHEL-177450]
  - ice: dpll: fix rclk pin state get for E810 (Michal Schmidt) [RHEL-177450]
  - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Michal Schmidt) [RHEL-177450]
  - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Nico Pache) [RHEL-189902] {CVE-2025-68211}
  - net: tls: prevent chain-after-chain in plain text SG (Sabrina Dubroca) [RHEL-152694]
  - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Sabrina Dubroca) [RHEL-152694]
  - net: tls: fix silent data drop under pipe back-pressure (Sabrina Dubroca) [RHEL-152694]
  - net: tls: fix strparser anchor skb leak on offload RX setup failure (Sabrina Dubroca) [RHEL-152694]
  - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Sabrina Dubroca) [RHEL-152694]
  - tls: Purge async_hold in tls_decrypt_async_wait() (Sabrina Dubroca) [RHEL-152694]
  - tls: Fix race condition in tls_sw_cancel_work_tx() (Sabrina Dubroca) [RHEL-154836] {CVE-2026-23240}
  - tls: don't rely on tx_work during send() (Sabrina Dubroca) [RHEL-152694]
  - tls: always set record_type in tls_process_cmsg (Sabrina Dubroca) [RHEL-152694]
  - tls: wait for async encrypt in case of error during latter iterations of sendmsg (Sabrina Dubroca) [RHEL-152694]
  - net: tls: wait for async completion on last message (Sabrina Dubroca) [RHEL-152694]
  - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (Sabrina Dubroca) [RHEL-189938] {CVE-2025-40149}
  - ktls, sockmap: Fix missing uncharge operation (Sabrina Dubroca) [RHEL-152694]
  - net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Sabrina Dubroca) [RHEL-192925]
  - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177879] {CVE-2026-46323}
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-178626] {CVE-2026-43503}
  - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-178626] {CVE-2026-43503}
  - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176061] {CVE-2026-46300}
  - i2c: tegra: Fix NOIRQ suspend/resume (Charles Mirabile) [RHEL-174251]
  - i2c: tegra: Update Tegra410 I2C timing parameters (Charles Mirabile) [RHEL-174251]
  - i2c: tegra: Disable fair arbitration for non-MCTP buses (Charles Mirabile) [RHEL-174251]
  - i2c: tegra: use dmaengine_get_dma_device() for DMA buffer allocation (Charles Mirabile) [RHEL-174251]
  - ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (Florian Westphal) [RHEL-186601]
  - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (Florian Westphal) [RHEL-186601]
  - netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (Florian Westphal) [RHEL-186601]
  - netfilter: nf_nat_sip: reload possible stale data pointer (Florian Westphal) [RHEL-186601]
  - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_sip: remove net variable shadowing (Florian Westphal) [RHEL-186601]
  - netfilter: ipset: fix race between dump and ip_set_list resize (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_expect: zero at allocation time (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-186601]
  - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_expect: run expectation eviction with no helper (Florian Westphal) [RHEL-186601]
  - netfilter: ctnetlink: do not allow to reset helper on existing conntrack (Florian Westphal) [RHEL-186601]
  - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-186601]
  - neigh: let neigh_xmit take skb ownership (Florian Westphal) [RHEL-186601] {CVE-2026-52981}
  - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-186601]
  - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-186601]
  - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-186601]
  - netfilter: ipset: make sure gc is properly stopped (Florian Westphal) [RHEL-186601]
  - netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (Florian Westphal) [RHEL-186601]
  - netfilter: ipset: Don't use test_bit() in lockless RCU readers in bitmap types (Florian Westphal) [RHEL-186601]
  - netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types (Florian Westphal) [RHEL-186601]
  - netfilter: ipset: annotate "pos" for concurrent readers/writers (Florian Westphal) [RHEL-186601]
  - netfilter: ipset: Fix data race between add and dump in all hash types (Florian Westphal) [RHEL-186601]
  - netfilter: xt_cluster: reject template conntracks in hash match (Florian Westphal) [RHEL-186601]
  - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (Florian Westphal) [RHEL-186601]
  - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-186601]
  - netfilter: conntrack: check NULL when retrieving ct extension (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conncount: gc and rcu fixes (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conncount: add sequence counter to detect tree modifications (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conncount: split count_tree_node rbtree walk into helper (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conncount: use per nf_conncount_data spinlocks (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conncount: callers must hold rcu read lock (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conncount: use per-rule hash initval (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conncount: fix wrong variable type (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (Florian Westphal) [RHEL-186601]
  - netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_expect: skip expectations in other netns via proc (Florian Westphal) [RHEL-186601] {CVE-2026-31496}
  - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-186601]
  - netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock (Florian Westphal) [RHEL-186601]
  - netfilter: synproxy: fix unaligned memory access in timestamp adjustment (Florian Westphal) [RHEL-186601]
  - netfilter: synproxy: adjust duplicate timestamp options (Florian Westphal) [RHEL-186601]
  - netfilter: synproxy: drop packets if timestamp adjustment fails (Florian Westphal) [RHEL-186601]
  - netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures (Florian Westphal) [RHEL-186601]
  - ipvs: clear the svc scheduler ptr early on edit (Florian Westphal) [RHEL-186601] {CVE-2026-53270}
  - netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (Florian Westphal) [RHEL-186601]
  - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-186601]
  - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-186601] {CVE-2026-53134}
  - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-186601] {CVE-2026-53218}
  - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-186601] {CVE-2026-52942}
  - netfilter: x_tables: avoid leaking percpu counter pointers (Florian Westphal) [RHEL-186601] {CVE-2026-53219}
  - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-186601]
  - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-186601] {CVE-2026-53220}
  - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-186601] {CVE-2026-53267}
  - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-186601] {CVE-2026-53212}
  - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-186601] {CVE-2026-53268}
  - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-186601] {CVE-2026-53269}
  - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-186601]
  - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-186601]
  - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-186601]
  - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-186601] {CVE-2026-52912}
  - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-186601]
  - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-186601] {CVE-2026-52915}
  - netfilter: ipset: stop hash:* range iteration at end (Florian Westphal) [RHEL-186601]
  - netfilter: ipset: fix a potential dump-destroy race (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-186601]
  - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-186601] {CVE-2026-52970}
  - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-186601]
  - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-186601]
  - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-186601]
  - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-186601]
  - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-186601]
  - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-186601]
  - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-186601]
  - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-186601] {CVE-2026-52986}
  - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-186601] {CVE-2026-52920}
  - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-186601] {CVE-2026-46324}
  - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-186601]
  - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-186601] {CVE-2026-52998}
  - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-186601] {CVE-2026-52999}
  - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-186601] {CVE-2026-53001}
  - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-186601] {CVE-2026-53002}
  - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-186601] {CVE-2026-45841}
  - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-186601]
  - netfilter: require Ethernet MAC header before using eth_hdr() (Florian Westphal) [RHEL-186601] {CVE-2026-53131}
  - netfilter: x_physdev: reject empty or not-nul terminated device names (Florian Westphal) [RHEL-186601]
  - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-186601] {CVE-2026-31665}
  - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-186601] {CVE-2026-31681}
  - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-186601] {CVE-2026-43085}
  - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-186601] {CVE-2026-43024}
  - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-186601] {CVE-2026-31424}
  - netfilter: ipset: drop logically empty buckets in mtype_del (Florian Westphal) [RHEL-186601] {CVE-2026-31418}
  - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-186601] {CVE-2026-43025}
  - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-186601] {CVE-2026-43026}
  - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-186601]
  - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-186601] {CVE-2026-43028}
  - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-186601] {CVE-2026-31416}
  - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-186601]
  - netfilter: Reorder fields in 'struct nf_conntrack_expect' (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-186601] {CVE-2026-31414}
  - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-186601]
  - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-186601] {CVE-2026-31674}
  - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-186601] {CVE-2026-23278}
  - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-186601] {CVE-2026-23351}
  - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-186601] {CVE-2026-23385}
  - netfilter: nf_conntrack_h323: don't pass uninitialised l3num value (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-186601]
  - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-186601]
  - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-186601] {CVE-2025-68206}
  - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-186601] {CVE-2025-40206}
  - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-186601]
  - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-186601]
  - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-186601]
  - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-186601]
  - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-186601]
  - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-186601] {CVE-2024-56655}
  - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-186601] {CVE-2025-38201}
  - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-186601] {CVE-2025-38162}
  - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-186601]
  - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184267]
  - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-182043]
  - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-182043]
  - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-182043]
  - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-182043]
  - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-182043]
  - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-182043]
  - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-183881]
  - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183881]
  - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180269] {CVE-2026-43276}
  - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180269] {CVE-2026-43276}
  - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180161] {CVE-2026-46117}
  - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180088] {CVE-2026-46145}
  - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171507] {CVE-2026-31669}
  - tipc: fix double-free in tipc_buf_append() (Xin Long) [RHEL-152706]
  - tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG (Xin Long) [RHEL-152706]
  - tipc: fix divide-by-zero in tipc_sk_filter_connect() (Xin Long) [RHEL-152706]
  - tipc: fix duplicate publication key in tipc_service_insert_publ() (Xin Long) [RHEL-152706]
  - tipc: fix RCU dereference race in tipc_aead_users_dec() (Xin Long) [RHEL-152706]
  - tipc: use kfree_sensitive() for session key material (Xin Long) [RHEL-152706]
  - tipc: Fix use-after-free in tipc_mon_reinit_self(). (Xin Long) [RHEL-152706]
  - sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (Xin Long) [RHEL-152695]
  - sctp: disable BH before calling udp_tunnel_xmit_skb() (Xin Long) [RHEL-152695]
  - sctp: fix missing encap_port propagation for GSO fragments (Xin Long) [RHEL-152695]
  - sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT (Xin Long) [RHEL-152695]
  - sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto (Xin Long) [RHEL-152695]
  - sctp: Hold sock lock while iterating over address list (Xin Long) [RHEL-152695]
  - sctp: Prevent TOCTOU out-of-bounds write (Xin Long) [RHEL-152695]
  - sctp: Hold RCU read lock while iterating over address list (Xin Long) [RHEL-152695]
  - net: sctp: fix KMSAN uninit-value in sctp_inq_pop (Xin Long) [RHEL-152695]
  - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). (Xin Long) [RHEL-152695]
  - net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (Xin Long) [RHEL-152695]
  - scsi: mpt3sas: Limit NVMe request size to 2 MiB (Chandrakanth Patil) [RHEL-141217] {CVE-2026-46105}
  - scsi: mpt3sas: Simplify the workqueue allocation code (Chandrakanth Patil) [RHEL-141217]
  - scsi: mpt3sas: Fixed the W=1 compilation warning (Chandrakanth Patil) [RHEL-141217]
  - scsi: mpt3sas: Add configurable command retry limit for slow-to-respond devices (Chandrakanth Patil) [RHEL-141217]
  - scsi: mpt3sas: Add firmware event requeue support for busy devices (Chandrakanth Patil) [RHEL-141217]
  - scsi: mpt3sas: Improve device discovery and readiness handling for slow devices (Chandrakanth Patil) [RHEL-141217]
  - scsi: mpt3sas: Added no_turs flag to device unblock logic (Chandrakanth Patil) [RHEL-141217]
  - scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Fix typo and grammar (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Fix kernel-doc issues in mpi3mr_app.c (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Fix typo (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Add retry mechanism for IOC shutdown with timeout reset (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Add queue-full tracking for operational request queues (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Reset controller on invalid I/O completion (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Clear reset history on ready and recheck state after timeout (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Add NULL checks when resetting request and reply queues (Chandrakanth Patil) [RHEL-141218] {CVE-2026-43473}
  - scsi: mpi3mr: Make driver probing asynchronous (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Driver version update to 8.17.0.3.50 (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Fixed the W=1 compilation warning (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Record and report controller firmware faults (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Update MPI Headers to revision 39 (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Use negotiated link rate from DevicePage0 (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Avoid redundant diag-fault resets (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Rename log data save helper to reflect threaded/BH context (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Add module parameter to control threaded IRQ polling (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Simplify the workqueue allocation code (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Read missing IOCFacts flag for reply queue full overflow (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Prevent duplicate SAS/SATA device entries in channel 1 (Chandrakanth Patil) [RHEL-141218]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-733.el9]
changelog:
  - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219617] {CVE-2026-64320}
  - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-212990]
  - drm/i915/display: enable ccs modifiers on dg2 (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Write REFCLK to 48MHz on DCN21 (Anusha Srivatsa) [RHEL-180329]
  - drm/panthor: Extend VM locked region for remap case to be a superset (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: Check if there are kfd porcesses using adev by kfd_processes_count (Anusha Srivatsa) [RHEL-180329]
  - dma-buf: fix UAF in dma_buf_put() tracepoint (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm: fix runtime PM imbalance issue in amdgpu_pm.c (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval() (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: add missing CSC entries for BT.2020 for DCE IPs (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Bound VBIOS record-chain walk loops (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm: smu_v14_0_0: use SoftMin for gfxclk in set_soft_freq_limited_range (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm: mark metrics.energy_accumulator is invalid for smu 14.0.2 (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm: fix smu13 power limit default/cap calculation (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm: apply SMU 13.0.10 workaround during MP1 unload (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Fix incorrect VRAM GART mappings on non-4K page size systems (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: set noretry=1 as default for GFX 10.1.x (Navi10/12/14) (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: restart the CS if some parts of the VM are still invalidated (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: fix waiting for all submissions for userptrs (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Clear pending_disable before signaling suspend fence (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/multi_queue: skip submit when primary queue is suspended (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/display: fix oops in suspend/shutdown without display (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: fix NULL dereference in get_queue_ids() (Anusha Srivatsa) [RHEL-180329]
  - drm/i915: Fix color blob reference handling in intel_plane_state (Anusha Srivatsa) [RHEL-180329]
  - drm/gem: Try to fix change_handle ioctl, attempt 4 (Anusha Srivatsa) [RHEL-180329]
  - accel/ethosu: reject NPU_OP_RESIZE commands from userspace (Anusha Srivatsa) [RHEL-180329]
  - accel/ethosu: reject DMA commands with uninitialized length (Anusha Srivatsa) [RHEL-180329]
  - accel/ethosu: fix arithmetic issues in dma_length() (Anusha Srivatsa) [RHEL-180329]
  - accel/ethosu: fix wrong weight index in NPU_SET_SCALE1_LENGTH on U85 (Anusha Srivatsa) [RHEL-180329]
  - accel/ethosu: fix IFM region index out-of-bounds in command stream parser (Anusha Srivatsa) [RHEL-180329]
  - accel/ethosu: fix OOB write in ethosu_gem_cmdstream_copy_and_validate() (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Reject gpio_bitshift >= 32 in bios_parser_get_gpio_pin_info() (Anusha Srivatsa) [RHEL-180329]
  - drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait() (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/gem: Fix phys BO pread/pwrite with offset (Anusha Srivatsa) [RHEL-180329]
  - Revert "drm/xe: Skip exec queue schedule toggle if queue is idle during suspend" (Anusha Srivatsa) [RHEL-180329]
  - accel/ivpu: Fix signed integer truncation in IPC receive (Anusha Srivatsa) [RHEL-180329]
  - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (Anusha Srivatsa) [RHEL-180329]
  - accel/ivpu: Add bounds checks for firmware log indices (Anusha Srivatsa) [RHEL-180329]
  - accel/ivpu: Add bounds check for firmware runtime memory (Anusha Srivatsa) [RHEL-180329]
  - Revert "drm/xe/nvls: Define GuC firmware for NVL-S" (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: fix job timeout recovery for unstarted jobs and kernel queues (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: fix refcount leak in xe_range_fence_insert() (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: use plane color_mgmt_changed to track colorop changes (Anusha Srivatsa) [RHEL-180329]
  - drm/atomic: track individual colorop updates (Anusha Srivatsa) [RHEL-180329]
  - drm/colorop: make lut(1/3)d_interpolation props correctly behave as mutable (Anusha Srivatsa) [RHEL-180329]
  - drm/colorop: Remove read-only comments from interpolation fields (Anusha Srivatsa) [RHEL-180329]
  - drm/virtio: Fix driver removal with disabled KMS (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/edp: Check supported link rates DPCD read (Anusha Srivatsa) [RHEL-180329]
  - drm/imx: Fix three kernel-doc warnings in dcss-scaler.c (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: check num_entries in GEM_OP GET_MAPPING_INFO (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: fix calling VM invalidation in amdgpu_hmm_invalidate_gfx (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: fix lock leak on ENOMEM in AMDGPU_GEM_OP_GET_MAPPING_INFO (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: Check for pdd drm file first in CRIU restore path (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: fix NULL pointer bug in svm_range_set_attr (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm/si: Disregard vblank time when no displays are connected (Anusha Srivatsa) [RHEL-180329]
  - drm/i915: Fix potential UAF in TTM object purge (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/color: Fix HDR pre-CSC LUT programming loop (Anusha Srivatsa) [RHEL-180329]
  - drm/gem: fix race between change_handle and handle_delete (Anusha Srivatsa) [RHEL-180329]
  - drm/hyperv: validate VMBus packet size in receive callback (Anusha Srivatsa) [RHEL-180329]
  - drm/hyperv: validate resolution_count and fix WIN8 fallback (Anusha Srivatsa) [RHEL-180329]
  - dma-buf: fix UAF in dma_buf_fd() tracepoint (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/psr: Apply Intel DPCD workaround when SDP on prior line used (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/psr: Read Intel DPCD workaround register (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/psr: Add defininitions for INTEL_WA_REGISTER_CAPS DPCD register (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Restore IDLEDLY regiter on engine reset (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/aux: use polling when irqs are unavailable (Anusha Srivatsa) [RHEL-180329]
  - accel/ivpu: prevent uninitialized data bug in debugfs (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/oa: Fix exec_queue leak on width check in stream open (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vce1: Check that the GPU address is < 128 MiB (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Align amdgpu_gtt_mgr entries to TLB size on Tahiti (v2) (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/dp: Fix readback for target_rr in Adaptive Sync SDP (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN4 (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/tuning: Apply windower hardware filtering setting on Xe3 and Xe3p (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN1 (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Consolidate workaround entries for Wa_18033852989 (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Consolidate workaround entries for Wa_14019988906 (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/pf: Fix CFI failure in debugfs access (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/vf: Fix signature of print functions (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/gsc: Fix double-free of managed BO in error path (Anusha Srivatsa) [RHEL-180329]
  - drm/gem: Make the GEM LRU lock part of drm_device (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Validate GPIO pin LUT table size before iterating (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Fix integer overflow in bios_get_image() (Anusha Srivatsa) [RHEL-180329]
  - drm/bridge: megachips: remove bridge when irq request fails (Anusha Srivatsa) [RHEL-180329]
  - drm/bridge: it66121: acquire reset GPIO in probe (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vpe: Force collaborate sync after TRAP (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/multi_queue: Fix secondary queue error case (Anusha Srivatsa) [RHEL-180329]
  - drm/virtio: use uninterruptible resv lock for plane updates (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/display: Copy color pipeline from plane in the primary joiner pipe (Anusha Srivatsa) [RHEL-180329]
  - drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe (Anusha Srivatsa) [RHEL-180329]
  - drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init (Anusha Srivatsa) [RHEL-180329]
  - drm/gma500/oaktrail_lvds: fix hang on init failure (Anusha Srivatsa) [RHEL-180329]
  - drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup (Anusha Srivatsa) [RHEL-180329]
  - drm/ttm: Fix ttm_bo_shrink() infinite LRU walk on backup failure (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-180329]
  - drm/i915: skip __i915_request_skip() for already signaled requests (Anusha Srivatsa) [RHEL-180329]
  - drm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout failure (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/dp: Fix VSC dynamic range signaling for RGB formats (Anusha Srivatsa) [RHEL-180329]
  - drm/bridge: imx8qxp-pxl2dpi: avoid ERR_PTR with device_node cleanup (Anusha Srivatsa) [RHEL-180329]
  - drm: Replace old pointer to new idr (Anusha Srivatsa) [RHEL-180329]
  - drm/loongson: Use managed KMS polling (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/xelp: Fix Wa_18022495364 (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/gsc: Fix BO leak on error in query_compatibility_version() (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Fix potential NULL deref in xe_exec_queue_tlb_inval_last_fence_put_unlocked (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/debugfs: Correct printing of register whitelist ranges (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Drop registration of guc_submit_wedged_fini from xe_guc_submit_wedge() (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Use XE_WEDGED_MODE_UPON_ANY_HANG_NO_RESET enum instead of magic number (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Use EDID from VBIOS embedded panel info (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Read EDID from VBIOS embedded panel info (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Allow constructing DCE8 link encoder without DDC (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Allow constructing DCE6 link encoder without DDC (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Allow DCE link encoder without AUX registers (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Allow embedded connectors without DDC (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm: Add fine grained flag to SMU v13.0.6 (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.3.0 ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.1 ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.0 ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn: set no_user_fence for VCN v5.0.1 enc ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.5 enc ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: properly handle family setting for early GC 11.5.4 (Anusha Srivatsa) [RHEL-180329]
  - drm/color-mgmt: Typo s/R332/RGB332/ (Anusha Srivatsa) [RHEL-180329]
  - drm/sysfb: ofdrm: fix PCI device reference leaks (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Only send RMA CPER when threshold is exceeded (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2) (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/uvd3.1: Don't validate the firmware when already validated (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm: fix missing fine-grained dpm table flag on aldebaran (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/gmc: Fix AMDGPU_GART_PLACEMENT_LOW to not overlap with VRAM (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: avoid double drm_exec_fini() in userq validate (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/wm: Verify the correct plane DDB entry (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Fix parameter mismatch in panel self-refresh helper (Anusha Srivatsa) [RHEL-180329]
  - drm/fb-helper: Fix a locking bug in an error path (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/uvd4.2: Don't initialize UVD 4.2 when DPM is disabled (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm/ci: Fill DW8 fields from SMC (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm/ci: Clear EnabledForActivity field for memory levels (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0 (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths (Anusha Srivatsa) [RHEL-180329]
  - drm/panel: simple: Correct G190EAN01 prepare timing (Anusha Srivatsa) [RHEL-180329]
  - drm/panel: sharp-ls043t1le01: make use of prepare_prev_first (Anusha Srivatsa) [RHEL-180329]
  - drm/imagination: Switch reset_reason fields from enum to u32 (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/gfx11: look at the right prop for gfx queue priority (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/gfx10: look at the right prop for gfx queue priority (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/ras: Remove redundant NULL check in pending bad-bank list iteration (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Remove dead negative offset check in amdgpu_virt_init_critical_region() (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Drop redundant queue NULL check in hang detect worker (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/ras: Fix NULL deref in ras_core_get_utc_second_timestamp() (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Add default case in DVI mode validation (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/ras: Fix NULL deref in ras_core_ras_interrupt_detected() (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: Update queue properties for metadata ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm: Fix xgmi max speed reporting (Anusha Srivatsa) [RHEL-180329]
  - drm/bridge: cadence: cdns-mhdp8546-core: Handle HDCP state in bridge atomic check (Anusha Srivatsa) [RHEL-180329]
  - drm/bridge: cadence: cdns-mhdp8546-core: Add mode_valid hook to drm_bridge_funcs (Anusha Srivatsa) [RHEL-180329]
  - drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable() (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: GFX12.1 scratch memory limit up to 57-bit (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/ras: Fix type size of remainder argument (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: Removed commented line for MQD queue priority (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/xe2_hpg: Drop invalid workaround Wa_15010599737 (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Consolidate workaround entries for Wa_14019386621 (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Consolidate workaround entries for Wa_14019877138 (Anusha Srivatsa) [RHEL-180329]
  - drm/virtio: Allow importing prime buffers when 3D is enabled (Anusha Srivatsa) [RHEL-180329]
  - drm/gpusvm: Fix unbalanced unlock in drm_gpusvm_scan_mm() (Anusha Srivatsa) [RHEL-180329]
  - dma-fence: Fix sparse warnings due __rcu annotations (Anusha Srivatsa) [RHEL-180329]
  - drm/panel: ilitek-ili9882t: Select DRM_DISPLAY_DSC_HELPER (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/pm: align Hawaii mclk workaround with radeon (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/pm: add missing revision check for CI (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: Make all TLB-flushes heavy-weight (Anusha Srivatsa) [RHEL-180329]
  - drm/panel: boe-tv101wum-nl6: restore MODE_LPM after sending disable cmds (Anusha Srivatsa) [RHEL-180329]
  - drm/bridge: tda998x: Use __be32 for audio port OF property pointer (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ (Anusha Srivatsa) [RHEL-180329]
  - drm/panel: himax-hx83102: restore MODE_LPM after sending disable cmds (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/userq: fix access to stale wptr mapping (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: zero-initialize GART table on allocation (Anusha Srivatsa) [RHEL-180329]
  - drm/radeon: add missing revision check for CI (Anusha Srivatsa) [RHEL-180329]
  - drm: Set old handle to NULL before prime swap in change_handle (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/bo: Fix bo leak on unaligned size validation in xe_bo_init_locked() (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/bo: Fix bo leak on GGTT flag validation in xe_bo_init_locked() (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-180329]
  - drm/udl: Increase GET_URB_TIMEOUT (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Avoid reset in AMDGPU unload path for APUs with GFX V11 and higher. (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: validate SVM ioctl nattr against buffer size (Anusha Srivatsa) [RHEL-180329]
  - drm/appletbdrm: Use kvzalloc for big allocations (Anusha Srivatsa) [RHEL-180329]
  - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Change dither policy for 10 bpc output back to dithering (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vce: Prevent partial address patches (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Add bounds checking to ib_{get,set}_value (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: Add upper bound check for num_of_nodes (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: gate VM CPU HDP flush on reset lock (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower count. (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Use NBIF offset for register RCC_STRAP0_RCC_DEV0_EPF0_STRAP0 . (Anusha Srivatsa) [RHEL-180329]
  - drm/amd: Add missing firmware declaration for PSP v15.0.0 (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: fix math_mod() using arg1 instead of arg2 (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/psr: Init variable to avoid early exit from et alignment loop (Anusha Srivatsa) [RHEL-180329]
  - drm/imx: parallel-display: Prefer bus format set via legacy "interface-pix-fmt" DT property (Anusha Srivatsa) [RHEL-180329]
  - drm/colorop: Fix blob property reference tracking in state lifecycle (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status() (Anusha Srivatsa) [RHEL-180329]
  - drm/atomic: Add affected colorops with affected planes (Anusha Srivatsa) [RHEL-180329]
  - drm/colorop: Preserve bypass value in duplicate_state() (Anusha Srivatsa) [RHEL-180329]
  - drm/gpusvm: Force unmapping on error in drm_gpusvm_get_pages (Anusha Srivatsa) [RHEL-180329]
  - drm/gpusvm: Allow device pages to be mapped in mixed mappings after system pages (Anusha Srivatsa) [RHEL-180329]
  - accel/ivpu: Disallow re-exporting imported GEM objects (Anusha Srivatsa) [RHEL-180329]
  - drm/imagination: Fix segfault when updating ftrace mask (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: fix zero-size GDS range init on RDNA4 (Anusha Srivatsa) [RHEL-180329]
  - amdgpu/jpeg: fix deepsleep register for jpeg 5_0_0 and 5_0_2 (Anusha Srivatsa) [RHEL-180329]
  - drm/arcpgu: fix device node leak (Anusha Srivatsa) [RHEL-180329]
  - drm/nouveau: fix nvkm_device leak on aperture removal failure (Anusha Srivatsa) [RHEL-180329]
  - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: replace PASID IDR with XArray (Anusha Srivatsa) [RHEL-180329]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-734.el9]
changelog:
  - redhat/configs: disable CONFIG_SMB_KUNIT_TESTS (Paulo Alcantara) [RHEL-216926]
  - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-216926]
  - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-216926]
  - smb: client: simplify cifs_fscache_get_super_cookie() (Paulo Alcantara) [RHEL-216926]
  - cifs: validate idmap key payload length (Paulo Alcantara) [RHEL-216926]
  - smb: client: remove conditional return with no effect (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix buffer leaks in SMB1 read and write (Paulo Alcantara) [RHEL-216926]
  - smb: client: use GFP_KERNEL for registry allocation (Paulo Alcantara) [RHEL-216926]
  - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-216926]
  - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-216926]
  - smb: client: handle STATUS_STOPPED_ON_SYMLINK responses without a symlink target (Paulo Alcantara) [RHEL-216926]
  - smb: client: bound dirent name against end of SMB response in cifs_filldir (Paulo Alcantara) [RHEL-216926]
  - smb: client: validate DFS referral PathConsumed (Paulo Alcantara) [RHEL-216926]
  - smb/client: flush dirty data before punching a hole (Paulo Alcantara) [RHEL-216926]
  - smb: client: reject overlapping data areas in SMB2 responses (Paulo Alcantara) [RHEL-216926]
  - smb/client: refresh allocation after EOF-extending fallocate (Paulo Alcantara) [RHEL-216926]
  - smb/client: emulate small EOF-extending mode 0 fallocate ranges (Paulo Alcantara) [RHEL-216926]
  - smb/client: reduce fallocate zero buffer allocation (Paulo Alcantara) [RHEL-216926]
  - smb/client: handle overlapping allocated ranges in fallocate (Paulo Alcantara) [RHEL-216926]
  - smb/client: refresh allocation size after duplicate extents (Paulo Alcantara) [RHEL-216926]
  - smb: client: use kvzalloc() for megabyte buffer in simple fallocate (Paulo Alcantara) [RHEL-216926]
  - smb: client: mask server-provided mode to 07777 in modefromsid (Paulo Alcantara) [RHEL-216926]
  - smb/client: fix incorrect nlink returned by fstat() (Paulo Alcantara) [RHEL-216926]
  - smb/client: zero-initialize stack-allocated cifs_open_info_data (Paulo Alcantara) [RHEL-216926]
  - smb/client: pass cifs_open_info_data to SMB2_open() (Paulo Alcantara) [RHEL-216926]
  - smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink() (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix overflow in passthrough ioctl bounds check (Paulo Alcantara) [RHEL-216926]
  - cifs: Fix support for creating SFU fifo (Paulo Alcantara) [RHEL-216926]
  - cifs: Fix support for creating SFU socket (Paulo Alcantara) [RHEL-216926]
  - cifs: validate DFS referral string offsets (Paulo Alcantara) [RHEL-216926]
  - smb: client: use GFP_KERNEL for DFS cache allocations (Paulo Alcantara) [RHEL-216926]
  - smb: client: restrict implied bcc[0] exemption to responses without data area (Paulo Alcantara) [RHEL-216926]
  - smb: client: preserve leading slash for POSIX absolute symlink targets (Paulo Alcantara) [RHEL-216926]
  - smb: client: refactor cifs_revalidate_mapping() to use clear_and_wake_up_bit() (Paulo Alcantara) [RHEL-216926]
  - smb: client: use unaligned reads in parse_posix_ctxt() (Paulo Alcantara) [RHEL-216926]
  - smb: client: harden POSIX SID length parsing (Paulo Alcantara) [RHEL-216926]
  - cifs: define variable sized buffer for querydir responses (Paulo Alcantara) [RHEL-216926]
  - smb/client: do not account EOF extension as allocation (Paulo Alcantara) [RHEL-216926]
  - smb/client: preserve errors from smb2_set_sparse() (Paulo Alcantara) [RHEL-216926]
  - smb: client: Fix next buffer leak in receive_encrypted_standard() (Paulo Alcantara) [RHEL-216926]
  - smb/client: use %pe to print error pointer (Paulo Alcantara) [RHEL-216926]
  - smb/client: name the default fallocate mode (Paulo Alcantara) [RHEL-216926]
  - smb common: add missing AAPL defines (Paulo Alcantara) [RHEL-216926]
  - smb/client: fix chown/chgrp with SMB3 POSIX Extensions (Paulo Alcantara) [RHEL-216926]
  - smb/client: fix security flag calculation when setting security descriptors (Paulo Alcantara) [RHEL-216926]
  - smb: client: refactor ACL setting control flow in id_mode_to_cifs_acl() (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix query directory replay double-free (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix change notify replay double-free (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix query_info() replay double-free (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix double-free in SMB2_ioctl() replay (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix double-free in SMB2_open() replay (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix double-free in SMB2_flush() replay (Paulo Alcantara) [RHEL-216926]
  - smb: move compression definitions into common/fscc.h (Paulo Alcantara) [RHEL-216926]
  - smb: client: Use more common code in SMB2_tcon() (Paulo Alcantara) [RHEL-216926]
  - smb: client: Use more common error handling code in smb3_reconfigure() (Paulo Alcantara) [RHEL-216926]
  - smb/client: clean up a type issue in cifs_xattr_get() (Paulo Alcantara) [RHEL-216926]
  - smb/client: allow FS_IOC_SETFLAGS to clear compression (Paulo Alcantara) [RHEL-216926]
  - smb/client: use writable handle for FS_IOC_SETFLAGS compression (Paulo Alcantara) [RHEL-216926]
  - smb/client: always return a value for FS_IOC_GETFLAGS (Paulo Alcantara) [RHEL-216926]
  - smb/client: update i_blocks after contiguous writes (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix races in cifsd thread creation (Paulo Alcantara) [RHEL-216926]
  - cifs: validate full SID length in security descriptors (Paulo Alcantara) [RHEL-216926]
  - smb: client: resolve SWN tcon from live registrations (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix conflicting option validation for new mount API (Paulo Alcantara) [RHEL-216926]
  - cifs: invalidate cfid on unlink/rename/rmdir (Paulo Alcantara) [RHEL-216926]
  - smb: client: convert cifs_smb3_do_mount() to sget_fc() (Paulo Alcantara) [RHEL-216926]
  - smb: client: change allocation requirements in DUP_CTX_STR macro (Paulo Alcantara) [RHEL-216926]
  - smb: client: require net admin for CIFS SWN netlink (Paulo Alcantara) [RHEL-216926]
  - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (Paulo Alcantara) [RHEL-216926]
  - smb: client: avoid integer overflow in SMB2 READ length check (Paulo Alcantara) [RHEL-216926]
  - cifs: client: stage smb3_reconfigure() updates and restore ctx on failure (Paulo Alcantara) [RHEL-216926]
  - smb/client: fix possible infinite loop and oob read in symlink_data() (Paulo Alcantara) [RHEL-216926]
  - SMB3.1.1: add missing QUERY_DIR info levels (Paulo Alcantara) [RHEL-216926]
  - smb/client: fix out-of-bounds read in symlink_data() (Paulo Alcantara) [RHEL-216926]
  - smb: client: Zero-pad short GSS session keys per MS-SMB2 (Paulo Alcantara) [RHEL-216926]
  - smb: client: Use FullSessionKey for AES-256 encryption key derivation (Paulo Alcantara) [RHEL-216926]
  - cifs: abort open_cached_dir if we don't request leases (Paulo Alcantara) [RHEL-216926]
  - cifs: change_conf needs to be called for session setup (Paulo Alcantara) [RHEL-216926]
  - smb: client: change allocation requirements in smb2_compound_op (Paulo Alcantara) [RHEL-216926]
  - smb/client: remove unused smb3_parse_opt() (Paulo Alcantara) [RHEL-216926]
  - smb: common: add SMB3_COMPRESS_MAX_ALGS (Paulo Alcantara) [RHEL-216926]
  - smb: client: compress: add code docs to lz77.c (Paulo Alcantara) [RHEL-216926]
  - smb: client: compress: LZ77 optimizations (Paulo Alcantara) [RHEL-216926]
  - smb: client: compress: increase LZ77_MATCH_MAX_DIST (Paulo Alcantara) [RHEL-216926]
  - smb: client: compress: fix counting in LZ77 match finding (Paulo Alcantara) [RHEL-216926]
  - smb: client: compress: fix buffer overrun in lz77_compress() (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix (remove) drop_dir_cache module parameter (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (Paulo Alcantara) [RHEL-216926]
  - smb: client: compress: fix bad encoding on last LZ77 flag (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix integer underflow in receive_encrypted_read() (Paulo Alcantara) [RHEL-216926]
  - smb: client: add tracepoints for deferred handle caching (Paulo Alcantara) [RHEL-216926]
  - smb: client: add oplock level to smb3_open_done tracepoint (Paulo Alcantara) [RHEL-216926]
  - smb: client: add tracepoint for local lock conflicts (Paulo Alcantara) [RHEL-216926]
  - smb: client: add tracepoints for lock operations (Paulo Alcantara) [RHEL-216926]
  - smb: client: allow both 'lease' and 'nolease' mount options (Paulo Alcantara) [RHEL-216926]
  - smb: move filesystem_vol_info into common/fscc.h (Paulo Alcantara) [RHEL-216926]
  - smb: move file_basic_info into common/fscc.h (Paulo Alcantara) [RHEL-216926]
  - smb: move some definitions from common/smb2pdu.h into common/fscc.h (Paulo Alcantara) [RHEL-216926]
  - vfs: get rid of BUG_ON() in d_mark_tmpfile_name() (Paulo Alcantara) [RHEL-216926]
  - smb: client: get rid of d_drop()+d_add() (Paulo Alcantara) [RHEL-216926]
  - smb: client: set ATTR_TEMPORARY with O_TMPFILE | O_EXCL (Paulo Alcantara) [RHEL-216926]
  - smb: client: add support for O_TMPFILE (Paulo Alcantara) [RHEL-216926]
  - vfs: introduce d_mark_tmpfile_name() (Paulo Alcantara) [RHEL-216926]
  - smb: client: add missing MODULE_DESCRIPTION() to smb1maperror_test (Paulo Alcantara) [RHEL-216926]
  - smb: client: Remove unnecessary selection of CRYPTO_ECB (Paulo Alcantara) [RHEL-216926]
  - smb/client: move smb2maperror declarations to smb2proto.h (Paulo Alcantara) [RHEL-216926]
  - smb/client: introduce KUnit tests to check DOS/SRV err mapping search (Paulo Alcantara) [RHEL-216926]
  - smb/client: check if SMB1 DOS/SRV error mapping arrays are sorted (Paulo Alcantara) [RHEL-216926]
  - smb/client: use binary search for SMB1 DOS/SRV error mapping (Paulo Alcantara) [RHEL-216926]
  - smb/client: autogenerate SMB1 DOS/SRV to POSIX error mapping (Paulo Alcantara) [RHEL-216926]
  - smb/client: annotate smberr.h with POSIX error codes (Paulo Alcantara) [RHEL-216926]
  - smb/client: move ERRnetlogonNotStarted to DOS error class (Paulo Alcantara) [RHEL-216926]
  - smb/client: introduce KUnit test to check ntstatus_to_dos_map search (Paulo Alcantara) [RHEL-216926]
  - smb/client: check if ntstatus_to_dos_map is sorted (Paulo Alcantara) [RHEL-216926]
  - smb/client: use binary search for NT status to DOS mapping (Paulo Alcantara) [RHEL-216926]
  - smb/client: refactor ntstatus_to_dos() to return mapping entry (Paulo Alcantara) [RHEL-216926]
  - smb/client: replace nt_errs with ntstatus_to_dos_map (Paulo Alcantara) [RHEL-216926]
  - smb/client: autogenerate SMB1 NT status to DOS error mapping (Paulo Alcantara) [RHEL-216926]
  - smb/client: annotate nterr.h with DOS error codes (Paulo Alcantara) [RHEL-216926]
  - smb/client: avoid null-ptr-deref when tests fail in test_cmp_map() (Paulo Alcantara) [RHEL-216926]
  - fs/smb/client: add verbose error logging for UNC parsing (Paulo Alcantara) [RHEL-216926]
  - smb/client: ensure smb2_mapping_table rebuild on cmd changes (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix generic/694 due to wrong ->i_blocks (Paulo Alcantara) [RHEL-216926]
  - cifs: smb1: fix comment typo (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix open handle lookup in cifs_open() (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix iface port assignment in parse_server_interfaces (Paulo Alcantara) [RHEL-216926]
  - smb/client: only export symbol for 'smb2maperror-test' module (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix atomic open with O_DIRECT & O_SYNC (Paulo Alcantara) [RHEL-216926]
  - smb/client: make SMB2 maperror KUnit tests a separate module (Paulo Alcantara) [RHEL-216926]
  - smb: client: Use snprintf in cifs_set_cifscreds (Paulo Alcantara) [RHEL-216926]
  - smb: client: Don't log plaintext credentials in cifs_set_cifscreds (Paulo Alcantara) [RHEL-216926]
  - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix cifs_pick_channel when channels are equally loaded (Paulo Alcantara) [RHEL-216926]
  - smb: client: terminate session upon failed client required signing (Paulo Alcantara) [RHEL-216926]
  - smb/client: move NT_STATUS_MORE_ENTRIES (Paulo Alcantara) [RHEL-216926]
  - smb/client: rename to NT_ERROR_INVALID_DATATYPE (Paulo Alcantara) [RHEL-216926]
  - smb/client: rename to NT_STATUS_SOME_NOT_MAPPED (Paulo Alcantara) [RHEL-216926]
  - smb/client: map NT_STATUS_PRIVILEGE_NOT_HELD (Paulo Alcantara) [RHEL-216926]
  - smb/client: map NT_STATUS_MORE_PROCESSING_REQUIRED (Paulo Alcantara) [RHEL-216926]
  - smb/client: map NT_STATUS_BUFFER_OVERFLOW (Paulo Alcantara) [RHEL-216926]
  - smb/client: map NT_STATUS_NOTIFY_ENUM_DIR (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Remove duplicate include of cifs_debug.h (Paulo Alcantara) [RHEL-216926]
  - smb client: Add generated file to gitignore file (Paulo Alcantara) [RHEL-216926]
  - cifs: Fix the copyright banner on smb1maperror.c (Paulo Alcantara) [RHEL-216926]
  - smb: common: add header guards to fs/smb/common/smb2status.h (Paulo Alcantara) [RHEL-216926]
  - smb: client: Avoid a dozen -Wflex-array-member-not-at-end warnings (Paulo Alcantara) [RHEL-216926]
  - smb/client: remove useless comment in mapping_table_ERRSRV (Paulo Alcantara) [RHEL-216926]
  - smb/client: remove some literal NT error codes from ntstatus_to_dos_map (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_VOLUME_NOT_UPGRADED (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_NO_USER_KEYS (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_WRONG_EFS (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_NO_EFS (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_NO_RECOVERY_POLICY (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_RANGE_NOT_FOUND (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_DECRYPTION_FAILED (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_ENCRYPTION_FAILED (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_DIRECTORY_IS_A_REPARSE_POINT (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_VOLUME_DISMOUNTED (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_BIOS_FAILED_TO_CONNECT_INTERRUPT (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_VARIABLE_NOT_FOUND (Paulo Alcantara) [RHEL-216926]
  - smb/client: rename ERRinvlevel to ERRunknownlevel (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_OS2_INVALID_LEVEL (Paulo Alcantara) [RHEL-216926]
  - smb/client: map NT_STATUS_INVALID_INFO_CLASS to ERRbadpipe (Paulo Alcantara) [RHEL-216926]
  - smb/client: introduce KUnit test to check search result of smb2_error_map_table (Paulo Alcantara) [RHEL-216926]
  - smb/client: use bsearch() to find target in smb2_error_map_table (Paulo Alcantara) [RHEL-216926]
  - smb/client: check whether smb2_error_map_table is sorted in ascending order (Paulo Alcantara) [RHEL-216926]
  - cifs: Autogenerate SMB2 error mapping table (Paulo Alcantara) [RHEL-216926]
  - smb: client: correct value for smbd_max_fragmented_recv_size (Paulo Alcantara) [RHEL-216926]
  - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-216926]
  - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-216926]
  - cifs: Label SMB2 statuses with errors (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Make BCC accessors conditional (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: connect.c (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: sess.c (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: cifsencrypt.c (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: netmisc.c (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: misc.c (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: cifs_debug.c (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Move inline funcs (Paulo Alcantara) [RHEL-216926]
  - cifs: Fix cifs_dump_mids() to call ->dump_detail (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Don't return smb_hdr from cifs_{,small_}buf_get() (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Move BCC access functions (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Adjust #includes (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Split SMB1 protocol defs into smb1pdu.h (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Add some #includes (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Move some SMB1 received PDU checking bits to smb1transport.c (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Move some SMB1 receive bits to smb1transport.c (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Separate out SMB1 decls into smb1proto.h (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Create smb1proto.h for SMB1 declarations (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Rename cifstransport.c (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/ntlmssp.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/reparse.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/smb2proto.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/cifs_debug.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/cifs_swn.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/compress.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/cifs_spnego.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/fs_context.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/fscache.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/cifsglob.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/dns_resolve.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/dfs_cache.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/cifsfs.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/netlink.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/cifs_unicode.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/cifsproto.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/dfs.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/cached_dir.h (Paulo Alcantara) [RHEL-216926]
  - smb: client: introduce multichannel async work during mount (Paulo Alcantara) [RHEL-216926]
  - cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-216926]
  - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-207773]
  - rtla: Stop the record trace on interrupt (Tomas Glozar) [RHEL-207773]
  - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213219] {CVE-2026-63888}
  - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212062]
  - ice: implement E825 TX ref clock control and TXC hardware sync status (Michal Schmidt) [RHEL-193816]
  - ice: add Tx reference clock index handling to AN restart command (Michal Schmidt) [RHEL-193816]
  - ice: implement CPI support for E825C (Michal Schmidt) [RHEL-193816]
  - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Michal Schmidt) [RHEL-193816]
  - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193044]
  - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188795] {CVE-2025-54518}
  - redhat: sign UKI's inner vmlinuz with modules signing key (Vitaly Kuznetsov) [RHEL-223629]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-2
changelog:
  - Rebuild with openssl3, presumably in a buildroot with xmlsec1
    linked against openssl3
  - Resolves: rhbz#1962052 - lasso: Port to OpenSSL 3.0


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-4
changelog:
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-5
changelog:
  - Don't run configure twice
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-6
changelog:
  - Resolves: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-9
changelog:
  - Bump the test timeout again
  - Related: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Tomas Halman <thalman@redhat.com> - 2.7.0-12
changelog:
  - Fixing CVE-2025-47151
    Resolves: RHEL-126685 CVE-2025-47151 lasso: Type confusion in Entr'ouvert Lasso


author: Petr Menšík <pemensik@redhat.com> - 1.7.1-2
changelog:
  - Use make_build and make_install macro instead of make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Lescak <rlescak@redhat.com> - 1.7.1-9
changelog:
  - Fix for CVE-2020-19860 ldns: heap overread vulnerability (#2051211)
  - Added also patch for deprecated distutils Python module used in build


author: Fedor Vorobev <fvorobev@redhat.com> - 1.7.1-13
changelog:
  - Fix CVE-2026-10846: Off-path poisoning attacks due to insufficient
    query-response matching (RHEL-210699)


author: Dominik 'Rathann' Mierzejewski <rpm@greysector.net> 1.0.12-1
changelog:
  - update to 1.0.12 (#1827949)
  - drop obsolete patch
  - fixes CVE-2020-11863, CVE-2020-11864, CVE-2020-11865, CVE-2020-11866


author: Olivier Fourdan <ofourdan@redhat.com> - 2.0.3-13
changelog:
  - CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003
    Resolves: https://redhat.atlassian.net/browse/RHEL-191874
    Resolves: https://redhat.atlassian.net/browse/RHEL-191934
    Resolves: https://redhat.atlassian.net/browse/RHEL-191935


author: Dodji Seketeli <dodji@redhat.com> - 2.6.1
changelog:
  - Update to upstream 2.6 tarball
  - Update to changing SONAME (libabigail.so.5.0.0)
  - Add BuildRequires xxhash-devel
  - Disable abidb as its dependencies are not present in RHEL 9.6
  - Resolves https://issues.redhat.com/browse/RHEL-64069


author: Dodji Seketeli <dodji@redhat.com> - 2.7-1
changelog:
  - Update to upstream 2.7 tarball
  - Add binutils-devel as buildrequire to potentially enable the CTF
    backend.  This will allow the enabling of the CTF backend for
    binutils-devel > 2.35.2
  - Update to changing SONAME (libabigail.so.6.0.0)
  - Add --enable-ctf to the configure command line


author: RHEL Packaging Agent <jotnar@redhat.com> - 2.9-1
changelog:
  - Update to upstream 2.9 tarball
  - Update to changing SONAME (libabigail.so.8.0.0)
  - Simplify the %check section
  - Resolves: RHEL-121666


author: Dodji Seketeli <dodji@redhat.com> - 2.3-1
changelog:
  - Update to upstream 2.3
  - Remove the dos2unix surgery as it's now useless
  - Update for the soname bump
  - Resolves: RHELPLAN-154803


author: Dodji Seketeli <dodji@redhat.com> - 2.4-1
changelog:
  - Update to upstream 2.4
  - Use SPDX licensing naming
  - Build BTF support
  - Add BuildRequires: libbpf-devel
  - Update for SONAME bump
  - Show details about the check and check-self-targets targets
    separatly.
  - Resolves: RHEL-12491


author: Dodji Seketeli <dodji@redhat.com> - 2.4-2
changelog:
  - Apply patch: 0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    Resolves: https://issues.redhat.com/browse/RHEL-16614
  - Apply patch: 0002-suppression-Add-has_strict_flexible_array_data_membe.patch
    Resolves: https://issues.redhat.com/browse/RHEL-16629
  - Add git as a build requirement as we need git to apply the patches
    aboves that apply binaries.
  - Use %autosetup to handle applying the patches using git.
  - autoreconf after the patches touched at least one Makefile.am file.


author: Dodji Seketeli <dodji@redhat.com> - 2.5-1
changelog:
  - Update to upstream 2.5 tarball
  - Drop patches (as they are now upstream):
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    0002-suppression-Add-has_strict_flexible_array_data_membe.patch
  - Add BuildRequires: python3-devel
  - Remove BuildRequires: %{_bindir}/python3


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.16-1
changelog:
  - Update to 0.7.15
  - Add UPL short name to SPDX conversion
  - Allow parsing desktop files using as_app_parse_data()
  - Do not preserve restrictive permissions when installing AppStream files
  - Modernize the validation requirements
  - Remove relative path from icon names
  - Support loading YAML from as_store_from_bytes()
  - Update list of allowed metadata licences
  - Update the SPDX license list to v3.5


author: Richard Hughes <richard@hughsie.com> 0.7.17-1
changelog:
  - New upstream release
  - Add "icon-theme" as recognised component type
  - Fix CI by moving 'future' back a bit
  - Make default content rating values match OARS semantics
  - Properly initialize unique_id_mutex


author: Richard Hughes <richard@hughsie.com> 0.7.18-1
changelog:
  - New upstream release
  - Add content rating system APIs from gnome-software
  - Add "validate-version" command
  - Allow timestamp in the future in validate-relax
  - Don't ignore localized strings that are the same as original
  - Fix crash with invalid children of <ul/>
  - Properly initialize mutexes
  - Test launchable tags in validation


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-28856


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.3.0 base"


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base"


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Jaroslav Rohel <jrohel@redhat.com> - 0.69.0-7
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-12123)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279, RHEL-6304)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-12124)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-9
changelog:
  - Grow memory if applying a query after increasing a number of available
    packages (RHEL-27657)
  - Fix a memory leak in get_best_solution() (RHEL-26226)
  - Fix destructing libdnf::TransactionItem from a base class (RHEL-26240)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-11
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-1454)


author: Evan Goode <egoode@redhat.com> - 0.69.0-16
changelog:
  - Introduce $releasever_major, $releasever_minor variables, shell-style
    variable substitution (RHEL-95006)


author: Ales Matej <amatej@redhat.com> - 0.69.0-18
changelog:
  - Fix a crash when parsing multiple key files fails (RHEL-145618)
  - Mark all protected packages as user installed for all transactions (RHEL-76112)
  - Add `filterUnneededExtraUserinstalled` and Python version to the API
  - Describe all problems even when there are protected removals (RHEL-115194)
  - Clearer error for protected package broken dependencies


author: Jan Grulich <jgrulich@redhat.com> - 0.6.22-7
changelog:
  - Fix integer underflow in MakerNote decoding (CVE-2026-40386)
  - Fix integer overflow in Nikon MakerNote handling (CVE-2026-40385)
    Resolves: RHEL-170254, RHEL-170235


author: Michal Schmidt <mschmidt@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream release 1.15.1
  - Disable LTO on x86_64 due to memory issues (copied from Fedora)
  - Resolves: rhbz#2040454


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Karel Zak <kzak@redhat.com> 2.37.4-22
changelog:
  - fix RHEL-113638 - lscpu: update ARM identifiers
  - fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification


author: Karel Zak <kzak@redhat.com> 2.37.4-23
changelog:
  - fix RHEL-123527 - mount: improve --all documentation
  - fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
  - fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Marek Polacek <polacek@redhat.com> 11.5.0-2
changelog:
  - fix TARGET_CPU_DEFAULT (PR target/105157, RHEL-50037)
  - libstdc++: Workaround kernel-headers on s390x-linux (RHEL-50054)
  - fix wrong code with memcpy from _Complex (PR tree-optimization/116034)


author: Florian Weimer <fweimer@redhat.com> - 11.5.0-10
changelog:
  - Exception handling performance improvements (RHEL-105072)
  - libgcc: Use _dl_find_object to find DWARF data in unwinder
  - libgcc: Use lock-free data structures for run-time unwinder registration


author: David Malcolm <dmalcolm@redhat.com> - 11.5.0-14
changelog:
  - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
    branches and calls to gcov output, but not conditions (RHEL-105416).


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Marek Polacek <polacek@redhat.com> 11.5.0-1
changelog:
  - update from releases/gcc-11 branch (RHEL-35635)
    - GCC 11.5 release
    - PRs ada/113893, ada/113979, analyzer/104042, c/113262, c/114007, c/114493,
  	c++/89224, c++/92145, c++/92407, c++/97990, c++/99710, c++/100667,
  	c++/100772, c++/101765, c++/103185, c++/104051, c++/111485,
  	c++/111529, c++/113598, c++/113674, c++/114537, c++/114561,
  	c++/114562, c++/114572, c++/114634, c++/114691, d/113125, d/113758,
  	d/114171, debug/111080, debug/112718, driver/115440, fortran/50410,
  	fortran/103715, fortran/104908, fortran/107426, fortran/114474,
  	fortran/114825, gcov-profile/114115, libfortran/110651,
  	libgomp/113192, libquadmath/114533, libstdc++/104259,
  	libstdc++/104606, libstdc++/105417, libstdc++/110054,
  	libstdc++/113250, libstdc++/114147, libstdc++/114401,
  	libstdc++/114750, libstdc++/114803, libstdc++/115269,
  	libstdc++/115454, libstdc++/115575, middle-end/90348,
  	middle-end/95351, middle-end/107385, middle-end/108789,
  	middle-end/110027, middle-end/110115, middle-end/110176,
  	middle-end/111422, middle-end/111632, middle-end/112732,
  	middle-end/113907, middle-end/113921, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/115527,
  	middle-end/115836, objc/101666, objc/101718, preprocessor/105608,
  	rtl-optimization/100303, rtl-optimization/108086,
  	rtl-optimization/110079, rtl-optimization/114768,
  	rtl-optimization/114902, rtl-optimization/115092, sanitizer/97696,
  	sanitizer/111736, sanitizer/114956, sanitizer/115172, target/88309,
  	target/101737, target/101865, target/105522, target/108120,
  	target/108743, target/110411, target/111610, target/111677,
  	target/112397, target/113122, target/113281, target/114049,
  	target/114098, target/114130, target/114184, target/114310,
  	target/114837, target/114846, target/115253, target/115297,
  	target/115360, target/115457, target/115475, target/115611,
  	target/115691, testsuite/113175, testsuite/114034, testsuite/114036,
  	tree-optimization/110386, tree-optimization/110422,
  	tree-optimization/111039, tree-optimization/111070,
  	tree-optimization/111331, tree-optimization/111407,
  	tree-optimization/111445, tree-optimization/111736,
  	tree-optimization/112495, tree-optimization/112505,
  	tree-optimization/112793, tree-optimization/113372,
  	tree-optimization/113552, tree-optimization/113603,
  	tree-optimization/114027, tree-optimization/114115,
  	tree-optimization/114566, tree-optimization/114876,
  	tree-optimization/115192, tree-optimization/115337,
  	tree-optimization/115843
  - fix FLUSH IOSTAT value (PR libfortran/101255, RHEL-32536)
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960)


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-16
changelog:
  - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-17
changelog:
  - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
  - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction
  - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-18
changelog:
  - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable()
  - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Richard Hughes <richard@hughsie.com> 0.3.2-1
changelog:
  - New upstream version
  - Do not use deprecated libusb API
  - Use a 1ms timeout in the Windows event thread


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Peter Robinson <pbrobinson@fedoraproject.org> - 4.2-2
changelog:
  - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package)
  - Drop/obsolete eepromer subpackage, deprecated for 6 years
  - Drop python2 conditionals
  - Minor cleanups


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.19.3-6
changelog:
  - Add support for the Wacom Intuos Pro (RHEL-105483)
  - Rename existing patches for better order clarity


author: Robert Scheck <robert@fedoraproject.org> 1.5.2-5
changelog:
  - Don't ship API docs twice (devel and doc subpackages)
  - Reworked spec file to build libisoburn1 for RHEL >= 8


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.18-1
changelog:
  - New upstream release
  - Add ability to change crypto configuration at runtime without
    restarting knet and without packet drop
  - Add compatibility support for openssl 3.0
  - Add functional testing framework and new test cases
  - Minor build fixes
  - Fix BuildRequires to use libqb doxygen2man vs internal copy


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.19-1
changelog:
  - New upstream release
  - Add native support for openssl 3.0 (drop API COMPAT macros).
  - Code cleanup of public APIs. Lots of lines of code moved around, no
    functional changes.
  - Removed kronosnetd unsupported code completely
  - Removed unused poc-code from the source tree
  - Make sure to initialize epoll events structures


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.20-1
changelog:
  - New upstream release
  - Fix TX/RX stats collections
  - Minor test suite improvements
  - Minor build fixes


author: Christine Caulfield <ccaulfie@redhat.com> - 1.24-2
changelog:
  - Fix libnozzle tests failing & covscan warning on api_knet_handle_new test
    Resolves: rhbz#2024090


author: Christine Caulfield <ccaulfie@redhat.com> - 1.28-1
changelog:
  Rebase to 1.28 for startup and performance fixes
     threads: add config check to match min value with pong timeouts
     rx: allow links to be active faster
     links: fix ping interval and pong timeout value checking
     crypto: Try crypt and decrypt on crypto_init
     tx: Remove expensive memsets
     log: Add a TRACE log level
    Resolves: #RHEL-11787


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-1
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114548 - Update to version 4.23.4
  - resolves: RHEL-132995 - Fix Time Machine backup
  - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-1
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-143401 - Fix winbind group resolution
  - resolves: RHEL-141027 - Fix winbind crash


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.24.3-1
changelog:
  - Update to version 4.24.3
  - resolves: RHEL-156320 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
    various flaws
  - resolves: RHEL-161658 - CVE-2026-4480 Samba: Remote Code Execution in
    printing
  - resolves: RHEL-170594 - CVE-2026-40170 samba: ngtcp2
  - resolves: RHEL-177925 - CVE-2026-4408 samba: Remote Code Execution in
    SAMR
  - resolves: RHEL-166869 - build hardening with FORTIFY_SOURCE


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Michal Ruprich <mruprich@redhat.com> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Resolves: #1758843 - libmaxminddb-devel i686 can't be installed in parallel to x86_64
  - Fix for CVE-2020-28241


author: Remi Collet <remi@remirepo.net> - 1.1.0-5
changelog:
  - fix missing HAVE_SSIZE_T macro using patch from
    https://github.com/awesomized/libmemcached/pull/117


author: Remi Collet <remi@remirepo.net> - 1.1.0-2
changelog:
  - remove internal AES implementation and use libcrypto
    https://github.com/awesomized/libmemcached/pull/114
  - fix build ussing upstream patch to update catch version


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.6-1
changelog:
  - Rebase to new stable branch version 1.12.6
    resolves: rhbz#2059288
  - New tool: nbddump
  - nbdcopy: Use preferred block size for copying
    related: rhbz#2047660
  - Fix remote TLS failures
    resolves: rhbz#2111524
    (and 2111813)


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: Adrian Reber <areber@redhat.com> - 1.2-5
changelog:
  - Repack tarball to remove problematic license from unused code
  - Apply fixes for warnings found by gcc -fanalyzer


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Phil Sutter <psutter@redhat.com> - 1.0.9-1
changelog:
  - expect/conntrack: Avoid spurious covscan overrun warning
  - conntrack: fix build with kernel 5.15 and musl
  - New version 1.0.9


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Steve Dickson <steved@redhat.com> 2.5.4-35
changelog:
  - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
  - nfsd: allow more than 64 backlogged connections (RHEL-87752)


author: Steve Dickson <steved@redhat.com> 2.5.4-37
changelog:
  - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
  - gssd: do not use krb5_cc_initialize (RHEL-85412)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-42
changelog:
  - Replace statfs64 with statfs (RHEL-127105)
  - NFS export symlink vulnerability fix (RHEL-127105)
  - mountd: Minor refactor of get_rootfh() (RHEL-127105)
  - mountd: Separate lookup of the exported directory and the mount path (RHEL-127105)
  - support: Add a mini-library to extract and apply RPC credentials (RHEL-127105)
  - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127105)
  - Add requires for selinux-policy (RHEL-127105)
    Resolves: CVE-2025-12801


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-43
changelog:
  - nfsrahead: enable event-driven mountinfo monitoring and skip non-NFS devices (RHEL-158527)
  - nfsrahead: zero-initialise device_info struct (RHEL-158527)
  - nfsrahead: quieten misleading error for non-NFS block devices (RHEL-158527)


author: Phil Sutter <psutter@redhat.com> [1.2.6-1.el9]
changelog:
  - set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
  - Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]


author: Phil Sutter <psutter@redhat.com> [1.2.6-3.el9]
changelog:
  - tests: Fix objref test case (Phil Sutter) [RHEL-28515]
  - expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
  - obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
  - obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
  - obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - obj: Return value on setters (Phil Sutter) [RHEL-28515]
  - object: getters take const struct (Phil Sutter) [RHEL-28515]
  - utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
  - obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
  - obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
  - set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
  - obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
  - flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
  - chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
  - expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
  - expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
  - expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
  - expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
  - obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
  - set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
  - set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
  - expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: Michel Normand <normand@linux.vnet.ibm.com> 1.1.0-5
changelog:
  - Add remove_2_backslashes_in_shell_call.patch
    Add remove_eng_inc_in_version_pl.patch
    to avoid f33 build failure


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Remi Collet <remi@remirepo.net> - 0.11.0-1
changelog:
  - update to 0.11.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/665


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-7
changelog:
  - Backport: fix SSL_CONF_cmd/SSL_new ordering in OpenSSL client connect path
    Resolves: RHEL-192631


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.4.2-3
changelog:
  - rhbz#1977653 drop unneeded bsh build-dependency
  - Remove unused DOCTYPE from odk/examples xcu file
  - drop bsh buildrequires in rhel


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.5.2-5
changelog:
  - replace use of ucpp with gcc cpp
  - Resolves: tdf#132739 two html style tags where there should be just one


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.8.1-8
changelog:
  - Resolves: rhbz#2134759 Untrusted Macros
  - Resolves: rhbz#2134757 Weak Master Keys
  - Resolves: rhbz#2134755 Static Initialization Vector
  - Resolves: rhbz#2134761 Macro URL arbitrary script execution


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Tomas Popela <tpopela@redhat.com> - 1:7.1.8.1-16
changelog:
  - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
    formula compilation
  - Resolves: RHEL-186057
  - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
    the spec has
  - Resolves: RHEL-176582
  - ExcludeArch i686 for RHEL-9.* (was part of RHEL, but not brought to CentOS Stream)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Return "calculated" checksum if requested w/caching
  - Fixed memory leaks and segfault


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.5-1
changelog:
  - Update to 1.14.5
  - Detailed error message when using non-existing TMPDIR (RhBug:2019993)
  - Make error messages about repodata and rpm mismatch more user friendly


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-8
changelog:
  - Correct a License tag to LGPLv2+ (RHEL-16103)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)


author: Vit Mojzis <vmojzis@redhat.com> - 3.6-4
changelog:
  - Ignore files removed during relabeling (RHEL-123884)
  - Ignore directories removed during relabeling (RHEL-123884)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Than Ngo <than@redhat.com> - 1.1.19-5
changelog:
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    Resolves: RHEL-86310


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.3.1-3
changelog:
  - Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets
    rhbz#1902232


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.4.0-3
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
    Resolves: rhbz#1970826 rhbz#1970839 rhbz#1970857 rhbz#1970847


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.31-6
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985029)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Marek Blaha <mblaha@redhat.com> - 0.7.24-5
changelog:
  - Backport "choice rules: also do solver_choicerulecheck for package downgrades"
    Resolves: RHEL-141449


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-1
changelog:
  - Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
  - Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
  - Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
  - Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
  - Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-3
changelog:
  - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  - Resolves: RHEL-103434 - cache_credentials = true not working


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-4
changelog:
  - Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Tomas Halman <thalman@redhat.com> - 2.9.8-1
changelog:
  - Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
  - Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
  - Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
  - Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
  - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache


author: Iker Pedrosa <ipedrosa@redhat.com> - 2.9.9-1
changelog:
  - Resolves: RHEL-173741 - SSSD Rebase for RHEL 9.9
  - Resolves: RHEL-173740 - CVE-2026-6245 sssd: out-of-bounds read in the sssd
  - Resolves: RHEL-150439 - Poor performance of `BE_REQ_INITGROUPS` handling by 'sssd_be' (LDAP RFC2307, no nested groups)
  - Resolves: RHEL-143416 - Performance impact with enumerate in SSSD > 2.7.3
  - Resolves: RHEL-152067 - [RFE] SSSD PAM: Support Microsoft AD PKINIT authentication indicator (ms-pkca) for pam_gssapi_indicators_map
  - Resolves: RHEL-173742 - Man page update: man sssd_krb5_localauth_plugin – Missing disable = an2ln
  - Resolves: RHEL-173743 - Concurrent child processes trigger unnecessarily backtrace
  - Resolves: RHEL-173744 - Detect foreign security principals in AD group members and silently ignore them
  - Resolves: RHEL-156519 - GDM Support for IdM IdP feature and MFA [SSSD]


author: Justin Stephenson <jstephen@redhat.com> - 2.9.9-3
changelog:
  - Resolves: RHEL-192062 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
  - Resolves: RHEL-192072 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Michal Hlavinka <mhlavink@redhat.com> - 4.4.0-14
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.4.0-16
changelog:
  - fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112543)
  - fix CVE-2025-8176: use after free in tiffmedian (RHEL-120238)


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-8
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188916)
  - tests: Use stronger passphrases for LUKS tests (#2188750,#2188752)
  - integration-test: Fix scsi_debug cd drive read-only detection (#2211191)
  - lvm2: Improve uevent processing (#2031673)
  - tests: Mark test_job.UdisksJobTest.test_job as unstable (#2148844)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-1
changelog:
  - Version 2.9.4 (#2010363)
  - CVE-2021-3802: Harden the default mount options for ext filesystems (#2004423)
  - Fix double free on daemon exit (unaligned fastbin chunk) (#2001549)


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Jeff Moyer <jmoyer@redhat.com> - 2.12-1.el9
changelog:
  - Rebase to version 2.12.  Follow fedora and get rid of explicit %
    attr for library files
  - Resolves: RHEL-114115


author: Tomas Halman <thalman@redhat.com> - 0.63-5
changelog:
  - Enable audit library in the build
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-3
changelog:
  - util: json: Increase JSON nesting limit when parsing to 300 (RHEL-135128)
  - virjsontest: Add test for nesting depth (RHEL-135128)
  - qemu_validate: Drop VIR_DOMAIN_HYPERV_SYNIC dependency on VIR_DOMAIN_HYPERV_VPINDEX (RHEL-138689)
  - qemu_validate: Drop VIR_DOMAIN_HYPERV_STIMER dependency on VIR_DOMAIN_HYPERV_VPINDEX (RHEL-138689)
  - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-134127)
  - esx: URI encode inventory objects twice (RHEL-134127)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-4
changelog:
  - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624)
  - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010)
  - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010)
  - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010)
  - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010)
  - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090)
  - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090)
  - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090)
  - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090)
  - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-5
changelog:
  - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770)
  - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770)
  - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-6
changelog:
  - qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
  - qemu: Introduce privateData for hostdevs (RHEL-126345)
  - qemu: Support per-process memory accounting for iommufd (RHEL-126345)
  - qemu: open VFIO FDs from libvirt backend (RHEL-126345)
  - qemu: open iommufd FD from libvirt backend (RHEL-126345)
  - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
  - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-9
changelog:
  - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
  - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
  - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
  - qemu: Implement support for persistent reservation migration control (RHEL-140614)
  - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
  - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
  - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
  - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
  - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
  - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866)
  - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866)
  - Introduce support for disk operation latency histogram collection (RHEL-147866)
  - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-10
changelog:
  - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
  - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
  - util: Move openning IOMMU device to viriommufd (RHEL-150353)
  - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
  - util: Move openning VFIO device to virpci (RHEL-150353)
  - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
  - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
  - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
  - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
  - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
  - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
  - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
  - qemuxmlconftest: Refactor host device preparation (RHEL-150353)
  - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
  - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
  - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
  - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
  - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
  - qemu: Save IOMMUFD state into status XML (RHEL-150353)
  - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
  - qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
  - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
  - conf: Introduce iommufd enum for domaincaps (RHEL-138544)
  - qemu: Fill iommufd domain capability (RHEL-138544)
  - tests: properly mock VFIO and IOMMU checks (RHEL-138544)
  - iommufd: fix FD leak in case of error (RHEL-150353)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-11
changelog:
  - domain_conf: initialize network hostdev private data (RHEL-151953)
  - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-13
changelog:
  - conf: Parse hyperv features even for host-model (RHEL-151688)
  - qemu: Wire up new hyperv host-model mode behavior (RHEL-151688)
  - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-153653)
  - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-153653)
  - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-153653)
  - docs: Clarify host-model description in domain capabilities (RHEL-153653)
  - qemu: Fix job handling when domain dies in post-copy migration (RHEL-145179)
  - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159902)
  - security: Cleanup hostdev label error logic (RHEL-159902)
  - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159902)
  - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-156803)
  - conf: Move and rename virStorageSourceFDTuple object (RHEL-156803)
  - conf: Refactor virHostdevIsPCIDevice (RHEL-156803)
  - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-156803)
  - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-156803)
  - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-156803)
  - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-156803)
  - conf: Introduce domain iommufd element (RHEL-156803)
  - qemu: Implement iommufd (RHEL-156803)
  - conf: Add iommufd fdgroup support (RHEL-156803)
  - qemu: Implement iommufd fdgroup (RHEL-156803)
  - tests: Add iommufd fdgroup test (RHEL-156803)
  - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-156803)
  - qemuMigrationSrcBeginXML: Don't call 'qemuMigrationSrcBeginPhaseBlockDirtyBitmaps' with offline VM (RHEL-173433)
  - qemuMigrationSrcBeginPhase: Don't call 'qemuBlockNodesEnsureActive' with offline VM (RHEL-173433)
  - util: virGetSubIDs: do not limit file size (RHEL-174491)
  - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-177364)
  - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-177364)
  - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-177364)
  - qemu_capabilities: Always sort features in host-model CPU (RHEL-177364)
  - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-177364)
  - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-177364)
  - qemu_capabilities: Cache expanded CPU (RHEL-177364)
  - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-177364)
  - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-177364)
  - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-177364)
  - cpu: Introduce virCPUUpdateFeatures (RHEL-177364)
  - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-177364)
  - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-177364)
  - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-177364)
  - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-177364)
  - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-177364)
  - distro: Replace old gating with tmt


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-14
changelog:
  - distro: Update URL in plans.fmf
  - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-180876)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-15
changelog:
  - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-177646)
  - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-177646)
  - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-177646)
  - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-177646)
  - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-177646)
  - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-177646)
  - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-177646)
  - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-177646)
  - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-177646)
  - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-177646)
  - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-177646)
  - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-177646)
  - conf: Add fields for recording actually-selected virtio video device (RHEL-177646)
  - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-177646)
  - qemuDeviceVideoGetModel: Directly return picked model (RHEL-177646)
  - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-177646)
  - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-177646)
  - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-177646)
  - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-177646)
  - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-177646)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-16
changelog:
  - Live migration fails when virtio-vga becomes available, video device switches from virtio-gpu-pci to virtio-vga on target (RHEL-177646)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-12
changelog:
  - qemuMonitorJSONGetCPUModelExpansion: refactor parsing functions (RHEL-89415)
  - qemu: parse deprecated-props from query-cpu-model-expansion response (RHEL-89415)
  - qemu_capabilities: query deprecated features for host-model (RHEL-89415)
  - libvirt-domain: introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_DISABLE_DEPRECATED_FEATURES (RHEL-89415)
  - qemu_capabilities: filter deprecated features if requested (RHEL-89415)
  - virsh: add --disable-deprecated-features flag to domcapabilities (RHEL-89415)
  - conf: add deprecated_features attribute (RHEL-89415)
  - redhat: Restore hunks in tests/qemucapabilitiesdata/caps_10.0.0_s390x.* (RHEL-89415)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-14
changelog:
  - qemu: introduce QEMU_CAPS_AMD_IOMMU (RHEL-50560)
  - qemu: introduce QEMU_CAPS_PCI_ID (RHEL-50560)
  - docs: formatdomain: document intel-only IOMMU attributes (RHEL-50560)
  - qemu: add IOMMU model amd (RHEL-50560)
  - conf: add passthrough and xtsup attributes for IOMMU (RHEL-50560)
  - esx: Allow specifying different CA bundle for remote connections (RHEL-97440)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-15
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-106276)
  - qemu: sanitize blank lines in config file (RHEL-106276)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-106276)


author: Jiri Denemark <jdenemar@redhat.com> - 11.8.0-1
changelog:
  - Rebased to libvirt-11.8.0 (RHEL-118197)
  - The rebase also fixes the following bugs:
      RHEL-15693, RHEL-95397, RHEL-111609, RHEL-116847, RHEL-117774


author: Jiri Denemark <jdenemar@redhat.com> - 11.9.0-1
changelog:
  - Rebased to libvirt-11.9.0 (RHEL-118197)
  - The rebase also fixes the following bugs:
      RHEL-114003


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-1
changelog:
  - Rebased to libvirt-11.10.0 (RHEL-118197)
  - The rebase also fixes the following bugs:
      RHEL-126090, RHEL-128107
  - spec: Fix RPM build when %{fedora} is undefined (RHEL-118197)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-2
changelog:
  - qemu: tpm: Account for possible migration without actually sharing storage (RHEL-108915)
  - tests: Test virFileIsSharedFSOverride (RHEL-135287)
  - util: Fix race condition in virFileIsSharedFSType (RHEL-135287)
  - util: Fix race condition in virFileIsSharedFSOverride (RHEL-135287)
  - util: Rework virFileIsSharedFSOverride using virFileCheckParents (RHEL-135287)


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-2
changelog:
  - Drop libwacom-show-stylus, it's a debugging tool that requires extra
    dependencies that we shouldn't pull in everywhere (#2044710)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-4
changelog:
  - Add support for the Cintiq Pro 27 (RHEL-101886)
  - Add support for the Intuos Pro 3rd Gen series (RHEL-101881)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-5
changelog:
  - Rearrange the OSD buttons for the Intuos Pro 3rd Gen (RHEL-101881)
  - Use separate Ring/Ring2 assignments


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-6
changelog:
  - Add stylus definitions for the propen group (RHEL-122207)
  - Add tablet definitions for the latest Cintiqs (RHEL-122206)
  - Fix the overlap for button assignments in the SVG (RHEL-126355)


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.8-17
changelog:
  - Use make macros, patch by Tom Stellard <tstellar@redhat.com>
    (https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro)
  - Update flags, enable LTO
  - Remove RANDFILE and increase default bits in ssleay.conf


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.8.1-1
changelog:
  - Update to openwsman-2.8.1
    Resolves: RHEL-97643
  - Add libwsman-client.so.4 for backward compatibility
    Related: RHEL-97643


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.8.1-2
changelog:
  - Support added for post-quantum cryptography
    Resolves: RHEL-127516
  - Fix bogus 'sscg' arguments
    Related: RHEL-118292


author: Toke Høiland-Jørgensen <toke@redhat.com> 1.5.7-1
changelog:
  - Upstream version bump
  - Add annocheck exceptions for BPF objects (Felix)
  - Re-enable debug builds (Felix)
  - Add libcap-ng-devel to BuildDepends


author: Richard Hughes <richard@hughsie.com> 0.1.14-1
changelog:
  - New upstream release
  - Do not use libuuid
  - Ignore adaptors added with xb_builder_source_add_converter()


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream release
  - Add xb_builder_source_add_simple_adapter()
  - Allow reversing the query results


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release which breaks API and ABI
  - Add the missing TEXT:INTE XPath support
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag
  - Allow specifying the node cache behaviour for the query
  - Avoid recursion when setting flags if possible
  - Avoid using weak pointers when building the silo
  - Do not allocate opcodes individually
  - Do not show a critical warning for invalid XML
  - Do not unconditionally create GTimer objects
  - Do not use the node cache when building indexes
  - Lazy load more arrays to reduce RSS usage


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Do not assume g_content_type_guess() always returns valid results
  - Fix getting translated results in gnome-software
  - Update the header location to reflect the new API


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: RHEL Packaging Agent <jotnar@redhat.com> - 0.3.24-1
changelog:
  - Rebase to 0.3.24
  - Add missing libzstd-devel BuildRequires
  - Add missing files to the %files tests section
  - Resolves: RHEL-116442


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Remi Collet <remi@remirepo.net> - 1.7.2-1
changelog:
  - update to 1.7.2
  - fix installation layout using merged patch from
    https://github.com/nih-at/libzip/pull/190


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "ppc64le-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j20  
    cd -


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-5
changelog:
  - Revert the CMake change regarding the in-source builds for now
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug buildchnages to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers the CMAKE_INSTALL_PREFIX="%{_prefix}" option
  - Default to %cmake commands instead fo %make commands
  - Update the WITH_UNITTEST macro to the one upstream use now
  - Introduce macro to enable / disable testusite (and building of the *-test subpackage)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1:3.6.3-22
changelog:
  - Implement new non-conflicting Java bindings
  - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: José Expósito <jexposit@redhat.com> - 24.2.8-2
changelog:
  - AMD Navi4x support
    Backport fixes for radeonsi and disable GFX12 on radv
    Resolves: https://issues.redhat.com/browse/RHEL-53419


author: Anusha Srivatsa <asrivats@redhat.com> - 25.0.7-2
changelog:
  - NV dGFX fix for firefox crashing
    Backport fixes for NV dGFX driver crashing firefox
    Resolves: https://issues.redhat.com/browse/RHEL-93219


author: Sandro Mani <manisandro@gmail.com> - 115-1
changelog:
  - Add -fstack-protector to LDFLAGS (since we carry -D_FORTIFY_SOURCE=2 in cflags, see https://sourceforge.net/p/mingw-w64/bugs/818/)


author: Sandro Mani <manisandro@gmail.com> - 140-1
changelog:
  - Don't unset _PREFIX in mingw-env macro, it leads to ${_PREFIX}
    being empty when evaluated the lines above


author: Tomas Halman <thalman@redhat.com> - 0.17.0-9
changelog:
  - Fixing mellon_create_metadata.sh script
    Resolves: RHEL-35898
  - Publishing diagnostic module in CRB repository
    Resolves: RHEL-33585


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 0.5.13-6
changelog:
  - updating line in /usr/lib/tmpfiles.d/munge.conf: /var/run/munge → /run/munge
  - add license tag
  - add requires logrotate


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.13-8
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-20
changelog:
  - Fix positioning when using always-on-top windows
    Resolves: RHEL-45998
  - Improve handling of always-on-visible-workspace windows
    Resolves: RHEL-45366


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-22
changelog:
  - Fix crash when moving window while switching workspace
    Resolves: RHEL-62997
  - Improve app discovery for workspace logic
    Resolves: RHEL-63000


author: Olivier Fourdan <ofourdan@redhat.com> - 40.9-31
changelog:
  - Backport linux-dmabuf v4 support to restore hardware acceleration
    in Xwayland 24.1 with Mesa 25.2
    Resolves: RHEL-129832


author: Richard W.M. Jones <rjones@redhat.com> - 1.36.2-1
changelog:
  - Rebase to 1.36.2
    resolves: RHEL-14475
  - partition: Suggest alternate partition-sectorsize
    resolves: RHEL-19815


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-6
changelog:
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85510
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89353


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-10
changelog:
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95814


author: Richard W.M. Jones <rjones@redhat.com> - 1.34.2-1
changelog:
  - Rebase to 1.34.2
    resolves: rhbz#2168629
  - Backport nbdkit-curl-plugin "multi" interface support
    resolves: rhbz#2228131


author: Phil Sutter <psutter@redhat.com> [1.0.9-1.el9]
changelog:
  - spec: Utilize pyproject-rpm-macros for the python sub-package (Phil Sutter) [RHEL-14191]
  - Rebase onto version 1.0.9 (Phil Sutter) [RHEL-14191]


author: Phil Sutter <psutter@redhat.com> [1.0.9-4.el9]
changelog:
  - parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
  - json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]


author: Phil Sutter <psutter@redhat.com> [1.0.9-5.el9]
changelog:
  - tests: py: missing json output in never merge across non-expression statements (Phil Sutter) [RHEL-114095]
  - tests: py: add missing json.output data (Phil Sutter) [RHEL-114095]
  - tests: py: remove huge-limit test cases (Phil Sutter) [RHEL-114095]
  - datatype: rt_symbol_table_init() to search for iproute2 configs (Phil Sutter) [RHEL-114095]
  - tests: shell: connect chains to hook point (Phil Sutter) [RHEL-114095]
  - tests: shell: Fix sets/reset_command_0 for current kernels (Phil Sutter) [RHEL-114095]


author: Phil Sutter <psutter@redhat.com> [1.0.9-6.el9]
changelog:
  - Revert doc/ part of "exthdr: add boolean DCCP option matching" (Phil Sutter) [RHEL-126817]
  - Revert doc/ part of "meta: introduce meta broute support" (Phil Sutter) [RHEL-126817]
  - Revert doc/ part of "src: add tcp option reset support" (Phil Sutter) [RHEL-126817]
  - spec: Update expected test suite results (Phil Sutter) [RHEL-126817]


author: Phil Sutter <psutter@redhat.com> [1.0.9-7.el9]
changelog:
  - src: fix reset element support for interval set type (Phil Sutter) [RHEL-153461]
  - src: netlink: fix crash when ops doesn't support udata (Phil Sutter) [RHEL-153461]


author: Phil Sutter <psutter@redhat.com> [1.0.9-8.el9]
changelog:
  - spec: Update expected test suite results (Phil Sutter) [RHEL-190549]
  - tests: monitor: Fix for out-of-path call (Phil Sutter) [RHEL-190549]
  - tests: monitor: Excercise all syntaxes and variants by default (Phil Sutter) [RHEL-190549]
  - tests: monitor: Test JSON echo mode as well (Phil Sutter) [RHEL-190549]
  - tests: monitor: Become $PWD agnostic (Phil Sutter) [RHEL-190549]
  - tests: monitor: Run in own netns (Phil Sutter) [RHEL-190549]
  - tests: monitor: Label diffs to help users (Phil Sutter) [RHEL-190549]
  - tests: monitor: Extend testcases a bit (Phil Sutter) [RHEL-190549]
  - tests: monitor: enclose device names in quotes (Phil Sutter) [RHEL-190549]
  - json: Dump flowtable hook spec only if present (Phil Sutter) [RHEL-190549]
  - tests: py: Fix some JSON equivalents (Phil Sutter) [RHEL-190549]
  - rule: constify set_is_non_concat_range() (Phil Sutter) [RHEL-190549]
  - datatype: don't return a const string from cgroupv2_get_path() (Phil Sutter) [RHEL-190549]
  - tests: py: Fix --keep test runner option (Phil Sutter) [RHEL-190549]
  - segtree: fix get element command with open intervals (Phil Sutter) [RHEL-190549]
  - segtree: replace default case by specific types in get_set_intervals() (Phil Sutter) [RHEL-190549]
  - src: remove EXPR_SET_ELEM in range_expr_value_{low,high}() (Phil Sutter) [RHEL-190549]
  - segtree: rename set_elem_add() to set_elem_expr_add() (Phil Sutter) [RHEL-190549]
  - parser_json: fix map/set type confusion crash in map statement parser (Phil Sutter) [RHEL-190549]
  - cache: honor -c/--check for reset commands (Phil Sutter) [RHEL-190549]
  - tests: py: osf is ip-only (Phil Sutter) [RHEL-190549]
  - tests: py: print the file name as intended (Phil Sutter) [RHEL-190549]
  - tests: py: don't use a fixed filename (Phil Sutter) [RHEL-190549]
  - mnl: Fix ordering of hooks in 'list hooks' output (Phil Sutter) [RHEL-190549]
  - segtree: Fix for variable-sized object may not be initialized (Phil Sutter) [RHEL-190549]
  - cache: Filter for table when listing flowtables (Phil Sutter) [RHEL-190549]
  - cache: Filter for table when listing sets or maps (Phil Sutter) [RHEL-190549]
  - cache: Respect family in all list commands (Phil Sutter) [RHEL-190549]
  - cache: Include chains, flowtables and objects in netlink debug output (Phil Sutter) [RHEL-190549]
  - cache: Relax chain_cache_dump filter application (Phil Sutter) [RHEL-190549]
  - parser_bison: add range check for synproxy wscale (Phil Sutter) [RHEL-190549]
  - json: complete multi-statement set element support (Phil Sutter) [RHEL-190549]
  - segtree: Fix range aggregation on Big Endian (Phil Sutter) [RHEL-190549]
  - mergesort: Align concatenation sort order with Big Endian (Phil Sutter) [RHEL-190549]
  - mergesort: Fix sorting of string values (Phil Sutter) [RHEL-190549]
  - tests: py: any/tcpopt.t.json: Fix JSON equivalent (Phil Sutter) [RHEL-190549]
  - expression: expr_build_udata_recurse should recurse (Phil Sutter) [RHEL-190549]
  - expression: propagate key datatype for anonymous sets (Phil Sutter) [RHEL-190549]
  - netlink_delinearize: also consider exthdr type when trimming binops (Phil Sutter) [RHEL-190549]
  - tcpopt: add symbol table for mptcp suboptions (Phil Sutter) [RHEL-190549]
  - monitor: fix memleak in setelem cb (Phil Sutter) [RHEL-190549]
  - tests: json_echo: Drop rule handle before multi-add (Phil Sutter) [RHEL-190549]
  - rule: skip CMD_OBJ_SETELEMS with no elements after set flush (Phil Sutter) [RHEL-190549]
  - doc: libnftables-json: Describe RULESET object (Phil Sutter) [RHEL-190549]
  - doc: don't suggest to disable GSO (Phil Sutter) [RHEL-190549]
  - tests: py: Implement payload_record() (Phil Sutter) [RHEL-190549]
  - tests: py: inet/osf.t: Fix element ordering in JSON equivalents (Phil Sutter) [RHEL-190549]
  - tests: py: Do not rely upon '[end]' marker (Phil Sutter) [RHEL-190549]
  - tests: py: Fix for using wrong payload path (Phil Sutter) [RHEL-190549]
  - tests: py: any/ct.t.json.output: Drop leftover entry (Phil Sutter) [RHEL-190549]
  - datatype: Fix boolean type on Big Endian (Phil Sutter) [RHEL-190549]
  - optimize: Fix verdict expression comparison (Phil Sutter) [RHEL-190549]
  - src: parser_json: fix format string bugs (Phil Sutter) [RHEL-190549]
  - doc: fix tcpdump example (Phil Sutter) [RHEL-190549]
  - tests: py: objects.t: must use input, not output (Phil Sutter) [RHEL-190549]
  - fib: Fix for existence check on Big Endian (Phil Sutter) [RHEL-190549]
  - tests: Prepare exit codes for automake (Phil Sutter) [RHEL-190549]
  - monitor: Inform JSON printer when reporting an object delete event (Phil Sutter) [RHEL-190549]
  - monitor: Recognize flowtable add/del events (Phil Sutter) [RHEL-190549]
  - tests: monitor: Fix regex collecting expected echo output (Phil Sutter) [RHEL-190549]
  - monitor: Quote device names in chain declarations, too (Phil Sutter) [RHEL-190549]
  - mnl: continue on ENOBUFS errors when processing batch (Phil Sutter) [RHEL-190549]
  - tests: monitor: Fix for flag arrays in JSON output (Phil Sutter) [RHEL-190549]
  - mnl: silence compiler warning (Phil Sutter) [RHEL-190549]
  - fib: restore JSON output for relational expressions (Phil Sutter) [RHEL-190549]
  - src: ensure chain policy evaluation when specified (Phil Sutter) [RHEL-190549]
  - segtree: incorrect type when aggregating concatenated set ranges (Phil Sutter) [RHEL-190549]
  - json: Do not reduce single-item arrays on output (Phil Sutter) [RHEL-190549]
  - tests: py: Fix tests added for 'icmpv6 taddr' support (Phil Sutter) [RHEL-190549]
  - tests: py: Drop stale entry from ip/snat.t.payload (Phil Sutter) [RHEL-190549]
  - tests: py: Drop stale entries from ip6/{ct,meta}.t.json (Phil Sutter) [RHEL-190549]
  - tests: py: Drop stale entry from ip/snat.t.json (Phil Sutter) [RHEL-190549]
  - tests: py: Drop duplicate test from inet/vxlan.t (Phil Sutter) [RHEL-190549]
  - tests: py: Drop stale entry from inet/tcp.t.json (Phil Sutter) [RHEL-190549]
  - tests: py: Drop duplicate test from inet/gretap.t (Phil Sutter) [RHEL-190549]
  - tests: py: Drop duplicate test from inet/gre.t (Phil Sutter) [RHEL-190549]
  - tests: py: Drop duplicate test from inet/geneve.t (Phil Sutter) [RHEL-190549]
  - tests: py: Drop stale entries since redundant test case removal (Phil Sutter) [RHEL-190549]
  - src: netlink: netlink_delinearize_table() may return NULL (Phil Sutter) [RHEL-190549]
  - doc: nft.8: Minor NAT STATEMENTS section review (Phil Sutter) [RHEL-190549]
  - mnl: Call mnl_attr_nest_end() just once (Phil Sutter) [RHEL-190549]
  - evaluate: validate set expression type before accessing flags (Phil Sutter) [RHEL-190549]
  - rule: print chain and flowtable devices in quotes (Phil Sutter) [RHEL-190549]
  - tests: py: re-enables nft-test.py to load the local nftables.py (Phil Sutter) [RHEL-190549]
  - fib: allow to use it in set statements (Phil Sutter) [RHEL-190549]
  - fib: allow to check if route exists in maps (Phil Sutter) [RHEL-190549]
  - tests: shell: Fix ifname_based_hooks feature check (Phil Sutter) [RHEL-190549]
  - json: reject too long interface names (Phil Sutter) [RHEL-190549]
  - tests/py: clean up set backend support fallout (Phil Sutter) [RHEL-190549]
  - cache: assert name is non-nul when looking up (Phil Sutter) [RHEL-190549]
  - parser_bison: only reset by name is supported by now (Phil Sutter) [RHEL-190549]
  - rule: skip fuzzy lookup if object name is not available (Phil Sutter) [RHEL-190549]
  - parser_bison: allow delete command with map via handle (Phil Sutter) [RHEL-190549]
  - debug: include kernel set information on cache fill (Phil Sutter) [RHEL-190549]
  - tests/py: prepare for set debug change (Phil Sutter) [RHEL-190549]
  - src: BASECHAIN flag no longer implies presence of priority expression (Phil Sutter) [RHEL-190549]
  - netlink: Avoid crash upon missing NFTNL_OBJ_CT_TIMEOUT_ARRAY attribute (Phil Sutter) [RHEL-190549]
  - tests: py: Properly fix JSON equivalents for netdev/reject.t (Phil Sutter) [RHEL-190549]
  - tests: shell: Adjust to ifname-based hooks (Phil Sutter) [RHEL-190549]
  - tests: shell: combine dormant flag with netdevice removal (Phil Sutter) [RHEL-190549]
  - tests: monitor: Fix for single flag array avoidance (Phil Sutter) [RHEL-190549]
  - netlink: Do not allocate a bogus flowtable priority expr (Phil Sutter) [RHEL-190549]
  - netlink: Fix for potential crash parsing a flowtable (Phil Sutter) [RHEL-190549]
  - json: work around fuzzer-induced assert crashes (Phil Sutter) [RHEL-190549]
  - json: prevent null deref if chain->policy is not set (Phil Sutter) [RHEL-190549]
  - tests: py: fix json single-flag output for fib & synproxy (Phil Sutter) [RHEL-190549]
  - tests: shell: check for features not available in 5.4 (Phil Sutter) [RHEL-190549]
  - netlink: Avoid potential NULL-ptr deref parsing set elem expressions (Phil Sutter) [RHEL-190549]
  - netlink: Catch unknown types when deserializing objects (Phil Sutter) [RHEL-190549]
  - json: Introduce json_add_array_new() (Phil Sutter) [RHEL-190549]
  - json: Fix for memleak in __binop_expr_json (Phil Sutter) [RHEL-190549]
  - json: Accept more than two operands in binary expressions (Phil Sutter) [RHEL-190549]
  - json: Print single fib flag as non-array (Phil Sutter) [RHEL-190549]
  - tests: shell: Add test case for JSON 'flags' arrays (Phil Sutter) [RHEL-190549]
  - json: Print single set flag as non-array (Phil Sutter) [RHEL-190549]
  - json: Print single synproxy flags as non-array (Phil Sutter) [RHEL-190549]
  - parser_json: Introduce parse_flags_array() (Phil Sutter) [RHEL-190549]
  - doc: Fix typo in nat statement 'prefix' description (Phil Sutter) [RHEL-190549]
  - netlink: bogus concatenated set ranges with netlink message overrun (Phil Sutter) [RHEL-190549]
  - parser_bison: add selector_expr rule to restrict typeof_expr (Phil Sutter) [RHEL-190549]
  - optimize: invalidate merge in case of duplicated key in set/map (Phil Sutter) [RHEL-190549]
  - evaluate: bail out if ct saddr/daddr dependency cannot be inserted (Phil Sutter) [RHEL-190549]
  - parser_json: bail out on malformed statement in set (Phil Sutter) [RHEL-190549]
  - parser_json: reject empty jump/goto chain (Phil Sutter) [RHEL-190549]
  - parser_json: allow statement stateful statement only in set elements (Phil Sutter) [RHEL-190549]
  - cache: prevent possible crash rule filter is NULL (Phil Sutter) [RHEL-190549]
  - optimize: expand expression list when merging into concatenation (Phil Sutter) [RHEL-190549]
  - cache: don't crash when filter is NULL (Phil Sutter) [RHEL-190549]
  - evaluate: only allow stateful statements in set and map definitions (Phil Sutter) [RHEL-190549]
  - evaluate: compact STMT_F_STATEFUL checks (Phil Sutter) [RHEL-190549]
  - json: don't BUG when asked to list synproxies (Phil Sutter) [RHEL-190549]
  - optimize: incorrect comparison for reject statement (Phil Sutter) [RHEL-190549]
  - optimize: compact bitmask matching in set/map (Phil Sutter) [RHEL-190549]
  - tests: shell: missing ct count elements in new set_stmt test (Phil Sutter) [RHEL-190549]
  - evaluate: don't update cache for anonymous chains (Phil Sutter) [RHEL-190549]
  - json: make sure timeout list is initialised (Phil Sutter) [RHEL-190549]
  - parser_bison: consolidate connlimit grammar rule for set elements (Phil Sutter) [RHEL-190549]
  - parser_bison: consolidate last grammar rule for set elements (Phil Sutter) [RHEL-190549]
  - parser_bison: consolidate quota grammar rule for set elements (Phil Sutter) [RHEL-190549]
  - parser_bison: consolidate limit grammar rule for set elements (Phil Sutter) [RHEL-190549]
  - parser_bison: consolidate counter grammar rule for set elements (Phil Sutter) [RHEL-190549]
  - tests: shell: extend coverage for set element statements (Phil Sutter) [RHEL-190549]
  - evaluate: fix assertion failure with malformed map definitions (Phil Sutter) [RHEL-190549]
  - evaluate: don't allow nat map with specified protocol (Phil Sutter) [RHEL-190549]
  - parser_bison: reject non-serializeable typeof expressions (Phil Sutter) [RHEL-190549]
  - netlink: fix stack buffer overrun when emitting ranged expressions (Phil Sutter) [RHEL-190549]
  - src: print set element with multi-word description in single one line (Phil Sutter) [RHEL-190549]
  - tests: shell: detach synproxy test (Phil Sutter) [RHEL-190549]
  - src: do not merge a set with a erroneous one (Phil Sutter) [RHEL-190549]
  - segtree: incomplete output in get element command with maps (Phil Sutter) [RHEL-190549]
  - evaluate: release existing datatype when evaluating unary expression (Phil Sutter) [RHEL-190549]
  - segtree: fix string data initialisation (Phil Sutter) [RHEL-190549]
  - payload: honor inner payload description in payload_expr_cmp() (Phil Sutter) [RHEL-190549]
  - payload: return early if dependency is not a payload expression (Phil Sutter) [RHEL-190549]
  - evaluate: optimize zero length range (Phil Sutter) [RHEL-190549]
  - fib: Change data type of fib oifname to "ifname" (Phil Sutter) [RHEL-190549]
  - evaluate: auto-merge is only available for singleton interval sets (Phil Sutter) [RHEL-190549]
  - parser_bison: compact and simplify list and reset syntax (Phil Sutter) [RHEL-190549]
  - parser_bison: turn redundant ip option type field match into boolean (Phil Sutter) [RHEL-190549]
  - datatype: clamp boolean value to 0 and 1 (Phil Sutter) [RHEL-190549]
  - tests: shell: delete netdev chain after test (Phil Sutter) [RHEL-190549]
  - ipopt: use ipv4 address datatype for address field in ip options (Phil Sutter) [RHEL-190549]
  - netlink_delinarize: fix bogus munging of mask value (Phil Sutter) [RHEL-190549]
  - evaluate: remove variable shadowing (Phil Sutter) [RHEL-190549]
  - intervals: do not merge intervals with different timeout (Phil Sutter) [RHEL-190549]
  - src: add EXPR_RANGE_VALUE expression and use it (Phil Sutter) [RHEL-190549]
  - intervals: add helper function to set previous element (Phil Sutter) [RHEL-190549]
  - parser_bison: fix UaF when reporting table parse error (Phil Sutter) [RHEL-190549]
  - intervals: set internal element location with the deletion trigger (Phil Sutter) [RHEL-190549]
  - optimize: compare expression length (Phil Sutter) [RHEL-190549]
  - tests: py: Fix for storing payload into missing file (Phil Sutter) [RHEL-190549]
  - json: Support typeof in set and map types (Phil Sutter) [RHEL-190549]
  - json: collapse set element commands from parser (Phil Sutter) [RHEL-190549]
  - doc: extend description of fib expression (Phil Sutter) [RHEL-190549]
  - tests: monitor: fix up test case breakage (Phil Sutter) [RHEL-190549]
  - src: fix extended netlink error reporting with large set elements (Phil Sutter) [RHEL-190549]
  - mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc() (Phil Sutter) [RHEL-190549]
  - mnl: update cmd_add_loc() to take struct nlmsghdr (Phil Sutter) [RHEL-190549]
  - rule: netlink attribute offset is uint32_t for struct nlerr_loc (Phil Sutter) [RHEL-190549]
  - src: collapse set element commands from parser (Phil Sutter) [RHEL-190549]
  - libnftables-json: fix raw payload expression documentation (Phil Sutter) [RHEL-190549]
  - cache: initialize filter when fetching implicit chains (Phil Sutter) [RHEL-190549]
  - tests: py: fix up udp csum fixup output (Phil Sutter) [RHEL-190549]
  - proto: use NFT_PAYLOAD_L4CSUM_PSEUDOHDR flag to mangle UDP checksum (Phil Sutter) [RHEL-190549]
  - tests: shell: stabilize packetpath/payload (Phil Sutter) [RHEL-190549]
  - libnftables: Zero ctx->vars after freeing it (Phil Sutter) [RHEL-190549]
  - cache: position does not require full cache (Phil Sutter) [RHEL-190549]
  - cache: relax requirement for replace rule command (Phil Sutter) [RHEL-190549]
  - cache: remove full cache requirement when echo flag is set on (Phil Sutter) [RHEL-190549]
  - cache: assert filter when calling nft_cache_evaluate() (Phil Sutter) [RHEL-190549]
  - cache: consolidate reset command (Phil Sutter) [RHEL-190549]
  - cache: add filtering support for objects (Phil Sutter) [RHEL-190549]
  - cache: only dump rules for the given table (Phil Sutter) [RHEL-190549]
  - cache: accumulate flags in batch (Phil Sutter) [RHEL-190549]
  - cache: reset filter for each command (Phil Sutter) [RHEL-190549]
  - parser_json: fix several expression memleaks from error path (Phil Sutter) [RHEL-190549]
  - parser_json: release buffer returned by json_dumps (Phil Sutter) [RHEL-190549]
  - json: Support maps with concatenated data (Phil Sutter) [RHEL-190549]
  - parser_json: fix crash in json_parse_set_stmt_list (Phil Sutter) [RHEL-190549]
  - parser_bison: allow 0 burst in limit rate byte mode (Phil Sutter) [RHEL-190549]
  - datatype: improve error reporting when time unit is not correct (Phil Sutter) [RHEL-190549]
  - cache: rule by index requires full cache (Phil Sutter) [RHEL-190549]
  - datatype: reject rate in quota statement (Phil Sutter) [RHEL-190549]
  - optimize: skip variables in nat statements (Phil Sutter) [RHEL-190549]
  - parser_json: use stdin buffer if available (Phil Sutter) [RHEL-190549]
  - libnftables: skip useable checks for /dev/stdin (Phil Sutter) [RHEL-190549]
  - optimize: clone counter before insertion into set element (Phil Sutter) [RHEL-190549]
  - segtree: set on EXPR_F_KERNEL flag for catchall elements in the cache (Phil Sutter) [RHEL-190549]
  - evaluate: set on expr->len for catchall set elements (Phil Sutter) [RHEL-190549]
  - parser_bison: recursive table declaration in deprecated meter statement (Phil Sutter) [RHEL-190549]
  - intervals: fix element deletions with maps (Phil Sutter) [RHEL-190549]
  - src: add string preprocessor and use it for log prefix string (Phil Sutter) [RHEL-190549]
  - tests: shell: skip ip option tests if kernel does not support it (Phil Sutter) [RHEL-190549]
  - cmd: skip variable set elements when collapsing commands (Phil Sutter) [RHEL-190549]
  - cmd: provide better hint if chain is already declared with different type/hook/priority (Phil Sutter) [RHEL-190549]
  - monitor: too large shift exponent displaying payload expression (Phil Sutter) [RHEL-190549]
  - scanner: inet_pton() allows for broader IPv4-Mapped IPv6 addresses (Phil Sutter) [RHEL-190549]
  - evaluate: Fix incorrect checking the `base` variable in case of IPV6 (Phil Sutter) [RHEL-190549]
  - evaluate: bogus protocol conflicts in vlan with implicit dependencies (Phil Sutter) [RHEL-190549]
  - cache: check for NFT_CACHE_REFRESH in current requested cache too (Phil Sutter) [RHEL-190549]
  - doc: nft.8: Fix markup in ct expectation synopsis (Phil Sutter) [RHEL-190549]
  - mergesort: Avoid accidental set element reordering (Phil Sutter) [RHEL-190549]
  - doc: nft.8: Two minor synopsis fixups (Phil Sutter) [RHEL-190549]
  - tests: shell: check for reset tcp options support (Phil Sutter) [RHEL-190549]
  - tests: shell: payload matching requires egress support (Phil Sutter) [RHEL-190549]
  - tests: py: complete icmp and icmpv6 update (Phil Sutter) [RHEL-190549]
  - src: disentangle ICMP code types (Phil Sutter) [RHEL-190549]
  - evaluate: display "Range negative size" error (Phil Sutter) [RHEL-190549]
  - netlink_delinearize: restore binop syntax when listing ruleset for flags (Phil Sutter) [RHEL-190549]
  - doc: libnftables-json: Drop invalid ops from match expression (Phil Sutter) [RHEL-190549]
  - parser: json: Support for synproxy objects (Phil Sutter) [RHEL-190549]
  - tests: py: add payload merging test cases (Phil Sutter) [RHEL-190549]
  - nftables: do mot merge payloads on negation (Phil Sutter) [RHEL-190549]
  - rule: fix ASAN errors in chain priority to textual names (Phil Sutter) [RHEL-190549]
  - parser: compact type/typeof set rules (Phil Sutter) [RHEL-190549]
  - parser: compact interval typeof rules (Phil Sutter) [RHEL-190549]
  - src: improve error reporting for destroy command (Phil Sutter) [RHEL-190549]
  - tests: shell: permit use of host-endian constant values in set lookup keys (Phil Sutter) [RHEL-190549]
  - evaluate: permit use of host-endian constant values in set lookup keys (Phil Sutter) [RHEL-190549]
  - expression: missing line in describe command with invalid expression (Phil Sutter) [RHEL-190549]
  - netlink_delinearize: move concat and value postprocessing to helpers (Phil Sutter) [RHEL-190549]
  - evaluate: skip byteorder conversion for selector smaller than 2 bytes (Phil Sutter) [RHEL-190549]
  - cache: Optimize caching for 'list tables' command (Phil Sutter) [RHEL-190549]
  - evaluate: fix check for unknown in cmd_op_to_name (Phil Sutter) [RHEL-190549]
  - evaluate: don't assert on net/transport header conflict (Phil Sutter) [RHEL-190549]
  - json: Support sets' auto-merge option (Phil Sutter) [RHEL-190549]
  - rule: fix sym refcount assertion (Phil Sutter) [RHEL-190549]
  - evaluate: error out when store needs more than one 128bit register of align fixup (Phil Sutter) [RHEL-190549]
  - evaluate: do not fetch next expression on runaway number of concatenation components (Phil Sutter) [RHEL-190549]
  - evaluate: skip anonymous set optimization for concatenations (Phil Sutter) [RHEL-190549]
  - evaluate: add missing range checks for dup,fwd and payload statements (Phil Sutter) [RHEL-190549]
  - doc: incorrect datatype description for icmpv6_type and icmpvx_code (Phil Sutter) [RHEL-190549]
  - tests: shell: prefer project nft to system-wide nft (Phil Sutter) [RHEL-190549]
  - parser_bison: ensure all timeout policy names are released (Phil Sutter) [RHEL-190549]
  - netlink: fix stack overflow due to erroneous rounding (Phil Sutter) [RHEL-190549]
  - parser_bison: error out on duplicated type/typeof/element keywords (Phil Sutter) [RHEL-190549]
  - tests: shell: add test to cover payload transport match and mangle (Phil Sutter) [RHEL-190549]
  - evaluate: fix stack overflow with huge priority string (Phil Sutter) [RHEL-190549]
  - src: reject large raw payload and concat expressions (Phil Sutter) [RHEL-190549]
  - evaluate: exthdr: statement arg must be not be a range (Phil Sutter) [RHEL-190549]
  - meta: fix tc classid parsing out-of-bounds access (Phil Sutter) [RHEL-190549]
  - parser_bison: close chain scope before chain release (Phil Sutter) [RHEL-190549]
  - evaluate: fix bogus assertion failure with boolean datatype (Phil Sutter) [RHEL-190549]
  - parser_bison: fix objref statement corruption (Phil Sutter) [RHEL-190549]
  - tests: py: missing json output in meta.t with vlan mapping (Phil Sutter) [RHEL-190549]
  - evaluate: reset statement length context before evaluating statement (Phil Sutter) [RHEL-190549]
  - parser: tcpopt: fix tcp option parsing with NUM + length field (Phil Sutter) [RHEL-190549]
  - evaluate: reject set definition with no key (Phil Sutter) [RHEL-190549]
  - monitor: add support for concatenated set ranges (Phil Sutter) [RHEL-190549]
  - evaluate: disable meta set with ranges (Phil Sutter) [RHEL-190549]
  - evaluate: prevent assert when evaluating very large shift values (Phil Sutter) [RHEL-190549]
  - evaluate: reject sets with no key (Phil Sutter) [RHEL-190549]
  - evaluate: clone unary expression datatype to deal with dynamic datatype (Phil Sutter) [RHEL-190549]
  - tests: shell: split nat inet tests (Phil Sutter) [RHEL-190549]
  - evaluate: bogus error when adding devices to flowtable (Phil Sutter) [RHEL-190549]
  - tests: shell: flush connlimit sets (Phil Sutter) [RHEL-190549]
  - tests: shell: adjust add-after-delete flowtable for older kernels (Phil Sutter) [RHEL-190549]
  - evaluate: fix rule replacement with anon sets (Phil Sutter) [RHEL-190549]
  - tests: shell: skip if kernel does not support flowtable counter (Phil Sutter) [RHEL-190549]
  - tests: shell: restore pipapo and chain binding coverage in standalone 30s-stress (Phil Sutter) [RHEL-190549]
  - json: fix use after free in table_flags_json() (Phil Sutter) [RHEL-190549]
  - src: expand create commands (Phil Sutter) [RHEL-190549]
  - tests: shell: split set NAT interval test (Phil Sutter) [RHEL-190549]
  - tests: shell: split merge nat optimization in two tests (Phil Sutter) [RHEL-190549]
  - netlink: fix buffer size for user data in netlink_delinearize_chain() (Phil Sutter) [RHEL-190549]
  - src: remove xfree() and use plain free() (Phil Sutter) [RHEL-190549]
  - src: add free_const() and use it instead of xfree() (Phil Sutter) [RHEL-190549]
  - evaluate: place byteorder conversion before rshift in payload expressions (Phil Sutter) [RHEL-190549]
  - evaluate: reset statement length context only for set mappings (Phil Sutter) [RHEL-190549]
  - meta: fix hour decoding when timezone offset is negative (Phil Sutter) [RHEL-190549]
  - tproxy: Drop artificial port printing restriction (Phil Sutter) [RHEL-190549]
  - tests/shell: fix mount command in "test-wrapper.sh" (Phil Sutter) [RHEL-190549]
  - parser_bison: fix length check for ifname in ifname_expr_alloc() (Phil Sutter) [RHEL-190549]
  - tests/shell: cover long interface name in "0042chain_variable_0" test (Phil Sutter) [RHEL-190549]
  - tests/shell: add missing "elem_opts_compat_0.nodump" file (Phil Sutter) [RHEL-190549]
  - parser_bison: Fix for broken compatibility with older dumps (Phil Sutter) [RHEL-190549]


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-17
changelog:
  - bump package epoch to resolve RHEL-33939
  - Resolves: RHEL-33939 - Update path for nginx broken for existing CS
    installations


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-23
changelog:
  - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER
    at nginx with reverse-proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-24
changelog:
  - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause
    denial of service (CVE-2024-7347)
  - Resolves: RHEL-85556 - nginx: Memory disclosure in the
    ngx_http_mp4_module (CVE-2022-41742)
  - Resolves: RHEL-91446 - nginx: Memory corruption in the
    ngx_http_mp4_module (CVE-2022-41741)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-25
changelog:
  - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log
    is not created when updating system in image mode


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-28
changelog:
  - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via
    man-in-the-middle attack on TLS proxied connection


author: Petr Dancak <pdancak@redhat.com> - 2:1.20.1-29
changelog:
  - Resolves: RHEL-159563 - CVE-2026-27654 nginx: NGINX: Denial of Service
    or file modification via buffer overflow in ngx_http_dav_module
  - Resolves: RHEL-159542 - CVE-2026-27784 nginx: NGINX: Denial of Service
    due to memory corruption via crafted MP4 file
  - Resolves: RHEL-159450 - CVE-2026-27651 nginx: NGINX: Denial of Service
    via undisclosed requests when ngx_mail_auth_http_module is enabled
  - Resolves: RHEL-157891 - CVE-2026-32647 nginx: NGINX: Denial of Service
    or Code Execution via specially crafted MP4 files


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-31
changelog:
  - Resolves: RHEL-178683 - nginx: code execution and denial of
    service (CVE-2026-9256)
  - Resolves: RHEL-182551 - nginx: HTTP/2: Remote Denial of Service via
    compression bomb and Slowloris-style attack
  - Resolves: RHEL-188407 - nginx: NGINX: Arbitrary code execution or.
    Denial of Service via heap-based buffer overflow with crafted HTTP/2
    headers (CVE-2026-42055)


author: Matej Focko <mfocko@redhat.com> - 1.2.14-1
changelog:
  - New release 1.2.14 (Gris Ge)
  - bond: support changing bond mode (Gris Ge)
  - Reorganize the code structure (Gris Ge)
  - CI: Enable VRF and ethool pause test (Gris Ge)
  - CI: Upgrade the version of github action tasks (Gris Ge)
  - test: Fix ethtool link mode test on Ubuntu (Gris Ge)
  - Github CI: Install extra module of running kernel (Gris Ge)
  - macsec: add base_iface property (Fernando Fernandez Mancera)
  - macsec: add MACsec interface support (Fernando Fernandez Mancera)
  - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera)


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Refer route next hop interface by MAC. RHEL-32495
  - Support reapply on mac-ref interface. RHEL-87794


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91291
  - Support nmpolicy against down iface. RHEL-88989
  - Support removal VLAN connection with empty ifname. RHEL-93146


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-85787
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784
  - Support matching by PCI adress. RHEL-88993
  - Apply dispatch changes first. RHEL-101742
  - Fix SRIOV VF reference. RHEL-93180


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.49-1
changelog:
  - Upgrade to 2.2.49
  - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526
  - Fix setting DNS only with search or option. RHEL-104797


author: Mingyu Shi <mshi@redhat.com> - 2.2.50-1
changelog:
  - Upgrade to 2.2.50
  - Support MAC referring for VLAN in gen_conf. RHEL-110369
  - Introduce state: ignore for route. RHEL-107130
  - Support PCI address matching in gen_conf. RHEL-110369
  - Support MacSec interface in gen_conf. RHEL-110369


author: Gris Ge <fge@redhat.com> - 2.2.54-1
changelog:
  - Upgrade to 2.2.54.
  - Automatically set HSR port MAC address. RHEL-122171
  - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992


author: Gris Ge <fge@redhat.com> - 2.2.56-1
changelog:
  - Upgrade to 2.2.56
  - Allow using VRF name to specify route table. RHEL-123541
  - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052
  - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731
  - Support rightca ipsec option. RHEL-123542


author: Mingyu Shi <mshi@redhat.com> - 2.2.58-1
changelog:
  - Upgrade to 2.2.58
  - vrf: Handle ignore interface when verifying desired state. RHEL-141606
  - alt-name: Remove alt-names when interface marked as absent. RHEL-141602
  - hsr: Automatically disable IP on hsr port. RHEL-141609
  - hsr: add support for configuring "interlink" property. RHEL-141608
  - Support referring interface name using its alternative name. RHEL-141601


author: Ján Václav <jvaclav@redhat.com> - 2.2.60-1
changelog:
  - Upgrade to 2.2.60
  - ipv4: Add new parameter prefix-route-metric RHEL-166365
  - Fix error when modify port list of down interfaces RHEL-166366
  - Add support for configuring ipip tunnel in nmstate RHEL-166367


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.61-1
changelog:
  - Upgrade to 2.2.61
  - Support referring alt-name in `copy-mac-from` property. RHEL-214096
  - Fix validation of conflicting routes in kernel mode. RHEL-214095


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - Resolves: RHEL-23671, ep11 token: support protected keys for extractable keys
  - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys
  - Resolves: RHEL-23673, update to 3.23.0


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-50064, update to 3.24.0
  - Resolves: RHEL-50063, opencryptoki CCA Token support for x86_64 and ppc64le
  - Resolves: RHEL-50058, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-50056, openCryptoki cca token SHA3 support
  - Resolves: RHEL-50057, openCryptoki cca token RSA OAEP v2.1 support


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-73344, upgrade openCryptoki
  - Resolves: RHEL-90590, basic support of AES-GCM
  - Resolves: RHEL-72965, cca token support cipher keys
  - Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75762, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
  - Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104602


author: Than Ngo <than@redhat.com> - 3.25.0-4
changelog:
  - Fix pkcsslotd fails to start in FIPS
  - Drop tier1 test as it mostly provides duplicate results
  - Enable ci test for FIPS mode
    Resolves: RHEL-109050


author: Than Ngo <than@redhat.com> - 3.26.0-1
changelog:
  - Resolves: RHEL-75139, ep11 token BLS support
  - Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
  - Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
  - Resolves: RHEL-100059, openCryptoki 3.26.0


author: Than Ngo <than@redhat.com> - 3.27.0-1
changelog:
  - Resolves: RHEL-136096, Update to 3.27.0
  - Resolves: RHEL-157524, openCryptoki soft token: support PKCS #11 V3.2 ML-DSA and ML-KEM
  - Resolves: RHEL-157679, openCryptoki CCA token: support PKCS #11 V3.2 ML-DSA
  - Resolves: RHEL-157806, openCryptoki EP11 token: support PKCS #11 V3.2 ML-DSA and ML-KEM
  - Resolves: RHEL-169485, openCryptoki: ep11_specific.c syslog warning even for identically configured control points
  - Resolves: RHEL-171563, Fix CVE-2026-40253


author: Ondřej Sloup <osloup@redhat.com> - 1.3.2-71
changelog:
  - Add %verify to ignore modified socket file after install
  - Remove unused OpenSP-1.5 from sources
    Related: rhbz#2193429


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-72
changelog:
  - Add an environment variable to prevent gating from complaining about rpaths  (rhbz#2193429)
    Related: RHEL-11772


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-4
changelog:
  - Fix potential invalid scan results in OpenSCAP (rhbz#2109485)
  - Remove oscap-remediate service (rhbz#2111358)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.7-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2159286)
  - Fix error when processing OVAL filters (rhbz#2126883)
  - Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2138884)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2217442)
  - Fix systemd* probes unit enumeration (rhbz#2219532)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-29172)
  - Fix OVAL results file name (RHEL-7050)
  - Add ability to define a limit of collected items (RHEL-4141)
  - Add ability to refine rules in autotailor (RHEL-1477)
  - Improve the formatting of Blueprint remediations (RHEL-1476)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.11-1
changelog:
  - Upgrade to the latest upstream release (RHEL-76355)
  - Introduce "oscap-im", a tool for building hardened bootable container images
  - Fix RPM probes in bootable container images build environment (RHEL-55251)


author: Matthew Burket <mburket@redhat.com> - 1:1.3.13-1
changelog:
  - Upgrade to the latest upstream release (RHEL-133976)
  - Fix Filepath and Pattern Fields inversion (RHEL-104073)
  - Fix verbose flag (RHEL-53859)


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2025.7-1
changelog:
  - Rebase to 2025.7
    Backport https://github.com/ostreedev/ostree/pull/3555
    Resolves: #RHEL-129049


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2026.1-1
changelog:
  - Rebase to 2026.1
    Release https://github.com/ostreedev/ostree/releases/tag/v2026.1
    Resolves: #RHEL-167078


author: Joseph Marrero Corchado <jmarrero@redhat.com> - 2026.3-1
changelog:
  - Rebase to 2026.3
    Release https://github.com/ostreedev/ostree/releases/tag/v2026.3
    Resolves: #RHEL-234366


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.42.2-3
changelog:
  - Use pkgconfig to BR the required cairomm API/ABI version 1.0 (vs. 1.16); use
    cairomm1.0, which may be a virtual Provides, in the manual lib Requires


author: RHEL Packaging Agent <jotnar@redhat.com> - 7.2.0-1
changelog:
  - Rebase to papi 7.2.0
  - Update license tag to BSD-3-Clause
  - Remove old patches and add new patches for 7.2.0 compatibility
  - Update configure options and package files
  - Resolves: RHEL-121673


author: Brian C. Lane <bcl@redhat.com> - 3.4-4
changelog:
  - Fix issues that covscan classifies as important
    Resolves: rhbz#1938836
  - Work around a mkswap bug


author: Brian C. Lane <bcl@redhat.com> - 3.5-1
changelog:
  - Rebase to upstream release 3.5
  - Drop patches included in new upstream tar
  - Add upstream patches for new type command
  - Add upstream patch for swap flag on DASD
    Resolves: rhbz#1999333


author: Brian C. Lane <bcl@redhat.com> - 3.5-3
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73217
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73217
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73217
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73217


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Jakub Jelen <jjelen@redhat.com> - 1.9.4-1
changelog:
  - Rebase to current version from Fedora (#2017828)
  - Use of upstrea polkit policy preventing unneeded prompts


author: Paul Howarth <paul@city-fan.org> - 7.17-1
changelog:
  - Update to 7.17
    - Work around antique openssl version in RHEL-7 by formatting dh parameters
      differently
    - Add t/13_weaken.t


author: Petr Pisar <ppisar@redhat.com> - 7.17-6
changelog:
  - Conditionalize POE support
  - Conditionalize Tk support
  - Conditionalize Glib support
  - Conditionalize Event support


author: Paul Howarth <paul@city-fan.org> - 2.13-1
changelog:
  - Update to 2.13
    - Bypass prototypes when testing for lvalue attribute
    - Fixed a class name in tests to avoid conflicting with a core module


author: Paul Howarth <paul@city-fan.org> - 1.6-1
changelog:
  - Update to 1.6
    - Fixed confusing Changes entry about Perl's licensing terms (CPAN RT#132843)
    - Added optional Changes testing (skipped unless AUTHOR_TESTING)
    - Reformatted Changes file as per CPAN::Changes::Spec
    - Added optional POD coverage testing (skipped unless AUTHOR_TESTING)
    - Added optional Perl::Critic testing (skipped unless AUTHOR_TESTING)
    - Made code Perl::Critic clean
    - Added optional POD testing (skipped unless AUTHOR_TESTING)
    - Included GitHub repository URLs in metadata now that source code has been
      uploaded to GitHub (as of version 1.5)
    - Included META.json file in addition to META.yml
    - Set minimum required ExtUtils::MakeMaker version to 6.64 to ensure that all
      parameters used are supported, to save jumping through hoops to support
      earlier versions (this should not be a problem since ExtUtils::MakeMaker
      6.64 is easily installed into Perl 5.8.1 and above, that being the whole
      point of the new choice of minimum supported Perl version)
    - Set minimum required Perl version to 5.8.1; this is in line with the
      minimum requirement of the "Perl Toolchain"
    - Corrected typo in a comment (CPAN RT#86336)
  - Use author-independent source URL
  - Specify all build dependencies
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely
  - Package Artistic, Copying and LICENCE licence files


author: Emmanuel Seyman <emmanuel@seyman.fr> - 0.318-1
changelog:
  - Update to 0.318
  - Add perl(File::Slurper) as a dependency
  - Use /usr/bin/perl instead of perl
  - Use %{make_install} instead of make pure_install
  - Use %{make_build} instead of make


author: Paul Howarth <paul@city-fan.org> - 2:1.52-1
changelog:
  - Update to 1.52
    - Added a $dt->is_between($dt1, $dt2) method (based on GH#97)
    - Simplify the calculation of leap seconds in XS (GH#91); this is a little
      more efficient for most use cases (anything with future or recent past
      datetimes)


author: Paul Howarth <paul@city-fan.org> - 0.8200-4
changelog:
  - Fix License: tag to reflect content of actual shipped files, not just what
    the LICENSE file says (#1600504, CPAN RT#125832)


author: Paul Howarth <paul@city-fan.org> - 1:1.77-1
changelog:
  - Update to 1.77
    - When the parsed string contained an invalid time zone offset (parsed with
      "%z") like "-9999", the error handling set in the parser's constructor was
      ignored and an exception was always thrown (GH#25)
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1:1.78-1
changelog:
  - Update to 1.78
    - Fix tests for new failure caused by locale data changes in DateTime::Locale
      1.29 (GH#28)
    - Added a warning about using locale-specific patterns; some of these patterns
      can change quite a bit as the locale data is updated, so using them for
      parsing does not produce stable results across time - this is what caused
      the test failures that this release fixes


author: Michal Josef Spacek <mspacek@redhat.com> - 1:1.79-1
changelog:
  - Update to 1.79
    - Fix too-strict type checking for time zones: this module now uses the same
      check as DateTime itself, which allows for things that don't subclass
      DateTime::TimeZone as long as they provide the same API (GH#30) (rhbz#1964546)


author: Paul Howarth <paul@city-fan.org> - 0.11-18
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Drop support for building with Test::More < 0.88
    - Specify all build dependencies
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Use %license where possible


author: Paul Howarth <paul@city-fan.org> - 0.3.4-1
changelog:
  - Update to 0.3.4
    - Now at https://github.com/shlomif/perl-file-find-object
    - tidyall
    - Add *~ files to MANIFEST.SKIP (GH#1)


author: Paul Howarth <paul@city-fan.org> - 0.3.5-1
changelog:
  - Update to 0.3.5
    - Rebuild for order of 'NAME' and 'VERSION' sections in the generated POD
      documentation (VERSION used to appear before NAME)
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.14-1
changelog:
  - Update to 1.14
    - Remove MAP_TARGET from Makefile.PL (CPAN RT#91590)
    - Fix for Solaris setuid when root running as other user (CPAN RT#88271)
    - Add strict/warnings to Tty.pm
    - Fix pod errors
    - Typo: s/dependend/dependent/
    - Prevent spurious warning from get_winsize()
    - Fix usage of setsid
    - Github actions testing; Windows is off of course
    - Make README.md
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.14-5
changelog:
  - Fix FTBFS due to false detection of strlcpy() and _getpty()
    https://github.com/toddr/IO-Tty/pull/24
  - Modernize spec using %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.15-1
changelog:
  - Update to 1.15
    - Skip winsize test on Solaris and QNX NTO (GH#22)
    - Make function tests more robust (GH#24)
    - Work around a header name collision on util.h; this is breaking on recent
      OSX (GH#26)


author: Paul Howarth <paul@city-fan.org> - 1.16-1
changelog:
  - Update to 1.16
    - Switch to GitHub for issue tracker
    - Switch to testsuite CI workflow
    - Tidy


author: Paul Howarth <paul@city-fan.org> - 2.112-1
changelog:
  - Update to 2.112
    - Added the change log from any prior source that could be found, and
      formatted the log to fit metacpan.org loose standards
    - Change use vars qw() to our $whatever instead
    - Hide IO::WrapTie subclasses from PAUSE
    - Rebuild Makefile.PL to contain all of the prerequisites
    - Convert README to README.md
    - Fix the documentation in the main module, IO::Stringy to better indicate
      where to get info and how to use the module
    - Fix the dist's META information to indicate the original author and license
    - Add a LICENSE file
    - Add AppVeyor CI testing
    - Add Travis CI testing
    - Update t/IO_InnerFile.t to use Test::More and a proper TEMP file
      (CPAN RT#103895)
  - Use author-independent source URL
  - Simplify find command using -delete
  - Add Provides: for perl-IO-Stringy
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.113-1
changelog:
  - Update to 2.113
    - Get rid of use of Common and TBone in all tests
    - Convert to Dist::Zilla for authoring
    - Cleaned up some of the docs (needs more)


author: Paul Howarth <paul@city-fan.org> - 20200505.0-1
changelog:
  - Update to 20200505.0
    - Fix syntax errors in POD examples (GH#125)
    - Switch Readonly testing requirement to a recommends (GH#127)
    - Fix full_result to always return $? (GH#129)
    - kill_kill: Immediately KILL the child process as documented for Win32 (GH#136)
    - Switch to GitHub actions for CI testing
    - Re-structure shipped files into eg/
    - Move author tests into xt/ and test them separately


author: Paul Howarth <paul@city-fan.org> - 2.18-1
changelog:
  - Update to 2.18
    - Update with newest data
    - Mojo 6.0 changed types() into mapping()
    - Mojo 7.94 adds experimental file_type()
    - Mojo 7.94 adds experimental content_type()


author: Paul Howarth <paul@city-fan.org> - 0.39-1
changelog:
  - Update to 0.39
    - Updated distribution metadata and packaging
    - Configuration phase now uses ExtUtils::HasCompiler


author: Paul Howarth <paul@city-fan.org> - 0.112-1
changelog:
  - Update to 0.112
    - Another test fix on Windows, possibly due to a behavior change in
      Cwd::getdcwd


author: Paul Howarth <paul@city-fan.org> - 0.118-1
changelog:
  - Update to 0.118
    - Skip symlink tests on Windows by actually testing symlinks, as Perl 5.33.5
      adds notional support but it's not possible without elevated privileges


author: Paul Howarth <paul@city-fan.org> - 0.008-1
changelog:
  - Update to 0.008
    - Make unread by :crlf on top of :utf8_strict reliable
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.47-1
changelog:
  - Update to 0.47
    - Change Specio constraint object's stringification overloading to return the
      type name rather than the default Perl object stringification, which gives
      you something like
      "Specio::Constraint::Parameterized=HASH(0x564d258efb48)"; anonymous are
      special cased to return something you can print
    - All types now overload the 'eq' comparison operator: Moose expects types to
      be comparable in this manner when doing role summation (GH#18)


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - %DB::sub is now populated correctly for sub names with wide characters or
      nulls (GH#9)
    - Better Perl 5.6 compatibility by lowering prereqs of core modules
    - Test for renaming lexical subs, which should work on Perl 5.22+ (GH#10)
    - Small internal changes to bring implementation in line with changes to
      Sub::Util
    - Fix "Undefined symbol "DPPP_my_croak_xs_usage"" error on some perls
      (CPAN RT#125158)
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.130-1
changelog:
  - Update to 1.128
    - Allow 'use Test::Deep' while other modules use Test::Deep::NoTest (GH#76)
    - Added true/false optional imports (GH#41, GH#44)
    - Documentation fixes (GH#79)
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.016-1
changelog:
  - Update to 0.016
    - Add default descriptions to tests
    - Work on ancient Test::Builder code
  - Use author-independent source URL
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.11-1
changelog:
  - Update to 0.11
    - Re-packaging
  - Drop running of extra tests at package build time to avoid need for
    bootstrapping
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 0.027-1
changelog:
  - Update to 0.027
    - New :fail_on_warning feature, for more easily seeing where the surprising
      warning appeared during testing
  - Use author-independent source URL
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.029-1
changelog:
  - Update to 0.029
    - New :report_warnings feature, for printing all of the (unexpected) warning
      content when had_no_warnings() is called (GH#10)


author: Paul Howarth <paul@city-fan.org> - 0.030-1
changelog:
  - Update to 0.030
    - Fix tests that can fail when there is already an installed module named
      Foo::Bar::Baz (CPAN RT#132140)


author: Paul Howarth <paul@city-fan.org> - 1.01-1
changelog:
  - Update to 1.01
    - Implement Types::Serialiser::as_bool
    - Slight documentation tweaks
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.002-2
changelog:
  - Incorporate feedback from package review (#1776513)
    - BR: findutils
    - BR: perl(CPAN::Meta::Prereqs)
    - Need perl(ExtUtils::MakeMaker) >= 6.76
    - Add reference to upstream ticket about unnecessary build requirements
      https://github.com/atoomic/XString/issues/2
    - Add run-time dependency on perl(XSLoader)


author: Paul Howarth <paul@city-fan.org> - 0.005-1
changelog:
  - Update to 0.005
    - Fix cstring for Perl 5.32 (GH#6, GH#7)
    - Remove unneeded module dependencies (GH#2)
    - Add compatibility with Perl 5.8 (GH#9)


author: Jitka Plesnikova <jplesnik@redhat.com> - 1:0.81-1
changelog:
  - Update to 0.81
    - Breaking Change: Set $YAML::XS::LoadBlessed default to false to make it
      more secure


author: Paul Howarth <paul@city-fan.org> - 1:0.82-1
changelog:
  - Update to 0.82
    - Updated libyaml sources to 0.2.4; changes affecting YAML::XS are:
      - Output '...' at the stream end after a block scalar with trailing empty
        lines
      - Accept '%YAML 1.2' directives (they are ignored and do not change
        behaviour though)


author: Paul Howarth <paul@city-fan.org> - 3.7.5-1
changelog:
  - Update to 3.75
    - Make build (more) reproducible
    - Removed "portable" from the warnings list, as 32-bit perls (as opposed to
      32-bit platforms) are practically extinct and it warns about a weird subset
      of operations, e.g. 64-bit hex() is not ok, 64-bit addition is fine, makes
      no sense; additionally, other than hex/oct etc. harassment, there is
      nothing in this category that otherwise could be useful
  - Specify all build dependencies
  - Drop ancient obsoletes/provides for removed tests sub-package
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.29-1
changelog:
  - Update to 0.29
    - Switch from Test::Requires to Test::Needs
    - Report on the installed versions of more optional modules


author: Mat Booth <mat.booth@redhat.com> - 0.0.7-29
changelog:
  - Unecessary restriction on plexus-util, with the patch it's actually still
    source compatible with older versions


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-6
changelog:
  - free: backport new 'used' calculation
  - sysctl: backport support of systemd glob patterns
  - Resolves: rhbz#2003033
  - Resolves: rhbz#2052536


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-7
changelog:
  - sysctl: backport - keys with dots instead of slashes again
  - Resolves: rhbz#2116977
  - Related: rhbz#2052536


author: Adrian Reber <adrian@lisas.de> - 3.14.0-6
changelog:
  - Reintroduce the emacs subpackage to avoid file conflicts between
    protobuf-compiler.x86_64 and protobuf-compiler.i686
  - Disable LTO to fix annobin errors


author: Adrian Reber <areber@redhat.com> - 3.14.0-14
changelog:
  - Applied patch for CVE-2022-1941 (#RHEL-40872)
  - Applied patch to make emacs dependency optional (#RHEL-40572)


author: Petr Viktorin <pviktori@redhat.com> - 1.1-1
changelog:
  - Update to 1.1 to fix Python 3.8 compatibility in tests
    https://bugzilla.redhat.com/show_bug.cgi?id=1758446


author: Miro Hrončok <mhroncok@redhat.com> - 2.6.2-6
changelog:
  - Introduce epoch to pybind11-devel to sort newer than python3.11-pybind11-devel
  - Resolves: RHEL-38108


author: Tomas Orsava <torsava@redhat.com> - 2.6.2-4
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Manually add Provides and Obsoletes for python39-pybind11-devel
  - Related: rhbz#1990421


author: Lumír Balhar <lbalhar@redhat.com> - 1.6.3-1
changelog:
  - Remove .dist-info directory at the end of %pyproject_buildrequires
  - An incomplete .dist-info directory in $PWD can confuse tests in %check


author: Miro Hrončok <mhroncok@redhat.com> - 1.7.0-1
changelog:
  - %pyproject_buildrequires: Redirect stdout to stderr via Shell
  - Dependencies are recorded to a text file that is catted at the end


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.0-1
changelog:
  - %pyproject_buildrequires: Add support for self-referential extras requirements
  - Deprecate the provisional %{pyproject_build_lib} macro
    See https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/thread/HMLOPAU3RZLXD4BOJHTIPKI3I4U6U7OE/


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.1-1
changelog:
  - On Python older than 3.11, use tomli instead of deprecated toml
  - Fix literal % handling in %{pyproject_files} on RPM 4.19


author: Python Maint <python-maint@redhat.com> - 1.10.0-1
changelog:
  - Add %_pyproject_check_import_allow_no_modules for automated environments
  - Fix handling of tox 4 provision without an explicit tox minversion
  - Fixes: rhbz#2240590


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.1-1
changelog:
  - Add a temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Related: rhbz#2284187


author: Miro Hrončok <mhroncok@redhat.com> - 1.13.0-1
changelog:
  - Properly escape weird characters from paths in %{pyproject_files} (RPM 4.19+ only)
  - Revert the temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Fixes: rhbz#1990879


author: Python Maint <python-maint@redhat.com> - 1.15.0-1
changelog:
  - Add a possibility to read runtime requirements from pyproject.toml [project] table
  - Fixes: rhbz#2261939
  - Don't generate a dependency on pip when %pyproject_buildrequires -N is used
  - Fixes: rhbz#2294510
  - Even when %_auto_set_build_flags is disabled, set all compiler flags when building wheels
  - Fixes: rhbz#2293616


author: Miro Hrončok <mhroncok@redhat.com> - 1.16.0-1
changelog:
  - %pyproject_buildrequires: Add support for dependency groups (PEP 735), via the -g flag
  - This is implied when used tox testenvs depend on dependency groups (requires tox 4.22+)
  - Fixes: rhbz#2318849


author: Miro Hrončok <miro@hroncok.cz> - 1.16.1-1
changelog:
  - Support for setuptools 70+
  - wheel is no longer generated as a dependency of the default build system


author: Miro Hrončok <miro@hroncok.cz> - 1.17.0-1
changelog:
  - Add the -M flag to %pyproject_save_files
  - The flag can be used to indicate no Python modules should be saved


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.0-1
changelog:
  - Make %pyproject_buildrequires -t/-e and %tox fail when no suitable tox configuration exists
  - The %pyproject_buildrequires -t/-e case is temporarily allowed on Fedora 40-42
  - Requires tox-current-env >= 0.0.16


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.3-1
changelog:
  - %pyproject_buildrequires: Do not generate BuildRequires from Requires core metadata fields
  - That field is deprecated and should include importable module names, not distribution packages
  - Related: rhbz#2378463


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.4-1
changelog:
  - Don't exit from pyproject-srpm-macros implementation of %pyproject_buildrequires
  - Fixes: rhbz#2391290
  - On RPM 4.20+ don't put pyproject-macros-specific files in %buildsubdir
  - Works around https://github.com/rpm-software-management/rpm/issues/3890
  - Speed %pyproject_save_files up significantly


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.5-1
changelog:
  - %pyproject_extras_subpkg: Only %ghost the dist-info directory, not the content
  - That way, accidentally unpackaged files within are reported as errors
  - %pyproject_save_files: Also save top level typing stub files (.pyi)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.3.2-1
changelog:
  - Update %pyproject_build_lib to support setuptools 62.1.0 and later
  - %pyproject_buildrequires: When extension modules are built,
    support https://fedoraproject.org/wiki/Changes/Package_information_on_ELF_objects


author: Python Maint <python-maint@redhat.com> - 1.4.0-1
changelog:
  - %pyproject_save_files: Support License-Files installed into the *Root License Directory* from PEP 369
  - %pyproject_check_import: Import only the modules whose top-level names
    match any of the globs provided to %pyproject_save_files


author: Miro Hrončok <mhroncok@redhat.com> - 1:2.8.0-7
changelog:
  - Subpackage python2-dateutil has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Charalampos Stratakis <cstratak@redhat.com> - 1:3.4.3-7
changelog:
  - Obsolete and provide the python-sphinx-locale package to fix the upgrade path
  Related: rhbz#1985219


author: Jerry James <loganjerry@gmail.com> - 0.5.0-1
changelog:
  - Version 0.5.0
  - Drop upstreamed -script patch
  - Do not even link to fonts; modify the CSS to point to system fonts
  - Remove all traces of html5shiv


author: Tomas Popela <tpopela@redhat.com> - 1.20.1-1
changelog:
  - Update to 1.20.1
  - Resolves: rhbz#2016905
  - Ship python3-cairo-devel in CRB
  - Resolves: rhbz#2053665


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.21-1
changelog:
  - Update to 3.9.21
  - Security fix for CVE-2024-11168 and CVE-2024-9287
  Resolves: RHEL-64889
  Resolves: RHEL-69942


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.23-1
changelog:
  - Update to 3.9.23
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98051, RHEL-98024, RHEL-98242, RHEL-98193, RHEL-98218


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.25-4
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143117
  Resolves: RHEL-143174
  Resolves: RHEL-144897


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.25-5
changelog:
  - Rebuilding previous fixes for different build target
  Related: RHEL-143117, RHEL-143174, RHEL-144897


author: Miro Hrončok <mhroncok@redhat.com> - 3.9.25-8
changelog:
  - Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+
  Resolves: RHEL-191730


author: Miro Hrončok <mhroncok@redhat.com> - 3.9.0-5
changelog:
  - Initial package for RHEL 9
  - Resolves: RHEL-12338
  - Fedora+EPEL contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Maxwell G <gotmax@e.email>
        Michel Alexandre Salim <salimma@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Mukundan Ragavan <nonamedotc@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Miro Hrončok <mhroncok@redhat.com> - 0.4.14-5
changelog:
  - Subpackages python2-greenlet, python2-greenlet-devel have been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-22
changelog:
  - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-24
changelog:
  - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-25
changelog:
  - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9]
  - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9]
  - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
  - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9]
  - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9]
  - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package 
  - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8]
  - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.0-1
changelog:
  - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache 
  - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls
  - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service 
  - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix
  - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py
  - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-1
changelog:
  - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates
  - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS
  - Resolves: RHEL-141297 Memory leaks in IPA plugins
  - Resolves: RHEL-141054 IPA fails to sign zone
  - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
  - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-2
changelog:
  - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
  - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive
  - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system)
  - RHEL-145854 Include latest fixes in python3-ipatests package
  - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
  - RHEL-141500 ipa use systemd-sysusers


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-3
changelog:
  - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured"
  - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8


author: David Hanina <dhanina@redhat.com> - 4.13.1-3.1
changelog:
  - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z]
  - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z]
  - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z]
  - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-20
changelog:
  - Resolves: RHEL-106285 Incorrect use of external IdP GitHub trademark
  - Resolves: RHEL-106026 Include fixes in python3-ipatests package
  - Resolves: RHEL-105512 kdb: prevent double crash in RBCD ACL free
  - Resolves: RHEL-101707 ipatests: use "sos report" instead of "sosreport" command
  - Resolves: RHEL-101544 ipa-client-encrypted-dns does not ensure bind-utils >= 9.18 for DoT-compatible nsupdate
  - Resolves: RHEL-100450 eDNS: multiple issues during encrypted DNS setup


author: David Hanina <dhanina@redhat.com> - 4.13.2-1
changelog:
  - Resolves: RHEL-166742 [Cursor Automated] Include latest fixes in python3-ipatests package [RHEL9.9]
  - Resolves: RHEL-151581 Pagure #9948: Extend SELinux policy to allow use of SSSD authentication helpers on non-enrolled hosts [rhel-9]
  - Resolves: RHEL-151560 ipa-migrate doesn't process users' sshpublickeys [rhel-9]
  - Resolves: RHEL-179216 ipa-migrate tool is renaming host records & host info in automount information [RHEL 9.9]
  - Resolves: RHEL-212442 freeipa-client %triggerin and %post can fail (rpm scriptlets should never fail, by policy) [rhel-9]
  - Resolves: RHEL-212443 ipa-migrate doesn't properly handle replication conflicts [rhel-9]
  - Resolves: RHEL-212444 ipa-migrate doesn't migrate IPA locations [rhel-9]
  - Resolves: RHEL-212445 Pagure #9948: Extend SELinux policy to allow use of SSSD authentication helpers on non-enrolled hosts [rhel-9]
  - Resolves: RHEL-212446 [RFE] X-Content-Type-Options header in IdM WebUI [rhel-9]
  - Resolves: RHEL-212447 [RFE] Implement Referrer-Policy on IdM WebUI [rhel-9]
  - Resolves: RHEL-212448 [RFE] CSP not implemented in IdM WebUI [rhel-9]
  - Resolves: RHEL-212449 IPA compatibility with tomcat 10 [rhel-9]
  - Resolves: RHEL-212450 Webui 3007 Requirement error "userCertificate" is required (not allowing certificate management for idview) [rhel-9]
  - Resolves: RHEL-212451 To add "SameSite" flag to ipa_session cookies [rhel-9]
  - Resolves: RHEL-212452 FreeIPA JSON-RPC CSRF Referer Validation Uses Naive Prefix Match - [rhel-9]
  - Resolves: RHEL-212471 Pagure #9820: ipalockout_postop is incorrectly warning about locked user [rhel-9]
  - Resolves: RHEL-178920 Rebase ipa to latest version for RHEL 9.9


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - Update to 4.1.1
  - Enable psm2 support
  - fbtl-posix: link to common_ompio
  - Revert upstream commit c36d7459b6331c4d
  - Resolve: rhbz#1869443


author: Tomas Orsava <torsava@redhat.com> - 5.8.0-5
changelog:
  - Remove unnecessary test dependency on python3-mock
  - Remove unnecessary macro __provides_exclude_from


author: Dan Čermák <dan.cermak@cgc-instruments.com> - 0.7.1-5
changelog:
  - BuildRequire python3-setuptools besides python3-devel
    (see https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/GCPGM34ZGEOVUHSBGZTRYR5XKHTIJ3T7/)


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.4-101
changelog:
  - resolves: rhbz#2216712 - Fix broken symlink for libwbclient
  - resolves: rhbz#2214327 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes`
  - resolves: rhbz#2211605 - Fix access of Samba share with veto files = /.*/
  - resolves: rhbz#2207692 - Fix Python tarfile extraction to avoid a warning


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.5-100
changelog:
  - resolves: rhbz#2222895 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: Andreas Schneider <asn@redhat.com> - 4.18.6-100
changelog:
  - related: rhbz#2190415 - Update to version 4.18.6
  - resolves: rhbz#2211617 - Fix the rpcclient dfsgetinfo command


author: Andreas Schneider <asn@redhat.com> - 4.19.3-100
changelog:
  - resolves: RHEL-16476 - Update to version 4.19.3
  - resolves: RHEL-11362 - Fix security issues:
    CVE-2023-4091 CVE-2023-42669
  - resolves: RHEL-18030 - Logging Format Enhancement
  - resolves: RHEL-1960 - Fix smbget issues with DFS shares
  - resolves: RHEL-2118 - Fix force user/group issues with 'allow trusted domains = yes'
  - resolves: RHEL-16875 - Fix memory corruption in libnss_winbind
  - resolves: RHEL-19243 - Fix smbget password interactive authentication


author: Andreas Schneider <asn@redhat.com> - 4.19.4-100
changelog:
  - related: RHEL-16476 - Update to version 4.19.4
  - resolves: RHEL-2109 - Add support for certificate auto enrollment
  - resolves: RHEL-20761 - Add missing requirements for samba-gpupdate
  - resolves: RHEL-19566 - Fix smbget interactive authentication
  - resolves: RHEL-21001 - Fix samba-gpupdate paths for RHEL


author: Andreas Schneider <asn@redhat.com> - 4.19.4-102
changelog:
  - resolves: RHEL-22157 - Don't require NDES for samba-gpupdate
  - resolves: RHEL-20897 - Fix site name fetching for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.0-102
changelog:
  - resolves: RHEL-2109  - Support Certificate Auto Enrollment in Samba
  - resolves: RHEL-22157 - Fix root cert import for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.1-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.1
  - resolves: RHEL-26337 - Fix site lookup for samba-gpupdate
  - resolves: RHEL-5846 - Fix warning messages while upgrading libwbclient


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.2-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.2
  - resolves: RHEL-45841 - Fix KDC IP address lookup in case of trusted domain
  - resolves: RHEL-23814 - Fix smbclient to enumerate the printers


author: Francisco Triviño <ftrivino@redhat.com> - 0.12.1-5
changelog:
  - Rebuilt needed for moving buildroot package to CRB
  - Resolves: RHEL-70463 python3-setuptools-rust is not signed
  - Resolves: RHEL-67341 move python3-setuptools-rust to CRB [rhel-9]


author: Francisco Triviño <ftrivino@redhat.com> - 0.12.1-6
changelog:
  - Rebuilt needed to trigger signing of the package
  - Resolves: RHEL-70463 python3-setuptools-rust is not signed


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.4-3
changelog:
  - Update runtime and buildtime dependencies
  - Remove sqlalchemy, whoosh and xapian dependencies from RHEL9


author: Tomas Orsava <torsava@redhat.com> - 1:0.36.2-5
changelog:
  - Make the python-wheel-wheel subpackage versioned (python3-wheel-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Tomas Orsava <torsava@redhat.com> - 1:0.36.2-6
changelog:
  - Conflict with old Python versions that use the old unversioned wheel location
  - Resolves: rhbz#1982668


author: Charalampos Stratakis <cstratak@redhat.com> - 0.29.32-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alex Cobb <alex.cobb@smart.mit.edu>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        nbecker <ndbecker2@gmail.com>
        Neal D. Becker <ndbecker2@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        serge-sans-paille <sguelton@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio くらとみ <toshio@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 22.1.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tomas Hrnciar <thrnciar@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11.13-1
changelog:
  - Update to 3.11.13
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.13-2
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-101551


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11.13-6
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143110
  Resolves: RHEL-143170
  Resolves: RHEL-144894


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11.13-7
changelog:
  - Rebuilding previous fixes for different build target
  Related: RHEL-143110, RHEL-143170, RHEL-144894


author: Charalampos Stratakis <cstratak@redhat.com> - 1.0.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Thomas Moschny <thm@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim GÜNDÜZ <devrim@fedoraproject.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.10.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Jonathan <jonathan@knownhost.com>
        jonathanspw <jonathan@almalinux.org>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Susi Lehtola <jussilehtola@fedoraproject.org>
        Tom Stellard <tstellar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.0.7-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alan Pevec <alan.pevec@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David King <amigadave@amigadave.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        José Abílio Oliveira Matos <jamatos@fedoraproject.org>
        José Matos <jamatos@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Terje Røsten <terje.rosten@ntnu.no>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        yatin <ykarel@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 7.2.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Viktorin <pviktori@redhat.com>
        Richard Shaw <hobbes1069@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Thomas Moschny <thm@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.8.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Davide Cavalca <dcavalca@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Javier Pena <jpena@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.5.2-1
changelog:
  - Initial import
  - Fedora contributions by:
        Christian Heimes <cheimes@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 0.38.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 0.29.35-2
changelog:
  - Initial package
  - Fedora contributions by:
        Alex Cobb <alex.cobb@smart.mit.edu>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <i.gnatenko.brain@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Neal D. Becker <ndbecker2@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        serge-sans-paille <sguelton@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio くらとみ <toshio@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-88897


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98057, RHEL-98019, RHEL-97811, RHEL-98183, RHEL-98210


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-5
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143112
  Resolves: RHEL-143172
  Resolves: RHEL-144895


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-6
changelog:
  - Rebuilding previous fixes for different build target
  Related: RHEL-143112, RHEL-143172, RHEL-144895


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.13-1
changelog:
  - Update to 3.12.13
  - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672
  Related: RHEL-168159, RHEL-167917


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.13-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
  Resolves: RHEL-168159, RHEL-167917


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Mukundan Ragavan <nonamedotc@gmail.com>
        Tomas Hrcka <thrcka@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.1.1-1
changelog:
  - Initial package
  - Fedora contributions by:
       Lumir Balhar <lbalhar@redhat.com>
       Miro Hrončok <miro@hroncok.cz>
       Tomas Hrnciar <thrnciar@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 23.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeroen van Meeuwen (Kolab Systems) <vanmeeuwen@kolabsys.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.2.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Thomas Moschny <thm@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.6-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim Gündüz <devrim@gunduz.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Jonathan <jonathan@knownhost.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Pavel Šimovec <psimovec@redhat.com>
        Susi Lehtola <jussilehtola@fedoraproject.org>
        Tom Stellard <tstellar@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 7.4.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Viktorin <pviktori@redhat.com>
        Richard Shaw <hobbes1069@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Thomas Moschny <thm@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.7.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Christian Heimes <cheimes@redhat.com>
        Fabio Valentini <decathorpe@gmail.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Tomáš Hrnčiar <thrnciar@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 68.2.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Konstantin Ryabitsev <icon@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Petr Viktorin <pviktori@redhat.com>
        Pierre-Yves Chibon <pingou@pingoured.fr>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 0.41.2-1
changelog:
  - Initial package.
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.14.0-2
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lukáš Zachar <lzachar@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <mhroncok@redhat.com>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Till Maas <opensource@till.name>
        Tom Stellard <tstellar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        U2FsdGVkX1 <U2FsdGVkX1@gmail.com>
        Victor Stinner <vstinner@redhat.com>
        Ville Skyttä <ville.skytta@iki.fi>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672,CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-11468, CVE-2025-15366,
  CVE-2025-15367
  Resolves: RHEL-144896, RHEL-143115, RHEL-143173


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367
  Resolves: RHEL-144896, RHEL-143115, RHEL-143173


author: Karolina Surma <ksurma@redhat.com> - 3.14.4-1
changelog:
  - Update to Python 3.14.4
  - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865
  Related: RHEL-167918, RHEL-168160


author: Charalampos Stratakis <cstratak@redhat.com> - 3.14.4-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100
  Resolves: RHEL-167918, RHEL-168160


author: Miro Hrončok <mhroncok@redhat.com> - 3.14.5~rc1-1
changelog:
  - Update to 3.14.5rc1
  - Move back to the generational from the incremental garbage collector
  - Security fix for CVE-2026-6019
  Resolves: RHEL-180642


author: Tomáš Hrnčiar <thrciar@redhat.com> - 1.6.0-3
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <mhroncok@redhat.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Priscila Gutierres <pgutier@redhat.com>
        Thomas Moschny <thomas.moschny@gmx.de>
        Tomas Orsava <torsava@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.10-3
changelog:
  - Initial package
  Fedora contributions by:
      Ales Nezbeda <anezbeda@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Bohuslav Kabrda <bkabrda@redhat.com>
      Charalampos Stratakis <cstratak@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Devrim Gündüz <devrim@gunduz.org>
      Filip Januš <fjanus@redhat.com>
      Honza Horak <hhorak@redhat.com>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenkobrain@fedoraproject.org>
      Jason L Tibbitts III <tibbs@math.uh.edu>
      Jesse Keating <jkeating@fedoraproject.org>
      Jozef Mlich <jmlich@redhat.com>
      Lumír Balhar <lbalhar@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Ondřej Sloup <ondrej.sloup@protonmail.com>
      Patrik Novotný <panovotn@redhat.com>
      Pavel Raiskup <praiskup@redhat.com>
      Petr Kubat <pkubat@redhat.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Todd Zullinger <tmz@pobox.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Lane <tgl@redhat.com>


author: Cristian Le <git@lecris.dev> - 2.13.6-7
changelog:
  - Refactor the build script
  - Drop the python3-python2 distinction
  - Use standard cmake and pyproject macros (rhbz#2377381)
  - Allow to build with arbitrary generator (rhbz#2381106)


author: Lukáš Zachar <lzachar@redhat.com> - 78.1.1-3
changelog:
  - Adjust gating
  - Generic gating.yaml for all rhel
  - Use CS repos instead of Fedora
  - Remove python versions not available on c9s
  - use python-isort to test


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-4
changelog:
  - Fix specific overflow in qtextlayout
  - Fix incorrect parsing of the strict-transport-security (HSTS) header
  - Fix buffer over-read via a crafted reply from a DNS server
    Resolves: bz#2209492


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-5
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-6
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410) (version #2)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-9
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch fixes
    - pull in candidate fix QTBUG-83890
    Resolves: bz#1988934


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-4
changelog:
  - Rebuild (LLVM-15)
    Resolves: bz#2119003

  - Add versioned dependencies between subpackages
    Resolves: bz#2088352


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: Pavel Reichl <preichl@redhat.com> - 1:4.09-1
changelog:
  - Update to new upstream version
  - Add tmpfs quota support
  - Remove rhel-only patches that were merged upstream


author: Alba Hita Catala <ahitacat@redhat.com> - 0.2.4-1
changelog:
  - Configure proxy for http connections (RHBZ#2227018)
  - Failling to get system profile is not an error but a warning (RHBZ#2227012)
  - Prevent message content being logged at any level (RHBZ#2227010)
  - Added bash completion (RHBZ#2145198)


author: Link Dupont <link@redhat.com> - 0.2.4-5
changelog:
  - Update embedded yggdrasil-worker-package-manager to 0.1.3 (RHEL-17179)
  - Update embedded yggdrasil to 0.2.4 (RHEL-17179)


author: Jun Aruga <jaruga@redhat.com> - 3.0.4-160
changelog:
  - Bypass git submodule test failure on Git >= 2.38.1.
  - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b.
  - Fix for tzdata-2022g.
  - Fix File.utime test.


author: Jun Aruga <jaruga@redhat.com> - 3.0.4-161
changelog:
  - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS.
    Resolves: RHEL-12724
  - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters
    Related: RHEL-12724


author: Jun Aruga <jaruga@redhat.com> - 3.0.7-162
changelog:
  - Upgrade to Ruby 3.0.7.
    Resolves: RHEL-35740
  - Fix HTTP response splitting in CGI.
    Resolves: RHEL-35741
  - Fix ReDoS vulnerability in URI.
    Resolves: RHEL-35742
  - Fix ReDoS vulnerability in Time.
    Resolves: RHEL-35743
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-35744
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-35746
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-35747


author: Jarek Prokop <jprokop@redhat.com> - 3.0.7-164
changelog:
  - Undefine GC compaction methods on ppc64le.
    Resolves: RHEL-83136
  - Fix printing warnings when using IRB from a script.
    Resolves: RHEL-83044


author: Jarek Prokop <jprokop@redhat.com> - 3.0.7-165
changelog:
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
    Resolves: RHEL-86104
  - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220)
    Resolves: RHEL-86130


author: Jarek Prokop <jprokop@redhat.com> - 3.0.7-166
changelog:
  - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
    Resolves: RHEL-171256


author: Jarek Prokop <jprokop@redhat.com> - 3.0.7-167
changelog:
  - Fix information disclosure via MITM attack bypassing TLS in net-imap.
    (CVE-2026-42246)
    Resolves: RHEL-181777
  - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258)
    Resolves: RHEL-181808


author: Pavel Valena <pvalena@redhat.com> - 3.10.1-7
changelog:
  - Re-add Requires: rubygem(rake), as it's needed for runtime.
    Resolves: rhbz#1982410
    Resolves: rhbz#1982419


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.15.0-1
changelog:
  - Rebase to seabios to 1.15.0 [bz#2018393]
  - 0003-pci-let-firmware-reserve-IO-for-pcie-pci-bridge.patch [bz#2001732]
  - 0004-pci-reserve-resources-for-pcie-pci-bridge-to-fix-reg.patch [bz#2001732]
  - Resolves: bz#2018393
    ([rebase] update seabios to nov '21 release)
  - Resolves: bz#2001732
    ([virtual network][qemu-6.1.0-1] Fail to hotplug nic with rtl8139 driver)


author: Paweł Poławski <ppolawsk@redhat.com> - 1.16.0-1
changelog:
  - Rebase to upstream 1.16.0 release [bz#2066826]
  - Resolves: bz#2066826
    (rebase seabios to 1.16 release)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.0-2
changelog:
  - seabios-malloc-use-variable-for-ZoneHigh-size.patch [bz#2004662]
  - seabios-malloc-use-large-ZoneHigh-when-there-is-enough-memor.patch [bz#2004662]
  - Resolves: bz#2004662
    (RFE: "Unable to allocate resource at romfile_loader_allocate:87" when running very large VMs)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.0-3
changelog:
  - seabios-pci-refactor-the-pci_config_-functions.patch [bz#2086407]
  - seabios-reset-force-standard-PCI-configuration-access.patch [bz#2086407]
  - Resolves: bz#2086407
    (qemu reboot problem with seabios 1.16.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.0-4
changelog:
  - seabios-virtio-blk-use-larger-default-request-size.patch [bz#2108555]
  - Resolves: bz#2108555
    ([rhel.9.1] Loading a kernel/initrd is sometimes very slow)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.3-1
changelog:
  - Rebase to 1.16.3 [RHEL-19239]
  - Removed vgabios-qxl.bin [RHEL-383]
  - Resolves: RHEL-19239
    (Rebase seabios to 1.16.3)
  - Resolves: RHEL-383
    (remove vgabios-qxl.bin from seavgabios in rhel9)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.3-2
changelog:
  - seabios-add-hwerr_printf-function-for-threads.patch [RHEL-7110]
  - seabios-display-error-message-for-blocksizes-512.patch [RHEL-7110]
  - Resolves: RHEL-7110
    ([seabios] Can't boot from a disk with 4K sector size)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.3-3
changelog:
  - seabios-pciinit-don-t-misalign-large-BARs.patch [RHEL-67846]
  - Resolves: RHEL-67846
    (amdgpu failed to initialize when multiple AMD MI210 GPUs assigned and firmware is seabios [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.3-4
changelog:
  - seabios-Remove-iasl-from-BuildRequires.patch [RHEL-39020]
  - Resolves: RHEL-39020
    (remove iasl build dependency)


author: Jon Maloy <jmaloy@redhat.com> - 1.16.3-5
changelog:
  - seabios-update-release-date.patch [RHEL-131918 RHEL-131921]
  - seabios-turn-off-SMM-support.patch [RHEL-131918 RHEL-131921]
  - Resolves: RHEL-131918
    ([rhel-9] SeaBIOS date is "stuck" at 2014 even for recent releases)
  - Resolves: RHEL-131921
    ([RHEL-9] Grub graphics modules crash VM when there's no graphics)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.16.1-1
changelog:
  - New version
    Resolves: rhbz#1853885
  - Dropped smtp-session-reuse-fix, openssl-1.1.0-fix, openssl-1.1.0-ecdhe-fix,
    gethostbyname2, fix-covscan-issues, gcc-10-fix patches (not needed)
  - Dropped format-security patch (upstreamed)
  - Updated patches


author: Tomas Bzatek <tbzatek@redhat.com> - 1.47-7
changelog:
  - Fix sg_inq parsing in rescan-scsi-bus.sh (#2036005,#2035362)
  - Fix rescan-scsi-bus.sh summary print (#2035382)
  - sg_readcap --zbc man page switch fix (#2036718)
  - Various Covscan fixes (#2044433)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-7
changelog:
  - useradd: check if subid range exists for user. Resolves: #2179987
  - find_new_[gu]id: Skip over IDs that are reserved for legacy reasons. Resolves: #2179988


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-13
changelog:
  - nss.c: shadow_logfd to stderr. Resolves: RHEL-83431
  - vipw: restore the original terminal pgrp after editing. Resolves: RHEL-70844 and RHEL-72940


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-17
changelog:
  - subordinateio.c: list_owner_ranges(): Fix duplicate range when
    username matches ID. Resolves: RHEL-175708


author: Matej Matuska <mmatuska@redhat.com> - 0.18.0-4
changelog:
  - Bump leapp-framework to 6.0
  - Bump leapp-framework-dependencies to 6
  - Require python3-PyYAML
  - [Technical preview] Introduce configurability for leapp actors
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-1
changelog:
  - Rebase to new upstream version 0.19.0
  - Add possibility to use a specified execution context for snactor run in an existing leapp.db
  - Increase limits on the number of opened file descriptors and maximum size
    of manipulated files when running leapp
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-2
changelog:
  - Bump leapp-framework to 6.1
  - Create the /var/lib/leapp directory automatically if missing
  - Recognize configuration files with the .yaml suffix only
  - Fix CLI: allow to set falsy values as default for leapp's command options
  - Resolves: RHEL-86225


author: Petr Stodulka <pstodulk@redhat.com> - 0.20.0-2
changelog:
  - Bump leapp-framework to 6.2
  - Add possibility to specify aliases for CLI option
  - Resolves: RHEL-128269


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-2
changelog:
  - Bump leapp-framework to 6.5
  - Change how commands are converted for text based report from the list representation
  - Introduce the format_list function for unified presentation of lists in reports and logs
  - Resolves: RHEL-156521


author: Karolina Kula <kkula@redhat.com> - 0.21.0-3
changelog:
  - Bump leapp-framework to 6.6
  - Fix crash when multiple actors use the same config schema
  - Resolves: RHEL-188372


author: Tomas Korbar <tkorbar@redhat.com> - 1.2.0-11
changelog:
  - CVE-2020-23903 speex: divide by zero in read_samples() via crafted WAV file
  - Resolves: CVE-2020-23903


author: Orion Poplawski <orion@nwra.com> - 5.4.0-1
changelog:
  - Update to 5.4.0
  - Use upstream shared library builds
  - Build with metis
  - Explicitly list libraries and soname versions


author: Tom Stellard <tstellar@redhat.com> - 4.0.2-2
changelog:
  - Use make macros
    https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Disable Go tests


author: Robert-André Mauchin <zebob.m@gmail.com> - 4.0.2-16
changelog:
  - Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
    CVE-2022-29526, CVE-2022-30629


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.7-4
changelog:
  - Move texlive-tex files to more approriate location again, this
    time in sync with dropping texlive-texinfo from texlive
    Resolves: #1719379


author: Than Ngo <than@redhat.com> - 9:20200327-19
changelog:
  - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-65
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-81721
  - Remove deprecated path from systemd service file
    Resolves: RHEL-81716


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-66
changelog:
  - Use systemd-sysusers for the 'pegasus' user and group creation
  - Fix Requires of subpackages
    Related: RHEL-90737
  - Add support for Image Mode
    Resolves: RHEL-90737


author: Štěpán Horáček <shoracek@redhat.com> - 3.2.2-1
changelog:
  - Rebase to 3.2.2
  - Use systemd-sysusers to create user
    Resolves: CVE-2023-22745
    Resolves: rhbz#2095479
    Resolves: rhbz#2160307
    Resolves: rhbz#2162613


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Hans de Goede <hdegoede@redhat.com> - 1:3.2.7b-1
changelog:
  - New upstream release 3.2.7b
  - Add patch fixing CVE-2019-19746 (rhbz#1787040)
  - Add patch fixing CVE-2019-19797 (rhbz#1786726)


author: Ondrej Dubaj <odubaj@redhat.com> - 1:3.2.7b-7
changelog:
  - Fixed CVE-2020-21681 (#1998350)
  - Fixed CVE-2020-21683 (#1998594)
  - Fixed CVE-2020-21680 (#1998306)
  - Fixed CVE-2020-21684 (#2000747)
  - Fixed CVE-2020-21678 (#2000741)
  - Fixed CVE-2020-21676 (#2000751)
  - Fixed CVE-2020-21682 (#2000738)


author: Ondrej Dubaj <odubaj@redhat.com> - 1:3.2.7b-8
changelog:
  - Fixed CVE-2020-21529 (#2005518)
  - Fixed CVE-2020-21532 (#2006007)
  - Fixed CVE-2020-21531 (#2006002)


author: Andreas Schneider <asn@redhat.com> - 1.2.7-1
changelog:
  - Update to version 1.2.7
    * Fix unsetting initial XIDs
    * Fix manpage installation
    * Fix cmake-config installation
    * Fixed running with sanitizers
  - resolves: #1690028 - Allow running without RTLD_DEEPBIND


author: Petr Menšík <pemensik@redhat.com> - 1.24.2-2
changelog:
  - Switch TLS configuration to follow TLS sockets by crypto-policy again
    (RHEL-147860)
  - Change the default of tls-use-system-policy-versions at build-time


author: RHEL Packaging Agent <jotnar@redhat.com> - 2.3.12-1
changelog:
  - Rebase to version 2.3.12
  - Add unixODBC-c89.patch for GCC 14 compatibility
  - Update so-version-bump.patch for new version
  - Fix multilib_fix_c_header path to match actual header location
  - Resolves: RHEL-94798


author: Christian Kellner <ckellner@redhat.com> - 0.99.11-2
changelog:
  - Add systemd service snippets
  - Use macros for _unitdir and _udevrulesdir
  - Mark _datadir/gtk-doc as directory


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Rebase to latest upstream: 0.13.0
  - Keeps usbredirserver binary (removed upstream)
    Related: rhbz#2135760


author: Victor Toso <victortoso@redhat.com> - 0.13.0-2
changelog:
  - Fixes 100% CPU usage when usbredirect used as TCP server
    Related: rhbz#2157520
  - Fixes USB redirection of identical devices
    Resolves: rhbz#2157520


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.12.1-5
changelog:
  - Replace arch-dependent /usr/include/urcu/config.h with arch-independent
    stub when needed. (bz# 1951223)
  - Added CI gating tests
  - Resolves: bz #1951223


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 6.5.1-2
changelog:
  - Pulled support for el6
  - Pulled support for sysvinit
  - aarch64 builds now with jemalloc again on el7


author: Luboš Uhliarik <luhliari@redhat.com> - 6.5.2-1
changelog:
  - new version 6.5.2
  - Resolves: #1984185 - Rebase varnish to 6.5.2
  - Resolves: #1982858 - CVE-2021-36740 varnish: HTTP/2 request smuggling attack
    via a large Content-Length header for a POST request


author: Tomas Korbar <tkorbar@redhat.com> - 6.6.2-5
changelog:
  - Add parameters h2_rst_allowance and h2_rst_allowance_period to mitigate CVE-2023-44487
  - Resolves: RHEL-12818


author: Luboš Uhliarik <luhliari@redhat.com> - 6.6.2-6
changelog:
  - Resolves: RHEL-30337 - varnish: HTTP/2 Broken Window Attack may result
    in denial of service (CVE-2024-30156)


author: Debarshi Ray <rishi@fedoraproject.org> - 0.64.2-1
changelog:
  - Update to 0.64.2
  - Add missing _VTE_CXX_NOEXCEPT to downstream patches (#1973174)
  - Fix the License fields and ship the correct license texts (#1973299)


author: Michal Ruprich <mruprich@redhat.com> - 1:3.4.10-4
changelog:
  - Resolves: #2152064 - CVE-2022-3190 wireshark: f5ethtrailer Infinite loop in legacy style dissector


author: Michal Ruprich <mruprich@redhat.com> - 1:3.4.10-5
changelog:
  - Resolves: #2210864 - Candump log file parser crash
    Resolves: #2210865 - VMS TCPIPtrace file parser crash
    Resolves: #2210868 - NetScaler file parser crash
    Resolves: #2210870 - RTPS dissector crash
    Resolves: #2210871 - IEEE C37.118 Synchrophasor dissector crash


author: Tomas Popela <tpopela@redhat.com> - 1.0.2-8
changelog:
  - Package woff2_decompress, woff2_compress and woff2_info in a tools subpackage.
    Thanks to Tomasz Gąsior <kontakt@tomaszgasior.pl>


author: Mat Booth <mat.booth@redhat.com> - 4.15-5
changelog:
  - Remove springframework conditionals, the deps are a long time removed from
    Fedora and this simplifies the spec a bit
  - Disable unused modules that can't build on JDK 11


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.29-7
changelog:
  - compile without sha1 and md5
  - Resolves: rhbz#1936682 - xmlsec1 implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Merlin Mathesius <mmathesi@redhat.com> - 0:2.7.0-6
changelog:
  - Fix FTBFS by patching ValueAssertTest to adjust for changed format of
    mismatched string exception


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.1-2
changelog:
  - xf86-input-libinput 1.0.1 (#1951879)
  - Fix the upstream source URL
  - Use autosetup instead of manual patch handling


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.0.0-5
changelog:
  - Emulate a zero axis events after REL_WHEEL (RHEL-153540)
  - Fix ToolSerials assignment for serials greater than INT_MAX (RHEL-153532)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.9-5
changelog:
  Fix for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408, CVE-2024-0409


author: Olivier Fourdan <ofourdan@redhat.com> - 23.2.7-3
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80204), CVE-2025-26595 (RHEL-80187),
                 CVE-2025-26596 (RHEL-80190), CVE-2025-26597 (RHEL-80193),
                 CVE-2025-26598 (RHEL-80195), CVE-2025-26599 (RHEL-80202),
                 CVE-2025-26600 (RHEL-80203), CVE-2025-26601 (RHEL-80207)


author: Olivier Fourdan <ofourdan@redhat.com> - 23.2.7-4
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97288), CVE-2025-49176 (RHEL-97334),
                 CVE-2025-49177 (RHEL-97357), CVE-2025-49178 (RHEL-97393),
                 CVE-2025-49179 (RHEL-97404), CVE-2025-49180 (RHEL-97244)


author: Olivier Fourdan <ofourdan@redhat.com> - 23.2.7-5
changelog:
  - CVE fix for: CVE-2025-62229 (RHEL-119977), CVE-2025-62230 (RHEL-120023),
                 CVE-2025-62231 (RHEL-125018)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-3
changelog:
  - Fix a regression in Xwayland 24.1.9 with XTS test Xlib10
    Resolves: https://redhat.atlassian.net/browse/RHEL-169765


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-4
changelog:
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
                 CVE-2026-34002, CVE-2026-34003
    Resolves: https://redhat.atlassian.net/browse/RHEL-163200
    Resolves: https://redhat.atlassian.net/browse/RHEL-163296
    Resolves: https://redhat.atlassian.net/browse/RHEL-163254


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-5
changelog:
  - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
                 CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
                 CVE-2026-50262, CVE-2026-50263
    Resolves: https://redhat.atlassian.net/browse/RHEL-182448


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-7
changelog:
  - CVE fix for: CVE-2026-55999, CVE-2026-56000
    Resolves: https://redhat.atlassian.net/browse/RHEL-191530
    Resolves: https://redhat.atlassian.net/browse/RHEL-191519


author: José Expósito <jexposit@redhat.com> - 1.20.11-25
changelog:
  - CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and
    CVE-2024-31083
  - Add util-linux as a dependency of Xvfb
  - Fix compilation error on i686


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-28
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186),
                 CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191),
                 CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199),
                 CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200)


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.11-30
changelog:
  - xfree86: Fix potentially NULL reference to platform device's PCI device
    Resolves: https://issues.redhat.com/browse/RHEL-84253


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-31
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308),
                 CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409),
                 CVE-2025-49180 (RHEL-97253)


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-32
changelog:
  - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035),
                 CVE-2025-62231 (RHEL-125003)


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-34
changelog:
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
                 CVE-2026-34002, CVE-2026-34003
    Resolves: https://redhat.atlassian.net/browse/RHEL-163227
    Resolves: https://redhat.atlassian.net/browse/RHEL-163309
    Resolves: https://redhat.atlassian.net/browse/RHEL-163240


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.11-35
changelog:
  - dri2: Protect against dri2ClientPrivate assertion failures
    Resolves: https://redhat.atlassian.net/browse/RHEL-169728


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-36
changelog:
  - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
                 CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
                 CVE-2026-50262, CVE-2026-50263, CVE-2026-50264
    Resolves: https://redhat.atlassian.net/browse/RHEL-182428


author: Vladis Dronov <vdronov@redhat.com> - 0.8.2-1
changelog:
  - Update to version 0.8.2
  - Drop patch 1-fix-man-page-installation.patch
  - Use SPDX license identifiers


author: Kalev Lember <klember@redhat.com> - 2:40~beta-2
changelog:
  - Drop libtool as-needed hack as as-needed is in default LDFLAGS now
  - Remove unneeded ldconfig_scriptlets macro call
  - Tighten soname globs


author: Patrik Novotný <panovotn@redhat.com> - 1.2.11-28
changelog:
  - IBM CRC32 optimalization rhbz#1959423
  - Enabled Z hardware-accelerated deflate for compression levels 1 through 6 (#1972057)


author: Matej Mužila <mmuzila@redhat.com> - 1.2.11-34
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.2.11-37
changelog:
  - Rebased Power 8 optimization patches
  - Fix for Unnecessary IFUNC resolver for crc32_z
  - Fix for python3.11 broken libxml2 and lxml on s390x


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-1
changelog:
  - Rebase to 0.13.71
  - Drop the CVE patches, they are now part of the upstream package
  - Build no longer requires python2
  - Resolves: 1807565


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-7
changelog:
  - Remove the doc/zzipdoc/{options,match}.py scritps from the original tar
  - Replace them with a current github version
  - The original version of the files contains autogenerated header with incompatible license
  - This build thus uses modified tar archive
  Resolves: rhbz#1982241


