# changelog

author: Miro Hrončok <mhroncok@redhat.com> - 0.29.22-2
changelog:
  - Remove an obsoleted patch
  - Remove old Obsoletes and Conflicts
  - Update description
  - Provide cython, python3-cython


author: Tomas Orsava <torsava@redhat.com> - 0.29.22-6
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Martin Kolman <mkolman@redhat.com> - 34.25.5.8-1
changelog:
  - Use proxy server also for FTP .treeinfo download (jkonecny)
    Resolves: RHEL-27938
  - Update translations from Weblate for rhel-9 (github-actions)


author: Martin Kolman <mkolman@redhat.com> - 34.25.5.9-1
changelog:
  - network: ignore kickstart configuration of nBFT devices (rvykydal)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - network: do not dump configurations of nBFT devices (rvykydal)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - network: ignore nBFT devices connections in network configuration (rvykydal)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - network: add a test for ignoring ifname=nbft* for device renaming (rvykydal)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - network: do not create empty dir for only ifname=nbft* options (rvykydal)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - network: Avoid creating link files for 'nbft' interfaces (tbzatek)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - Update translations from Weblate for rhel-9 (github-actions)


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.5.10-1
changelog:
  - Fix check for biosboot partition in GRUB2.check (vtrefny)
    Resolves: RHEL-55922
  - Ignore all storage errors when trying to activate swaps (vtrefny)
    Resolves: RHEL-55922


author: Martin Kolman <mkolman@redhat.com> - 34.25.5.11-1
changelog:
  - security: call /usr/libexec/fips-setup-helper (asosedkin)
    Resolves: RHEL-58667
  - release-notes: Document support for compressed kernel modules in Driver Discs
    (peter.georg)
    Related: RHEL-9913
  - Add documentation about support for compressed kernel modules (peter.georg)
    Resolves: RHEL-9913
  - dd_extract: Update test info to reflect added support for compressed kernel
    modules (peter.georg)
    Resolves: RHEL-9913
  - dd_extract: Add test for zstd compressed kernel module (peter.georg)
    Resolves: RHEL-9913
  - dd_extract: Add test for xz compressed kernel module (peter.georg)
    Resolves: RHEL-9913
  - dd_extract: Add support for compressed kernel modules (peter.georg)
    Resolves: RHEL-9913
  - New version - 34.25.5.10 (k.koukiou)


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.5.13-1
changelog:
  - security: require pykickstart version with %certificates support (rvykydal)
    Resolves: RHEL-61430
  - security: do not crash initramfs ks parsing on failing certificate dump
    (rvykydal)
    Resolves: RHEL-61430
  - security: add service to transfer certificates from initramfs (rvykydal)
    Resolves: RHEL-61430
  - security: import certificates in initramfs (rvykydal)
    Resolves: RHEL-61430
  - security: install certificates in pre-install phase only for dnf payload
    (rvykydal)
    Resolves: RHEL-61430
  - security: raise exception if certificate destination is unknown (rvykydal)
    Resolves: RHEL-61430
  - security: log a warning when dumping certificate over an existing file
    (rvykydal)
    Resolves: RHEL-61430
  - security: pre-install certificates before payload installation (rvykydal)
    Resolves: RHEL-61430
  - security: add API to install certificates early before payload (rvykydal)
    Resolves: RHEL-61430
  - security: install certificates on target system (rvykydal)
    Resolves: RHEL-61430
  - security: Add API for installation on target system (rvykydal)
    Resolves: RHEL-61430
  - security: import certificates early after Anaconda start (rvykydal)
    Resolves: RHEL-61430
  - security: add API to import certificates to Anaconda environment (rvykydal)
    Resolves: RHEL-61430
  - security: add API: Certificate getter (rvykydal)
    Resolves: RHEL-61430
  - kickstart: extend section specification for list of section data (rvykydal)
  - security: implement the support to install certificates to Anaconda
    (rvykydal)
    Resolves: RHEL-61430
  - translations: bump dependency to l10n repo because of branch switch
    (k.koukiou)
  - util: correct errors and suppress stderr for common cases (riehecky)
  - util: Add additional information for EFI systems (riehecky)
    Resolves: RHEL-55128


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.15-1
changelog:
  - security: add a development note for certificates import in initramfs
    (rvykydal)
    Related: RHEL-77155
  - security: do not issue warning on existing certificate file during dump
    (rvykydal)
    Resolves: RHEL-77155
  - network: pass NM global dns configuration to the installed system (rvykydal)
    Resolves: RHEL-71824
  - network: pass global dns initrd option to the installed system (rvykydal)
    Resolves: RHEL-71824


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.16-1
changelog:
  - network: add dnsconfd to selected packages if used in installer (rvykydal)
    Resolves: RHEL-79803
  - network: add dnsconfd to installer environment (rvykydal)
    Resolves: RHEL-79804


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.17-1
changelog:
  - network: start dnsconfd in initramfs (rvykydal)
    Resolves: RHEL-80303
  - network: enable dnsconfd service on installed system if required (rvykydal)
    Resolves: RHEL-80023
  - network: pass 16-dns-backend.conf to target system (rvykydal)
    Resolves: RHEL-80233
  - netowrk: enable dnsconfd service in installer environment (rvykydal)
    Resolves: RHEL-80023


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.1-1
changelog:
  - network: disable NM autoconnections also when BOOTIF is used (rvykydal)
    Resolves: RHEL-78272
  - network: support inst.net.noautodefault option (rvykydal)
    Related: RHEL-78272
  - security: fix dnsconfd backend option check in initramfs (rvykydal)
    Resolves: RHEL-83214
  - Support leavebootorder for bootupd (jkonecny)
    Resolves: RHEL-40897
  - bootupd: call bootupctl with --update-firmware (awilliam)
    Resolves: RHEL-40897


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.2-1
changelog:
  - Fix typo in systemd service (jstodola)
    Resolves: RHEL-78272
  - s390x - enable raid1 as a stage2 device (dan)
    Resolves: INSTALLER-4148
    Resolves: RHEL-21691
  - edns: restart dnsconfd only after the first kickstart parsing (rvykydal)
    Resolves: RHEL-82694
  - edns: allow dnsconfd name resolution for kickstart fetching (rvykydal)
    Resolves: RHEL-82694


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.3-1
changelog:
  - Sort RPM versions via rpm.labelCompare() and not via
    packaging.version.LegacyVersion() (miro)
    Resolves: RHEL-87358
  - rpm_ostree/installation.py: fix image deployment on s390x (rvykydal)
    Resolves: RHEL-63237
  - Add additional config_get Dracut function tests (jkonecny)
    Related: RHEL-48837
  - Update the tests/README.rst file (jkonecny)
    Related: RHEL-48837
  - Move shell testing to a separated directory (jkonecny)
    Related: RHEL-48837
  - Enable dynamic bash commands disable for tests (jkonecny)
    Related: RHEL-48837
  - Add test for config_get dracut function (jkonecny)
    Related: RHEL-48837
  - Fix trailing `/` when downloading stage2 image (jkonecny)
    Resolves: RHEL-48837
  - Fix whitespace chars broke Dracut config parsing (jkonecny)
    Related: RHEL-48837


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.4-1
changelog:
  - Revert "s390x - enable raid1 as a stage2 device" (jkonecny)
    Reverts: RHEL-21691
  - test_module_part_blivet: fix pylint disable (jkonecny)
    Related: RHEL-85416
  - pyanaconda: module.common.task fix cyclic import (jkonecny)
    Related: RHEL-85416
  - pyanaconda: module_manager: fix ciclic import (k.koukiou)
    Related: RHEL-85416
  - pyanaconda: bootloader: fix ImportError (k.koukiou)
    Related: RHEL-85416
  - ruff: enable isort rules and autofix all isort warnings Autofixed with: ruff
    check --exclude pyanaconda/core/kickstart/commands.py --fix --select I .
    (jkonecny)
    Resolves: RHEL-85416
  - Add ruff, a very fast linter (vslavik)
    Related: RHEL-85416
  - Relabel /var/log/ and /root/original-ks.cfg (champetier.etienne)
    Resolves: RHEL-85298


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.5-1
changelog:
  - bootloader: drop write_config_console, just preserve console= (awilliam)
    Resolves: RHEL-98670
  - payload/rpm-ostree: Include program output in exception (walters)
    Resolves: RHEL-45184


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.6-1
changelog:
  - Fix vconsole layout doesn't work for ostree (jkonecny)
    Resolves: RHEL-101057
  - test: make dnf substitutions test check only relevant values (rvykydal)
  - test: add new substitution members in dnf tests (rvykydal)


author: Neal Gompa <ngompa@centosproject.org> - 0.15.5-2
changelog:
  - Create symlinks manually to make it build
    (the symlinks were not created because of reverting the patch to
    upgrade to Meson 0.62)


author: Neal Gompa <ngompa@centosproject.org> - 0.16.1-1
changelog:
  - Rebase to 0.16.1
    Resolves: rhbz#2169103
  - Drop unneeded downstream hacks to build with older Meson


author: Parag Nemade <pnemade AT redhat DOT com> - 0.31.1-61
changelog:
  - Resolves: CVE-2019-19004 : integer overflow in input-bmp.c
  - Resolves: CVE-2019-19005 : fix bitmap double free in main.c


author: Parag Nemade <pnemade AT redhat DOT com> - 0.31.1-65
changelog:
  - Resolves: rhbz#2121828 Fix the gating tests by using only local test
    Upstream testsuite will not work as this package code is very old


author: Michal Sekletar <msekleta@redhat.com> - 0.8-21
changelog:
  - fix file attributes on /run/avahi-daemon (RHEL-5633)
  - avahi-client: fix resource leak (RHEL-27722)
  - fix resource leak in avahi_time_event_queue_new (RHEL-27717)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-6
changelog:
  - Bound the amount of work performed for delegations (CVE-2022-2795)
  - Add /usr/lib/named to bind-chroot (#2129466)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-9
changelog:
  - Prevent flooding with UPDATE requests (CVE-2022-3094)
  - Handle RRSIG queries when server-stale is active (CVE-2022-3736)
  - Fix crash when soft-quota is reached and serve-stale is active (CVE-2022-3924)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-16
changelog:
  - Prevent increased CPU load on large DNS messages (CVE-2023-4408)
  - Prevent assertion failure when nxdomain-redirect is used with
   RFC 1918 reverse zones (CVE-2023-5517)
  - Prevent assertion failure if DNS64 and serve-stale is used (CVE-2023-5679)
  - Specific recursive query patterns may lead to an out-of-memory
    condition (CVE-2023-6516)
  - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
    CVE-2023-50868)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-22
changelog:
  - Resolve CVE-2024-1975
  - Resolve CVE-2024-1737
  - Resolve CVE-2024-4076
  - Add ability to change runtime limits for max types and records per name


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.27-2
changelog:
  - Disable building of DLZ packages
  - Conflict explicitly with more bind subpackages
  - Merge license subpackage into libs


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-2
changelog:
  - Backport nsupdate TLS support into 9.18 (RHEL-76331)
  - Update nsupdate manual about new TLS options
  - Test nsupdate TLS support


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-3
changelog:
  - Limit additional section records CPU processing (CVE-2024-11187)
  - Read HTTPS requests in limited chunks and prevent overload (CVE-2024-12705)


author: Hans de Goede <hdegoede@redhat.com> - 5.56-3
changelog:
  - Drop obsolete udev rule + systemd service to call btattach on BT-HCIs
    connected via UART from userspace, this is all handled in the kernel now
  - Add the btmgmt util to the packaged files


author: Patrick Palka <ppalka@redhat.com> - 1.75.0-9
changelog:
  - Apply upstream Boost.Asio patch to resolve RHEL-67973
  - Fix %patch directive compatibility with RPM 4.20


author: Jonathan Wakely <jwakely@redhat.com> - 1.75.0-7
changelog:
  - Build with zstd support (#2091041)
  - Fix rpminspect CI warnings about missing versioned dependencies


author: Alexander Bokovoy <abokovoy@redhat.com> - 6.11-1
changelog:
  - Update to v6.11 release
  - Resolves: rhbz#1876400 - CVE-2020-14342 - cifs-utils: shell command injection


author: Jonathan Lebon <jonathan@jlebon.com> - 6.11-2
changelog:
  - Split out -info subpackage for smb2-quota and smbinfo
    https://bugzilla.redhat.com/show_bug.cgi?id=1909288


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: Jan Friesse <jfriesse@redhat.com> - 3.1.4-1
changelog:
  - Related: rhbz#1948974
  - Resolves: rhbz#1967485

  - New upstream release (rhbz#1948974)
  - stats: fix crash when iterating over deleted keys (rhbz#1967485)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-3
changelog:
  - Resolves: rhbz#2024652
  - Resolves: rhbz#2024657

  - totem: Add cancel_hold_on_retransmit config option (rhbz#2024652)
  - merge upstream commit cdf72925db5a81e546ca8e8d7d8291ee1fc77be4 (rhbz#2024652)
  - totemsrp: Switch totempg buffers at the right time (rhbz#2024657)
  - merge upstream commit e7a82370a7b5d3ca342d5e42e25763fa2c938739 (rhbz#2024657)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-4
changelog:
  - Resolves: rhbz#2070623

  - logrotate: Use copytruncate method by default (rhbz#2070623)
  - merge upstream commit 04362046c4a9d7307feb5b68341d567b7d0b94d6 (rhbz#2070623)


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.2-2
changelog:
  - Fix an assertion failure in the gdb's copy_type()
  - Fix for "bt" command printing "bogus exception frame" warning


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.4-2
changelog:
  - Fix the "dis -lr" not displaying the source file names
    and line numbers
  - Fix incorrect symbol translation by the 'struct blk_mq_ops'


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-2
changelog:
  - vmware_guestdump: Version 7 support
  - Fix incorrect task state during exit
  - Add multi-threads support in crash target
  - Call cmd_bt silently after "set pid"
  - x86_64: Add gdb multi-stack unwind support
  - arm64: Add gdb multi-stack unwind support
  - ppc64: Add gdb multi-stack unwind support
  - Fix the issue of "page excluded" messages flooding
  - Fix "kmem -p" option on Linux 6.16-rc1 and later kernels


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-3
changelog:
  - x86_64: filter unwanted warning message for "bt -T" cmd
  - doc: Update requirements for building on Fedora
  - gdb: Fix a regression for eppic extension on gdb-16.2
  - Fix crash initialization failure on LoongArch with recent GDB versions
  - gdb: Disable DT_DEBUG lookup by GDB inside the vmcore


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.8-9
changelog:
  - Subpackage python2-dbus has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-14
changelog:
  - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
  - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-1
changelog:
  - Rebase to edk2-stable202405
  - Bumo openssl to 8e5beb77088b
  - Resolves: RHEL-32486
    (rebase to edk2-stable202405 [rhel-9])
  - Resolves: RHEL-36446
    (edk2: enable MOR [rhel-9])
  - Resolves: RHEL-21653
    (CVE-2023-6237 edk2: openssl: Excessive time spent checking invalid RSA public keys [rhel-9])
  - Resolves: RHEL-21150
    (CVE-2023-6129 edk2: mysql: openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC)
  - Resolves: RHEL-22490
    (CVE-2024-0727 edk2: openssl: denial of service via null dereference [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-2
changelog:
  - edk2-MdeModulePkg-Warn-if-out-of-flash-space-when-writing.patch [RHEL-43442]
  - Resolves: RHEL-43442
    (edk2 disconnects abnormally before loading the kernel)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-3
changelog:
  - edk2-NetworkPkg-DxeNetLib-adjust-PseudoRandom-error-loggi.patch [RHEL-45899]
  - edk2-NetworkPkg-DxeNetLib-Reword-PseudoRandom-error-loggi.patch [RHEL-45899]
  - Resolves: RHEL-45899
    ([RHEL-9.5.0] edk2 hit Failed to generate random data)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-4
changelog:
  - edk2-AmdSevDxe-Fix-the-shim-fallback-reboot-workaround-fo.patch [RHEL-56081]
  - Resolves: RHEL-56081
    ([EDK2] Shim fallback reboot workaround might not work on SNP)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-5
changelog:
  - edk2-UefiCpuPkg-PiSmmCpuDxeSmm-skip-PatchInstructionX86-c.patch [RHEL-45847]
  - Resolves: RHEL-45847
    ([RHEL9.5] Hotplug vcpu to a guest cause guest kernel panic)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-6
changelog:
  - edk2-OvmfPkg-CpuHotplugSmm-delay-SMM-exit.patch [RHEL-56974]
  - edk2-Bumped-openssl-submodule-version-to-0205b5898872.patch [RHEL-55336]
  - Resolves: RHEL-56974
    (qemu-kvm: warning: Blocked re-entrant IO on MemoryRegion: acpi-cpu-hotplug at addr: 0x0 [rhel-9])
  - Resolves: RHEL-55336
    (CVE-2024-6119 edk2/openssl: Possible denial of service in X.509 name checks [rhel-9.5])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-7
changelog:
  - edk2-OvmfPkg-VirtioGpuDxe-ignore-display-resolutions-smal.patch [RHEL-56248]
  - edk2-OvmfPkg-QemuVideoDxe-ignore-display-resolutions-smal.patch [RHEL-56248]
  - edk2-MdePkg-Fix-overflow-issue-in-BasePeCoffLib.patch [RHEL-60833]
  - Resolves: RHEL-56248
    (507x510 display resolution should not crash the firmware [edk2,rhel-9.6])
  - Resolves: RHEL-60833
    (CVE-2024-38796 edk2: Integer overflows in PeCoffLoaderRelocateImage [rhel-9.6])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-8
changelog:
  - edk2-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-65725]
  - Resolves: RHEL-65725
    ([Regression] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-9
changelog:
  - edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66230]
  - Resolves: RHEL-66230
    ([Regression] [aarch64] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6])


author: Jon Maloy <jmaloy@redhat.com> - 20240524-10
changelog:
  - edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-58631]
  - Resolves: RHEL-58631
    ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20241117-2
changelog:
  - edk2-Fix-amd-sev-firmware-file-for-amd-snp.patch [RHEL-72447]
  - Resolves: RHEL-72447
    ( QEMU should creating new json file that will correctly describe firmware for amd-sev-snp [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 20241117-3
changelog:
  - edk2-OvmfPkg-Use-the-OvmfPkg-version-of-CcProbeLib.patch [RHEL-70865]
  - edk2-Update-dbx-revocation-list-to-2025-02-24-version.patch [RHEL-83019]
  - Resolves: RHEL-70865
    (SNP guest failed to boot with SVSM using OVMF.amdsev.fd [rhel-9.7])
  - Resolves: RHEL-83019
    (The newer revocation file and Server 2025 required to update it [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20241117-4
changelog:
  - edk2-update-dbx-to-20250610.patch [RHEL-96869]
  - Resolves: RHEL-96869
    ([edk2,rhel-9] dbx update 20250610)


author: Jon Maloy <jmaloy@redhat.com> - 20241117-5
changelog:
  - edk2-MdePkg-Acpi66.h-Add-ACPI-6.6-header.patch [RHEL-109010]
  - edk2-OvmfPkg-WorkArea.h-Add-MAILBOX_GDT.patch [RHEL-109010]
  - edk2-OvmfPkg-Add-the-Test-command-in-TDX-MailBox.patch [RHEL-109010]
  - edk2-OvmfPkg-Add-the-ResetVector-in-TDX-MailBox.patch [RHEL-109010]
  - edk2-OvmfPkg-TdxDxe-Support-5-level-paging-for-ResetVecto.patch [RHEL-109010]
  - edk2-OvmfPkg-IoMmuDxe-Fix-1M-and-2M-buffer-handling.patch [RHEL-69780]
  - Resolves: RHEL-109010
    (TD guest dmesg reports ACPI BIOS Warning (bug): Incorrect checksum in table [APIC] - 0x29)
  - Resolves: RHEL-69780
    (Fail to create AMD SEV SLES 15 SP4 guest via virt-install --cdrom [rhel-9.8])


author: Milan Crha <mcrha@redhat.com> - 3.40.4-10
changelog:
  - Related: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add dependency on newly introduced evolution-data-server-ui


author: Milan Crha <mcrha@redhat.com> - 3.40.4-4
changelog:
  - Resolves: #2071056 (Addressbook: Switch from GData Contacts API to CardDAV API for Google books)
  - Resolves: #2071742 (Add patch to use correct colors in mail preview with webkit2gtk3 2.36.x)


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: #2129703 (EShellWindow: The 'New' menu is not filled after start)
  - Correct Requires for the 'devel' subpackage to enchant-2


author: Debarshi Ray <rishi@fedoraproject.org> - 1.12.4-2
changelog:
  - Don't try to add Fedora's OCI Flatpak repository on RHEL
  - Remove an obsolete Fedora-specific update path
  Resolves: #2051697


author: Kalev Lember <klember@redhat.com> - 1.12.9-2
changelog:
  - Backport upstream patches for CVE-2024-42472
  - Require bubblewrap version that has new --bind-fd option backported for
    addressing CVE-2024-42472


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Parag Nemade <pnemade AT redhat DOT com> - 20201107-1
changelog:
  - Update to 20201107 version (#1895648)
  - removed %gittag0 macro, as it cause problem to automated package update script


author: Richard Hughes <richard@hughsie.com> 1.5.9-4
changelog:
  - Rebuilt to use redhatsecureboot503 signatures
  - Undo last Fedora sync to use the RHEL-specific patches
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.1-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Dell TBT4 Docking stations
  - Resolves: rhbz#1974347
  - Resolves: rhbz#1991426


author: Richard Hughes <richard@hughsie.com> 1.7.4-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Lenovo TBT4 Docking stations
  - Do not cause systemd-modules-load failures
  - Build against a new enough pesign
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.4-3
changelog:
  - Disable the Logitech bulkcontroller plugin to avoid adding a dep to protobuf-c
    which lives in AppStream, not BaseOS.
  - Use the efi_vendor variable from EFI-RPM
  - Resolves: rhbz#2064904


author: Richard Hughes <rhughes@redhat.com> 1.7.9-2
changelog:
  - Include the new dbx updates on the filesystem; clients typically do not have LVFS enabled.
  - Resolves: rhbz#2120708


author: Richard Hughes <richard@hughsie.com> 1.8.10-1
changelog:
  - Rebase to latest upstream release to fix multiple ESP detection problems
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.8.10-2
changelog:
  - Rebuild because distrobaker did entirely the wrong thing.
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Marek Polacek <polacek@redhat.com> 11.3.1-4
changelog:
  - update from releases/gcc-11-branch (#2117632)
    - PRs analyzer/105252, analyzer/105365, analyzer/105366, c++/65211,
  	c++/82980, c++/86193, c++/90107, c++/97296, c++/101442, c++/101698,
  	c++/102071, c++/102177, c++/102300, c++/102307, c++/102479,
  	c++/102629, c++/104066, c++/104142, c++/104646, c++/104669,
  	c++/105245, c++/105265, c++/105289, c++/105304, c++/105321,
  	c++/105386, c++/105398, c++/105725, c++/105761, c++/105774,
  	c++/105795, c++/105852, c++/105925, c++/106024, c++/106361,
  	c++/107358, c/41041, c/106016, c/106981, c/107001, d/106139,
  	d/106638, debug/106261, fortran/82868, fortran/100029, fortran/100040,
  	fortran/100097, fortran/100098, fortran/100132, fortran/100136,
  	fortran/100245, fortran/103413, fortran/103504, fortran/103693,
  	fortran/103694, fortran/104313, fortran/104849, fortran/105012,
  	fortran/105230, fortran/105243, fortran/105310, fortran/105633,
  	fortran/105691, fortran/105813, fortran/105954, fortran/106121,
  	fortran/106817, fortran/106857, fortran/106985, fortran/106986,
  	fortran/107054, ipa/100413, ipa/105600, ipa/105739, libgomp/106045,
  	libstdc++/65018, libstdc++/84110, libstdc++/93602, libstdc++/96592,
  	libstdc++/99290, libstdc++/100823, libstdc++/101709, libstdc++/102447,
  	libstdc++/103664, libstdc++/103848, libstdc++/103853,
  	libstdc++/103911, libstdc++/103992, libstdc++/104217,
  	libstdc++/104443, libstdc++/104602, libstdc++/104731,
  	libstdc++/105128, libstdc++/105284, libstdc++/105375,
  	libstdc++/105502, libstdc++/105671, libstdc++/105915,
  	libstdc++/106162, libstdc++/106248, libstdc++/106320,
  	libstdc++/106607, libstdc++/106695, lto/106334, lto/106540,
  	middle-end/103193, middle-end/104869, middle-end/104966,
  	middle-end/105140, middle-end/105998, middle-end/106027,
  	middle-end/106030, middle-end/106144, middle-end/106331,
  	middle-end/106492, preprocessor/97498, preprocessor/105732,
  	rtl-optimization/104637, rtl-optimization/105041,
  	rtl-optimization/105333, rtl-optimization/105559,
  	rtl-optimization/106032, rtl-optimization/106187, sanitizer/105396,
  	sanitizer/105729, target/96072, target/99184, target/99685,
  	target/101322, target/101891, target/102059, target/102146,
  	target/103197, target/103353, target/104257, target/104829,
  	target/105147, target/105162, target/105209, target/105292,
  	target/105339, target/105349, target/105463, target/105472,
  	target/105854, target/105879, target/105970, target/105981,
  	target/106017, target/106091, target/106355, target/106491,
  	target/106721, target/107061, target/107064, target/107183,
  	target/107248, target/107304, target/107364, target/107748,
  	testsuite/105095, testsuite/105266, testsuite/105433,
  	testsuite/106345, tree-optimization/103116, tree-optimization/105148,
  	tree-optimization/105163, tree-optimization/105173,
  	tree-optimization/105250, tree-optimization/105263,
  	tree-optimization/105312, tree-optimization/105368,
  	tree-optimization/105431, tree-optimization/105437,
  	tree-optimization/105528, tree-optimization/105618,
  	tree-optimization/105726, tree-optimization/105860,
  	tree-optimization/106112, tree-optimization/106131,
  	tree-optimization/106189, tree-optimization/106513,
  	tree-optimization/106892, tree-optimization/106934
  - fix the detection of Sapphire Rapids in host_detect_local_cpu
  - fix -Wmismatched-dealloc documentation (#2116635)


author: Marek Polacek <polacek@redhat.com> 11.4.1-2
changelog:
  - update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release
    - PRs bootstrap/90543, c++/53932, c++/69410, c++/92752, c++/98056,
  	c++/98821, c++/100295, c++/100474, c++/101118, c++/101869,
  	c++/102780, c++/103871, c++/104527, c++/105406, c++/105996,
  	c++/106188, c++/106675, c++/106713, c++/106740, c++/107065,
  	c++/107163, c++/107179, c++/107558, c++/107579, c++/107864,
  	c++/108138, c++/108180, c++/108365, c++/108468, c++/108474,
  	c++/108607, c++/108975, c++/108998, c++/109096, c++/109164, c/107127,
  	c/107465, c/109151, d/107592, d/108050, d/108877, d/109108,
  	debug/106719, debug/108573, debug/108716, debug/108967, driver/106624,
  	fortran/85877, fortran/95107, fortran/96024, fortran/96025,
  	fortran/99036, fortran/103259, fortran/104332, fortran/106209,
  	fortran/106945, fortran/107576, fortran/107872, fortran/108131,
  	fortran/108349, fortran/108420, fortran/108421, fortran/108451,
  	fortran/108453, fortran/108501, fortran/108502, fortran/108527,
  	fortran/108529, fortran/108609, fortran/108937, fortran/109186,
  	fortran/109511, fortran/109846, ipa/105685, ipa/106124, ipa/107944,
  	libquadmath/87204, libquadmath/94756, libstdc++/91456,
  	libstdc++/103934, libstdc++/104866, libstdc++/104875,
  	libstdc++/105844, libstdc++/106183, libstdc++/107801,
  	libstdc++/107814, libstdc++/108030, libstdc++/108118,
  	libstdc++/108265, libstdc++/108636, libstdc++/108856,
  	libstdc++/108952, libstdc++/109064, libstdc++/109261,
  	libstdc++/109949, lto/109263, middle-end/104450, middle-end/104464,
  	middle-end/106190, middle-end/107317, middle-end/108237,
  	middle-end/108264, middle-end/108435, middle-end/108459,
  	middle-end/108546, middle-end/108625, middle-end/108685,
  	middle-end/108854, other/108560, other/109306,
  	rtl-optimization/106751, rtl-optimization/107482,
  	rtl-optimization/108193, rtl-optimization/108596,
  	rtl-optimization/109585, target/70243, target/90458, target/96373,
  	target/98776, target/100758, target/104871, target/104921,
  	target/105554, target/105599, target/106736, target/106875,
  	target/107568, target/107714, target/107863, target/108272,
  	target/108348, target/108589, target/108699, target/108807,
  	target/108812, target/108881, target/109067, target/109140,
  	target/109276, testsuite/47334, testsuite/103823, testsuite/108151,
  	testsuite/108973, testsuite/108985, tree-optimization/105484,
  	tree-optimization/106809, tree-optimization/107107,
  	tree-optimization/107212, tree-optimization/107254,
  	tree-optimization/107323, tree-optimization/107451,
  	tree-optimization/107554, tree-optimization/107898,
  	tree-optimization/107997, tree-optimization/108068,
  	tree-optimization/108076, tree-optimization/108095,
  	tree-optimization/108199, tree-optimization/108498,
  	tree-optimization/108688, tree-optimization/108692,
  	tree-optimization/108821, tree-optimization/108950,
  	tree-optimization/109176, tree-optimization/109410,
  	tree-optimization/109473, tree-optimization/109491,
  	tree-optimization/109502, tree-optimization/109573,
  	tree-optimization/109724, tree-optimization/109778
    - PRs fortran/100607, libstdc++/109822, target/109954,
  	tree-optimization/109505


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Marek Polacek <polacek@redhat.com> 11.5.0-1
changelog:
  - update from releases/gcc-11 branch (RHEL-35635)
    - GCC 11.5 release
    - PRs ada/113893, ada/113979, analyzer/104042, c/113262, c/114007, c/114493,
  	c++/89224, c++/92145, c++/92407, c++/97990, c++/99710, c++/100667,
  	c++/100772, c++/101765, c++/103185, c++/104051, c++/111485,
  	c++/111529, c++/113598, c++/113674, c++/114537, c++/114561,
  	c++/114562, c++/114572, c++/114634, c++/114691, d/113125, d/113758,
  	d/114171, debug/111080, debug/112718, driver/115440, fortran/50410,
  	fortran/103715, fortran/104908, fortran/107426, fortran/114474,
  	fortran/114825, gcov-profile/114115, libfortran/110651,
  	libgomp/113192, libquadmath/114533, libstdc++/104259,
  	libstdc++/104606, libstdc++/105417, libstdc++/110054,
  	libstdc++/113250, libstdc++/114147, libstdc++/114401,
  	libstdc++/114750, libstdc++/114803, libstdc++/115269,
  	libstdc++/115454, libstdc++/115575, middle-end/90348,
  	middle-end/95351, middle-end/107385, middle-end/108789,
  	middle-end/110027, middle-end/110115, middle-end/110176,
  	middle-end/111422, middle-end/111632, middle-end/112732,
  	middle-end/113907, middle-end/113921, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/115527,
  	middle-end/115836, objc/101666, objc/101718, preprocessor/105608,
  	rtl-optimization/100303, rtl-optimization/108086,
  	rtl-optimization/110079, rtl-optimization/114768,
  	rtl-optimization/114902, rtl-optimization/115092, sanitizer/97696,
  	sanitizer/111736, sanitizer/114956, sanitizer/115172, target/88309,
  	target/101737, target/101865, target/105522, target/108120,
  	target/108743, target/110411, target/111610, target/111677,
  	target/112397, target/113122, target/113281, target/114049,
  	target/114098, target/114130, target/114184, target/114310,
  	target/114837, target/114846, target/115253, target/115297,
  	target/115360, target/115457, target/115475, target/115611,
  	target/115691, testsuite/113175, testsuite/114034, testsuite/114036,
  	tree-optimization/110386, tree-optimization/110422,
  	tree-optimization/111039, tree-optimization/111070,
  	tree-optimization/111331, tree-optimization/111407,
  	tree-optimization/111445, tree-optimization/111736,
  	tree-optimization/112495, tree-optimization/112505,
  	tree-optimization/112793, tree-optimization/113372,
  	tree-optimization/113552, tree-optimization/113603,
  	tree-optimization/114027, tree-optimization/114115,
  	tree-optimization/114566, tree-optimization/114876,
  	tree-optimization/115192, tree-optimization/115337,
  	tree-optimization/115843
  - fix FLUSH IOSTAT value (PR libfortran/101255, RHEL-32536)
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960)


author: Marek Polacek <polacek@redhat.com> 11.5.0-2
changelog:
  - fix TARGET_CPU_DEFAULT (PR target/105157, RHEL-50037)
  - libstdc++: Workaround kernel-headers on s390x-linux (RHEL-50054)
  - fix wrong code with memcpy from _Complex (PR tree-optimization/116034)


author: Bastien Nocera <bnocera@redhat.com> - 3.34.3-4
changelog:
  + gnome-bluetooth-3.34.3-4
  - Revert “Require PulseAudio _or_ Pipewire for Bluetooth audio”
  - Closes: #1928166


author: Milan Crha <mcrha@redhat.com> - 41.0-2
changelog:
  - Resolves: #2012699 (Backport changes from Fedora 35)
  - Add patch to mark compulsory only repos, not apps from it
  - Resolves: #2011176 (flathub repo can't be added through gnome-software)
  - Resolves: #2010660 (gs-repos-dialog: Can show also desktop applications)
  - Resolves: #2010353 (Optional repos cannot be disabled)
  - Resolves: #2010740 (Refresh on repository setup change)
  - Resolves: #2009063 (Correct update notifications)


author: Milan Crha <mcrha@redhat.com> - 41.5-2
changelog:
  - Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file)
  - Resolves: #2129021 (Hide some errors in non-debug builds)


author: David King <amigadave@amigadave.com> - 1.68.0-6
changelog:
  - Add Requires on python-markdown for g-ir-doc-tool (#1979144)
  - Add license texts and documentation files (#1979144)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.44.0-19
changelog:
  - Conditionalized guile support
    Resolves: rhbz#1953974
  - Updated RHEL macros
    Resolves: rhbz#1957653


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-2.el9
changelog:
  - macvlan: Add bclim parameter (Andrea Claudi) [2186945]
  - Update kernel headers (Andrea Claudi) [2186945]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-5.el9
changelog:
  - tc: add missing separator (Andrea Claudi) [RHEL-337]
  - u32: fix TC_U32_TERMINAL printing (Andrea Claudi) [RHEL-586]


author: Andrea Claudi <aclaudi@redhat.com> - 5.13.0-5.el9
changelog:
  - Add build and runtime dependency on libbpf (Andrea Claudi) [1994520]
  - Use TC_LIB_DIR environment variable (Andrea Claudi) [1994545]
  - Re-add iproute-doc package on the specfile (Andrea Claudi) [1994581]


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-3
changelog:
  - Rebase FIPS patches from fips branch and simplify by using a single patch from that repository
  - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
  - * RH2090378: Revert to disabling system security properties and FIPS mode support together
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Perform configuration changes (e.g. nss.cfg, nss.fips.cfg, tzdb.dat) in installjdk
  - Enable system security properties in the RPM (now disabled by default in the FIPS repo)
  - Improve security properties test to check both enabled and disabled behaviour
  - Run security properties test with property debugging on
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Resolves: rhbz#2099801
  - Resolves: rhbz#2100678


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b06-0.1.ea
changelog:
  - Update to shenandoah-jdk8u342-b06 (EA)
  - Update release notes for shenandoah-8u342-b06.
  - Switch to EA mode for 8u342 pre-release builds.
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Remove redundant "REPOS" variable from tarball script
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Resolves: rhbz#2083322


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-2
changelog:
  - Update to shenandoah-jdk8u342-b07 (GA)
  - Update release notes for 8u342-b07.
  - Switch to GA mode for final release.
  - Resolves: rhbz#2106509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-2
changelog:
  - Update to shenandoah-jdk8u345-b01 (GA)
  - Update release notes for 8u345-b01.
  - Resolves: rhbz#2112405


author: Stephan Bergmann <sbergman@redhat.com> - 1:1.8.0.345.b01-3
changelog:
  - Disable copy-jdk-configs for Flatpak builds
  - Fix flatpak builds by exempting them from bootstrap
  - Resolves: rhbz#2102727


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-4
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2121273


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-5
changelog:
  - Allow the default keystore to be configured using security.systemCACerts
  - Use of the property can now be disabled using -Dsecurity.systemCACerts=
  - Move cacerts replacement to install section and retain original of this and tzdb.dat
  - Resolves: rhbz#2077006


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b07-0.2.ea
changelog:
  - Update to shenandoah-jdk8u352-b07 (EA)
  - Update release notes for shenandoah-8u352-b07.
  - Switch to EA mode for 8u352 pre-release builds.
  - Rebase FIPS patch against 8u352-b07
  - Resolves: rhbz#2130623


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Switch to GA mode for final release.
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b01-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b01 (EA)
  - Update release notes for shenandoah-8u362-b01.
  - Switch to EA mode for 8u362 pre-release builds.
  - Drop JDK-8195607/PR3776/RH1760437 now this is upstream
  - Related: rhbz#2150196


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b07 (EA)
  - Update release notes for shenandoah-8u362-b07.
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150196


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-3
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Fix broken links and missing release notes in older releases.
  - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
    - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
    - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
    - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-3
changelog:
  - Update cacerts patch to fix OPENJDK-1433 SecurityManager issue
  - Update to shenandoah-jdk8u352-b09 (GA)
  - Update release notes for shenandoah-8u352-b09.
  - Resolves: rhbz#2162714


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Resolves: rhbz#2150202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - Drop use of portable build on s390x due to libffi compatibility issue (needs libffi.so.6)
  - Related: rhbz#2150202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b05-0.2.ea
changelog:
  - Update to 8u442-b05 (EA).
  - Update release notes for 8u442-b05.
  - Switch to EA mode for pre-release.
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-73990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b05-0.3.ea
changelog:
  - Add zero_arches to the portable_build_arches now that the portable build bundles libffi
  - Temporarily workaround libffi.so not being in lib/%{archinstall} by copying it
  - Exclude libffi.so from the debugedit run
  - Add a simple -version check on both the JDK and JRE bin/java
  - Add libffi.so to the filelist, including expanding the lib/%{archinstall} contents as with jre/lib
  - Sync the copy of the portable specfile and new patches with the latest update
  - Resolves: RHEL-74302


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b06-2
changelog:
  - Update to 8u442-b06 (GA)
  - Update release notes for 8u442-b06.
  - Switch to GA mode for final release
  - Revise JDK-8141590 backport to install libffi.so* in lib as well as jre/lib
  - Sync the copy of the portable specfile with the latest update
  - Remove libffi.so copying workaround now the portable build installs it in lib
  - Add bundled libffi.so to _privatelibs
  - Remove libffi.so copy if we are building on the same platform as the portable
  - Resolves: RHEL-73554
  - Related: RHEL-74302


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b06-3
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-73554
  - Related: RHEL-74302
  - Related: RHEL-73990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.452.b09-2
changelog:
  - Update to 8u452-b09 (GA)
  - Update release notes for 8u452-b09.
  - Remove long option documentation from JDK-8335912/JDK-8337499 as not present in 8u
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86967
  - Resolves: RHEL-86620


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-3
changelog:
  - Update to 8u462-b08 (GA)
  - Update release notes for 8u462-b08.
  - Require tzdata 2025b due to upstream inclusion of JDK-8352716
  - Add early backport of JDK-8339414
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-101648
  - Resolves: RHEL-102312
  - Resolves: RHEL-97496


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-4
changelog:
  - Bump rpmrelease for CentOS build
  - Remove obsolete hack to hardcode newer portable version on RHEL
  - Related: RHEL-101648
  - Related: RHEL-102312
  - Related: RHEL-97496


author: Francisco Ferrari Bihurriet <fferrari@redhat.com> - 1:11.0.15.0.10-3
changelog:
  - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
  - Resolves: rhbz#2102434


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.10-4
changelog:
  - Rebase FIPS patches from fips branch and simplify by using a single patch from that repository
  - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
  - * RH2090378: Revert to disabling system security properties and FIPS mode support together
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Enable system security properties in the RPM (now disabled by default in the FIPS repo)
  - Improve security properties test to check both enabled and disabled behaviour
  - Run security properties test with property debugging on
  - Resolves: rhbz#2099839
  - Resolves: rhbz#2100676


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.7-0.1.ea
changelog:
  - Add additional patch during tarball generation to align tests with ECC changes
  - Related: rhbz#2083325


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.7-0.1.ea
changelog:
  - Update to jdk-11.0.16+7
  - Update release notes to 11.0.16+7
  - Switch to EA mode for 11.0.16 pre-release builds.
  - Use same tarball naming style as java-17-openjdk and java-latest-openjdk
  - Drop JDK-8257794 patch now upstreamed
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Make use of the vendor version string to store our version & release rather than an upstream release date
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Resolves: rhbz#2083325


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-2
changelog:
  - Update to jdk-11.0.16+8
  - Update release notes to 11.0.16+8
  - Switch to GA mode for release
  - Resolves: rhbz#2106517


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-2
changelog:
  - Update to jdk-11.0.16.1+1
  - Update release notes to 11.0.16.1+1
  - Add patch to provide translations for Europe/Kyiv added in tzdata2022b
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2119528


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-3
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2121275


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.2.ea
changelog:
  - Update to jdk-11.0.17+1
  - Update release notes to 11.0.17+1
  - Switch to EA mode for 11.0.17 pre-release builds.
  - Bump HarfBuzz bundled version to 4.4.1 following JDK-8289853
  - Bump FreeType bundled version to 2.12.1 following JDK-8290334
  - Related: rhbz#2130619


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2
changelog:
  - Update to jdk-11.0.17+8 (GA)
  - Update release notes to 11.0.17+8
  - Switch to GA mode for release
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - The stdc++lib, zlib & freetype options should always be set from the global, so they are not altered for staticlibs builds
  - Remove freetype sources along with zlib sources
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.3.ea
changelog:
  - Update to jdk-11.0.18+1
  - Update release notes to 11.0.18+1
  - Switch to EA mode for 11.0.18 pre-release builds.
  - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
  - Drop local copy of JDK-8275535 which is finally upstream
  - Related: rhbz#2150197


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.3.ea
changelog:
  - Update to jdk-11.0.18+9
  - Update release notes to 11.0.18+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150197


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-3
changelog:
  - Update to jdk-11.0.18+10 (GA)
  - Update release notes to 11.0.18+10
  - Switch to GA mode for release
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Backport SHA-3 support for PKCS11 provider
  - Sync patch set with portable build we are using by removing rh1648644-java_access_bridge_privileged_security.patch
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-2
changelog:
  - Update to jdk-11.0.19.0+7
  - Update release notes to 11.0.19.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Rebase FIPS support against 11.0.19+6
  - Rebase RH1750419 alt-java patch against 11.0.19+6
  - Replace local copies of JDK portable binaries with build dependencies
  - Use portable build on x86_32 now one is available
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-3
changelog:
  - Revert "Restore native build for x86 as there is no portable build"
  - Reintroduce useful cleanups from x86 reversion
  - Adjust oj_vendor_version & oj_vendor_bug_url to match the portable so test passes
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-4
changelog:
  - Include the java-11-openjdk-portable.spec file with instructions on how to rebuild.
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1
changelog:
  - Update to jdk-11.0.20.0+8 (GA)
  - Update release notes to 11.0.20.0+8
  - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
  - Bump tzdata requirement to 2023c now it is available in the buildroot
  - Bump bundled LCMS version to 2.15 as in jdk-11.0.20+1.
  - Bump bundled HarfBuzz version to 7.0.1 as in jdk-11.0.20+7
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2217715
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-3
changelog:
  - Fix tzdata requirement copy-and-paste error that led to two BuildRequires and no Requires
  - Resolves: rhbz#2224420


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1
changelog:
  - Update to jdk-11.0.20.1+1 (GA)
  - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
  - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Resolves: rhbz#2236590


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.8.0.7-1
changelog:
  - Update to jdk-17.0.8+7 (GA)
  - Update release notes to 17.0.8+7
  - Switch to GA mode for final release.
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - * This tarball is embargoed until 2023-07-18 @ 1pm PT. *
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.8.1.1-1
changelog:
  - Update to jdk-17.0.8.1+1 (GA)
  - Update release notes to 17.0.8.1+1
  - Add backport of JDK-8312489 already upstream in 17.0.10 (see OPENJDK-2095)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Synchronise runtime and buildtime tzdata requirements
  - Resolves: rhbz#2236592


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.9.0.9-1
changelog:
  - Update to jdk-17.0.9+9 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Re-generate FIPS patch against 17.0.9+1 following backport of JDK-8209398
  - Bump libpng version to 1.6.39 following JDK-8305815
  - Bump HarfBuzz version to 7.2.0 following JDK-8307301
  - Bump freetype version to 2.13.0 following JDK-8306881
  - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  - Sync generate_tarball.sh with 11u version
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Use upstream release URL for OpenJDK source
  - Apply all patches using -p1
  - Temporarily turn off 'fresh_libjvm' due to removal of JVM_IsThreadAlive (JDK-8305425)
  - Add missing JFR and jpackage alternative ghosts
  - Move jcmd to the headless package
  - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
  - Resolves: RHEL-12228
  - Resolves: RHEL-13660
  - Resolves: RHEL-13665
  - Resolves: RHEL-3494
  - Resolves: RHEL-11317
  - Resolves: RHEL-3461


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.10.0.7-1
changelog:
  - Update to jdk-17.0.10+6 (EA)
  - fips-17u-d63771ea660.patch: Regenerate from gnu-andrew branch
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Append -ea designator when required
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash
  - generate_source_tarball.sh: shellcheck: Double-quote variable references
  - generate_source_tarball.sh: shellcheck: Do not use -a
  - generate_source_tarball.sh: shellcheck: Do not use $ in expression
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Add note on network usage of OPENJDK_LATEST
  - Related: RHEL-20997


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.10.0.7-1
changelog:
  - Update to jdk-17.0.10+7 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Move to -P<n> usage for patch macro which works on all RPM versions
  - Remove RH1648644 patch not in portable build (and so not applied to binary used)
  - Re-enable DEFAULT_PROMOTED_VERSION_PRE check disabled for the July 2023 release
  - generate_source_tarball.sh: Add --sort=name to tar invocation for reproducibility
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-20997


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.11.0.7-0.2.ea
changelog:
  - Update to jdk-17.0.11+7 (EA)
  - Update buildjdkver to match the featurever
  - Use featurever macro to specify fips patch
  - Explain patchN syntax situation in a comment
  - Sync generate_source_tarball.sh
  - Require tzdata 2023d (JDK-8322725)
  - openjdk_news.sh: Use grep -E instead of egrep
  - Remove RH1649512 patch for libjpeg-turbo FAR macro
  - Move pcsc-lite-libs patch to in-need-of-upstreaming section
  - Related: RHEL-30941


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.11.0.9-2
changelog:
  - Update to jdk-17.0.11+9 (GA)
  - Add openjdk-17.0.11+9.tar.xz to .gitignore
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Update buildver from 7 to 9
  - Update portablerelease from 1 to 3
  - Change is_ga from 0 to 1 to enable GA mode for release
  - Update tzdata Requires comment to mention that 2024a is not yet in the buildroot
  - Update tzdata BuildRequires comment to mention that 2024a is not yet in the buildroot
  - Update tzdata BuildRequires from 2023c to 2023d
  - Update sources from openjdk-17.0.11+7-ea.tar.xz to openjdk-17.0.11+9.tar.xz
  - Resolves: RHEL-30941
  - Resolves: RHEL-32421
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.12.0.7-3
changelog:
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9
  - Set rpmrelease to 3
  - Set portablesuffix to el9


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.1-0.2.ea
changelog:
  - Update to jdk-17.0.13+1 (EA)
  - Update .gitignore to ignore openjdk-17.0.13+1-ea.tar.xz
  - Synchronize java-17-openjdk-portable.specfile
  - Set updatever to 13
  - Set buildver to 1
  - Set is_ga to 0
  - Update sources to openjdk-17.0.13+1-ea.tar.xz
  - Related: RHEL-58785
  - Remove 0001-8332174-Remove-2-unpaired-RLO-Unicode-characters-in-.patch
  - Remove unicode section from rpminspect.yml, fixed instead by
    https://gitlab.cee.redhat.com/osci/rpminspect-data-redhat/-/merge_requests/180
    (OPENJDK-2904)
  - Related: RHEL-58785


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.9-0.1.ea
changelog:
  - Update to jdk-17.0.13+9 (EA)
  - Update .gitignore to ignore openjdk-17.0.13+9-ea.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9
  - Set buildver to 9
  - Set rpmrelease to 1
  - Set portablerelease to 1
  - Update sources to openjdk-17.0.13+9-ea.tar.xz
  - Related: RHEL-58785


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.10-0.1.ea
changelog:
  - Update to jdk-17.0.13+10 (EA)
  - Update .gitignore to ignore openjdk-17.0.13+10-ea.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9
  - Set buildver to 10
  - Update sources to openjdk-17.0.13+10-ea.tar.xz
  - Related: RHEL-58785


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.13.0.10-0.2.ea
changelog:
  - Vary portablesuffix depending on whether we are on RHEL ('el8') or CentOS ('el9')
  - Set rpmrelease to 2
  - Related: RHEL-58785


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.11-2
changelog:
  - Update to jdk-17.0.13+11 (GA)
  - Update .gitignore to ignore openjdk-17.0.13+11.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set buildver to 11
  - Set is_ga to 1
  - Update sources to openjdk-17.0.13+11.tar.xz
  - Resolves: RHEL-58785
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.13.0.11-4
changelog:
  - Set this to be the default/system JDK providing 'java', 'jre', 'java-devel', etc.
  - Set rpmrelease to 4
  - Resolves: RHEL-63034


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.1-0.2.ea
changelog:
  - Update to jdk-17.0.14+1 (EA)
  - Add to .gitignore openjdk-17.0.14+1-ea.tar.xz
  - Set updatever to 14
  - Set buildver to 1
  - Set rpmrelease to 2
  - Set is_ga to 0
  - Update sources to openjdk-17.0.14+1-ea.tar.xz
  - Double percent signs consistently throughout comments
  - Set bundled giflib provide version to 5.2.2
  - Set bundled libpng provide version to 1.6.43
  - Warn about bundled provide version bumps and backouts in openjdk_news.sh
  - Remove 0001-8332174-Remove-2-unpaired-RLO-Unicode-characters-in-.patch file
  - Revert: Use component in EPEL and Fedora bug URLs


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.7-2
changelog:
  - Update to jdk-17.0.14+7 (GA)
  - Add to .gitignore openjdk-17.0.14+7.tar.xz
  - Set buildver to 7
  - Set is_ga to 1
  - Update sources to openjdk-17.0.14+7.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Resolves: RHEL-73981
  - Resolves: RHEL-73559
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.15.0.6-2
changelog:
  - Update to jdk-17.0.15+6 (GA)
  - Add to .gitignore openjdk-17.0.15+6.tar.xz
  - Set updatever to 15
  - Set buildver to 6
  - Update sources to openjdk-17.0.15+6.tar.xz
  - Set bundled freetype provide version to 2.13.2
  - Set bundled harfbuzz provide version to 8.2.2
  - Require tzdata-java 2025a at runtime and for build
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Update FIPS patch
  - Resolves: RHEL-86627
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.16.0.8-2
changelog:
  - Update to jdk-17.0.16+8
  - Add to .gitignore openjdk-17.0.16+8.tar.xz
  - Set updatever to 16
  - Set buildver to 8
  - Set rpmrelease to 2
  - Update sources to openjdk-17.0.16+8.tar.xz
  - Resolves: RHEL-101788
  - Resolves: RHEL-101795
  - Resolves: RHEL-101796
  - Resolves: RHEL-101797
  - Resolves: RHEL-102283
  - Resolves: RHEL-102286
  - Resolves: RHEL-102285
  - Resolves: RHEL-102284
  - Require tzdata-java 2025b at runtime and for build
  - Set bundled freetype provide version to 2.13.3
  - Set bundled harfbuzz provide version to 10.4.0
  - Set bundled lcms2 provide version to 2.17.0
  - Set bundled libpng provide version to 1.6.47
  - Recommend pipewire
  - Related: RHEL-102667
  - Resolves: RHEL-102669
  - Resolves: RHEL-102670
  - Resolves: RHEL-102672
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.2.0.13-1
changelog:
  - Update to jdk-21.0.2+13 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Bump libpng version to 1.6.40 following JDK-8316030
  - Bump HarfBuzz version to 8.2.2 following JDK-8313643
  - Drop local JDK-8311630 patch which is now upstream
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-20999


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.3+1 (EA)
  - Update release notes to 21.0.3+1
  - Switch to EA mode
  - Require tzdata 2023d due to upstream inclusion of JDK-8322725
  - Bump FreeType version to 2.13.2 following JDK-8316028
  - Related: RHEL-30946


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.2.ea
changelog:
  - Install alt-java man page from the misc tarball as it is no longer in the JDK image
  - generate_source_tarball.sh: Update examples in header for clarity
  - generate_source_tarball.sh: Cleanup message issued when checkout already exists
  - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
  - generate_source_tarball.sh: Only add --depth=1 on non-local repositories
  - Move maintenance scripts to a scripts subdirectory
  - discover_trees.sh: Set compile-command and indentation instructions for Emacs
  - discover_trees.sh: shellcheck: Do not use -o (SC2166)
  - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: Add authorship
  - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
  - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
  - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: Set compile-command and indentation instructions for Emacs
  - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
  - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
  - generate_source_tarball.sh: Output values of new options WITH_TEMP and OPENJDK_LATEST
  - generate_source_tarball.sh: Double-quote DEPTH reference (SC2086)
  - generate_source_tarball.sh: Avoid empty DEPTH reference while still appeasing shellcheck
  - Related: RHEL-30946


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.3.0.1-0.2.ea
changelog:
  - Invoke xz in multi-threaded mode
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Append -ea designator when required
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Fix -ea logic to add dash
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
  - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
  - Use backward-compatible patch syntax
  - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
  - generate_source_tarball.sh: Fix whitespace
  - generate_source_tarball.sh: Remove trailing period in echo
  - generate_source_tarball.sh: Use long-style argument to grep
  - generate_source_tarball.sh: Add license
  - generate_source_tarball.sh: Add indentation instructions for Emacs
  - Related: RHEL-30946


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.7-0.1.ea
changelog:
  - Update to jdk-21.0.3+7 (EA)
  - Update release notes to 21.0.3+7
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - Drop JDK-8009550 which is now available upstream
  - Re-generate FIPS patch against 21.0.3+7 following backport of JDK-8325254
  - Resolves: RHEL-30946


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.9-1
changelog:
  - Update to jdk-21.0.3+9 (GA)
  - Update release notes to 21.0.3+9
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-32424


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.4+1 (EA)
  - Update release notes to 21.0.4+1
  - Switch to EA mode
  - Bump LCMS 2 version to 2.16.0 following JDK-8321489
  - Add zlib build requirement or bundled version (1.3.1), depending on system_libs setting
  - Restore NEWS file so portable can be rebuilt
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-45355
  - Resolves: RHEL-46029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.5-0.1.ea
changelog:
  - Update to jdk-21.0.4+5 (EA)
  - Update release notes to 21.0.4+5
  - Limit Java only tests to one architecture using jdk_test_arch
  - Actually require tzdata 2024a now it is available in the buildroot
  - Resolves: RHEL-45355
  - Resolves: RHEL-47395


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-1
changelog:
  - Update to jdk-21.0.4+7 (GA)
  - Update release notes to 21.0.4+7
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - Add missing section headers in NEWS
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **
  - Resolves: RHEL-47023


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-2
changelog:
  - Vary portablesuffix depending on whether we are on RHEL ('el8') or CentOS ('el9')
  - Handle debugedit being a separate package installed in /usr on RHEL/CentOS 10
  - Add build scripts to repository to ease remembering all CentOS & RHEL targets and options
  - Related: RHEL-58797


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.9-0.2.ea
changelog:
  - Update to jdk-21.0.5+9 (EA)
  - Update release notes to 21.0.5+9
  - Switch to EA mode
  - Bump giflib version to 5.2.2 following JDK-8328999
  - Bump libpng version to 1.6.43 following JDK-8329004
  - Sync with RHEL 7 portable build:
    - Use ExclusiveArch over ExcludeArch
    - pkgos definition needs to be early enough to be used in portablesuffix
  - Make build scripts executable
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-58797
  - Resolves: RHEL-17191


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-2
changelog:
  - Update to jdk-21.0.5+10 (GA)
  - Update release notes to 21.0.5+10
  - Switch to GA mode.
  - Revert JDK-8327501 & JDK-8328366 backport until more mature.
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
  - Resolves: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-3
changelog:
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
  - Related: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-2
changelog:
  - Update to jdk-21.0.5+11 (GA)
  - Update release notes to 21.0.5+11
  - Remove local JDK-8327501 & JDK-8328366 backport as this is now upstream.
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-3
changelog:
  - Transition to the devkit build by not defining pkgos
  - Exempt x86_64 from the static libs debuginfo test until portable uses an older DWARF version
  - Sync the copy of the portable specfile with the devkit version
  - Include the devkit specfile and patches
  - Document the devkit in README.md
  - Resolves: RHEL-74403


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-1
changelog:
  - Update to jdk-21.0.6+7 (GA)
  - Update release notes to 21.0.6+7
  - Sync the copy of the portable & devkit specfiles with the latest update
  - Include the latest devkit patches
  - Update README.md to list an easier way of disabling the devkit
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **
  - Resolves: RHEL-73562


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-1
changelog:
  - Update to jdk-21.0.7+6 (GA)
  - Update release notes to 21.0.7+6
  - Rebase FIPS support against 21.0.7+5
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86984
  - Resolves: RHEL-86635


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-2
changelog:
  - Add local version of JDK-8351500 for early interim release before 21.0.8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-90309


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.8+1 (EA)
  - Update release notes to 21.0.8+1
  - Bump freetype version to 2.13.3 following JDK-8348596
  - Bump harfbuzz version to 10.4.0 following JDK-8348597
  - Bump lcms2 version to 2.17.0 following JDK-8348110
  - Bump libpng version to 1.6.47 following JDK-8348598
  - Switch to EA mode
  - Drop JDK-8351500 local patch which is now available in 21.0.8+1 upstream
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-101798


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Related: RHEL-103209


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.2-0.1.ea
changelog:
  - Update to jdk-21.0.8+2 (EA)
  - Update release notes to 21.0.8+2
  - Sync the copy of the portable specfile with the latest update
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Related: RHEL-101798
  - Resolves: RHEL-103209


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.8-0.1.ea
changelog:
  - Update to jdk-21.0.8+8 (EA)
  - Update release notes to 21.0.8+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-101798


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland
  - Resolves: RHEL-102677


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1.1
changelog:
  - Update to jdk-21.0.8+9 (GA)
  - Update release notes to 21.0.8+9
  - Switch to GA mode
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-102289


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.18-1
changelog:
  - New upstream release
  - Add ability to change crypto configuration at runtime without
    restarting knet and without packet drop
  - Add compatibility support for openssl 3.0
  - Add functional testing framework and new test cases
  - Minor build fixes
  - Fix BuildRequires to use libqb doxygen2man vs internal copy


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.19-1
changelog:
  - New upstream release
  - Add native support for openssl 3.0 (drop API COMPAT macros).
  - Code cleanup of public APIs. Lots of lines of code moved around, no
    functional changes.
  - Removed kronosnetd unsupported code completely
  - Removed unused poc-code from the source tree
  - Make sure to initialize epoll events structures


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.20-1
changelog:
  - New upstream release
  - Fix TX/RX stats collections
  - Minor test suite improvements
  - Minor build fixes


author: Christine Caulfield <ccaulfie@redhat.com> - 1.24-2
changelog:
  - Fix libnozzle tests failing & covscan warning on api_knet_handle_new test
    Resolves: rhbz#2024090


author: Christine Caulfield <ccaulfie@redhat.com> - 1.28-1
changelog:
  Rebase to 1.28 for startup and performance fixes
     threads: add config check to match min value with pong timeouts
     rx: allow links to be active faster
     links: fix ping interval and pong timeout value checking
     crypto: Try crypt and decrypt on crypto_init
     tx: Remove expensive memsets
     log: Add a TRACE log level
    Resolves: #RHEL-11787


author: Petr Menšík <pemensik@redhat.com> - 1.7.1-2
changelog:
  - Use make_build and make_install macro instead of make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Lescak <rlescak@redhat.com> - 1.7.1-9
changelog:
  - Fix for CVE-2020-19860 ldns: heap overread vulnerability (#2051211)
  - Added also patch for deprecated distutils Python module used in build


author: Dominik 'Rathann' Mierzejewski <rpm@greysector.net> 1.0.12-1
changelog:
  - update to 1.0.12 (#1827949)
  - drop obsolete patch
  - fixes CVE-2020-11863, CVE-2020-11864, CVE-2020-11865, CVE-2020-11866


author: Dodji Seketeli <dodji@redhat.com> - 2.1-1
changelog:
  - Update to upstream 2.1 release.
  - Remove the now useless text about getting the source from git.
  - Update the license reference.
  - Resolves: rhbz#1944096


author: Dodji Seketeli <dodji@redhat.com> - 2.3-1
changelog:
  - Update to upstream 2.3
  - Remove the dos2unix surgery as it's now useless
  - Update for the soname bump
  - Resolves: RHELPLAN-154803


author: Dodji Seketeli <dodji@redhat.com> - 2.4-1
changelog:
  - Update to upstream 2.4
  - Use SPDX licensing naming
  - Build BTF support
  - Add BuildRequires: libbpf-devel
  - Update for SONAME bump
  - Show details about the check and check-self-targets targets
    separatly.
  - Resolves: RHEL-12491


author: Dodji Seketeli <dodji@redhat.com> - 2.4-2
changelog:
  - Apply patch: 0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    Resolves: https://issues.redhat.com/browse/RHEL-16614
  - Apply patch: 0002-suppression-Add-has_strict_flexible_array_data_membe.patch
    Resolves: https://issues.redhat.com/browse/RHEL-16629
  - Add git as a build requirement as we need git to apply the patches
    aboves that apply binaries.
  - Use %autosetup to handle applying the patches using git.
  - autoreconf after the patches touched at least one Makefile.am file.


author: Dodji Seketeli <dodji@redhat.com> - 2.5-1
changelog:
  - Update to upstream 2.5 tarball
  - Drop patches (as they are now upstream):
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    0002-suppression-Add-has_strict_flexible_array_data_membe.patch
  - Add BuildRequires: python3-devel
  - Remove BuildRequires: %{_bindir}/python3


author: Dodji Seketeli <dodji@redhat.com> - 2.6.1
changelog:
  - Update to upstream 2.6 tarball
  - Update to changing SONAME (libabigail.so.5.0.0)
  - Add BuildRequires xxhash-devel
  - Disable abidb as its dependencies are not present in RHEL 9.6
  - Resolves https://issues.redhat.com/browse/RHEL-64069


author: Dodji Seketeli <dodji@redhat.com> - 2.7.1
changelog:
  - Update to upstream 2.7 tarball
  - Add binutils-devel as buildrequire to potentially enable the CTF
    backend.  This will allow the enabling of the CTF backend for
    binutils-devel > 2.35.2
  - Update to changing SONAME (libabigail.so.6.0.0)
  - Add --enable-ctf to the configure command line


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-3
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56809
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62935
  - Replace Jansson with json-c
    resolves: RHEL-65292


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-7
changelog:
  - Add --key all:... selector
    resolves: RHEL-19367
  - Add miscellaneous other upstream fixes since 1.50.1


author: Richard Hughes <richard@hughsie.com> 0.3.2-1
changelog:
  - New upstream version
  - Do not use deprecated libusb API
  - Use a 1ms timeout in the Windows event thread


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Remi Collet <remi@remirepo.net> - 1.1.0-5
changelog:
  - fix missing HAVE_SSIZE_T macro using patch from
    https://github.com/awesomized/libmemcached/pull/117


author: Remi Collet <remi@remirepo.net> - 1.1.0-2
changelog:
  - remove internal AES implementation and use libcrypto
    https://github.com/awesomized/libmemcached/pull/114
  - fix build ussing upstream patch to update catch version


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-612.el9]
changelog:
  - redhat: bump RHEL_MINOR to 8 (Patrick Talbert)
  - x86/cpu: Add new Intel CPU model numbers for Wildcatlake and Novalake (David Arcari) [RHEL-95631]
  - x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores (David Arcari) [RHEL-95631]
  - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105605]
  - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105598]
  - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105598]
  - net/smc: Fix lookup of netdev by using ib_device_get_netdev() (Mete Durlu) [RHEL-102713]
  - ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-104667]
  - net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-104667]
  - ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-104119]
  - ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-104119]
  - ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-104119]
  - memory: tegra: Fix indentation (Marcin Juszkiewicz) [RHEL-26426]
  - memory: tegra: Add BPMP and ICC info for DLA clients (Marcin Juszkiewicz) [RHEL-26426]
  - memory: tegra: Correct DLA client names (Marcin Juszkiewicz) [RHEL-26426]
  - soc/tegra: pmc: Add SD wake event for Tegra234 (Marcin Juszkiewicz) [RHEL-26405]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-613.el9]
changelog:
  - x86/cpu: Remove useless work in detect_tme_early() (Frank Liang) [RHEL-111095]
  - x86/cpu: Clear TME feature flag if TME is not enabled by BIOS (Frank Liang) [RHEL-111095]
  - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110206]
  - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110235]
  - Makefile: add $(srctree) to dependency of compile_commands.json target (Herton R. Krzesinski) [RHEL-107194]
  - kbuild: scripts/gdb: bring the "abspath" back (Herton R. Krzesinski) [RHEL-107194]
  - kbuild: Use $(obj)/%.cc to fix host C++ module builds (Herton R. Krzesinski) [RHEL-107194]
  - kbuild: scripts/gdb: Replace missed $(srctree)/$(src) w/ $(src) (Herton R. Krzesinski) [RHEL-107194]
  - kbuild: use $(src) instead of $(srctree)/$(src) for source directory (Herton R. Krzesinski) [RHEL-107194]
  - kbuild: use $(obj)/ instead of $(src)/ for common pattern rules (Herton R. Krzesinski) [RHEL-107194]
  - kbuild: do not add $(srctree) or $(objtree) to header search paths (Herton R. Krzesinski) [RHEL-107194]
  - arch: use $(obj)/ instead of $(src)/ for preprocessed linker scripts (Herton R. Krzesinski) [RHEL-107194]
  - arm64: vdso32: Remove unused vdso32-offsets.h (Herton R. Krzesinski) [RHEL-107194]
  - staging: vc04_services: interface: Drop include Makefile directive (Herton R. Krzesinski) [RHEL-107194]
  - staging: vc04_services: vchiq-mmal: Drop include Makefile directive (Herton R. Krzesinski) [RHEL-107194]
  - staging: vc04_services: bcm2835-camera: Drop include Makefile directive (Herton R. Krzesinski) [RHEL-107194]
  - staging: vc04_services: bcm2835-audio: Drop include Makefile directive (Herton R. Krzesinski) [RHEL-107194]
  - certs: check-in the default x509 config file (Herton R. Krzesinski) [RHEL-107194]
  - sparc: move the install rule to arch/sparc/Makefile (Herton R. Krzesinski) [RHEL-107194]
  - riscv: move the (z)install rules to arch/riscv/Makefile (Herton R. Krzesinski) [RHEL-107194]
  - powerpc: move the install rule to arch/powerpc/Makefile (Herton R. Krzesinski) [RHEL-107194]
  - powerpc: make the install target not depend on any build artifact (Herton R. Krzesinski) [RHEL-107194]
  - powerpc: remove unused zInstall target from arch/powerpc/boot/Makefile (Herton R. Krzesinski) [RHEL-107194]
  - nios2: move the install rule to arch/nios2/Makefile (Herton R. Krzesinski) [RHEL-107194]
  - ARM: 9102/1: move theinstall rules to arch/arm/Makefile (Herton R. Krzesinski) [RHEL-107194]
  - dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-105063]
  - dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-105063]
  - redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-105063]
  - redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-105063]
  - dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-105063]
  - spi: Introduce spi_get_device_match_data() helper (Ivan Vecera) [RHEL-105063]
  - dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-105063]
  - dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-105063]
  - tpm_crb_ffa: Remove unused export (Marcin Juszkiewicz) [RHEL-102691]
  - redhat/configs: enable CONFIG_TCG_ARM_CRB_FFA on aarch64 (Marcin Juszkiewicz) [RHEL-102691]
  - tpm: Do not remap from ACPI resources again for Pluton TPM (Marcin Juszkiewicz) [RHEL-102691]
  - tpm_crb: ffa_tpm: Implement driver compliant to CRB over FF-A (Marcin Juszkiewicz) [RHEL-102691]
  - ACPICA: Add start method for ARM FF-A (Marcin Juszkiewicz) [RHEL-102691]
  - tpm_crb: Add support for the ARM FF-A start method (Marcin Juszkiewicz) [RHEL-102691]
  - tpm_crb: Clean-up and refactor check for idle support (Marcin Juszkiewicz) [RHEL-102691]
  - tpm_crb: Fix an error handling path in crb_acpi_add() (Marcin Juszkiewicz) [RHEL-102691]
  - tpm_crb: Add support for CRB devices based on Pluton (Marcin Juszkiewicz) [RHEL-102691]
  - Documentation: tpm: Add documentation for the CRB FF-A interface (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix the missing entry in struct ffa_indirect_msg_hdr (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Replace mutex with rwlock to avoid sleep in atomic context (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Move memory allocation outside the mutex locking (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix memory leak by freeing notifier callback node (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Skip Rx buffer ownership release if not acquired (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Set dma_mask for ffa devices (Marcin Juszkiewicz) [RHEL-102691] {CVE-2025-38043}
  - firmware: arm_ffa: Skip the first/partition ID when parsing vCPU list (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Explicitly cast return value from NOTIFICATION_INFO_GET (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Explicitly cast return value from FFA_VERSION before comparison (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Handle ffa_notification_get correctly at virtual FF-A instance (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Allow multiple UUIDs per partition to register SRI callback (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for handling framework notifications (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for {un,}registration of framework notifications (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Stash ffa_device instead of notify_type in notifier_cb_info (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Refactoring to prepare for framework notification support (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Remove unnecessary declaration of ffa_partitions_cleanup() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Reject higher major version as incompatible (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Upgrade FF-A version to v1.2 in the driver (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for passing UUID in FFA_MSG_SEND2 (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Unregister the FF-A devices when cleaning up the partitions (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Handle the presence of host partition in the partition info (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Refactor addition of partition information into XArray (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix big-endian support in __ffa_partition_info_regs_get() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix big-endian support in __ffa_partition_info_get() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Align sync_send_receive{,2} function prototypes (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Replace UUID buffer to standard UUID format (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Replace SCMI by FF-A in the macro (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix the race around setting ffa_dev->properties (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Avoid string-fortify warning caused by memcpy() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Avoid string-fortify warning in export_uuid() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fetch the Rx/Tx buffer size using ffa_features() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for FFA_YIELD in direct messaging (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for FFA_MSG_SEND_DIRECT_{REQ,RESP}2 (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for FFA_PARTITION_INFO_GET_REGS (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Move the function ffa_features() earlier (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Update the FF-A command list with v1.2 additions (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Some coding style fixes (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Split bus and driver into distinct modules (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Move the FF-A v1.0 NULL UUID workaround to bus notifier (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Avoid queuing work when running on the worker queue (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix memory corruption in ffa_msg_send2() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for FFA_MSG_SEND2 (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Stash the partition properties for query purposes (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix kernel warning about incorrect SRI/NPI (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for handling notification pending interrupt(NPI) (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Refactor SRI handling in prepartion to add NPI support (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Skip creation of the notification bitmaps (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix the partition ID check in ffa_notification_info_get() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Handle partitions setup failures (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Use xa_insert() and check for result (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Simplify ffa_partitions_cleanup() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Check xa_load() return value (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add missing rwlock_init() for the driver partition (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add missing rwlock_init() in ffa_setup_partitions() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix ffa_notification_info_get() IDs handling (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix the size of the allocation in ffa_partitions_cleanup() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix FFA notifications cleanup path (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add checks for the notification enabled state (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Setup the partitions after the notification initialisation (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Allow FF-A initialisation even when notification fails (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Upgrade the driver version to v1.1 (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Update memory descriptor to support v1.1 format (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Switch to using ffa_mem_desc_offset() accessor (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Simplify the computation of transmit and fragment length (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add notification handling mechanism (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add interface to send a notification to a given partition (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add interfaces to request notification callbacks (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add schedule receiver callback mechanism (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Initial support for scheduler receiver interrupt (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Implement the NOTIFICATION_INFO_GET interface (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Implement the FFA_NOTIFICATION_GET interface (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Implement the FFA_NOTIFICATION_SET interface (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Implement the FFA_RUN interface (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Implement the notification bind and unbind interface (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Implement notification bitmap create and destroy interfaces (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Update the FF-A command list with v1.1 additions (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Emit modalias for FF-A devices (Marcin Juszkiewicz) [RHEL-102691]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-614.el9]
changelog:
  - ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-111532]
  - EDAC/bluefield: Don't use bluefield_edac_readl() result on error (Jennifer Berringer) [RHEL-103881]
  - EDAC/bluefield: Use Arm SMC for EMI access on BlueField-2 (Jennifer Berringer) [RHEL-103881]
  - powerpc/pseries: Correct secvar format representation for static key management (Mamatha Inamdar) [RHEL-101853]
  - powerpc/secvar: Expose secvars relevant to the key management mode (Mamatha Inamdar) [RHEL-101853]
  - integrity/platform_certs: Allow loading of keys in the static key management mode (Mamatha Inamdar) [RHEL-101853]
  - s390/hypfs: Enable limited access during lockdown (Mete Durlu) [RHEL-111204]
  - s390/hypfs: Avoid unnecessary ioctl registration in debugfs (Mete Durlu) [RHEL-111204]
  - x86/CPU/AMD: Add X86_FEATURE_ZEN6 (David Arcari) [RHEL-106912]
  - x86/cpufeatures: Free up unused feature bits (David Arcari) [RHEL-106912]
  - x86/CPU/AMD: Ignore invalid reset reason value (David Arcari) [RHEL-103591]
  - PCI/ASPM: Fix link state exit during switch upstream function removal (Marcin Juszkiewicz) [RHEL-102694]
  - PCI/ASPM: Fix L1SS saving (Marcin Juszkiewicz) [RHEL-102694]
  - PCI/ASPM: Save parent L1SS config in pci_save_aspm_l1ss_state() (Marcin Juszkiewicz) [RHEL-102694]
  - PCI/ASPM: Add notes about enabling PCI-PM L1SS to pci_enable_link_state(_locked) (Marcin Juszkiewicz) [RHEL-102694]
  - PCI/ASPM: Disable L1 before disabling L1 PM Substates (Marcin Juszkiewicz) [RHEL-102694]
  - x86/cpufeatures: Add X86_FEATURE_AMD_WORKLOAD_CLASS feature bit (David Arcari) [RHEL-105422]
  - cpufreq/amd-pstate: Avoid shadowing ret in amd_pstate_ut_check_driver() (David Arcari) [RHEL-105422]
  - cpufreq/amd-pstate: Disable preferred cores on designs with workload classification (David Arcari) [RHEL-105422]
  - amd-pstate-ut: Reset amd-pstate driver mode after running selftests (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Modify cppc_get_auto_sel_caps() to cppc_get_auto_sel() (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Adjust return code for inline functions in !CONFIG_ACPI_CPPC_LIB (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Refactor register value get and set ABIs (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Add cppc_set_reg_val() (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Extract cppc_get_reg_val_in_pcc() (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Rename cppc_get_perf() to cppc_get_reg_val() (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Optimize cppc_get_perf() (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Add IS_OPTIONAL_CPC_REG macro to judge if a cpc_reg is optional (David Arcari) [RHEL-105422]
  - cpufreq/amd-pstate: Add support for the "Requested CPU Min frequency" BIOS option (David Arcari) [RHEL-105422]
  - cpufreq/amd-pstate: Add offline, online and suspend callbacks for amd_pstate_driver (David Arcari) [RHEL-105422]
  - cpufreq/amd-pstate: Move max_perf limiting in amd_pstate_update (David Arcari) [RHEL-105422]
  - cpufreq/amd-pstate: Use scope based cleanup for cpufreq_policy refs [partial] (David Arcari) [RHEL-105422]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-615.el9]
changelog:
  - ACPI: processor: Rescan "dead" SMT siblings during initialization (David Arcari) [RHEL-113139]
  - intel_idle: Allow loading ACPI tables for any family (David Arcari) [RHEL-113139]
  - intel_idle: Update arguments of mwait_idle_with_hints() (David Arcari) [RHEL-113139]
  - intel_idle: Rescan "dead" SMT siblings during initialization (David Arcari) [RHEL-113139]
  - x86/smp: PM/hibernate: Split arch_resume_nosmt() (David Arcari) [RHEL-113139]
  - intel_idle: Use subsys_initcall_sync() for initialization (David Arcari) [RHEL-113139]
  - intel_idle: Add C1 demotion on/off sysfs knob (David Arcari) [RHEL-113139]
  - tools/power turbostat: version 2025.09.09 (David Arcari) [RHEL-110614]
  - tools/power turbostat: Handle non-root legacy-uncore sysfs permissions (David Arcari) [RHEL-110614]
  - tools/power turbostat: standardize PER_THREAD_PARAMS (David Arcari) [RHEL-110614]
  - tools/power turbostat: Fix DMR support (David Arcari) [RHEL-110614]
  - tools/power turbostat: add format "average" for external attributes (David Arcari) [RHEL-110614]
  - tools/power turbostat: delete GET_PKG() (David Arcari) [RHEL-110614]
  - tools/power turbostat: probe and display L3 cache topology (David Arcari) [RHEL-110614]
  - tools/power turbostat: Support more than 64 built-in-counters (David Arcari) [RHEL-110614]
  - tools/power turbostat.8: Document Totl%C0, Any%C0, GFX%C0, CPUGFX% columns (David Arcari) [RHEL-110614]
  - tools/power turbostat: Fix bogus SysWatt for forked program (David Arcari) [RHEL-110614]
  - tools/power turbostat: Handle cap_get_proc() ENOSYS (David Arcari) [RHEL-110614]
  - tools/power turbostat: Fix build with musl (David Arcari) [RHEL-110614]
  - tools/power turbostat: verify arguments to params --show and --hide (David Arcari) [RHEL-110614]
  - tools/power turbostat: regression fix: --show C1E% (David Arcari) [RHEL-110614]
  - tools/power turbostat: version 2025.06.08 (David Arcari) [RHEL-110614]
  - tools/power turbostat: Add initial support for BartlettLake (David Arcari) [RHEL-110614]
  - tools/power turbostat: Add initial support for DMR (David Arcari) [RHEL-110614]
  - tools/power turbostat: Dump RAPL sysfs info (David Arcari) [RHEL-110614]
  - tools/power turbostat: Avoid probing the same perf counters (David Arcari) [RHEL-110614]
  - tools/power turbostat: Allow probing RAPL with platform_features->rapl_msrs cleared (David Arcari) [RHEL-110614]
  - tools/power turbostat: Clean up add perf/msr counter logic (David Arcari) [RHEL-110614]
  - tools/power turbostat: Introduce add_msr_counter() (David Arcari) [RHEL-110614]
  - tools/power turbostat: Remove add_msr_perf_counter_() (David Arcari) [RHEL-110614]
  - tools/power turbostat: Remove add_cstate_perf_counter_() (David Arcari) [RHEL-110614]
  - tools/power turbostat: Remove add_rapl_perf_counter_() (David Arcari) [RHEL-110614]
  - tools/power turbostat: Quit early for unsupported RAPL counters (David Arcari) [RHEL-110614]
  - tools/power turbostat: Always check rapl_joules flag (David Arcari) [RHEL-110614]
  - tools/power turbostat: Fix AMD package-energy reporting (David Arcari) [RHEL-110614]
  - tools/power turbostat: Fix RAPL_GFX_ALL typo (David Arcari) [RHEL-110614]
  - tools/power turbostat: Add Android support for MSR device handling (David Arcari) [RHEL-110614]
  - tools/power turbostat.8: pm_domain wording fix (David Arcari) [RHEL-110614]
  - tools/power turbostat.8: fix typo: idle_pct should be pct_idle (David Arcari) [RHEL-110614]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-616.el9]
changelog:
  - PM: EM: Add function for registering a PD without capacity update (David Arcari) [RHEL-112493]
  - cpufreq: intel_pstate: Support Clearwater Forest OOB mode (David Arcari) [RHEL-112493]
  - cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode (David Arcari) [RHEL-112493]
  - cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode (David Arcari) [RHEL-112493]
  - cpufreq: intel_pstate: EAS: Increase cost for CPUs using L3 cache (David Arcari) [RHEL-112493]
  - cpufreq: intel_pstate: EAS support for hybrid platforms (David Arcari) [RHEL-112493]
  - arch_topology: Relocate cpu_scale to topology.[h|c] (David Arcari) [RHEL-112493]
  - arch_topology: Make register_cpu_capacity_sysctl() tolerant to late CPUs (David Arcari) [RHEL-112493]
  - PM: EM: Introduce em_adjust_cpu_capacity() (David Arcari) [RHEL-112493]
  - PM: EM: Move CPU capacity check to em_adjust_new_capacity() (David Arcari) [RHEL-112493]
  - PM: EM: Fix potential division-by-zero error in em_compute_costs() (David Arcari) [RHEL-112493]
  - PM: EM: Address RCU-related sparse warnings (David Arcari) [RHEL-112493]
  - PM: EM: Consify two parameters of em_dev_register_perf_domain() (David Arcari) [RHEL-112493]
  - PM: EM: use kfree_rcu() to simplify the code (David Arcari) [RHEL-112493]
  - PM: EM: Slightly reduce em_check_capacity_update() overhead (David Arcari) [RHEL-112493]
  - PM: EM: Drop unused parameter from em_adjust_new_capacity() (David Arcari) [RHEL-112493]
  - PM: EM: Move sched domains rebuild function from schedutil to EM (David Arcari) [RHEL-112493]
  - PM: EM: Add min/max available performance state limits (David Arcari) [RHEL-112493]
  - PM: EM: Refactor em_adjust_new_capacity() (David Arcari) [RHEL-112493]
  - PM: EM: fix wrong utilization estimation in em_cpu_energy() (David Arcari) [RHEL-112493]
  - PM: EM: Force device drivers to provide power in uW (David Arcari) [RHEL-112493]
  - PM: EM: Fix nr_states warnings in static checks (David Arcari) [RHEL-112493]
  - PM: EM: Add em_dev_compute_costs() (David Arcari) [RHEL-112493]
  - PM: EM: Remove old table (David Arcari) [RHEL-112493]
  - PM: EM: Change debugfs configuration to use runtime EM table data (David Arcari) [RHEL-112493]
  - PM: EM: Optimize em_cpu_energy() and remove division (David Arcari) [RHEL-112493]
  - PM: EM: Support late CPUs booting and capacity adjustment (David Arcari) [RHEL-112493]
  - PM: EM: Add performance field to struct em_perf_state and optimize (David Arcari) [RHEL-112493]
  - PM: EM: Add em_perf_state_from_pd() to get performance states table (David Arcari) [RHEL-112493]
  - PM: EM: Introduce em_dev_update_perf_domain() for EM updates (David Arcari) [RHEL-112493]
  - PM: EM: Add functions for memory allocations for new EM tables (David Arcari) [RHEL-112493]
  - PM: EM: Use runtime modified EM for CPUs energy estimation in EAS (David Arcari) [RHEL-112493]
  - PM: EM: Introduce runtime modifiable table (David Arcari) [RHEL-112493]
  - PM: EM: Split the allocation and initialization of the EM table (David Arcari) [RHEL-112493]
  - PM: EM: Check if the get_cost() callback is present in em_compute_costs() (David Arcari) [RHEL-112493]
  - PM: EM: Introduce em_compute_costs() (David Arcari) [RHEL-112493]
  - PM: EM: Refactor em_pd_get_efficient_state() to be more flexible (David Arcari) [RHEL-112493]
  - PM: EM: Find first CPU active while updating OPP efficiency (David Arcari) [RHEL-112493]
  - PM: EM: Extend em_cpufreq_update_efficiencies() argument list (David Arcari) [RHEL-112493]
  - PM: EM: Add missing newline for the message log (David Arcari) [RHEL-112493]
  - PM: EM: fix memory leak with using debugfs_lookup() (David Arcari) [RHEL-112493]
  - PM: EM: fix kernel-doc comments (David Arcari) [RHEL-112493]
  - cpufreq: intel_pstate: Populate the cpu_capacity sysfs entries (David Arcari) [RHEL-112493]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-617.el9]
changelog:
  - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113331] {CVE-2025-38718}
  - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-109212]
  - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-109212]
  - platform/x86/intel/pmc: Fix Arrow Lake U/H NPU PCI ID (David Arcari) [RHEL-23894]
  - drm/virtio: implement virtio_gpu_shutdown (Gerd Hoffmann) [RHEL-109504]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-618.el9]
changelog:
  - x86/hyperv: Fix kdump on Azure CVMs (Vitaly Kuznetsov) [RHEL-70228]
  - hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-109583]
  - RDMA/mana_ib: add support of multiple ports (Maxim Levitsky) [RHEL-109583]
  - RDMA/mana_ib: add additional port counters (Maxim Levitsky) [RHEL-109583]
  - RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-109583]
  - net: mana: fix spelling for mana_gd_deregiser_irq() (Maxim Levitsky) [RHEL-109583]
  - net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-109583]
  - net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-109583]
  - net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-109583]
  - net: mana: Allocate MSI-X vectors dynamically (Maxim Levitsky) [RHEL-109583]
  - net: mana: Allow irq_setup() to skip cpus for affinity (Maxim Levitsky) [RHEL-109583]
  - net: mana: explain irq_setup() algorithm (Maxim Levitsky) [RHEL-109583]
  - PCI: hv: Allow dynamic MSI-X vector allocation (Maxim Levitsky) [RHEL-109583]
  - PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Maxim Levitsky) [RHEL-109583]
  - net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-109583]
  - RDMA/mana_ib: Add device statistics support (Maxim Levitsky) [RHEL-109583]
  - net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-109583]
  - net: mana: Fix warnings for missing export.h header inclusion (Maxim Levitsky) [RHEL-109583]
  - net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-109583]
  - tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-101033]
  - watchdog/hpwdt: Support Suspend and Resume (Joseph Szczypek) [RHEL-104148]
  - watchdog/hpwdt: Remove unused variable (Joseph Szczypek) [RHEL-104148]
  - watchdog/hpwdt: Remove redundant test. (Joseph Szczypek) [RHEL-104148]
  - watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO (Joseph Szczypek) [RHEL-104148]
  - NFSv4/flexfiles: Fix layout merge mirror check. (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Clear NFS_CAP_OPEN_XOR and NFS_CAP_DELEGTIME if not supported (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set (Benjamin Coddington) [RHEL-108616]
  - NFS: Fix a race when updating an existing write (Benjamin Coddington) [RHEL-108616]
  - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Benjamin Coddington) [RHEL-108616]
  - SUNRPC: call xs_sock_process_cmsg for all cmsg (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Don't clear capabilities that won't be reset (Benjamin Coddington) [RHEL-108616]
  - sunrpc: fix handling of server side tls alerts (Benjamin Coddington) [RHEL-108616]
  - NFS: Fix the setting of capabilities when automounting a new filesystem (Benjamin Coddington) [RHEL-108616]
  - sunrpc: fix client side handling of tls alerts (Benjamin Coddington) [RHEL-108616]
  - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (Benjamin Coddington) [RHEL-108616]
  - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Benjamin Coddington) [RHEL-108616]
  - NFSD: detect mismatch of file handle and delegation stateid in OPEN op (Benjamin Coddington) [RHEL-108616]
  - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Benjamin Coddington) [RHEL-108616]
  - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Benjamin Coddington) [RHEL-108616]
  - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Benjamin Coddington) [RHEL-108616]
  - nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. (Benjamin Coddington) [RHEL-108616]
  - nfsd: use threads array as-is in netlink interface (Benjamin Coddington) [RHEL-108616]
  - SUNRPC: Prevent hang on NFS mount with xprtsec=[m]tls (Benjamin Coddington) [RHEL-108616]
  - nfs: ignore SB_RDONLY when remounting nfs (Benjamin Coddington) [RHEL-108616]
  - fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio() (Benjamin Coddington) [RHEL-108616]
  - NFSv4/pnfs: Reset the layout state after a layoutreturn (Benjamin Coddington) [RHEL-108616]
  - svcrdma: Reduce the number of rdma_rw contexts per-QP (Benjamin Coddington) [RHEL-108616]
  - nfsd: Initialize ssc before laundromat_work to prevent NULL dereference (Benjamin Coddington) [RHEL-108616]
  - NFSD: unregister filesystem in case genl_register_family() fails (Benjamin Coddington) [RHEL-108616]
  - nfs: handle failure of nfs_get_lock_context in unlock path (Benjamin Coddington) [RHEL-108616]
  - nfs: add missing selections of CONFIG_CRC32 (Benjamin Coddington) [RHEL-108616]
  - nfs: Add missing release on error in nfs_lock_and_join_requests() (Benjamin Coddington) [RHEL-108616]
  - NFS: Shut down the nfs_client only after all the superblocks (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Avoid unnecessary scans of filesystems for delayed delegations (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Avoid unnecessary scans of filesystems for expired delegations (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Avoid unnecessary scans of filesystems for returning delegations (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Don't trigger uneccessary scans for return-on-close delegations (Benjamin Coddington) [RHEL-108616]
  - NFSD: Fix callback decoder status codes (Benjamin Coddington) [RHEL-108616]
  - NFSD: Never return NFS4ERR_FILE_OPEN when removing a directory (Benjamin Coddington) [RHEL-108616]
  - nfsd: move error choice for incorrect object types to version-specific code. (Benjamin Coddington) [RHEL-108616]
  - nfsd: be more systematic about selecting error codes for internal use. (Benjamin Coddington) [RHEL-108616]
  - nfsd: Move error code mapping to per-version proc code. (Benjamin Coddington) [RHEL-108616]
  - NFSD: nfsd_unlink() clobbers non-zero status returned from fh_fill_pre_attrs() (Benjamin Coddington) [RHEL-108616]
  - NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up (Benjamin Coddington) [RHEL-108616]
  - nfsd: fix management of listener transports (Benjamin Coddington) [RHEL-108616]
  - NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (Benjamin Coddington) [RHEL-108616]
  - sunrpc: suppress warnings for unused procfs functions (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Fix a deadlock when recovering state on a sillyrenamed file (Benjamin Coddington) [RHEL-108616]
  - SUNRPC: Prevent looping due to rpc_signal_task() races (Benjamin Coddington) [RHEL-108616]
  - SUNRPC: convert RPC_TASK_* constants to enum (Benjamin Coddington) [RHEL-108616]
  - NFS: Adjust delegated timestamps for O_DIRECT reads and writes (Benjamin Coddington) [RHEL-108616]
  - NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE (Benjamin Coddington) [RHEL-108616]
  - NFSv4.2: fix COPY_NOTIFY xdr buf size calculation (Benjamin Coddington) [RHEL-108616]
  - NFSD: Insulate nfsd4_encode_read_plus_data() from page boundaries in the encode buffer (Benjamin Coddington) [RHEL-108616]
  - NFSD: Insulate nfsd4_encode_read_plus() from page boundaries in the encode buffer (Benjamin Coddington) [RHEL-108616]
  - NFSD: Insulate nfsd4_encode_read() from page boundaries in the encode buffer (Benjamin Coddington) [RHEL-108616]
  - NFSD: Fix CB_GETATTR status fix (Benjamin Coddington) [RHEL-108616]
  - NFSD: fix decoding in nfs4_xdr_dec_cb_getattr (Benjamin Coddington) [RHEL-108616]
  - nfsd: fix legacy client tracking initialization (Benjamin Coddington) [RHEL-108616]
  - nfs: clear SB_RDONLY before getting superblock (Benjamin Coddington) [RHEL-108616]
  - nfs: ignore SB_RDONLY when mounting nfs (Benjamin Coddington) [RHEL-108616]
  - platform/x86/amd/hsmp: Ensure success even if hwmon registration fails (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Enhance the print messages to prevent confusion (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Use IS_ENABLED() instead of IS_REACHABLE() (David Arcari) [RHEL-102859]
  - x86/platform/amd: replace down_timeout() with down_interruptible() (David Arcari) [RHEL-102859]
  - x86/platform/amd: move final timeout check to after final sleep (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: fix building with CONFIG_HWMON=m (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: acpi: Add sysfs files to display HSMP telemetry (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Report power via hwmon sensors (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Use a single DRIVER_VERSION for all hsmp modules (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Make amd_hsmp and hsmp_acpi as mutually exclusive drivers (David Arcari) [RHEL-102859]
  - x86/platform/amd: Move the <asm/amd_node.h> header to <asm/amd/node.h> (David Arcari) [RHEL-102859]
  - x86/platform/amd: Clean up the <asm/amd/hsmp.h> header guards a bit (David Arcari) [RHEL-102859]
  - x86/platform/amd: Move the <asm/amd_hsmp.h> header to <asm/amd/hsmp.h> (David Arcari) [RHEL-102859]
  - x86/amd_node, platform/x86/amd/hsmp: Have HSMP use SMN through AMD_NODE (David Arcari) [RHEL-102859]
  - x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (David Arcari) [RHEL-102859]
  - x86/amd_node: Use defines for SMN register offsets (David Arcari) [RHEL-102859]
  - x86/amd_node: Remove dependency on AMD_NB (David Arcari) [RHEL-102859]
  - x86/amd_node: Update __amd_smn_rw() error paths (David Arcari) [RHEL-102859]
  - x86/amd_nb: Move SMN access code to a new amd_node driver (David Arcari) [RHEL-102859]
  - x86/amd_nb, hwmon: (k10temp): Simplify amd_pci_dev_to_node_id() (David Arcari) [RHEL-102859]
  - x86/amd_nb: Simplify function 3 search (David Arcari) [RHEL-102859]
  - x86/amd_nb: Use topology info to get AMD node count (David Arcari) [RHEL-102859]
  - x86/amd_nb: Simplify root device search (David Arcari) [RHEL-102859]
  - x86/amd_nb: Simplify function 4 search (David Arcari) [RHEL-102859]
  - x86: Start moving AMD node functionality out of AMD_NB (David Arcari) [RHEL-102859]
  - x86/amd_nb: Clean up early_is_amd_nb() (David Arcari) [RHEL-102859]
  - x86/amd_nb: Restrict init function to AMD-based systems (David Arcari) [RHEL-102859]
  - x86/amd_nb: Add new PCI ID for AMD family 1Ah model 20h (David Arcari) [RHEL-102859]
  - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h (David Arcari) [RHEL-102859]
  - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h (David Arcari) [RHEL-102859]
  - x86/amd_nb: Enhance SMN access error checking (David Arcari) [RHEL-102859]
  - hwmon: (k10temp) Check return value of amd_smn_read() (David Arcari) [RHEL-102859]
  - EDAC/amd64: Remove unused register accesses (David Arcari) [RHEL-102859]
  - EDAC/amd64: Check return value of amd_smn_read() (David Arcari) [RHEL-102859]
  - x86/amd_nb: Check for invalid SMN reads (David Arcari) [RHEL-102859]
  - x86/amd_nb: Add new PCI IDs for AMD family 0x1a (David Arcari) [RHEL-102859]
  - platform/x86: amd: Use *-y instead of *-objs in Makefiles [partial] (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Add support for HSMP protocol version 7 messages (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Change the error type (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Add new error code and error logs (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: mark hsmp_msg_desc_table[] as maybe_unused (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Make hsmp_pdev static instead of global (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Use dev_groups in the driver structure (David Arcari) [RHEL-102859]
  - sysfs: Fix crash on empty group attributes array (David Arcari) [RHEL-102859]
  - sysfs: Introduce a mechanism to hide static attribute_groups (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Use name space while exporting module symbols (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Create separate ACPI, plat and common drivers (David Arcari) [RHEL-102859]
  - redhat/configs: Enable CONFIG_AMD_HSMP_ACPI and CONFIG_AMD_HSMP_PLAT on RHEL (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Change generic plat_dev name to hsmp_pdev (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Move ACPI code to acpi.c (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Move platform device specific code to plat.c (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Move structure and macros to header file (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Convert amd_hsmp_rdwr() to a function pointer (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Create wrapper function init_acpi() (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Create hsmp/ directory (David Arcari) [RHEL-102859]
  - Documentation/x86/amd/hsmp: Updating urls (David Arcari) [RHEL-102859]
  - netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (Florian Westphal) [RHEL-106430] {CVE-2025-38472}
  - s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113557] {CVE-2025-39694}
  - ipv6: mcast: Delay put pmc->idev in mld_del_delrec() (Hangbin Liu) [RHEL-111150] {CVE-2025-38550}
  - devlink: add reserved fields to devlink_*_ops (Petr Oros) [RHEL-111906]
  - ixgbe: prevent from unwanted interface name changes (CKI Backport Bot) [RHEL-109607]
  - devlink: let driver opt out of automatic phys_port_name generation (CKI Backport Bot) [RHEL-109607]
  - xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CKI Backport Bot) [RHEL-109528] {CVE-2025-38500}
  - dpll: add reserved fields to dpll_device_ops and dpll_pin_ops structs (Ivan Vecera) [RHEL-111904]
  - ice: use fixed adapter index for E825C embedded devices (Michal Schmidt) [RHEL-104010]
  - net: openvswitch: remove misbehaving actions length check (Aaron Conole) [RHEL-83440]
  - irdma: free iwdev->rf after removing MSI-X (Kamal Heib) [RHEL-103278 RHEL-95816]
  - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113332] {CVE-2025-38718}
  - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112247] {CVE-2023-53125}
  - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112247] {CVE-2023-53125}
  - cpufreq: Move endif to the end of Kconfig file (Mark Langsdorf) [RHEL-112816]
  - cpufreq: Move CPPC configs to common Kconfig and add RISC-V (Mark Langsdorf) [RHEL-112816]
  - HID: core: Harden s32ton() against conversion to 0 bits (Benjamin Tissoires) [RHEL-111034] {CVE-2025-38556}
  - HID: stop exporting hid_snto32() (Benjamin Tissoires) [RHEL-111034] {CVE-2025-38556}
  - HID: simplify snto32() (Benjamin Tissoires) [RHEL-111034] {CVE-2025-38556}
  - redhat: set defaults for RHEL 9.7 (Augusto Caringi)
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112783] {CVE-2025-38352}
  - fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110312] {CVE-2025-38396}
  - idpf: convert control queue mutex to a spinlock (Michal Schmidt) [RHEL-106051] {CVE-2025-38392}
  - redhat/configs: Enable CONFIG_MITIGATION_TSA for x86 (Waiman Long) [RHEL-83897]
  - x86/process: Move the buffer clearing before MONITOR (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - x86/microcode/AMD: Add TSA microcode SHAs (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - KVM: SVM: Advertise TSA CPUID bits to guests (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - x86/bugs: Add a Transient Scheduler Attacks mitigation (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - x86/bugs: Rename MDS machinery to something more generic (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - x86/idle: Use MONITOR and MWAIT mnemonics in <asm/mwait.h> (Waiman Long) [RHEL-83897]
  - x86/idle: Remove .s output beautifying delimiters from simpler asm() templates (Waiman Long) [RHEL-83897]
  - x86/idle: Standardize argument types for MONITOR{,X} and MWAIT{,X} instruction wrappers on 'u32' (Waiman Long) [RHEL-83897]
  - x86/idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in mwait_idle_with_hints() and  prefer_mwait_c1_over_halt() (Waiman Long) [RHEL-83897]
  - x86/bugs: Rename mmio_stale_data_clear to cpu_buf_vm_clear (Waiman Long) [RHEL-83897]
  - x86/microcode: Consolidate the loader enablement checking (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-83897] {CVE-2025-22047}
  - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Get rid of the _load_microcode_amd() forward declaration (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Remove unused save_microcode_in_initrd_amd() declarations (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Remove ugly linebreak in __verify_patch_section() signature (Waiman Long) [RHEL-83897]
  - x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Remove ret local var in early_apply_microcode() (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Return bool from find_blobs_in_containers() (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-83897]
  - x86/CPU/AMD: Terminate the erratum_1386_microcode array (Waiman Long) [RHEL-83897] {CVE-2024-56721}
  - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-83897]
  - x86/cpu: Fix formatting of cpuid_bits[] in scattered.c (Waiman Long) [RHEL-83897]
  - x86/cpufeatures: Add X86_FEATURE_AMD_WORKLOAD_CLASS feature bit (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-83897]
  - x86/bugs: Use code segment selector for VERW operand (Waiman Long) [RHEL-83897] {CVE-2024-50072}
  - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-83897]
  - x86/CPU/AMD: Improve the erratum 1386 workaround (Waiman Long) [RHEL-83897]
  - x86: Add a comment about the "magic" behind shadow sti before mwait (Waiman Long) [RHEL-83897]
  - x86/bugs: Revert "Reverse instruction order of CLEAR_CPU_BUFFERS" (Waiman Long) [RHEL-83897]
  - scsi: mpt3sas: Fix a fw_event memory leak (Tomas Henzl) [RHEL-108656]
  - Revert "drm/gem-dma: Use dma_buf from GEM object instance" (Robert Foss) [RHEL-106696]
  - Revert "drm/gem-framebuffer: Use dma_buf from GEM object instance" (Robert Foss) [RHEL-106696]
  - Revert "drm/prime: Use dma_buf from GEM object instance" (Robert Foss) [RHEL-106696]
  - drm/framebuffer: Acquire internal references on GEM handles (Robert Foss) [RHEL-106696]
  - drm/gem: Acquire references on GEM handles for framebuffers (CKI Backport Bot) [RHEL-106696] {CVE-2025-38449}
  - Revert "e1000e: change k1 configuration on MTP and later platforms" (Michal Schmidt) [RHEL-110519]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-619.el9]
changelog:
  - platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (David Arcari) [RHEL-110754]
  - io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114337] {CVE-2025-39698}
  - bpf: Fix uninitialized values in BPF_{CORE,PROBE}_READ (Viktor Malik) [RHEL-100278]
  - mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109448]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-620.el9]
changelog:
  - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107304] {CVE-2025-38498}
  - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107304] {CVE-2025-38498}
  - selftests: netfilter: skip br_netfilter queue tests if kernel is tainted (Waiman Long) [RHEL-107520]
  - fhandle: do_handle_open() should get FD with user flags (Waiman Long) [RHEL-107520]
  - Documentation/sysctl: coredump: add %F for pidfd number (Waiman Long) [RHEL-107520]
  - pidfs: never refuse ppid == 0 in PIDFD_GET_INFO (Waiman Long) [RHEL-107520]
  - fs/fhandle.c: fix a race in call of has_locked_children() (Waiman Long) [RHEL-107520] {CVE-2025-38306}
  - coredump: hand a pidfd to the usermode coredump helper (Waiman Long) [RHEL-107520]
  - coredump: fix error handling for replace_fd() (Waiman Long) [RHEL-107520]
  - pidfs: move O_RDWR into pidfs_alloc_file() (Waiman Long) [RHEL-107520]
  - pidfs/selftests: ensure correct headers for ioctl handling (Waiman Long) [RHEL-107520]
  - selftests/pidfd: fix header inclusion (Waiman Long) [RHEL-107520]
  - pidfs: improve ioctl handling (Waiman Long) [RHEL-107520]
  - selftests: remove unneeded include (Waiman Long) [RHEL-107520]
  - pidfs: allow bind-mounts (Waiman Long) [RHEL-107520]
  - pidfs: lookup pid through rbtree (Waiman Long) [RHEL-107520]
  - pidfs: check for valid ioctl commands (Waiman Long) [RHEL-107520]
  - pidfs: implement file handle support (Waiman Long) [RHEL-107520]
  - exportfs: add permission method (Waiman Long) [RHEL-107520]
  - fhandle: pull CAP_DAC_READ_SEARCH check into may_decode_fh() (Waiman Long) [RHEL-107520]
  - exportfs: add open method (Waiman Long) [RHEL-107520]
  - fhandle: simplify error handling (Waiman Long) [RHEL-107520]
  - pseudofs: add support for export_ops (Waiman Long) [RHEL-107520]
  - pidfs: support FS_IOC_GETVERSION (Waiman Long) [RHEL-107520]
  - pidfs: remove 32bit inode number handling (Waiman Long) [RHEL-107520]
  - pidfs: rework inode number allocation (Waiman Long) [RHEL-107520]
  - fs: fix is_mnt_ns_file() (Waiman Long) [RHEL-107520]
  - pidfd: add ioctl to retrieve pid info (Waiman Long) [RHEL-107520]
  - pidfs: check for valid pid namespace (Waiman Long) [RHEL-107520]
  - rbtree: provide rb_find_rcu() / rb_find_add_rcu() (Waiman Long) [RHEL-107520]
  - file: add fput() cleanup helper (Waiman Long) [RHEL-107520]
  - libfs: fix get_stashed_dentry() (Waiman Long) [RHEL-107520] {CVE-2024-46801}
  - pidfs: add selftests for new namespace ioctls (Waiman Long) [RHEL-107520]
  - pidfs: handle kernels without namespaces cleanly (Waiman Long) [RHEL-107520]
  - pidfs: when time ns disabled add check for ioctl (Waiman Long) [RHEL-107520]
  - pidfs: allow retrieval of namespace file descriptors (Waiman Long) [RHEL-107520]
  - nsfs: add open_namespace() (Waiman Long) [RHEL-107520]
  - nsproxy: add helper to go from arbitrary namespace to ns_common (Waiman Long) [RHEL-107520]
  - nsproxy: add a cleanup helper for nsproxy (Waiman Long) [RHEL-107520]
  - file: add take_fd() cleanup helper (Waiman Long) [RHEL-107520]
  - path: add cleanup helper (Waiman Long) [RHEL-107520]
  - fhandle: relax open_by_handle_at() permission checks (Waiman Long) [RHEL-107520]
  - fs/pidfs: make 'lsof' happy with our inode changes (Waiman Long) [RHEL-107520]
  - selftests: pidfd: ksft_exit functions do not return (Waiman Long) [RHEL-107520]
  - fs: Annotate struct file_handle with __counted_by() and use struct_size() (Waiman Long) [RHEL-107520]
  - selftests/pidfd: Fix wrong expectation (Waiman Long) [RHEL-107520]
  - selftests/pidfd: Fix config for pidfd_setns_test (Waiman Long) [RHEL-107520]
  - pidfs: remove config option (Waiman Long) [RHEL-107520]
  - libfs: improve path_from_stashed() (Waiman Long) [RHEL-107520]
  - libfs: add stashed_dentry_prune() (Waiman Long) [RHEL-107520]
  - libfs: improve path_from_stashed() helper (Waiman Long) [RHEL-107520]
  - pidfs: convert to path_from_stashed() helper (Waiman Long) [RHEL-107520]
  - nsfs: convert to path_from_stashed() helper (Waiman Long) [RHEL-107520]
  - libfs: add path_from_stashed() (Waiman Long) [RHEL-107520]
  - pidfd: add pidfs (Waiman Long) [RHEL-107520]
  - pidfd: move struct pidfd_fops (Waiman Long) [RHEL-107520]
  - pidfd: allow to override signal scope in pidfd_send_signal() (Waiman Long) [RHEL-107520]
  - pidfd: change pidfd_send_signal() to respect PIDFD_THREAD (Waiman Long) [RHEL-107520]
  - signal: fill in si_code in prepare_kill_siginfo() (Waiman Long) [RHEL-107520]
  - selftests: add ESRCH tests for pidfd_getfd() (Waiman Long) [RHEL-107520]
  - pidfd: getfd should always report ESRCH if a task is exiting (Waiman Long) [RHEL-107520]
  - pidfd: clone: allow CLONE_THREAD | CLONE_PIDFD together (Waiman Long) [RHEL-107520]
  - pidfd: change do_notify_pidfd() to use __wake_up(poll_to_key(EPOLLIN)) (Waiman Long) [RHEL-107520]
  - pid: kill the obsolete PIDTYPE_PID code in transfer_pid() (Waiman Long) [RHEL-107520]
  - pidfd: kill the no longer needed do_notify_pidfd() in de_thread() (Waiman Long) [RHEL-107520]
  - pidfd_poll: report POLLHUP when pid_task() == NULL (Waiman Long) [RHEL-107520]
  - pidfd: implement PIDFD_THREAD flag for pidfd_open() (Waiman Long) [RHEL-107520]
  - pidfd: don't do_notify_pidfd() if !thread_group_empty() (Waiman Long) [RHEL-107520]
  - pidfd: cleanup the usage of __pidfd_prepare's flags (Waiman Long) [RHEL-107520]
  - fork: Using clone_flags for legacy clone check (Waiman Long) [RHEL-107520]
  - __kill_pgrp_info: simplify the calculation of return value (Waiman Long) [RHEL-107520]
  - selftests/pidfd: Fix ksft print formats (Waiman Long) [RHEL-107520]
  - fs: convert core infrastructure to new timestamp accessors (Waiman Long) [RHEL-107520]
  - fs: new accessor methods for atime and mtime (Waiman Long) [RHEL-107520]
  - nsproxy: Convert nsproxy.count to refcount_t (Waiman Long) [RHEL-107520]
  - kernfs: convert to ctime accessor functions (Waiman Long) [RHEL-107520]
  - selftest: pidfd: Omit long and repeating outputs (Waiman Long) [RHEL-107520]
  - convert setns(2) to fdget()/fdput() (Waiman Long) [RHEL-107520]
  - fs: consolidate duplicate dt_type helpers (Waiman Long) [RHEL-107520]
  - Update relatime comments to include equality (Waiman Long) [RHEL-107520]
  - fork: use pidfd_prepare() (Waiman Long) [RHEL-107520]
  - pid: add pidfd_prepare() (Waiman Long) [RHEL-107520]
  - fork: allow CLONE_NEWTIME in clone3 flags (Waiman Long) [RHEL-107520]
  - selftests: pidfd: Fix incorrect kernel headers search path (Waiman Long) [RHEL-107520]
  - core_pattern: add CPU specifier (Waiman Long) [RHEL-107520]
  - selftests/pidfd_test: Remove the erroneous ',' (Waiman Long) [RHEL-107520]
  - selftests: pidfd: Fix compling warnings (Waiman Long) [RHEL-107520]
  - ksefltests: pidfd: Fix wait_states: Test terminated by timeout (Waiman Long) [RHEL-107520]
  - fork: remove duplicate included header files (Waiman Long) [RHEL-107520]
  - signal: Drop signals received after a fatal signal has been processed (Waiman Long) [RHEL-107520]
  - signal: Guarantee that SIGNAL_GROUP_EXIT is set on process exit (Waiman Long) [RHEL-107520]
  - signal: Ensure SIGNAL_GROUP_EXIT gets set in do_group_exit (Waiman Long) [RHEL-107520]
  - dynamic_dname(): drop unused dentry argument (Waiman Long) [RHEL-107520]
  - fork: Explicitly set PF_KTHREAD (Waiman Long) [RHEL-107520]
  - selftests: fix an unused variable warning in pidfd selftest (Waiman Long) [RHEL-107520]
  - selftests: fixup build warnings in pidfd / clone3 tests (Waiman Long) [RHEL-107520]
  - pidfd: fix test failure due to stack overflow on some arches (Waiman Long) [RHEL-107520]
  - kernel/fork.c: unshare(): use swap() to make code cleaner (Waiman Long) [RHEL-107520]
  - kernel/fork.c: unexport get_{mm,task}_exe_file (Waiman Long) [RHEL-107520]
  - kernel/pid.c: implement additional checks upon pidfd_create() parameters (Waiman Long) [RHEL-107520]
  - arm64: debug: remove debug exception registration infrastructure (Luis Claudio R. Goncalves) [RHEL-65658]
  - trap: cleanup trap_init() (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: split bkpt32 exception entry (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: split brk64 exception entry (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: split hardware watchpoint exception entry (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: split single stepping exception entry (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: refactor reinstall_suspended_bps() (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: split hardware breakpoint exception entry (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: entry: Add entry and exit functions for debug exceptions (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: remove break/step handler registration infrastructure (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: call step handlers statically (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: call software breakpoint handlers statically (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: kretprobes: acquire the regs via a BRK exception (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: kprobes: Return DBG_HOOK_ERROR if kprobes can not handle a BRK (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: Return early when break handler is found on linked-list (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: refactor aarch32_break_handler() (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: clean up single_step_handler logic (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386 (Jeremy Linton) [RHEL-108306]
  - arm64: errata: Expand speculative SSBS workaround once more (Jeremy Linton) [RHEL-108306]
  - arm64: errata: Expand speculative SSBS workaround (again) (Jeremy Linton) [RHEL-108306]
  - tools headers arm64: Sync arm64's cputype.h with the kernel sources (Jeremy Linton) [RHEL-108306]
  - arm64: cputype: Add Neoverse-N3 definitions (Jeremy Linton) [RHEL-108306]
  - arm64: cputype: Add Cortex-A725 definitions (Jeremy Linton) [RHEL-108306]
  - arm64: cputype: Add Cortex-X1C definitions (Jeremy Linton) [RHEL-108306]
  - EDAC/amd64: Correct number of UMCs for family 19h models 70h-7fh (Joel Savitz) [RHEL-102251]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-621.el9]
changelog:
  - platform/x86: ideapad-laptop: pass a correct pointer to the driver data (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Avoid initializing on non-ACPI platforms (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Simplify error flow in amd_pmf_init_smart_pc() (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Prevent amd_pmf_tee_deinit() from running twice (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Use device managed allocations (David Arcari) [RHEL-105420]
  - drivers/platform/x86/amd: pmf: Check for invalid Smart PC Policies (David Arcari) [RHEL-105420]
  - drivers/platform/x86/amd: pmf: Check for invalid sideloaded Smart PC Policies (David Arcari) [RHEL-105420]
  - platform/x86: amd: pmf: Fix STT limits (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: convert timeouts to secs_to_jiffies() (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Fix missing hidden options for Smart PC (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: fix cleanup in amd_pmf_init_smart_pc() (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Update PMF Driver for Compatibility with new PMF-TA (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Propagate PMF-TA return codes (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Add balanced-performance to hidden choices (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Add 'quiet' to hidden choices (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Initialize and clean up `cb_mutex` (David Arcari) [RHEL-105420]
  - ACPI: platform-profile: Fix CFI violation when accessing sysfs files (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Add support for hidden choices (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Fix memory leak in profile_class_is_visible() (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Improve platform_profile_unregister() (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Add a prefix to log messages (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Add documentation (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Clean platform_profile_handler (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Move platform_profile_handler (David Arcari) [RHEL-105420]
  - platform/x86: thinkpad_acpi: Fix registration of tpacpi platform driver (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Remove platform_profile_handler from exported symbols (David Arcari) [RHEL-105420]
  - platform/x86: thinkpad_acpi: Use devm_platform_profile_register() (David Arcari) [RHEL-105420]
  - platform/x86: hp-wmi: Use devm_platform_profile_register() (David Arcari) [RHEL-105420]
  - platform/x86: ideapad-laptop: Use devm_platform_profile_register() (David Arcari) [RHEL-105420]
  - platform/surface: surface_platform_profile: Use devm_platform_profile_register() (David Arcari) [RHEL-105420]
  - platform/x86: amd: pmf: sps: Use devm_platform_profile_register() (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Add `probe` to platform_profile_ops (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Add `ops` member to handlers (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Remove platform_profile_handler from callbacks (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Let drivers set drvdata to the class device (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Get SRA sensor data from AMD SFH driver (David Arcari) [RHEL-105420]
  - HID: amd_sfh: Fix SRA sensor when it's the only sensor (David Arcari) [RHEL-105420]
  - HID: amd_sfh: Add support to export device operating states (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Switch to guard(mutex) (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Enable Custom BIOS Inputs for PMF-TA (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Drop all quirks (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Replace *class_dev member with class_dev (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Add devm_platform_profile_register() (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Allow multiple handlers (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Notify class device from platform_profile_notify() (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Check all profile handler to calculate next (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Make sure all profile handlers agree on profile (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Add concept of a "custom" profile (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Only show profiles common for all handlers (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Notify change events on register and unregister (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Add profile attribute for class interface (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Add choices attribute for class interface (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Add name attribute to class interface (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Create class for ACPI platform profile (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Use `scoped_cond_guard` (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Use guard(mutex) for register/unregister (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Move matching string for new profile out of mutex (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Move sanity check out of the mutex (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Pass the profile handler into platform_profile_notify() (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Add platform handler argument to platform_profile_remove() (David Arcari) [RHEL-105420]
  - ACPI: add missing MODULE_DESCRIPTION() macros (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Add device pointer into platform profile handler (David Arcari) [RHEL-105420]
  - ACPI: platform-profile: Add a name member to handlers (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Switch to platform_get_resource() and devm_ioremap_resource() (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Use dev_err_probe() to simplify error handling (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Add SMU metrics table support for 1Ah family 60h model (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Add quirk for TUF Gaming A14 (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Make ASUS GA403 quirk generic (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Update SMU metrics table for 1AH family series (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Relocate CPU ID macros to the PMF header (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Add support for notifying Smart PC Solution updates (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Fix to Update HPD Data When ALS is Disabled (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Add new ACPI ID AMDI0107 (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Add quirk for ROG Ally X (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Use existing input event codes to update system states (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Use memdup_user() (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Add new ACPI ID AMDI0105 (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Add quirk for ROG Zephyrus G14 (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Add infrastructure for quirking supported funcs (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Decrease error message to debug (David Arcari) [RHEL-105420]
  - powercap: Switch to use hrtimer_setup() (David Arcari) [RHEL-111365]
  - PM: EM: Rework the depends on for CONFIG_ENERGY_MODEL (David Arcari) [RHEL-111365]
  - powercap: intel_rapl: Do not change CLAMPING bit if ENABLE bit cannot be changed (David Arcari) [RHEL-111365]
  - powercap: intel_rapl_msr: Add PL4 support for Panther Lake (David Arcari) [RHEL-111365]
  - powercap: intel_rapl: Add support for Bartlett Lake platform (David Arcari) [RHEL-111365]
  - kernel.spec: replace '=' with space in argument of kernel-install (Li Tian) [RHEL-114361]
  - net/mlx5: Not returning mlx5_link_info table when speed is unknown (Li Tian) [RHEL-114363]
  - arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS (Jerome Marchand) [RHEL-101598]
  - ftrace: Remove unused global 'ftrace_direct_func_count' (Jerome Marchand) [RHEL-101598]
  - ftrace: Remove unused list 'ftrace_direct_funcs' (Jerome Marchand) [RHEL-101598]
  - tracing: Fix HAVE_DYNAMIC_FTRACE_WITH_REGS ifdef (Jerome Marchand) [RHEL-101598]
  - ftrace: Fix DIRECT_CALLS to use SAVE_REGS by default (Jerome Marchand) [RHEL-101598]
  - samples: ftrace: Replace bti assembly with hint for older compiler (Jerome Marchand) [RHEL-101598]
  - arm64: avoid executing padding bytes during kexec / hibernation (Jerome Marchand) [RHEL-101598]
  - arm64: ftrace: Add direct call trampoline samples support (Jerome Marchand) [RHEL-101598]
  - samples: ftrace: Save required argument registers in sample trampolines (Jerome Marchand) [RHEL-101598]
  - arm64: ftrace: Simplify get_ftrace_plt (Jerome Marchand) [RHEL-101598]
  - arm64: ftrace: Add direct call support (Jerome Marchand) [RHEL-101598]
  - ftrace: Make DIRECT_CALLS work WITH_ARGS and !WITH_REGS (Jerome Marchand) [RHEL-101598]
  - ftrace: Store direct called addresses in their ops (Jerome Marchand) [RHEL-101598]
  - ftrace: Rename _ftrace_direct_multi APIs to _ftrace_direct APIs (Jerome Marchand) [RHEL-101598]
  - ftrace: Remove the legacy _ftrace_direct API (Jerome Marchand) [RHEL-101598]
  - ftrace: Replace uses of _ftrace_direct APIs with _ftrace_direct_multi (Jerome Marchand) [RHEL-101598]
  - ftrace: Let unregister_ftrace_direct_multi() call ftrace_free_filter() (Jerome Marchand) [RHEL-101598]
  - arm64: Implement HAVE_DYNAMIC_FTRACE_WITH_CALL_OPS (Jerome Marchand) [RHEL-101598]
  - arm64: ftrace: Update stale comment (Jerome Marchand) [RHEL-101598]
  - arm64: Extend support for CONFIG_FUNCTION_ALIGNMENT (Jerome Marchand) [RHEL-101598]
  - Compiler attributes: GCC cold function alignment workarounds (Jerome Marchand) [RHEL-101598]
  - ftrace: Add DYNAMIC_FTRACE_WITH_CALL_OPS (Jerome Marchand) [RHEL-101598]
  - ftrace: arm64: remove static ftrace (Jerome Marchand) [RHEL-101598]
  - ftrace: arm64: move from REGS to ARGS (Jerome Marchand) [RHEL-101598]
  - ftrace: abstract DYNAMIC_FTRACE_WITH_ARGS accesses (Jerome Marchand) [RHEL-101598]
  - ftrace: rename ftrace_instruction_pointer_set() -> ftrace_regs_set_instruction_pointer() (Jerome Marchand) [RHEL-101598]
  - ftrace: pass fregs to arch_ftrace_set_direct_caller() (Jerome Marchand) [RHEL-101598]
  - arm64: ftrace: remove redundant label (Jerome Marchand) [RHEL-101598]
  - arm64/ftrace: Make function graph use ftrace directly (Jerome Marchand) [RHEL-101598]
  - arm64: Improve HAVE_DYNAMIC_FTRACE_WITH_REGS selection for clang (Jerome Marchand) [RHEL-101598]
  - tracing: Use linker magic instead of recasting ftrace_ops_list_func() (Jerome Marchand) [RHEL-101598]
  - ice: fix NULL access of tx->in_use in ice_ll_ts_intr (Petr Oros) [RHEL-84608]
  - ice: fix NULL access of tx->in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-84608]
  - platform/x86/amd/pmc: Add TUXEDO IB Pro Gen10 AMD to spurious 8042 quirks list (David Arcari) [RHEL-102860]
  - platform/x86/amd: pmc: Drop SMU F/W match for Cezanne (David Arcari) [RHEL-102860]
  - platform/x86/amd: pmc: Add Lenovo Yoga 6 13ALC6 to pmc quirk list (David Arcari) [RHEL-102860]
  - Move FCH header to a location accessible by all archs (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Add PCSpecialist Lafite Pro V 14M to 8042 quirks list (David Arcari) [RHEL-102860]
  - platform/x86/amd: pmc: Clear metrics table at start of cycle (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Declare quirk_spurious_8042 for MECHREVO Wujie 14XA (GX4HRXL) (David Arcari) [RHEL-102860]
  - platform/x86/amd: pmc: Require at least 2.5 seconds between HW sleep cycles (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: fix leak in probe() (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Use managed APIs for mutex (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Remove unnecessary line breaks (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Move macros and structures to the PMC header file (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Notify user when platform does not support s0ix transition (David Arcari) [RHEL-102860]
  - platform/x86: amd: Use *-y instead of *-objs in Makefiles [partial] (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it (David Arcari) [RHEL-102860]
  - platform/x86/amd: pmc: Use guard(mutex) (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Add STB support for AMD Desktop variants (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Update S2D message id for 1Ah Family 70h model (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Update IP information structure for newer SoCs (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Use ARRAY_SIZE() to fill num_ips information (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Isolate STB code changes to a new file (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Define enum for S2D/PMC msg_port and add helper function (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Update function names to align with new STB file (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Move STB functionality to a new file for better code organization (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Move STB block into amd_pmc_s2d_init() (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Extend support for PMC features on new AMD platform (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Fix SMU command submission path on new AMD platform (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Send OS_HINT command for new AMD platform (David Arcari) [RHEL-102860]
  - platform/x86/amd: pmc: Add new ACPI ID AMDI000B (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Fix implicit declaration error on i386 (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Extend Framework 13 quirk to more BIOSes (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Add AMD MP2 STB functionality (David Arcari) [RHEL-102860]
  - redhat/configs: enable CONFIG_AMD_MP2_STB (David Arcari) [RHEL-102860]
  - RAS/AMD/FMPM: Get masked address (Aristeu Rozanski) [RHEL-87600]
  - RAS/AMD/ATL: Include row[13] bit in row retirement (Aristeu Rozanski) [RHEL-87600]
  - power: supply: core: Use blocking_notifier_call_chain to avoid RCU complaint (Mark Langsdorf) [RHEL-36251]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-622.el9]
changelog:
  - ppp: fix memory leak in pad_compress_skb (Guillaume Nault) [RHEL-115633]
  - pptp: fix pptp_xmit() error path (Guillaume Nault) [RHEL-115633]
  - pptp: ensure minimal skb length in pptp_xmit() (Guillaume Nault) [RHEL-115633]
  - mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). (Guillaume Nault) [RHEL-115623]
  - x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-110658]
  - x86/kaslr: Include <linux/prandom.h> instead of <linux/random.h> (Ricardo Robaina) [RHEL-110658]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-623.el9]
changelog:
  - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117236] {CVE-2023-53373}
  - ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116541]
  - EDAC/amd64: Fix size calculation for Non-Power-of-Two DIMMs (Joel Savitz) [RHEL-101167]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-624.el9]
changelog:
  - x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs (David Arcari) [RHEL-118965]
  - fs/resctrl: Eliminate false positive lockdep warning when reading SNC counters (David Arcari) [RHEL-118965]
  - resctrl: get rid of pointless debugfs_file_{get,put}() (David Arcari) [RHEL-118965]
  - x86,fs/resctrl: Remove inappropriate references to cacheinfo in the resctrl subsystem (David Arcari) [RHEL-118965]
  - fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring rdtgroup_mutex (David Arcari) [RHEL-118965]
  - x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl (David Arcari) [RHEL-118965]
  - selftests/resctrl: Discover SNC kernel support and adjust messages (David Arcari) [RHEL-118965]
  - selftests/resctrl: Adjust effective L3 cache size with SNC enabled (David Arcari) [RHEL-118965]
  - selftests/resctrl: Replace magic constants used as array size (David Arcari) [RHEL-118965]
  - selftests/resctrl: Keep results from first test run (David Arcari) [RHEL-118965]
  - selftests/resctrl: Do not compare performance counters and resctrl at low bandwidth (David Arcari) [RHEL-118965]
  - selftests/resctrl: Use cache size to determine "fill_buf" buffer size (David Arcari) [RHEL-118965]
  - selftests/resctrl: Ensure measurements skip initialization of default benchmark (David Arcari) [RHEL-118965]
  - selftests/resctrl: Make benchmark parameter passing robust (David Arcari) [RHEL-118965]
  - selftests/resctrl: Remove unused measurement code (David Arcari) [RHEL-118965]
  - selftests/resctrl: Only support measured read operation (David Arcari) [RHEL-118965]
  - selftests/resctrl: Remove "once" parameter required to be false (David Arcari) [RHEL-118965]
  - selftests/resctrl: Make wraparound handling obvious (David Arcari) [RHEL-118965]
  - selftests/resctrl: Protect against array overflow when reading strings (David Arcari) [RHEL-118965]
  - selftests/resctrl: Protect against array overrun during iMC config parsing (David Arcari) [RHEL-118965]
  - selftests/resctrl: Fix memory overflow due to unhandled wraparound (David Arcari) [RHEL-118965]
  - selftests/resctrl: Print accurate buffer size as part of MBM results (David Arcari) [RHEL-118965]
  - selftests/resctrl: Make functions only used in same file static (David Arcari) [RHEL-118965]
  - x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h (David Arcari) [RHEL-118965]
  - x86/resctrl: Move enum resctrl_event_id to resctrl.h (David Arcari) [RHEL-118965]
  - x86/resctrl: Always initialise rid field in rdt_resources_all[] (David Arcari) [RHEL-118965]
  - x86/resctrl: Relax some asm #includes (David Arcari) [RHEL-118965]
  - x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context() (David Arcari) [RHEL-118965]
  - x86/resctrl: Squelch whitespace anomalies in resctrl core code (David Arcari) [RHEL-118965]
  - x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl (David Arcari) [RHEL-118965]
  - fs/resctrl: Add boiler plate for external resctrl code (David Arcari) [RHEL-118965]
  - x86/resctrl: Split trace.h (David Arcari) [RHEL-118965]
  - x86/resctrl: Expand the width of domid by replacing mon_data_bits (David Arcari) [RHEL-118965]
  - x86/resctrl: Add end-marker to the resctrl_event_id enum (David Arcari) [RHEL-118965]
  - x86/resctrl: Move is_mba_sc() out of core.c (David Arcari) [RHEL-118965]
  - x86/resctrl: Drop __init/__exit on assorted symbols (David Arcari) [RHEL-118965]
  - x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point (David Arcari) [RHEL-118965]
  - x86/resctrl: Check all domains are offline in resctrl_exit() (David Arcari) [RHEL-118965]
  - x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_" (David Arcari) [RHEL-118965]
  - x86/resctrl: Remove the limit on the number of CLOSID (David Arcari) [RHEL-118965]
  - x86/resctrl: Optimize cpumask_any_housekeeping() (David Arcari) [RHEL-118965]
  - cpumask: Relax cpumask_any_but() (David Arcari) [RHEL-118965]
  - cpumask: Add cpumask_{first,next}_andnot() API (David Arcari) [RHEL-118965]
  - find: Add find_first_andnot_bit() (David Arcari) [RHEL-118965]
  - x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name (David Arcari) [RHEL-118965]
  - x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their callers (David Arcari) [RHEL-118965]
  - x86/resctrl: Move get_config_index() to a header (David Arcari) [RHEL-118965]
  - x86/resctrl: Handle throttle_mode for SMBA resources (David Arcari) [RHEL-118965]
  - x86/resctrl: Move RFTYPE flags to be managed by resctrl (David Arcari) [RHEL-118965]
  - x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr (David Arcari) [RHEL-118965]
  - x86/resctrl: Make prefetch_disable_bits belong to the arch code (David Arcari) [RHEL-118965]
  - x86/resctrl: Allow an architecture to disable pseudo lock (David Arcari) [RHEL-118965]
  - x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions (David Arcari) [RHEL-118965]
  - x86/resctrl: Move mbm_cfg_mask to struct rdt_resource (David Arcari) [RHEL-118965]
  - x86/resctrl: Move mba_mbps_default_event init to filesystem code (David Arcari) [RHEL-118965]
  - x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers (David Arcari) [RHEL-118965]
  - x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC (David Arcari) [RHEL-118965]
  - x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h (David Arcari) [RHEL-118965]
  - x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers (David Arcari) [RHEL-118965]
  - x86/resctrl: Move monitor init work to a resctrl init call (David Arcari) [RHEL-118965]
  - x86/resctrl: Move monitor exit work to a resctrl exit call (David Arcari) [RHEL-118965]
  - x86/resctrl: Add an arch helper to reset one resource (David Arcari) [RHEL-118965]
  - x86/resctrl: Move resctrl types to a separate header (David Arcari) [RHEL-118965]
  - x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code (David Arcari) [RHEL-118965]
  - x86/resctrl: Expose resctrl fs's init function to the rest of the kernel (David Arcari) [RHEL-118965]
  - x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid() (David Arcari) [RHEL-118965]
  - x86/resctrl: Add helper for setting CPU default properties (David Arcari) [RHEL-118965]
  - x86/resctrl: Generate default_ctrl instead of sharing it (David Arcari) [RHEL-118965]
  - x86/resctrl: Add max_bw to struct resctrl_membw (David Arcari) [RHEL-118965]
  - x86/resctrl: Remove data_width and the tabular format (David Arcari) [RHEL-118965]
  - x86/resctrl: Use schema type to determine the schema format string (David Arcari) [RHEL-118965]
  - x86/resctrl: Use schema type to determine how to parse schema values (David Arcari) [RHEL-118965]
  - x86/resctrl: Remove fflags from struct rdt_resource (David Arcari) [RHEL-118965]
  - x86/resctrl: Add a helper to avoid reaching into the arch code resource list (David Arcari) [RHEL-118965]
  - x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors (David Arcari) [RHEL-118965]
  - kernfs: Move dput() outside of the RCU section. (David Arcari) [RHEL-118965]
  - kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked(). (David Arcari) [RHEL-118965]
  - kernfs: Use RCU to access kernfs_node::name. (David Arcari) [RHEL-118965]
  - kernfs: Use RCU to access kernfs_node::parent. (David Arcari) [RHEL-118965]
  - kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir(). (David Arcari) [RHEL-118965]
  - kernfs: Acquire kernfs_rwsem in kernfs_node_dentry(). (David Arcari) [RHEL-118965]
  - kernfs: mount: Remove unnecessary ‘NULL’ values from knparent (David Arcari) [RHEL-118965]
  - kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry(). (David Arcari) [RHEL-118965]
  - kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn(). (David Arcari) [RHEL-118965]
  - kernfs: RCU protect kernfs_nodes and avoid kernfs_idr_lock in kernfs_find_and_get_node_by_id() (David Arcari) [RHEL-118965]
  - x86/resctrl: Document the new "mba_MBps_event" file (David Arcari) [RHEL-118965]
  - x86/resctrl: Add write option to "mba_MBps_event" file (David Arcari) [RHEL-118965]
  - x86/resctrl: Add "mba_MBps_event" file to CTRL_MON directories (David Arcari) [RHEL-118965]
  - x86/resctrl: Make mba_sc use total bandwidth if local is not supported (David Arcari) [RHEL-118965]
  - x86/resctrl: Compute memory bandwidth for all supported events (David Arcari) [RHEL-118965]
  - x86/resctrl: Modify update_mba_bw() to use per CTRL_MON group event (David Arcari) [RHEL-118965]
  - x86/resctrl: Prepare for per-CTRL_MON group mba_MBps control (David Arcari) [RHEL-118965]
  - x86/resctrl: Introduce resctrl_file_fflags_init() to initialize fflags (David Arcari) [RHEL-118965]
  - x86/resctrl: Use kthread_run_on_cpu() (David Arcari) [RHEL-118965]
  - x86/resctrl: Support Sub-NUMA cluster mode SNC6 (David Arcari) [RHEL-118965]
  - x86/resctrl: Slightly clean-up mbm_config_show() (David Arcari) [RHEL-118965]
  - x86/resctrl: Annotate get_mem_config() functions as __init (David Arcari) [RHEL-118965]
  - finally take no_llseek out [partial] (David Arcari) [RHEL-118965]
  - x86/msr: Rename DECLARE_ARGS() to EAX_EDX_DECLARE_ARGS (David Arcari) [RHEL-118444]
  - x86/msr: Improve the comments of the DECLARE_ARGS()/EAX_EDX_VAL()/EAX_EDX_RET() facility (David Arcari) [RHEL-118444]
  - x86/msr: Standardize on u64 in <asm/msr.h> (David Arcari) [RHEL-118444]
  - x86/mce: use is_copy_from_user() to determine copy-from-user context (David Arcari) [RHEL-118444]
  - x86/mce/threshold: Remove the redundant this_cpu_dec_return() (David Arcari) [RHEL-118444]
  - x86/mce/mcelog: Use xchg() to get and clear the flags (David Arcari) [RHEL-118444]
  - finally take no_llseek out [partial] (David Arcari) [RHEL-118444]
  - treewide: Fix wrong singular form of jiffies in comments [partial] (David Arcari) [RHEL-118444]
  - x86/mce: Make sure CMCI banks are cleared during shutdown on Intel (David Arcari) [RHEL-118444]
  - x86/mce/amd: Fix threshold limit reset (David Arcari) [RHEL-118444]
  - x86/mce/amd: Add default names for MCA banks and blocks (David Arcari) [RHEL-118444]
  - x86/mce: Ensure user polling settings are honored when restarting timer (David Arcari) [RHEL-118444]
  - x86/mce: Don't remove sysfs if thresholding sysfs init fails (David Arcari) [RHEL-118444]
  - x86/mce/inject: Remove call to mce_notify_irq() (David Arcari) [RHEL-118444]
  - x86/mce/amd: Remove shared threshold bank plumbing (David Arcari) [RHEL-118444]
  - x86/mce: Remove the redundant mce_hygon_feature_init() (David Arcari) [RHEL-118444]
  - x86/mce: Convert family/model mixed checks to VFM-based checks (David Arcari) [RHEL-118444]
  - x86/cpu/intel: Replace PAT erratum model/family magic numbers with symbolic IFM references (David Arcari) [RHEL-118444]
  - x86/mce: Break up __mcheck_cpu_apply_quirks() (David Arcari) [RHEL-118444]
  - x86/mce: Make four functions return bool (David Arcari) [RHEL-118444]
  - x86/mce: Make several functions return bool (David Arcari) [RHEL-118444]
  - x86/mce/intel: Use MCG_BANKCNT_MASK instead of 0xff (David Arcari) [RHEL-118444]
  - x86/mce: Remove unused variable and return value in machine_check_poll() (David Arcari) [RHEL-118444]
  - x86/mce: Switch to new Intel CPU model defines (David Arcari) [RHEL-118444]
  - x86/mce: Make mce_subsys const (David Arcari) [RHEL-118444]
  - x86/mce: Handle Intel threshold interrupt storms (David Arcari) [RHEL-118444]
  - x86/mce: Add per-bank CMCI storm mitigation (David Arcari) [RHEL-118444]
  - x86/mce: Remove old CMCI storm mitigation code (David Arcari) [RHEL-118444]
  - netfilter: ipset: fix region locking in hash types (CKI Backport Bot) [RHEL-115637]
  - tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (Xin Long) [RHEL-115652]
  - tipc: use kfree_sensitive() for aead cleanup (Xin Long) [RHEL-115652]
  - tipc: fix NULL pointer dereference in tipc_mon_reinit_self() (Xin Long) [RHEL-115652]
  - tipc: fix memory leak in tipc_link_xmit (Xin Long) [RHEL-115652]
  - tipc: re-order conditions in tipc_crypto_key_rcv() (Xin Long) [RHEL-115652]
  - net: tipc: remove one synchronize_net() from tipc_nametbl_stop() (Xin Long) [RHEL-115652]
  - tcp: add tcp_rto_max_ms sysctl (Antoine Tenart) [RHEL-115191]
  - tcp: add the ability to control max RTO (Antoine Tenart) [RHEL-115191]
  - tcp: use tcp_reset_xmit_timer() (Antoine Tenart) [RHEL-115191]
  - tcp: add a @pace_delay parameter to tcp_reset_xmit_timer() (Antoine Tenart) [RHEL-115191]
  - tcp: remove tcp_reset_xmit_timer() @max_when argument (Antoine Tenart) [RHEL-115191]
  - book3s64/hash: Remove kfence support temporarily (Mamatha Inamdar) [RHEL-114396]
  - padata: Reset next CPU when reorder sequence wraps around (Herbert Xu) [RHEL-39495]
  - padata: Remove comment for reorder_work (Herbert Xu) [RHEL-39495]
  - padata: Fix pd UAF once and for all (Herbert Xu) [RHEL-39495]
  - padata: do not leak refcount in reorder_work (Herbert Xu) [RHEL-39495]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-625.el9]
changelog:
  - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-113838] {CVE-2022-50087}
  - NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate() (Benjamin Coddington) [RHEL-117497]
  - sched: Add wait/wake interface for variable updated under a lock. (Benjamin Coddington) [RHEL-117497]
  - sched: Add test_and_clear_wake_up_bit() and atomic_dec_and_wake_up() (Benjamin Coddington) [RHEL-117497]
  - sched: Document wait_var_event() family of functions and wake_up_var() (Benjamin Coddington) [RHEL-117497]
  - sched: Improve documentation for wake_up_bit/wait_on_bit family of functions (Benjamin Coddington) [RHEL-117497]
  - sched: change wake_up_bit() and related function to expect unsigned long * (Benjamin Coddington) [RHEL-117497]
  - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118255] {CVE-2025-39817}
  - cpupower: Allow control of boost feature on non-x86 based systems with boost support. (David Arcari) [RHEL-118182]
  - cpupower: Fix a bug where the -t option of the set subcommand was not working. (David Arcari) [RHEL-118182]
  - pm: cpupower: Fix printing of CORE, CPU fields in cpupower-monitor (David Arcari) [RHEL-118182]
  - pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() (David Arcari) [RHEL-118182]
  - cpupower: Implement CPU physical core querying (David Arcari) [RHEL-118182]
  - pm: cpupower: remove hard-coded topology depth values (David Arcari) [RHEL-118182]
  - pm: cpupower: Fix cmd_monitor() error legs to free cpu_topology (David Arcari) [RHEL-118182]
  - cpupower: monitor: Exit with error status if execvp() fail (David Arcari) [RHEL-118182]
  - pm: cpupower: bench: Prevent NULL dereference on malloc failure (David Arcari) [RHEL-118182]
  - ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-118146]
  - smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-114295]
  - smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-114295]
  - smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-114295]
  - smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-114295]
  - smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-114295]
  - smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-114295]
  - fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-114295] {CVE-2025-39819}
  - firmware: qcom: scm: request the waitqueue irq *after* initializing SCM (Eric Chanudet) [RHEL-117508]
  - firmware: qcom: scm: initialize tzmem before marking SCM as available (Eric Chanudet) [RHEL-117508]
  - firmware: qcom: scm: take struct device as argument in SHM bridge enable (Eric Chanudet) [RHEL-117508]
  - firmware: qcom: scm: remove unused arguments from SHM bridge routines (Eric Chanudet) [RHEL-117508]
  - docs: firmware: qcom_scm: Fix kernel-doc warning (Eric Chanudet) [RHEL-117508]
  - firmware: qcom: scm: Allow QSEECOM for HP EliteBook Ultra G1q (Eric Chanudet) [RHEL-117508]
  - firmware: qcom: tzmem: disable sm7150 platform (Eric Chanudet) [RHEL-117508]
  - firmware: qcom: scm: Allow QSEECOM on Asus Zenbook A14 (Eric Chanudet) [RHEL-117508]
  - firmware: qcom: uefisecapp: fix efivars registration race (Eric Chanudet) [RHEL-117508]
  - firmware: qcom: scm: Fix error code in probe() (Eric Chanudet) [RHEL-117508]
  - firmware: qcom: scm: add calls for wrapped key support (Eric Chanudet) [RHEL-117508]
  - firmware: qcom: scm: Allow QSEECOM on Huawei Matebook E Go (sc8280xp) (Eric Chanudet) [RHEL-117508]
  - firmware: qcom: scm: Allow QSEECOM for Windows Dev Kit 2023 (Eric Chanudet) [RHEL-117508]
  - firmware: qcom: scm: Allow QSEECOM for HP Omnibook X14 (Eric Chanudet) [RHEL-117508]
  - firmware: qcom: scm: Allow QSEECOM on the asus vivobook s15 (Eric Chanudet) [RHEL-117508]
  - firmware: qcom: scm: Allow QSEECOM on X1P42100 CRD (Eric Chanudet) [RHEL-117508]
  - firmware: qcom: scm: Introduce CP_SMMU_APERTURE_ID (Eric Chanudet) [RHEL-117508]
  - firmware: qcom: uefisecapp: Allow X1E Devkit devices (Eric Chanudet) [RHEL-117508]
  - firmware: qcom: scm: Allow QSEECOM on Dell XPS 13 9345 (Eric Chanudet) [RHEL-117508]
  - firmware: qcom: scm: Allow QSEECOM on Microsoft Surface Pro 9 5G (Eric Chanudet) [RHEL-117508]
  - firmware: qcom: scm: Allow QSEECOM on Lenovo Yoga Slim 7x (Eric Chanudet) [RHEL-117508]
  - firmware: qcom: scm: Allow QSEECOM on Surface Laptop 7 models (Eric Chanudet) [RHEL-117508]
  - firmware: qcom: scm: Allow QSEECOM on ThinkPad T14s (Eric Chanudet) [RHEL-117508]
  - firmware: qcom: tzmem: disable sdm670 platform (Eric Chanudet) [RHEL-117508]
  - firmware: qcom: scm: Mark get_wq_ctx() as atomic call (Eric Chanudet) [RHEL-117508]
  - firmware: qcom-scm: Remove QCOM_SMC_WAITQ_FLAG_WAKE_ALL (Eric Chanudet) [RHEL-117508]
  - firmware: qcom: uefisecapp: Allow on X1E devices (Eric Chanudet) [RHEL-117508]
  - firmware: qcom: uefisecapp: Allow on sc8180x Primus and Flex 5G (Eric Chanudet) [RHEL-117508]
  - firmware: qcom_scm: remove IS_ERR() checks from qcom_scm_bw_{en,dis}able() (Eric Chanudet) [RHEL-117508]
  - firmware: qcom_scm: disable clocks if qcom_scm_bw_enable() fails (Eric Chanudet) [RHEL-117508]
  - firmware: qcom_scm: use 64-bit calling convention only when client is 64-bit (Eric Chanudet) [RHEL-117508]
  - firmware: qcom_scm: Always return devm_clk_get_optional errors (Eric Chanudet) [RHEL-117508]
  - firmware: qcom_scm: Drop useless compatibles (Eric Chanudet) [RHEL-117508]
  - firmware: qcom_scm: Always try to consume all three clocks (Eric Chanudet) [RHEL-117508]
  - firmware: qcom_scm-legacy: correct kerneldoc (Eric Chanudet) [RHEL-117508]
  - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114273]
  - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114273] {CVE-2025-40300}
  - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114273] {CVE-2025-40300}
  - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114273] {CVE-2025-40300}
  - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114273] {CVE-2025-40300}
  - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114273] {CVE-2025-40300}
  - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114273] {CVE-2025-40300}
  - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114273] {CVE-2025-40300}
  - randomize_kstack: Remove non-functional per-arch entropy filtering (Waiman Long) [RHEL-114273]
  - Bluetooth: revert TX timestamping (David Marlin) [RHEL-107923]
  - PM: wakeup: make device_wakeup_disable() return void (David Marlin) [RHEL-107923]
  - PM: wakeup: implement devm_device_init_wakeup() helper (David Marlin) [RHEL-107923]
  - PM: wakeup: Remove unnecessary else from device_init_wakeup() (David Marlin) [RHEL-107923]
  - Bluetooth: hci_event: Disconnect device when BIG sync is lost (David Marlin) [RHEL-107923]
  - Bluetooth: hci_event: Add support for handling LE BIG Sync Lost event (David Marlin) [RHEL-107923]
  - Bluetooth: hci_conn: Fix not cleaning up Broadcaster/Broadcast Source (David Marlin) [RHEL-107923]
  - Bluetooth: hci_conn: Fix running bis_cleanup for hci_conn->type PA_LINK (David Marlin) [RHEL-107923]
  - Bluetooth: ISO: Fix getname not returning broadcast fields (David Marlin) [RHEL-107923]
  - Bluetooth: hci_core: Fix not accounting for BIS/CIS/PA links separately (David Marlin) [RHEL-107923]
  - Bluetooth: Add PA_LINK to distinguish BIG sync and PA sync connections (David Marlin) [RHEL-107923]
  - Bluetooth: hci_sync: Prevent unintended PA sync when SID is 0xFF (David Marlin) [RHEL-107923]
  - Bluetooth: hci_sync: Fix scan state after PA Sync has been established (David Marlin) [RHEL-107923]
  - Bluetooth: btusb: Fix potential NULL dereference on kmalloc failure (David Marlin) [RHEL-107923]
  - Bluetooth: hci_devcd_dump: fix out-of-bounds via dev_coredumpv (David Marlin) [RHEL-107923]
  - Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU (David Marlin) [RHEL-107923]
  - Bluetooth: btusb: QCA: Fix downloading wrong NVM for WCN6855 GF variant without board ID (David Marlin) [RHEL-107923]
  - Bluetooth: hci_dev: replace 'quirks' integer by 'quirk_flags' bitmap (David Marlin) [RHEL-107923]
  - Bluetooth: hci_core: add missing braces when using macro parameters (David Marlin) [RHEL-107923]
  - Bluetooth: hci_core: fix typos in macros (David Marlin) [RHEL-107923]
  - Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout (David Marlin) [RHEL-107923]
  - Bluetooth: SMP: If an unallowed command is received consider it a failure (David Marlin) [RHEL-107923]
  - Bluetooth: btintel: Check if controller is ISO capable on btintel_classify_pkt_type (David Marlin) [RHEL-107923]
  - Bluetooth: hci_sync: fix connectable extended advertising when using static random address (David Marlin) [RHEL-107923]
  - Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb() (David Marlin) [RHEL-107923]
  - Bluetooth: hci_event: Fix not marking Broadcast Sink BIS as connected (David Marlin) [RHEL-107923]
  - Bluetooth: hci_sync: Fix attempting to send HCI_Disconnect to BIS handle (David Marlin) [RHEL-107923]
  - Bluetooth: hci_core: Remove check of BDADDR_ANY in hci_conn_hash_lookup_big_state (David Marlin) [RHEL-107923]
  - Bluetooth: hci_sync: Fix not disabling advertising instance (David Marlin) [RHEL-107923]
  - Bluetooth: HCI: Set extended advertising data synchronously (David Marlin) [RHEL-107923]
  - Bluetooth: MGMT: mesh_send: check instances prior disabling advertising (David Marlin) [RHEL-107923]
  - Bluetooth: MGMT: set_mesh: update LE scan interval and window (David Marlin) [RHEL-107923]
  - Bluetooth: hci_sync: revert some mesh modifications (David Marlin) [RHEL-107923]
  - Bluetooth: Prevent unintended pause by checking if advertising is active (David Marlin) [RHEL-107923]
  - driver: bluetooth: hci_qca:fix unable to load the BT driver (David Marlin) [RHEL-107923]
  - Bluetooth: L2CAP: Fix L2CAP MTU negotiation (David Marlin) [RHEL-107923]
  - Bluetooth: btintel_pcie: Fix potential race condition in firmware download (David Marlin) [RHEL-107923]
  - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-107923]
  - Bluetooth: ISO: Fix not using bc_sid as advertisement SID (David Marlin) [RHEL-107923]
  - Bluetooth: ISO: Fix using BT_SK_PA_SYNC to detect BIS sockets (David Marlin) [RHEL-107923]
  - Bluetooth: eir: Fix possible crashes on eir_create_adv_data (David Marlin) [RHEL-107923]
  - Bluetooth: hci_sync: Fix broadcast/PA when using an existing instance (David Marlin) [RHEL-107923]
  - Bluetooth: Fix NULL pointer deference on eir_get_service_data (David Marlin) [RHEL-107923]
  - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-107923]
  - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-107923]
  - Bluetooth: btintel_pcie: Reduce driver buffer posting to prevent race condition (David Marlin) [RHEL-107923]
  - Bluetooth: btintel_pcie: Increase the tx and rx descriptor count (David Marlin) [RHEL-107923]
  - Bluetooth: btintel_pcie: Fix driver not posting maximum rx buffers (David Marlin) [RHEL-107923]
  - Bluetooth: hci_core: fix list_for_each_entry_rcu usage (David Marlin) [RHEL-107923]
  - Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION (David Marlin) [RHEL-107923]
  - Bluetooth: hci_qca: move the SoC type check to the right place (David Marlin) [RHEL-107923]
  - Bluetooth: btnxpuart: Fix missing devm_request_irq() return value check (David Marlin) [RHEL-107923]
  - Bluetooth: MGMT: reject malformed HCI_CMD_SYNC commands (David Marlin) [RHEL-107923]
  - Bluetooth: btintel: Check dsbr size from EFI variable (David Marlin) [RHEL-107923]
  - Bluetooth: MGMT: iterate over mesh commands in mgmt_mesh_foreach() (David Marlin) [RHEL-107923]
  - Bluetooth: btusb: Add new VID/PID 13d3/3584 for MT7922 (David Marlin) [RHEL-107923]
  - Bluetooth: separate CIS_LINK and BIS_LINK link types (David Marlin) [RHEL-107923]
  - Bluetooth: btusb: Add new VID/PID 13d3/3630 for MT7925 (David Marlin) [RHEL-107923]
  - Bluetooth: add support for SIOCETHTOOL ETHTOOL_GET_TS_INFO (David Marlin) [RHEL-107923]
  - Bluetooth: btintel_pcie: Dump debug registers on error (David Marlin) [RHEL-107923]
  - Bluetooth: ISO: Fix getpeername not returning sockaddr_iso_bc fields (David Marlin) [RHEL-107923]
  - Bluetooth: ISO: Fix not using SID from adv report (David Marlin) [RHEL-107923]
  - Bluetooth: btnxpuart: Implement host-wakeup feature (David Marlin) [RHEL-107923]
  - Bluetooth: btusb: Add RTL8851BE device 0x0bda:0xb850 (David Marlin) [RHEL-107923]
  - Bluetooth: hci_uart: Remove unnecessary NULL check before release_firmware() (David Marlin) [RHEL-107923]
  - Bluetooth: btmtksdio: Fix wakeup source leaks on device unbind (David Marlin) [RHEL-107923]
  - Bluetooth: btmrvl_sdio: Fix wakeup source leaks on device unbind (David Marlin) [RHEL-107923]
  - Bluetooth: btintel_pcie: Do not generate coredump for diagnostic events (David Marlin) [RHEL-107923]
  - Bluetooth: btusb: Add new VID/PID 13d3/3613 for MT7925 (David Marlin) [RHEL-107923]
  - Revert "Bluetooth: revert TX timestamping" (David Marlin) [RHEL-107923]
  - icmp: fix icmp_ndo_send address translation for reply direction (CKI Backport Bot) [RHEL-115626]
  - ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-115626]
  - ipv6: annotate data-races around rt->fib6_nsiblings (CKI Backport Bot) [RHEL-115626]
  - ipv6: fix possible infinite loop in fib6_info_uses_dev() (CKI Backport Bot) [RHEL-115626]
  - ipv6: prevent infinite loop in rt6_nlmsg_size() (CKI Backport Bot) [RHEL-115626]
  - seg6: Fix validation of nexthop addresses (CKI Backport Bot) [RHEL-115626]
  - ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS (CKI Backport Bot) [RHEL-115626]
  - bonding: check xdp prog when set bond mode (CKI Backport Bot) [RHEL-115627]
  - bonding: set random address only when slaves already exist (CKI Backport Bot) [RHEL-107189]
  - wireguard: device: enable threaded NAPI (CKI Backport Bot) [RHEL-115646]
  - wireguard: device: support big tcp GSO (CKI Backport Bot) [RHEL-115646]
  - wireguard: selftests: load nf_conntrack if not present (CKI Backport Bot) [RHEL-115646]
  - wireguard: allowedips: remove redundant selftest call (CKI Backport Bot) [RHEL-115646]
  - wireguard: device: omit unnecessary memset of netdev private data (CKI Backport Bot) [RHEL-115646]
  - ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-115647] {CVE-2025-39702}
  - ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add (CKI Backport Bot) [RHEL-115647]
  - bpf: don't do clean_live_states when state->loop_entry->branches > 0 (Gregory Bell) [RHEL-110269]
  - bpf: Return prog btf_id without capable check (Gregory Bell) [RHEL-110269]
  - bpf: Use kallsyms to find the function name of a struct_ops's stub function (Gregory Bell) [RHEL-110269]
  - bpf: Fix kmemleak warning for percpu hashmap (Gregory Bell) [RHEL-110269]
  - bpf: Only fails the busy counter check in bpf_cgrp_storage_get if it creates storage (Gregory Bell) [RHEL-110269]
  - bpftool: Fix readlink usage in get_fd_type (Gregory Bell) [RHEL-110269]
  - selftests/bpf: Mitigate sockmap_ktls disconnect_after_delete failure (Gregory Bell) [RHEL-110269]
  - bpf: Allow pre-ordering for bpf cgroup progs (Gregory Bell) [RHEL-110269]
  - bpf: Search and add kfuncs in struct_ops prologue and epilogue (Gregory Bell) [RHEL-110269]
  - bpf: Reject attaching fexit/fmod_ret to __noreturn functions (Gregory Bell) [RHEL-110269]
  - libbpf: Fix out-of-bound read (Gregory Bell) [RHEL-110269]
  - bpf: Fix BPF_INTERNAL namespace import (Gregory Bell) [RHEL-110269]
  - bpf: Add namespace to BPF internal symbols (Gregory Bell) [RHEL-110269]
  - bpf: abort verification if env->cur_state->loop_entry != NULL (Gregory Bell) [RHEL-110269]
  - selftests/bpf: add test for softlock when modifying hashmap while iterating (Gregory Bell) [RHEL-110269]
  - bpf: fix possible endless loop in BPF map iteration (Gregory Bell) [RHEL-110269]
  - bpf: bpftool: Setting error code in do_loader() (Gregory Bell) [RHEL-110269]
  - bpf: Fix deadlock between rcu_tasks_trace and event_mutex. (Gregory Bell) [RHEL-110269]
  - libbpf: Fix hypothetical STT_SECTION extern NULL deref case (Gregory Bell) [RHEL-110269]
  - bpf: copy_verifier_state() should copy 'loop_entry' field (Gregory Bell) [RHEL-110269]
  - bpf: Fix array bounds error with may_goto (Gregory Bell) [RHEL-110269]
  - selftests/bpf: Select NUMA_NO_NODE to create map (Gregory Bell) [RHEL-110269]
  - scsi: sr: Reinstate rotational media flag (Ming Lei) [RHEL-107960]
  - rtla/actions: Fix condition for buffer reallocation (Tomas Glozar) [RHEL-113482]
  - rtla: Fix buffer overflow in actions_parse (Tomas Glozar) [RHEL-113482]
  - rtla/tests: Test timerlat -P option using actions (Tomas Glozar) [RHEL-113415]
  - rtla/tests: Add grep checks for base test cases (Tomas Glozar) [RHEL-113415]
  - Documentation/rtla: Add actions feature (Tomas Glozar) [RHEL-113482]
  - rtla/tests: Limit duration to maximum of 10s (Tomas Glozar) [RHEL-113482]
  - rtla/tests: Add tests for actions (Tomas Glozar) [RHEL-113482]
  - rtla/tests: Check rtla output with grep (Tomas Glozar) [RHEL-113482]
  - rtla/timerlat: Add action on end feature (Tomas Glozar) [RHEL-113482]
  - rtla/timerlat: Add continue action (Tomas Glozar) [RHEL-113482]
  - rtla/timerlat_bpf: Allow resuming tracing (Tomas Glozar) [RHEL-113482]
  - rtla/timerlat: Add action on threshold feature (Tomas Glozar) [RHEL-113482]
  - rtla/timerlat: Introduce enum timerlat_tracing_mode (Tomas Glozar) [RHEL-113482]
  - Documentation/rtla: Describe exit status (Tomas Glozar) [RHEL-113482]
  - rtla: Set distinctive exit value for failed tests (Tomas Glozar) [RHEL-113482]
  - rtla: Fix segfault in save_trace_to_file call (Tomas Glozar) [RHEL-113482]
  - rtla: Refactor save_trace_to_file (Tomas Glozar) [RHEL-113482]
  - scsi: target: core: Generate correct identifiers for PR OUT transport IDs (Maurizio Lombardi) [RHEL-111951 RHEL-96387]
  - scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() (Maurizio Lombardi) [RHEL-111951 RHEL-96387]
  - scsi: target: Move delayed/ordered tracking to per CPU (Maurizio Lombardi) [RHEL-111951]
  - scsi: target: Move I/O path stats to per CPU (Maurizio Lombardi) [RHEL-111951]
  - scsi: target: Remove size arguments when calling strscpy() (Maurizio Lombardi) [RHEL-111951]
  - drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117568]
  - redhat: use new x86/aarch64 signing key (801/804) (Augusto Caringi) [RHEL-116727]
  - scsi: mpi3mr: Update driver version to 8.15.0.5.50 (Chandrakanth Patil) [RHEL-112803]
  - scsi: mpi3mr: Fix premature TM timeouts on virtual drives (Chandrakanth Patil) [RHEL-112803]
  - scsi: mpi3mr: Update MPI headers to revision 37 (Chandrakanth Patil) [RHEL-112803]
  - scsi: mpi3mr: Fix I/O failures during controller reset (Chandrakanth Patil) [RHEL-112803]
  - scsi: mpi3mr: Fix controller init failure on fault during queue creation (Chandrakanth Patil) [RHEL-112803]
  - scsi: mpi3mr: Fix device loss during enclosure reboot due to zero link speed (Chandrakanth Patil) [RHEL-112803]
  - scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems (Chandrakanth Patil) [RHEL-112803]
  - scsi: mpi3mr: Fix race between config read submit and interrupt completion (Chandrakanth Patil) [RHEL-112803]
  - scsi: mpi3mr: Correctly handle ATA device errors (Chandrakanth Patil) [RHEL-112803]
  - io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114336] {CVE-2025-39698}
  - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113611] {CVE-2025-39730}
  - eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111050] {CVE-2025-38614}
  - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114850] {CVE-2025-39751}
  - wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114708] {CVE-2025-39761}
  - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114691] {CVE-2025-38729}
  - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114691]
  - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114691] {CVE-2025-39757}
  - cxgb4: Avoid removal of uninserted tid JIRA: https://issues.redhat.com/browse/RHEL-75571 (Jakub Ramaseuski)
  - selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114324] {CVE-2025-39682}
  - tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114324] {CVE-2025-39682}
  - redhat/configs: Enable CONFIG_CPUFREQ_ARCH_CUR_FREQ (Jennifer Berringer) [RHEL-19395]
  - arm64: Utilize for_each_cpu_wrap for reference lookup (Jennifer Berringer) [RHEL-19395]
  - arm64: Update AMU-based freq scale factor on entering idle (Jennifer Berringer) [RHEL-19395]
  - arm64: Provide an AMU-based version of arch_freq_get_on_cpu (Jennifer Berringer) [RHEL-19395]
  - cpufreq: Introduce an optional cpuinfo_avg_freq sysfs entry (Jennifer Berringer) [RHEL-19395]
  - cpufreq: Allow arch_freq_get_on_cpu to return an error (Jennifer Berringer) [RHEL-19395]
  - arch_topology: init capacity_freq_ref to 0 (Jennifer Berringer) [RHEL-19395]
  - arm64: amu: Delay allocating cpumask for AMU FIE support (Jennifer Berringer) [RHEL-19395]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-626.el9]
changelog:
  - redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
  - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114300] {CVE-2025-39718}
  - vfs: fix copy_file_range() averts filesystem freeze protection (Benjamin Coddington) [RHEL-76048]
  - gfs2: Fix unlikely race in gdlm_put_lock (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Fix GLF_INVALIDATE_IN_PROGRESS flag clearing in do_xmote (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Do not use atomic operations unnecessarily (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Sanitize gfs2_meta_check, gfs2_metatype_check, gfs2_io_error (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Remove unnecessary gfs2_meta_check_ii argument (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Partially revert "gfs2: do_xmote fixes" (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Minor gfs2_ail1_empty cleanup (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Rename gfs2_withdrawn to gfs2_withdrawing_or_withdrawn (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Juntong Deng) [RHEL-116886]
  - gfs2: No more quota complaints after withdraw (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Rename "freeze_workqueue" to "gfs2_freeze" (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Remove space before newline (Colin Ian King) [RHEL-116886]
  - gfs2: Remove unused sd_withdraw_wait field (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: Remove unused GIF_FREE_VFS_INODE flag (Andreas Gruenbacher) [RHEL-116886]
  - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-116886]
  - gfs2: Unlock fewer glocks on unmount (Andreas Gruenbacher) [RHEL-116886]
  - ptp: prevent possible ABBA deadlock in ptp_clock_freerun() (CKI Backport Bot) [RHEL-115644]
  - ptp: allow reading of currently dialed frequency to succeed on free-running clocks (CKI Backport Bot) [RHEL-115644]
  - ptp: fix breakage after ptp_vclock_in_use() rework (CKI Backport Bot) [RHEL-115644]
  - ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() (CKI Backport Bot) [RHEL-115644]
  - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106002] {CVE-2025-38461}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-627.el9]
changelog:
  - pstore/ram: Check start of empty przs during init (CKI Backport Bot) [RHEL-122069] {CVE-2023-53331}
  - NFSv4: handle ERR_GRACE on delegation recalls (Scott Mayhew) [RHEL-115855]
  - nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Scott Mayhew) [RHEL-115855]
  - nfsd: unregister with rpcbind when deleting a transport (Scott Mayhew) [RHEL-115855]
  - nfsd: decouple the xprtsec policy check from check_nfsd_access() (Scott Mayhew) [RHEL-115855]
  - NFSD: Replace use of NFSD_MAY_LOCK in nfsd4_lock() (Scott Mayhew) [RHEL-115855]
  - NFS: nfs_invalidate_folio() must observe the offset and size arguments (Scott Mayhew) [RHEL-115855]
  - NFSv4.2: Serialise O_DIRECT i/o and copy range (Scott Mayhew) [RHEL-115855]
  - NFSv4.2: Serialise O_DIRECT i/o and clone range (Scott Mayhew) [RHEL-115855]
  - NFSv4.2: Serialise O_DIRECT i/o and fallocate() (Scott Mayhew) [RHEL-115855]
  - NFS: Serialise O_DIRECT i/o and truncate() (Scott Mayhew) [RHEL-115855]
  - nfsd: don't set the ctime on delegated atime updates (Scott Mayhew) [RHEL-115855]
  - nexthop: Forbid FDB status change while nexthop is in a group (Guillaume Nault) [RHEL-115625]
  - ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init() (Guillaume Nault) [RHEL-115625]
  - net: drop UFO packets in udp_rcv_segment() (Paolo Abeni) [RHEL-115651]
  - udp: Fix multiple wraparounds of sk->sk_rmem_alloc. (Paolo Abeni) [RHEL-115651]
  - udp: annotate data-race in __udp_enqueue_schedule_skb() (Paolo Abeni) [RHEL-115651]
  - ucount: fix atomic_long_inc_below() argument type (Joel Savitz) [RHEL-119037]
  - timens: Add struct seq_file forward declaration (Joel Savitz) [RHEL-119037]
  - timekeeping: Kill percpu.h dependency (Joel Savitz) [RHEL-119037]
  - ucounts: fix counter leak in inc_rlimit_get_ucounts() (Joel Savitz) [RHEL-119037]
  - userns: eliminate many kernel-doc warnings (Joel Savitz) [RHEL-119037]
  - userns: fix a struct's kernel-doc notation (Joel Savitz) [RHEL-119037]
  - nsfs: repair kernel-doc for ns_match() (Joel Savitz) [RHEL-119037]
  - nsfs: add compat ioctl handler (Joel Savitz) [RHEL-119037]
  - broadcom: fix support for PTP_EXTTS_REQUEST2 ioctl (Petr Oros) [RHEL-115041]
  - broadcom: fix support for PTP_PEROUT_DUTY_CYCLE (Petr Oros) [RHEL-115041]
  - net: ptp: introduce .supported_perout_flags to ptp_clock_info (Petr Oros) [RHEL-115041]
  - net: ptp: introduce .supported_extts_flags to ptp_clock_info (Petr Oros) [RHEL-115041]
  - broadcom: fix supported flag check in periodic output function (Petr Oros) [RHEL-115041]
  - renesas: reject PTP_STRICT_FLAGS as unsupported (Petr Oros) [RHEL-115041]
  - sched/deadline: Don't count nr_running for dl_server proxy tasks (Phil Auld) [RHEL-110303]
  - sched/deadline: Fix RT task potential starvation when expiry time passed (Phil Auld) [RHEL-110303]
  - sched/debug: Print the local group's asym_prefer_cpu (Phil Auld) [RHEL-110303]
  - cpufreq/amd-pstate: Update asym_prefer_cpu when core rankings change (Phil Auld) [RHEL-110303]
  - sched/topology: Introduce sched_update_asym_prefer_cpu() (Phil Auld) [RHEL-110303]
  - sched/fair: Use READ_ONCE() to read sg->asym_prefer_cpu (Phil Auld) [RHEL-110303]
  - sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails (Phil Auld) [RHEL-110303]
  - sched/numa: fix task swap by skipping kernel threads (Phil Auld) [RHEL-110303]
  - sched/numa: add tracepoint that tracks the skipping of numa balancing due to cpuset memory pinning (Phil Auld) [RHEL-110303]
  - sched/numa: skip VMA scanning on memory pinned to one NUMA node via cpuset.mems (Phil Auld) [RHEL-110303]
  - sched/fair: Allow decaying util_est when util_avg > CPU capa (Phil Auld) [RHEL-110303]
  - sched/topology: Refinement to topology_span_sane speedup (Phil Auld) [RHEL-110303]
  - sched/topology: improve topology_span_sane speed (Phil Auld) [RHEL-110303]
  - sched/uclamp: Optimize sched_uclamp_used static key enabling (Phil Auld) [RHEL-110303]
  - sched/uclamp: Use the uclamp_is_used() helper instead of open-coding it (Phil Auld) [RHEL-110303]
  - sched/core: Remove duplicate included header file stats.h (Phil Auld) [RHEL-110303]
  - sched: Add unlikey branch hints to several system calls (Phil Auld) [RHEL-110303]
  - sched/fair: Refactor can_migrate_task() to elimate looping (Phil Auld) [RHEL-110303]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-628.el9]
changelog:
  - s390/qeth: Make hw_trap sysfs attribute idempotent (Mete Durlu) [RHEL-99997]
  - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119116] {CVE-2025-39841}
  - cgroup/cpuset: Remove the unnecessary css_get/put() in cpuset_partition_write() (Waiman Long) [RHEL-107751]
  - cgroup/cpuset: Fix a partition error with CPU hotplug (Waiman Long) [RHEL-107751]
  - cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key (Waiman Long) [RHEL-107751]
  - cgroup/cpuset: drop useless cpumask_empty() in compute_effective_exclusive_cpumask() (Waiman Long) [RHEL-107751]
  - cgroup/cpuset: Extend kthread_is_per_cpu() check to all PF_NO_SETAFFINITY tasks (Waiman Long) [RHEL-107751]
  - cgroup/cpuset: Fix obsolete comment in cpuset_css_offline() (Waiman Long) [RHEL-107751]
  - cgroup/cpuset: Always use cpu_active_mask (Waiman Long) [RHEL-107751]
  - cgroup/cpuset: Remove unneeded goto in sched_partition_write() and rename it (Waiman Long) [RHEL-107751]
  - cgroup/cpuset: Don't allow creation of local partition over a remote one (Waiman Long) [RHEL-107751]
  - cgroup/cpuset: remove kernfs active break (Waiman Long) [RHEL-107751]
  - cgroup/cpuset: Remove stale text (Waiman Long) [RHEL-107751]
  - cgroup/cpuset: Disable cpuset_cpumask_can_shrink() test if not load balancing (Waiman Long) [RHEL-107751]
  - cgroup/cpuset: Further optimize code if CONFIG_CPUSETS_V1 not set (Waiman Long) [RHEL-107751]
  - do_io_accounting: use sig->stats_lock (Waiman Long) [RHEL-105165]
  - do_io_accounting: use __for_each_thread() (Waiman Long) [RHEL-105165]
  - procfs: block chmod on /proc/thread-self/comm (Waiman Long) [RHEL-105165]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-629.el9]
changelog:
  - kexec_core: accept unaccepted kexec segments' destination addresses (Baoquan He) [RHEL-114163]
  - crash: fix spelling mistake "crahskernel" -> "crashkernel" (Baoquan He) [RHEL-114163]
  - crash, powerpc: default to CRASH_DUMP=n on PPC_BOOK3S_32 (Baoquan He) [RHEL-114163]
  - kexec/crash: no crash update when kexec in progress (Baoquan He) [RHEL-114163]
  - ixgbe: fix ixgbe_orom_civd_info struct layout (CKI Backport Bot) [RHEL-117603]
  - macsec: read MACSEC_SA_ATTR_PN with nla_get_uint (CKI Backport Bot) [RHEL-115622]
  - macsec: MACsec SCI assignment for ES = 0 (CKI Backport Bot) [RHEL-115622]
  - netfilter: nf_reject: don't leak dst refcount for loopback packets (Florian Westphal) [RHEL-115630]
  - netfilter: nf_tables: reject duplicate device on updates (Florian Westphal) [RHEL-115630]
  - netfilter: nft_socket: remove WARN_ON_ONCE with huge level value (Florian Westphal) [RHEL-115630]
  - netfilter: ctnetlink: remove refcounting in expectation dumpers (Florian Westphal) [RHEL-115630]
  - netfilter: ctnetlink: fix refcount leak on table dump (Florian Westphal) [RHEL-115630]
  - bpf: Check netfilter ctx accesses are aligned (Florian Westphal) [RHEL-115630]
  - netfilter: xt_nfacct: don't assume acct name is null-terminated (Florian Westphal) [RHEL-115630]
  - bpf: Disable migration in nf_hook_run_bpf(). (Florian Westphal) [RHEL-115630]
  - netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (Florian Westphal) [RHEL-115630]
  - netfilter: nf_set_pipapo_avx2: fix initial map fill (Florian Westphal) [RHEL-115630]
  - ipvs: fix uninit-value for saddr in do_output_route4 (Florian Westphal) [RHEL-115630]
  - netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it (Florian Westphal) [RHEL-115630]
  - netfilter: nf_tables: imbalance in flowtable binding (Florian Westphal) [RHEL-115630]
  - netfilter: nat: restore default DNAT behavior (Florian Westphal) [RHEL-115630]
  - sctp: initialize more fields in sctp_v6_from_sk() (Xin Long) [RHEL-115641]
  - sctp: Do not wake readers in __sctp_write_space() (Xin Long) [RHEL-115641]
  - selftests/bpf: Skip timer cases when bpf_timer is not supported (Gregory Bell) [RHEL-83826]
  - bpf: Reject bpf_timer for PREEMPT_RT (Gregory Bell) [RHEL-83826]
  - fs: fix UAF/GPF bug in nilfs_mdt_destroy (CKI Backport Bot) [RHEL-116661] {CVE-2022-50367}
  - octeon_ep: fix VF MAC address lifecycle handling (Kamal Heib) [RHEL-109634]
  - dm: split write BIOs on zone boundaries when zone append is not emulated (Ming Lei) [RHEL-111097]
  - dm: Check for forbidden splitting of zone write operations (Ming Lei) [RHEL-111097]
  - dm: dm-crypt: Do not partially accept write BIOs with zoned targets (Ming Lei) [RHEL-111097]
  - dm: Always split write BIOs to zoned device limits (Ming Lei) [RHEL-111097]
  - block: Introduce bio_needs_zone_write_plugging() (Ming Lei) [RHEL-111097]
  - block: Make REQ_OP_ZONE_FINISH a write operation (Ming Lei) [RHEL-111097]
  - block: restore default wbt enablement (Ming Lei) [RHEL-112997]
  - devtmpfs: don't use vfs_getattr_nosec to query i_mode (Ming Lei) [RHEL-112997]
  - fs: add kern_path_locked_negative() (Ming Lei) [RHEL-112997]
  - VFS: add common error checks to lookup_one_qstr_excl() (Ming Lei) [RHEL-112997]
  - fs: simplify misleading code to remove ambiguity regarding ihold()/iput() (Ming Lei) [RHEL-112997]
  - VFS: change kern_path_locked() and user_path_locked_at() to never return negative dentry (Ming Lei) [RHEL-112997]
  - ksmbd: fix racy issue from using ->d_parent and ->d_name (Ming Lei) [RHEL-112997]
  - VFS: filename_create(): fix incorrect intent. (Ming Lei) [RHEL-112997]
  - rename __filename_parentat() to filename_parentat() (Ming Lei) [RHEL-112997]
  - fs: move the bdex_statx call to vfs_getattr_nosec (Ming Lei) [RHEL-112997]
  - dm table: Fix W=1 build warning when mempool_needs_integrity is unused (Ming Lei) [RHEL-112997]
  - block: don't silently ignore metadata for sync read/write (Ming Lei) [RHEL-112997]
  - ext4: add __GFP_NOWARN to GFP_NOWAIT in readahead (Ming Lei) [RHEL-112997]
  - block: validate QoS before calling __rq_qos_done_bio() (Ming Lei) [RHEL-112997]
  - block: avoid cpu_hotplug_lock depedency on freeze_lock (Ming Lei) [RHEL-112997]
  - block: decrement block_rq_qos static key in rq_qos_del() (Ming Lei) [RHEL-112997]
  - block: skip q->rq_qos check in rq_qos_done_bio() (Ming Lei) [RHEL-112997]
  - blk-mq: fix lockdep warning in __blk_mq_update_nr_hw_queues (Ming Lei) [RHEL-112997]
  - block: make bio_integrity_map_user() static inline (Ming Lei) [RHEL-112997]
  - nbd: fix lockdep deadlock warning (Ming Lei) [RHEL-112997]
  - block: restore two stage elevator switch while running nr_hw_queue update (Ming Lei) [RHEL-112997]
  - md/raid10: fix set but not used variable in sync_request_write() (Ming Lei) [RHEL-112997]
  - block: fix module reference leak in mq-deadline I/O scheduler (Ming Lei) [RHEL-112997]
  - block: fix kobject leak in blk_unregister_queue (Ming Lei) [RHEL-112997]
  - nbd: fix uaf in nbd_genl_connect() error path (Ming Lei) [RHEL-112997]
  - brd: fix sleeping function called from invalid context in brd_insert_page() (Ming Lei) [RHEL-112997]
  - block: fix false warning in bdev_count_inflight_rw() (Ming Lei) [RHEL-112997]
  - aoe: defer rexmit timer downdev work to workqueue (Ming Lei) [RHEL-112997]
  - aoe: clean device rq_list in aoedev_downdev() (Ming Lei) [RHEL-112997]
  - block: Fix bvec_set_folio() for very large folios (Ming Lei) [RHEL-112997]
  - bio: Fix bio_first_folio() for SPARSEMEM without VMEMMAP (Ming Lei) [RHEL-112997]
  - block: don't use submit_bio_noacct_nocheck in blk_zone_wplug_bio_work (Ming Lei) [RHEL-112997]
  - block: Clear BIO_EMULATES_ZONE_APPEND flag on BIO completion (Ming Lei) [RHEL-112997]
  - block: flip iter directions in blk_rq_integrity_map_user() (Ming Lei) [RHEL-112997]
  - block: drop direction param from bio_integrity_copy_user() (Ming Lei) [RHEL-112997]
  - traceevent/block: Add REQ_ATOMIC flag to block trace events (Ming Lei) [RHEL-112997]
  - nvme-loop: avoid -Wflex-array-member-not-at-end warning (Ming Lei) [RHEL-112997]
  - blk-mq: add a copyright notice to blk-mq-dma.c (Ming Lei) [RHEL-112997]
  - blk-mq: move the DMA mapping code to a separate file (Ming Lei) [RHEL-112997]
  - cdrom: Remove unnecessary NULL check before unregister_sysctl_table() (Ming Lei) [RHEL-112997]
  - block: fix elv_update_nr_hw_queues() to reattach elevator (Ming Lei) [RHEL-112997]
  - brd: avoid extra xarray lookups on first write (Ming Lei) [RHEL-112997]
  - block: Remove obsolete configs BLK_MQ_{PCI,VIRTIO} (Ming Lei) [RHEL-112997]
  - block: remove the same_page output argument to bvec_try_merge_page (Ming Lei) [RHEL-112997]
  - block: unfreeze queue if realloc tag set fails during nr_hw_queues update (Ming Lei) [RHEL-112997]
  - md: clean up accounting for issued sync IO (Ming Lei) [RHEL-112997]
  - md: fix is_mddev_idle() (Ming Lei) [RHEL-112997]
  - md: add a new api sync_io_depth (Ming Lei) [RHEL-112997]
  - md: record dm-raid gendisk in mddev (Ming Lei) [RHEL-112997]
  - block: export API to get the number of bdev inflight IO (Ming Lei) [RHEL-112997]
  - block: clean up blk_mq_in_flight_rw() (Ming Lei) [RHEL-112997]
  - block: WARN if bdev inflight counter is negative (Ming Lei) [RHEL-112997]
  - block: reuse part_in_flight_rw for part_in_flight (Ming Lei) [RHEL-112997]
  - blk-mq: remove blk_mq_in_flight() (Ming Lei) [RHEL-112997]
  - block: move removing elevator after deleting disk->queue_kobj (Ming Lei) [RHEL-112997]
  - block: don't quiesce queue for calling elevator_set_none() (Ming Lei) [RHEL-112997]
  - fs: aio: initialize .ki_write_stream of read-write request (Ming Lei) [RHEL-112997]
  - dm-integrity: use bio_add_virt_nofail (Ming Lei) [RHEL-112997]
  - dm-bufio: use bio_add_virt_nofail (Ming Lei) [RHEL-112997]
  - rnbd-srv: use bio_add_virt_nofail (Ming Lei) [RHEL-112997]
  - block: simplify bio_map_kern (Ming Lei) [RHEL-112997]
  - block: pass the operation to bio_{map,copy}_kern (Ming Lei) [RHEL-112997]
  - block: remove the q argument from blk_rq_map_kern (Ming Lei) [RHEL-112997]
  - block: add a bio_add_vmalloc helpers (Ming Lei) [RHEL-112997]
  - block: add a bio_add_max_vecs helper (Ming Lei) [RHEL-112997]
  - block: add a bdev_rw_virt helper (Ming Lei) [RHEL-112997]
  - block: add a bio_add_virt_nofail helper (Ming Lei) [RHEL-112997]
  - block: fix warning on 'make htmldocs' (Ming Lei) [RHEL-112997]
  - block: expose write streams for block device nodes (Ming Lei) [RHEL-112997]
  - block: introduce a write_stream_granularity queue limit (Ming Lei) [RHEL-112997]
  - block: introduce max_write_streams queue limit (Ming Lei) [RHEL-112997]
  - block: add a bi_write_stream field (Ming Lei) [RHEL-112997]
  - fs: add a write stream field to the kiocb (Ming Lei) [RHEL-112997]
  - block: move wbt_enable_default() out of queue freezing from sched ->exit() (Ming Lei) [RHEL-112997]
  - block: move hctx cpuhp add/del out of queue freezing (Ming Lei) [RHEL-112997]
  - block: don't acquire ->elevator_lock in blk_mq_map_swqueue and blk_mq_realloc_hw_ctxs (Ming Lei) [RHEL-112997]
  - block: move hctx debugfs/sysfs registering out of freezing queue (Ming Lei) [RHEL-112997]
  - block: move elv_register[unregister]_queue out of elevator_lock (Ming Lei) [RHEL-112997]
  - block: add new helper for disabling elevator switch when deleting disk (Ming Lei) [RHEL-112997]
  - block: fail to show/store elevator sysfs attribute if elevator is dying (Ming Lei) [RHEL-112997]
  - block: remove elevator queue's type check in elv_attr_show/store() (Ming Lei) [RHEL-112997]
  - block: pass elevator_queue to elv_register_queue & unregister_queue (Ming Lei) [RHEL-112997]
  - block: unifying elevator change (Ming Lei) [RHEL-112997]
  - block: add `struct elv_change_ctx` for unifying elevator change (Ming Lei) [RHEL-112997]
  - block: move queue freezing & elevator_lock into elevator_change() (Ming Lei) [RHEL-112997]
  - block: simplify elevator reattachment for updating nr_hw_queues (Ming Lei) [RHEL-112997]
  - block: move blk_queue_registered() check into elv_iosched_store() (Ming Lei) [RHEL-112997]
  - block: fold elevator_disable into elevator_switch (Ming Lei) [RHEL-112997]
  - block: look up the elevator type in elevator_switch (Ming Lei) [RHEL-112997]
  - block: don't allow to switch elevator if updating nr_hw_queues is in-progress (Ming Lei) [RHEL-112997]
  - block: prevent adding/deleting disk during updating nr_hw_queues (Ming Lei) [RHEL-112997]
  - block: add helper add_disk_final() (Ming Lei) [RHEL-112997]
  - block: move sched debugfs register into elvevator_register_queue (Ming Lei) [RHEL-112997]
  - block: add two helpers for registering/un-registering sched debugfs (Ming Lei) [RHEL-112997]
  - block: use q->elevator with ->elevator_lock held in elv_iosched_show() (Ming Lei) [RHEL-112997]
  - block: don't call freeze queue in elevator_switch() and elevator_disable() (Ming Lei) [RHEL-112997]
  - block: move ELEVATOR_FLAG_DISABLE_WBT a request queue flag (Ming Lei) [RHEL-112997]
  - block: move blk_mq_add_queue_tag_set() after blk_mq_map_swqueue() (Ming Lei) [RHEL-112997]
  - brd: fix discard end sector (Ming Lei) [RHEL-112997]
  - brd: fix aligned_sector from brd_do_discard() (Ming Lei) [RHEL-112997]
  - brd: protect page with rcu (Ming Lei) [RHEL-112997]
  - block: avoid hctx spinlock for plug with multiple queues (Ming Lei) [RHEL-112997]
  - block: factor out blk_mq_dispatch_queue_requests() helper (Ming Lei) [RHEL-112997]
  - block: take rq_list instead of plug in dispatch functions (Ming Lei) [RHEL-112997]
  - brd: use memcpy_{to,from]_page in brd_rw_bvec (Ming Lei) [RHEL-112997]
  - brd: split I/O at page boundaries (Ming Lei) [RHEL-112997]
  - brd: use bvec_kmap_local in brd_do_bvec (Ming Lei) [RHEL-112997]
  - brd: remove the sector variable in brd_submit_bio (Ming Lei) [RHEL-112997]
  - brd: pass a bvec pointer to brd_do_bvec (Ming Lei) [RHEL-112997]
  - block: blk-rq-qos: guard rq-qos helpers by static key (Ming Lei) [RHEL-112997]
  - block: ensure that struct blk_mq_alloc_data is fully initialized (Ming Lei) [RHEL-112997]
  - block: Simplify blk_mq_dispatch_rq_list() and its callers (Ming Lei) [RHEL-112997]
  - block: always allocate integrity buffer when required (Ming Lei) [RHEL-112997]
  - block: remove test of incorrect io priority level (Ming Lei) [RHEL-112997]
  - block: only update request sector if needed (Ming Lei) [RHEL-112997]
  - block: don't autoload drivers on blk-cgroup configuration (Ming Lei) [RHEL-112997]
  - block: don't autoload drivers on stat (Ming Lei) [RHEL-112997]
  - buffer: remove __getblk_gfp() (Ming Lei) [RHEL-112997]
  - ext4: call bdev_getblk() from sb_getblk_gfp() (Ming Lei) [RHEL-112997]
  - buffer: convert sb_getblk() to call __getblk() (Ming Lei) [RHEL-112997]
  - buffer: convert getblk_unmovable() and __getblk() to use bdev_getblk() (Ming Lei) [RHEL-112997]
  - buffer: use bdev_getblk() to avoid memory reclaim in readahead path (Ming Lei) [RHEL-112997]
  - ext4: use bdev_getblk() to avoid memory reclaim in readahead path (Ming Lei) [RHEL-112997]
  - buffer: hoist GFP flags from grow_dev_page() to __getblk_gfp() (Ming Lei) [RHEL-112997]
  - buffer: pass GFP flags to folio_alloc_buffers() (Ming Lei) [RHEL-112997]
  - buffer: convert grow_dev_page() to use a folio (Ming Lei) [RHEL-112997]
  - block: move blkdev_{get,put} _no_open prototypes out of blkdev.h (Ming Lei) [RHEL-112997]
  - block: integrity: Do not call set_page_dirty_lock() (Ming Lei) [RHEL-112997]
  - loop: LOOP_SET_FD: send uevents for partitions (Ming Lei) [RHEL-112997]
  - loop: properly send KOBJ_CHANGED uevent for disk device (Ming Lei) [RHEL-112997]
  - block: fix resource leak in blk_register_queue() error path (Ming Lei) [RHEL-112997]
  - block: add SPDX header line to blk-throttle.h (Ming Lei) [RHEL-112997]
  - null_blk: Use strscpy() instead of strscpy_pad() in null_add_dev() (Ming Lei) [RHEL-112997]
  - block: don't grab elevator lock during queue initialization (Ming Lei) [RHEL-112997]
  - block: remove unused nseg parameter (Ming Lei) [RHEL-112997]
  - docs: sysfs-block: Clarify integrity sysfs attributes (Ming Lei) [RHEL-112997]
  - block/blk-iocost: ensure 'ret' is set on error (Ming Lei) [RHEL-112997]
  - block: correct locking order for protecting blk-wbt parameters (Ming Lei) [RHEL-112997]
  - block: release q->elevator_lock in ioc_qos_write (Ming Lei) [RHEL-112997]
  - blk-cgroup: improve policy registration error handling (Ming Lei) [RHEL-112997]
  - loop: move vfs_fsync() out of loop_update_dio() (Ming Lei) [RHEL-112997]
  - block: Make request_queue lockdep splats show up earlier (Ming Lei) [RHEL-112997]
  - block: protect debugfs attribute method hctx_busy_show (Ming Lei) [RHEL-112997]
  - block: remove unnecessary goto labels in debugfs attribute read methods (Ming Lei) [RHEL-112997]
  - block: protect debugfs attrs using elevator_lock instead of sysfs_lock (Ming Lei) [RHEL-112997]
  - block: remove unused parameter 'q' parameter in __blk_rq_map_sg() (Ming Lei) [RHEL-112997]
  - block: remove unused parameter (Ming Lei) [RHEL-112997]
  - block: protect hctx attributes/params using q->elevator_lock (Ming Lei) [RHEL-112997]
  - block: protect wbt_lat_usec using q->elevator_lock (Ming Lei) [RHEL-112997]
  - block: protect nr_requests update using q->elevator_lock (Ming Lei) [RHEL-112997]
  - block: introduce a dedicated lock for protecting queue elevator updates (Ming Lei) [RHEL-112997]
  - block: fix memory leak for elevator on add_disk failure (Ming Lei) [RHEL-112997]
  - block: remove q->sysfs_lock for attributes which don't need it (Ming Lei) [RHEL-112997]
  - block: move q->sysfs_lock and queue-freeze under show/store method (Ming Lei) [RHEL-112997]
  - block: acquire q->limits_lock while reading sysfs attributes (Ming Lei) [RHEL-112997]
  - block: Correctly initialize BLK_INTEGRITY_NOGENERATE and BLK_INTEGRITY_NOVERIFY (Ming Lei) [RHEL-112997]
  - block: ensure correct integrity capability propagation in stacked devices (Ming Lei) [RHEL-112997]
  - loop: Remove struct loop_func_table (Ming Lei) [RHEL-112997]
  - block: split struct bio_integrity_payload (Ming Lei) [RHEL-112997]
  - block: move the block layer auto-integrity code into a new file (Ming Lei) [RHEL-112997]
  - scsi: add support for user-meta interface (Ming Lei) [RHEL-112997]
  - nvme: add support for passing on the application tag (Ming Lei) [RHEL-112997]
  - block: add support to pass user meta buffer (Ming Lei) [RHEL-112997]
  - block: introduce BIP_CHECK_GUARD/REFTAG/APPTAG bip_flags (Ming Lei) [RHEL-112997]
  - fs: introduce IOCB_HAS_METADATA for metadata (Ming Lei) [RHEL-112997]
  - fs, iov_iter: define meta io descriptor (Ming Lei) [RHEL-112997]
  - block: modify bio_integrity_map_user to accept iov_iter as argument (Ming Lei) [RHEL-112997]
  - block: copy back bounce buffer to user-space correctly in case of split (Ming Lei) [RHEL-112997]
  - block: define set of integrity flags to be inherited by cloned bip (Ming Lei) [RHEL-112997]
  - block: mark bounce buffering as incompatible with integrity (Ming Lei) [RHEL-112997]
  - null_blk: do partial IO for bad blocks (Ming Lei) [RHEL-112997]
  - null_blk: pass transfer size to null_handle_rq() (Ming Lei) [RHEL-112997]
  - null_blk: replace null_process_cmd() call in null_zone_write() (Ming Lei) [RHEL-112997]
  - null_blk: introduce badblocks_once parameter (Ming Lei) [RHEL-112997]
  - null_blk: generate null_blk configfs features string (Ming Lei) [RHEL-112997]
  - blk-wbt: Cleanup a comment in wb_timer_fn (Ming Lei) [RHEL-112997]
  - blk-wbt: Fix some comments (Ming Lei) [RHEL-112997]
  - loop: take the file system minimum dio alignment into account (Ming Lei) [RHEL-112997]
  - loop: check in LO_FLAGS_DIRECT_IO in loop_default_blocksize (Ming Lei) [RHEL-112997]
  - loop: set LO_FLAGS_DIRECT_IO in loop_assign_backing_file (Ming Lei) [RHEL-112997]
  - loop: factor out a loop_assign_backing_file helper (Ming Lei) [RHEL-112997]
  - block: Remove commented out code (Ming Lei) [RHEL-112997]
  - block: refactor rq_qos_wait() (Ming Lei) [RHEL-112997]
  - block: introduce init_wait_func() (Ming Lei) [RHEL-112997]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-630.el9]
changelog:
  - crypto: xts - Handle EBUSY correctly (CKI Backport Bot) [RHEL-119237] {CVE-2023-53494}
  - xfrm: use kfree_sensitive() for SA secret zeroization (Sabrina Dubroca) [RHEL-115629]
  - espintcp: remove encap socket caching to avoid reference leak (Sabrina Dubroca) [RHEL-115629]
  - espintcp: fix skb leaks (Sabrina Dubroca) [RHEL-115629]
  - ext4: goto right label 'out_mmap_sem' in ext4_setattr() (Brian Foster) [RHEL-109217]
  - mm: zero range of eof folio exposed by inode size extension (Brian Foster) [RHEL-109217]
  - mm: convert pagecache_isize_extended to use a folio (Brian Foster) [RHEL-109217]
  - ext4: partial zero eof block on unaligned inode size extension (Brian Foster) [RHEL-109217]
  - ext4: do not mark inode dirty every time when appending using delalloc (Brian Foster) [RHEL-109217]
  - uki-virt: add systemd-repart module (Emanuele Giuseppe Esposito) [RHEL-107273]


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.8.1-8
changelog:
  - Resolves: rhbz#2134759 Untrusted Macros
  - Resolves: rhbz#2134757 Weak Master Keys
  - Resolves: rhbz#2134755 Static Initialization Vector
  - Resolves: rhbz#2134761 Macro URL arbitrary script execution


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Matej Mužila <mmuzila@redhat.com> 4.4.0-2
changelog:
  - Update to version 4.4.0
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354
    CVE-2022-1355


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Michal Hlavinka <mhlavink@redhat.com> - 4.4.0-14
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-4
changelog:
  - conf, docs: Add support for direct and extended tlbflush features (RHEL-7122)
  - qemu: Add support for direct and extended tlbflush features (RHEL-7122)
  - conf: refactor hyperv features formatting (RHEL-7122)
  - conf: Adjust hyperv tlbflush formatting (RHEL-7122)
  - qemu_migration: Do not consider post-copy active in postcopy-recover (RHEL-73085)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-5
changelog:
  - qemu: allow migration of guest with mdev vGPU to VF vGPU (RHEL-68064)
  - storage_file: Refuse qcow2 images with empty string as 'data_file' (RHEL-73504)
  - virstoragetest: Add case for qcow2 image with empty string as 'data_file' (RHEL-73504)
  - qemu: snapshot: delete disk image only if parent snapshot is external (RHEL-74041)
  - storage_file: de-modularize the local file backend (RHEL-73507)
  - libvirt.spec: Move ownership of 'storage-file' backends directory to gluster (RHEL-73507)
  - qemu: re-use existing ActualNetDef for more interface types during update-device (RHEL-7036)
  - tools: ssh-proxy: Check for domain status before parsing its CID (RHEL-75577)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-6
changelog:
  - build: Bump minimum glib2 version to 2.66.0 (RHEL-77884)
  - qemuProcessHandleIOError: Refactor to extract 'priv' instead of 'driver' (RHEL-77884)
  - qemu: Handle quirks of 'device' field of BLOCK_IO_ERROR event in monitor code (RHEL-77884)
  - qemu: Rename 'diskAlias' to 'device' in qemu IO error event handling (RHEL-77884)
  - qemuProcessHandleIOError: Rename local variables (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Do not munge 'reason' field of IO error event (RHEL-77884)
  - qemuProcessHandleIOError: Prefer lookup by node name (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Propagate new 'qom-path' field (RHEL-77884)
  - virStorageSource: Add fields for storing last I/O error message (RHEL-77884)
  - qemuProcessHandleIOError: Populate I/O error reason to virStorageSource (RHEL-77884)
  - qemuProcessHandleIOError: Log IO errors in the VM log file (RHEL-77884)
  - libxlDomainGetMessages: Add existing flags to 'virCheckFlags' (RHEL-77884)
  - virDomainObjGetMessages: Refactor using GPtrArray (RHEL-77884)
  - virDomainGetMessages: Introduce VIR_DOMAIN_MESSAGE_IOERRORS (RHEL-77884)
  - include: libvirt-domain: Reword documentation for @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - include: libvirt-domain: Add 'message' @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - qemuSnapshotForEachQcow2: Don't initialize 'nrollback' (RHEL-73315)
  - qemu: process: Export qemuPrepareNVRAM for use in snapshot code (RHEL-73315)
  - qemu: snapshot: Ensure that NVRAM image exists when taking inactive internal snapshot (RHEL-73315)
  - qemuxmlconftest: Allow testing of the 'writable' flag for passed FDs for disks (RHEL-37519)
  - qemuxmlconftest: Add testing of FDs with 'writable' flag in 'disk-source-fd' (RHEL-37519)
  - qemu: domain: Initialize FD passthrough for a virStorageSource before using it (RHEL-37519)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-7
changelog:
  - qemu_migration: Refactor qemuMigrationSrcRestoreDomainState (RHEL-79168)
  - qemu_migration: Do not automatically resume domain after I/O error (RHEL-79168)
  - qemucapabilitiestest: Add data for the qemu-10.0 dev cycle on x86_64 (RHEL-79095)
  - qemucapabilitiestest: Update 'caps_10.0.0_x86_64' to 'v9.2.0-1636-gffaf7f0376' (RHEL-79095)
  - qemu: capabilies: Introduce QEMU_CAPS_BLOCKDEV_SET_ACTIVE (RHEL-79095)
  - qemu: monitor: Add monitor backend for 'blockdev-set-active' (RHEL-79095)
  - qemu: migration: Reactivate block nodes after migration if VM is left paused (RHEL-79095)
  - conf: change virDomainHostdevInsert() to return void (RHEL-69455)
  - qemu: fix qemu validation to forbid guest-side IP address for type='vdpa' (RHEL-69455)
  - qemu: validate that model is virtio for vhostuser and vdpa interfaces in the same place (RHEL-69455)
  - qemu: automatically set model type='virtio' for interface type='vhostuser' (RHEL-69455)
  - qemu: do all vhostuser attribute validation in qemu driver (RHEL-69455)
  - conf/qemu: make <source> element *almost* optional for type=vhostuser (RHEL-69455)
  - qemu: use switch instead of if in qemuProcessPrepareDomainNetwork() (RHEL-69455)
  - qemu: make qemuPasstCreateSocketPath() public (RHEL-69455)
  - qemu: complete vhostuser + passt support (RHEL-69455)
  - qemu: fail validation if a domain def has vhostuser/passt but no shared mem (RHEL-69455)
  - docs: improve type='user' docs to higlight differences between SLIRP and passt (RHEL-69455)
  - docs: document using passt backend with <interface type='vhostuser'> (RHEL-69455)
  - utils: Canonicalize paths before comparing them (RHEL-79166)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-8
changelog:
  - remote: add sysusers file to create 'libvirt' group (RHEL-81749)
  - qemu: Avoid crash in qemuDomainCheckCPU with unknown host CPU (RHEL-81747)
  - qemu_snapshot: allow reverting to external disk only snapshot (RHEL-21549)
  - qemu: snapshot: error out early when reverting snapshot for VM with non-file disk (RHEL-30971)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-9
changelog:
  - util: introduce object for holding a system inhibitor lock (RHEL-83064)
  - src: convert drivers over to new virInhibitor APIs (RHEL-83064)
  - rpc: remove logind support for virNetDaemon (RHEL-83064)
  - util: fix off-by-1 in inhibitor constants (RHEL-83064)
  - util: don't attempt to acquire logind inhibitor if not requested (RHEL-83064)
  - network: Free inhibitor in networkStateCleanup() (RHEL-83064)
  - conf: introduce support for multiple ACPI tables (RHEL-81041)
  - src: validate permitted ACPI table types in libxl/qemu drivers (RHEL-81041)
  - src: introduce 'raw' and 'rawset' ACPI table types (RHEL-81041)
  - qemu: support 'raw' ACPI table type (RHEL-81041)
  - libxl: support 'rawset' ACPI table type (RHEL-81041)
  - conf: support MSDM ACPI table type (RHEL-81041)
  - qemu: support MSDM ACPI table type (RHEL-81041)
  - qemuxmlconftest: Include shared memory 'net-vhostuser' test cases (RHEL-84133)
  - qemuValidateDomainDeviceDefNetwork: Require shared memory for all vhost-user interfaces (RHEL-84133)
  - qemu: process: Remove un-updated 'qemuProcessStartWarnShmem' (RHEL-84133)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-10
changelog:
  - esxConnectListAllDomains: Don't propagate failure to lookup a single domain (RHEL-80606)
  - conf: parse interface/source/@dev for all interface types (with backend type='passt') (RHEL-82539)
  - libvirt-host: Clarify/fix description of the CPU frequency field (RHEL-86197)
  - virNodeGetInfo: Improve description of the case when fake data is reported (RHEL-86197)
  - manpages: virsh: Use disclaimer from 'virNodeGetInfo()' for 'virsh nodeinfo' (RHEL-86197)
  - esx: Accept empty "path" URI component same way as "/" (RHEL-86459)
  - qemu: Rename outgoingMigration parameter in various TPM functions (RHEL-86800)
  - qemu: Properly propagate migration state to TPM cleanup code (RHEL-86800)
  - qemuDomainBlockCopyCommon: Don't revoke access to file twice on failure (RHEL-7357)
  - qemuxmlconftest: Drop s390-default-cpu-...ccw-virtio-2.7 test cases (RHEL-72976)
  - tests: add capabilities for QEMU 10.0.0 on s390x (RHEL-72976)
  - qemu: Do NOT autoadd NUMA node for s390 (RHEL-72976)
  - qemu_command: Use qemuBuildVirtioDevProps() to build cmd line for virtio-mem and virtio-pmem (RHEL-72976)
  - qemuxmlconftest: Introduce memory-hotplug-virtio-mem-pci-s390x.xml (RHEL-72976)
  - qemu_caps: Introduce QEMU_CAPS_DEVICE_VIRTIO_MEM_CCW (RHEL-72976)
  - qemu: Validate virtio-mem-ccw (RHEL-72976)
  - qemu: Allow virtio-mem on CCW (RHEL-72976)
  - qemuxmlconftest: Introduce memory-hotplug-virtio-mem-ccw-s390x.xml (RHEL-72976)
  - qemu_domain_address: fix CCW virtio-mem hotplug (RHEL-72976)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-11
changelog:
  - Add load average information type into virDomainGetGuestInfo (RHEL-88447)
  - qemu_agent: Add qemuAgentGetLoadAvg() (RHEL-88447)
  - qemu: Add support for VIR_DOMAIN_GUEST_INFO_LOAD (RHEL-88447)
  - virsh: Add support for VIR_DOMAIN_GUEST_INFO_LOAD (RHEL-88447)
  - qemu_capabilities: Fetch caps for virtio-mem-ccw too (RHEL-87532)
  - cpu_map: Add avx10* CPU features (RHEL-87796)
  - cpu_map: Add GraniteRapids-v2 CPU model (RHEL-87796)
  - cpu_map: Add sha512, sm3, and sm4 CPU features (RHEL-87796)
  - virsh: Introduce new hypervisor-cpu-models command (RHEL-11435)
  - qemu: remove nonsensical sanity check in processNetdevStreamDisconnectedEvent() (RHEL-80169)
  - qemu: make processNetDevStreamDisconnectedEvent() reusable (RHEL-80169)
  - qemu: respond to NETDEV_VHOST_USER_DISCONNECTED event (RHEL-80169)
  - qemu: put vhost-user code that's special for passt in a helper function (RHEL-80169)
  - qemu: make passt+vhostuser reconnect behave identically to passt+user (RHEL-80169)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-12
changelog:
  - qemuMonitorJSONGetCPUModelExpansion: refactor parsing functions (RHEL-89415)
  - qemu: parse deprecated-props from query-cpu-model-expansion response (RHEL-89415)
  - qemu_capabilities: query deprecated features for host-model (RHEL-89415)
  - libvirt-domain: introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_DISABLE_DEPRECATED_FEATURES (RHEL-89415)
  - qemu_capabilities: filter deprecated features if requested (RHEL-89415)
  - virsh: add --disable-deprecated-features flag to domcapabilities (RHEL-89415)
  - conf: add deprecated_features attribute (RHEL-89415)
  - redhat: Restore hunks in tests/qemucapabilitiesdata/caps_10.0.0_s390x.* (RHEL-89415)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-14
changelog:
  - qemu: introduce QEMU_CAPS_AMD_IOMMU (RHEL-50560)
  - qemu: introduce QEMU_CAPS_PCI_ID (RHEL-50560)
  - docs: formatdomain: document intel-only IOMMU attributes (RHEL-50560)
  - qemu: add IOMMU model amd (RHEL-50560)
  - conf: add passthrough and xtsup attributes for IOMMU (RHEL-50560)
  - esx: Allow specifying different CA bundle for remote connections (RHEL-97440)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-15
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-106276)
  - qemu: sanitize blank lines in config file (RHEL-106276)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-106276)


author: Jiri Denemark <jdenemar@redhat.com> - 11.8.0-1
changelog:
  - Rebased to libvirt-11.8.0 (RHEL-118197)
  - The rebase also fixes the following bugs:
      RHEL-15693, RHEL-95397, RHEL-111609, RHEL-116847, RHEL-117774


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-2
changelog:
  - domain_conf: Format <defaultiothread/> more often (rhbz#2059511)
  - domain_conf: Format iothread IDs more often (rhbz#2059511)
  - qemu: Make IOThread changing more robust (rhbz#2059511)
  - qemuDomainSetIOThreadParams: Accept VIR_DOMAIN_AFFECT_CONFIG flag (rhbz#2059511)
  - virsh: Implement --config for iothreadset (rhbz#2059511)
  - docs: Document TPM portion of domcaps (rhbz#2103119)
  - virtpm: Introduce TPM-1.2 and TPM-2.0 capabilieis (rhbz#2103119)
  - domcaps: Introduce TPM backendVersion (rhbz#2103119)
  - qemu: Report supported TPM version in domcaps (rhbz#2103119)
  - vircpi: Add PCIe 5.0 and 6.0 link speeds (rhbz#2105231)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-3
changelog:
  - qemu: introduce capability QEMU_CAPS_MIGRATION_BLOCKED_REASONS (rhbz#2092833)
  - qemu: new function to retrieve migration blocker reasons from QEMU (rhbz#2092833)
  - qemu: query QEMU for migration blockers before our own harcoded checks (rhbz#2092833)
  - qemu: remove hardcoded migration fail for vDPA devices if we can ask QEMU (rhbz#2092833)
  - qemu_migration: Use EnterMonitorAsync in qemuDomainGetMigrationBlockers (rhbz#2092833)
  - qemu: don't try to query QEMU about migration blockers during offline migration (rhbz#2092833)
  - qemu_migration: Acquire correct job in qemuMigrationSrcIsAllowed (rhbz#2092833)
  - virsh: Require --xpath for *dumpxml (rhbz#2103524)
  - qemu: skip hardcoded hostdev migration check if QEMU can do it for us (rhbz#1497907)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-4
changelog:
  - qemu: Pass migration flags to qemuMigrationParamsApply (rhbz#2111070)
  - qemu_migration_params: Replace qemuMigrationParamTypes array (rhbz#2111070)
  - qemu_migration: Pass migParams to qemuMigrationSrcResume (rhbz#2111070)
  - qemu_migration: Apply max-postcopy-bandwidth on post-copy resume (rhbz#2111070)
  - qemu: Always assume support for QEMU_CAPS_MIGRATION_PARAM_XBZRLE_CACHE_SIZE (rhbz#2107892)
  - qemu_migration: Store original migration params in status XML (rhbz#2107892)
  - qemu_migration_params: Refactor qemuMigrationParamsApply (rhbz#2107892)
  - qemu_migration_params: Refactor qemuMigrationParamsReset (rhbz#2107892)
  - qemu_migration_params: Avoid deadlock in qemuMigrationParamsReset (rhbz#2107892)
  - qemu: Restore original memory locking limit on reconnect (rhbz#2107424)
  - qemu: Properly release job in qemuDomainSaveInternal (rhbz#1497907)
  - qemu: don't call qemuMigrationSrcIsAllowedHostdev() from qemuMigrationDstPrepareFresh() (rhbz#1497907)


author: Jiri Denemark <jdenemar@redhat.com> - 8.7.0-1
changelog:
  - Rebased to libvirt-8.7.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2084046, rhbz#2108483, rhbz#2123371, rhbz#2101633, rhbz#1988211
      rhbz#2086677, rhbz#2103132, rhbz#2078805, rhbz#2111301, rhbz#2094641


author: Jiri Denemark <jdenemar@redhat.com> - 8.8.0-1
changelog:
  - Rebased to libvirt-8.8.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2122534, rhbz#2121262, rhbz#2130089, rhbz#2121276, rhbz#2121627
      rhbz#2125111, rhbz#2129239, rhbz#1964855, rhbz#2114866


author: Jiri Denemark <jdenemar@redhat.com> - 8.9.0-1
changelog:
  - Rebased to libvirt-8.9.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2074559, rhbz#2134009, rhbz#1777212, rhbz#2013523, rhbz#2114866
      rhbz#1964855


author: Jiri Denemark <jdenemar@redhat.com> - 8.9.0-2
changelog:
  - RHEL: rpminspect: Disable abidiff inspection (rhbz#2124466)
  - spec: Fix python3-libvirt requirement in client-qemu package (rhbz#2124466)


author: Jiri Denemark <jdenemar@redhat.com> - 8.10.0-1
changelog:
  - Rebased to libvirt-8.10.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2128993, rhbz#2143235, rhbz#2143840, rhbz#1874163, rhbz#2000075
      rhbz#2143838, rhbz#2104919, rhbz#2072204, rhbz#2137298


author: Jiri Denemark <jdenemar@redhat.com> - 8.10.0-2
changelog:
  - qemu_process: Document qemuProcessPrepare{Domain,Host}() order (rhbz#2150760)
  - qemu_extdevice: Init paths in qemuExtDevicesPrepareDomain() (rhbz#2150760)
  - qemu_extdevice: Expose qemuExtDevicesInitPaths() (rhbz#2150760)
  - qemu: Init ext devices paths on reconnect (rhbz#2150760)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-1
changelog:
  - Rebased to libvirt-9.0.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2151064, rhbz#1874163, rhbz#2130192, rhbz#2111948, rhbz#1824722
      rhbz#2150455, rhbz#2063723, rhbz#1717611, rhbz#2160448, rhbz#2151869
      rhbz#2040272, rhbz#2144738, rhbz#2159851, rhbz#2156289, rhbz#2033879
      rhbz#1820437, rhbz#2151202


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-2
changelog:
  - vircgroupv2: fix cpu.weight limits check (rhbz#2037998)
  - domain_validate: drop cpu.shares cgroup check (rhbz#2037998)
  - docs: document correct cpu shares limits with both cgroups v1 and v2 (rhbz#2037998)
  - qemu_interface: Fix managed='no' case when creating an ethernet interface (rhbz#2144738)
  - conf: clarify some external TPM error messages (rhbz#2063723)
  - qemu: hotplug: Remove legacy quirk for 'dimm' address generation (rhbz#2158701)
  - qemu: alias: Remove 'oldAlias' argument of qemuAssignDeviceMemoryAlias (rhbz#2158701)
  - qemu: Remove 'memAliasOrderMismatch' field from VM private data (rhbz#2158701)
  - rpc: Fix error message in virNetServerSetClientLimits (rhbz#2033879)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-3
changelog:
  - src: Don't use virReportSystemError() on virProcessGetStatInfo() failure (rhbz#2148266)
  - qemu: Provide virDomainGetCPUStats() implementation for session connection (rhbz#2148266)
  - virsh: Make domif-setlink work more than once (rhbz#2165466)
  - qemu_fd: Remove declaration for 'qemuFDPassNewDirect' (rhbz#2040272)
  - qemuStorageSourcePrivateDataFormat: Rename 'tmp' to 'objectsChildBuf' (rhbz#2040272)
  - qemu: command: Handle FD passing commandline via qemuBuildBlockStorageSourceAttachDataCommandline (rhbz#2040272)
  - qemuFDPassTransferCommand: Mark that FD was passed (rhbz#2040272)
  - qemu: fd: Add helpers allowing storing FD set data in status XML (rhbz#2040272)
  - qemu: domain: Store fdset ID for disks passed to qemu via FD (rhbz#2040272)
  - qemu: block: Properly handle FD-passed disk hot-(un-)plug (rhbz#2040272)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-4
changelog:
  - qemuProcessStop: Fix detection of outgoing migration for external devices (rhbz#2161557)
  - qemuExtTPMStop: Restore TPM state label more often (rhbz#2161557)
  - qemuProcessLaunch: Tighten rules for external devices wrt incoming migration (rhbz#2161557)
  - qemu_process: Produce better debug message wrt domain namespaces (rhbz#2167302)
  - qemu_namespace: Deal with nested mounts when umount()-ing /dev (rhbz#2167302)
  - qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (rhbz#2166411)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-5
changelog:
  - qemu_extdevice: Do cleanup host only for VIR_DOMAIN_TPM_TYPE_EMULATOR (rhbz#2168762)
  - qemu: blockjob: Handle 'pending' blockjob state only when we need it (rhbz#2168769)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-6
changelog:
  - rpc: client: Don't check return value of virNetMessageNew (rhbz#2145188)
  - rpc: Don't warn about "max_client_requests" in single-threaded daemons (rhbz#2145188)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-7
changelog:
  - qemu_snapshot: remove memory snapshot when deleting external snapshot (rhbz#2170826)
  - qemu_snapshot: refactor qemuSnapshotDeleteExternalPrepare (rhbz#2170826)


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-5
changelog:
  - Revert the CMake change regarding the in-source builds for now
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug buildchnages to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers the CMAKE_INSTALL_PREFIX="%{_prefix}" option
  - Default to %cmake commands instead fo %make commands
  - Update the WITH_UNITTEST macro to the one upstream use now
  - Introduce macro to enable / disable testusite (and building of the *-test subpackage)


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: José Expósito <jexposit@redhat.com> - 24.2.8-2
changelog:
  - AMD Navi4x support
    Backport fixes for radeonsi and disable GFX12 on radv
    Resolves: https://issues.redhat.com/browse/RHEL-53419


author: Anusha Srivatsa <asrivats@redhat.com> - 25.0.7-2
changelog:
  - NV dGFX fix for firefox crashing
    Backport fixes for NV dGFX driver crashing firefox
    Resolves: https://issues.redhat.com/browse/RHEL-93219


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.78.0-1
changelog:
  - Bump glib2 version 2.78.0
  - Drop DesktopQE gating 
  - Fix CVEs: CVE-2023-32636, CVE-2023-29499, CVE-2023-32611, CVE-2023-32665, DoS
  - Resolves: RHEL-5019
  - Resolves: RHEL-5020
  - Resolves: RHEL-5092
  - Resolves: RHEL-5093
  - Resolves: RHEL-5094


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 0.42.2-3
changelog:
  - Bump pixman version 0.42.2
  - Drop DesktopQE gating 
  - Fix CVEs: CVE-2022-44638
  - Resolves: RHEL-5013


author: Tomas Halman <thalman@redhat.com> - 0.17.0-9
changelog:
  - Fixing mellon_create_metadata.sh script
    Resolves: RHEL-35898
  - Publishing diagnostic module in CRB repository
    Resolves: RHEL-33585


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.30-1
changelog:
  - Update to MySQL 8.0.30
  - Remove patches now upstream:
    chain certs, OpenSSL 3, s390 and robin hood
  - Add a new plugin


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.34-1
changelog:
  - Update to MySQL 8.0.34
  - Add patch from upstream bug#110569
  - Add patch to fix binlog format issue
  - Use --skip-combinations over --binlog-format=mixed
  - Add alignment patch upstream bug#110752


author: Richard W.M. Jones <rjones@redhat.com> - 1.36.2-1
changelog:
  - Rebase to 1.36.2
    resolves: RHEL-14475
  - partition: Suggest alternate partition-sectorsize
    resolves: RHEL-19815


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-6
changelog:
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85510
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89353


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-10
changelog:
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95814


author: Richard W.M. Jones <rjones@redhat.com> - 1.34.2-1
changelog:
  - Rebase to 1.34.2
    resolves: rhbz#2168629
  - Backport nbdkit-curl-plugin "multi" interface support
    resolves: rhbz#2228131


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.6-1
changelog:
  - Rebase to new stable branch version 1.12.6
    resolves: rhbz#2059288
  - New tool: nbddump
  - nbdcopy: Use preferred block size for copying
    related: rhbz#2047660
  - Fix remote TLS failures
    resolves: rhbz#2111524
    (and 2111813)


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Ondřej Sloup <osloup@redhat.com> - 1.3.2-71
changelog:
  - Add %verify to ignore modified socket file after install
  - Remove unused OpenSP-1.5 from sources
    Related: rhbz#2193429


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-72
changelog:
  - Add an environment variable to prevent gating from complaining about rpaths  (rhbz#2193429)
    Related: RHEL-11772


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.8-17
changelog:
  - Use make macros, patch by Tom Stellard <tstellar@redhat.com>
    (https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro)
  - Update flags, enable LTO
  - Remove RANDFILE and increase default bits in ssleay.conf


author: Jakub Jelen <jjelen@redhat.com> - 1.9.4-1
changelog:
  - Rebase to current version from Fedora (#2017828)
  - Use of upstrea polkit policy preventing unneeded prompts


author: Paul Howarth <paul@city-fan.org> - 2:1.52-1
changelog:
  - Update to 1.52
    - Added a $dt->is_between($dt1, $dt2) method (based on GH#97)
    - Simplify the calculation of leap seconds in XS (GH#91); this is a little
      more efficient for most use cases (anything with future or recent past
      datetimes)


author: Paul Howarth <paul@city-fan.org> - 1.14-1
changelog:
  - Update to 1.14
    - Remove MAP_TARGET from Makefile.PL (CPAN RT#91590)
    - Fix for Solaris setuid when root running as other user (CPAN RT#88271)
    - Add strict/warnings to Tty.pm
    - Fix pod errors
    - Typo: s/dependend/dependent/
    - Prevent spurious warning from get_winsize()
    - Fix usage of setsid
    - Github actions testing; Windows is off of course
    - Make README.md
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.14-5
changelog:
  - Fix FTBFS due to false detection of strlcpy() and _getpty()
    https://github.com/toddr/IO-Tty/pull/24
  - Modernize spec using %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.15-1
changelog:
  - Update to 1.15
    - Skip winsize test on Solaris and QNX NTO (GH#22)
    - Make function tests more robust (GH#24)
    - Work around a header name collision on util.h; this is breaking on recent
      OSX (GH#26)


author: Paul Howarth <paul@city-fan.org> - 1.16-1
changelog:
  - Update to 1.16
    - Switch to GitHub for issue tracker
    - Switch to testsuite CI workflow
    - Tidy


author: Paul Howarth <paul@city-fan.org> - 0.008-1
changelog:
  - Update to 0.008
    - Make unread by :crlf on top of :utf8_strict reliable
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - %DB::sub is now populated correctly for sub names with wide characters or
      nulls (GH#9)
    - Better Perl 5.6 compatibility by lowering prereqs of core modules
    - Test for renaming lexical subs, which should work on Perl 5.22+ (GH#10)
    - Small internal changes to bring implementation in line with changes to
      Sub::Util
    - Fix "Undefined symbol "DPPP_my_croak_xs_usage"" error on some perls
      (CPAN RT#125158)
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.002-2
changelog:
  - Incorporate feedback from package review (#1776513)
    - BR: findutils
    - BR: perl(CPAN::Meta::Prereqs)
    - Need perl(ExtUtils::MakeMaker) >= 6.76
    - Add reference to upstream ticket about unnecessary build requirements
      https://github.com/atoomic/XString/issues/2
    - Add run-time dependency on perl(XSLoader)


author: Paul Howarth <paul@city-fan.org> - 0.005-1
changelog:
  - Update to 0.005
    - Fix cstring for Perl 5.32 (GH#6, GH#7)
    - Remove unneeded module dependencies (GH#2)
    - Add compatibility with Perl 5.8 (GH#9)


author: Jitka Plesnikova <jplesnik@redhat.com> - 1:0.81-1
changelog:
  - Update to 0.81
    - Breaking Change: Set $YAML::XS::LoadBlessed default to false to make it
      more secure


author: Paul Howarth <paul@city-fan.org> - 1:0.82-1
changelog:
  - Update to 0.82
    - Updated libyaml sources to 0.2.4; changes affecting YAML::XS are:
      - Output '...' at the stream end after a block scalar with trailing empty
        lines
      - Accept '%YAML 1.2' directives (they are ignored and do not change
        behaviour though)


author: Marek Kasik <mkasik@redhat.com> - 21.01.0-11
changelog:
  - Backport fixes for issues found by Coverity Scan
  - and fix some of the new issues
  - Resolves: #1967967


author: Honza Horak <hhorak@redhat.com> - 13.3-6
changelog:
  - Do not provide pkgconfig(libpq) to not trick packages that actually require
    libpq-devel
    Resolves: #1980992


author: Filip Januš <fjanus@redhat.com> - 13.3-9
changelog:
  - Remove tests failing with openssl3, now pgp is tested only with
    supported ciphers
    Add postgresql-pgcrypto-openssl3-init.patch - Correctly init ciphers
    Add postgresql-pgcrypto-openssl3-tests.patch - disable unsupported
    ciphers in the test suite
    Related discussion: #2008773
    Resolves: #1964848


author: Marek Kulik <mkulik@redhat.com> - 13.5-1
changelog:
  - Update to 13.5 (#2023301)
    Remove patch postgresql-pgcrypto-openssl3-init.patch - Already in upstream


author: Masahiro Matsuya <mmatsuya@redhat.com> - 13.13-1
changelog:
  - Update to 13.13
  - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, and CVE-2023-39417
  - Resolves: RHEL-5567


author: Adrian Reber <adrian@lisas.de> - 3.14.0-6
changelog:
  - Reintroduce the emacs subpackage to avoid file conflicts between
    protobuf-compiler.x86_64 and protobuf-compiler.i686
  - Disable LTO to fix annobin errors


author: Adrian Reber <areber@redhat.com> - 3.14.0-14
changelog:
  - Applied patch for CVE-2022-1941 (#RHEL-40872)
  - Applied patch to make emacs dependency optional (#RHEL-40572)


author: Tomas Popela <tpopela@redhat.com> - 1.20.1-1
changelog:
  - Update to 1.20.1
  - Resolves: rhbz#2016905
  - Ship python3-cairo-devel in CRB
  - Resolves: rhbz#2053665


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Miro Hrončok <mhroncok@redhat.com> - 0.4.14-5
changelog:
  - Subpackages python2-greenlet, python2-greenlet-devel have been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Peter Robinson <pbrobinson@fedoraproject.org> - 4.2-2
changelog:
  - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package)
  - Drop/obsolete eepromer subpackage, deprecated for 6 years
  - Drop python2 conditionals
  - Minor cleanups


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.45.6-9
changelog:
  - RHEL 9 patch for openssl missing configuration file
    https://bugzilla.redhat.com/show_bug.cgi?id=1977214#c13


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.45.6-11
changelog:
  - Fix: syslinux: failed to create ldlinux.sys
    resolves: rhbz#1990720, rhbz#1950627
  - Fix license files.
  - Move appliance to separate subpackage
    resolves: rhbz#1989514


author: Dan Čermák <dan.cermak@cgc-instruments.com> - 0.7.1-5
changelog:
  - BuildRequire python3-setuptools besides python3-devel
    (see https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/GCPGM34ZGEOVUHSBGZTRYR5XKHTIJ3T7/)


author: Charalampos Stratakis <cstratak@redhat.com> - 0.29.32-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alex Cobb <alex.cobb@smart.mit.edu>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        nbecker <ndbecker2@gmail.com>
        Neal D. Becker <ndbecker2@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        serge-sans-paille <sguelton@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio くらとみ <toshio@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.9-1
changelog:
  - Rebase to 3.11.9
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix expat tests for the latest expat security release
  Resolves: RHEL-33677, RHEL-33689


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11.13-1
changelog:
  - Update to 3.11.13
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.13-2
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-101551


author: Charalampos Stratakis <cstratak@redhat.com> - 2.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim GÜNDÜZ <devrim@fedoraproject.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 0.29.35-2
changelog:
  - Initial package
  - Fedora contributions by:
        Alex Cobb <alex.cobb@smart.mit.edu>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <i.gnatenko.brain@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Neal D. Becker <ndbecker2@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        serge-sans-paille <sguelton@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio くらとみ <toshio@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Security fix for CVE-2024-9287 and CVE-2024-12254
  Resolves: RHEL-64886, RHEL-70320


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-88897


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98057, RHEL-98019, RHEL-97811, RHEL-98183, RHEL-98210


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.6-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim Gündüz <devrim@gunduz.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Vladis Dronov <vdronov@redhat.com> - 21.05.0-1
changelog:
  - Update to qatlib 21.05 with openssl-3 support (bz 1920444, bz 1953498)
  - Add documentation files to a package


author: Vladis Dronov <vdronov@redhat.com> - 24.02.0-1
changelog:
  - Update to qatlib 24.02.0 (RHEL-20174)
  - Add zuc_sample to qatlib-tests package
  - Use proper SPDX license identifiers


author: Vladis Dronov <vdronov@redhat.com> - 24.09.0-1
changelog:
  - Update to qatlib 24.09.0 @ 36fb0903 (RHEL-40255)
  - Add pciutils as a dependency of the qatlib-service subpackage
  - Add numactl-devel as a dependency since it is required by qatlib-24.09.0


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: Pavel Reichl <preichl@redhat.com> - 1:4.09-1
changelog:
  - Update to new upstream version
  - Add tmpfs quota support
  - Remove rhel-only patches that were merged upstream


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-5
changelog:
  - resolves: RHEL-101761 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-4.el9)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.16.1-1
changelog:
  - New version
    Resolves: rhbz#1853885
  - Dropped smtp-session-reuse-fix, openssl-1.1.0-fix, openssl-1.1.0-ecdhe-fix,
    gethostbyname2, fix-covscan-issues, gcc-10-fix patches (not needed)
  - Dropped format-security patch (upstreamed)
  - Updated patches


author: Tom Stellard <tstellar@redhat.com> - 4.0.2-2
changelog:
  - Use make macros
    https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Disable Go tests


author: Robert-André Mauchin <zebob.m@gmail.com> - 4.0.2-16
changelog:
  - Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
    CVE-2022-29526, CVE-2022-30629


author: systemd maintenance team <systemd-maint@redhat.com> - 252-15
changelog:
  - ci: trigger `differential-shellcheck` workflow on push (#2100440)
  - ci: workflow for gathering metadata for source-git automation (#2100440)
  - ci: first part of the source-git automation - commit linter (#2100440)
  - ci(Mergify): check CodeQL and build workflows based on changed files (#2100440)
  - ci: add NOTICE to also update regexp in `.mergify.yml` when updating `paths` property (#2100440)
  - Support /etc/system-update for OSTree systems (#2203133)
  - journal-def: fix type of signature to match the actual field in the Header structure (#2183546)
  - journal: use compound initialization for journal file Header structure (#2183546)
  - journald: fix log message (#2183546)
  - sd-journal: cache results of parsing environment variables (#2183546)
  - compress: introduce compression_supported() helper function (#2183546)
  - sd-journal: always use the compression algorithm specified in the header (#2183546)
  - sd-journal: allow to specify compression algorithm through env (#2183546)
  - test: add test case that journal file is created with the requested compression algorithm (#2183546)
  - rules: do not online CPU automatically on IBM platforms (#2143107)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-16
changelog:
  - ci: update permissions for source-git automation workflows (#2170883)
  - pstore: fixes for dmesg.txt reconstruction (#2170883)
  - pstore: explicitly set the base when converting record ID (#2170883)
  - pstore: avoid opening the dmesg.txt file if not requested (#2170883)
  - test: add a couple of tests for systemd-pstore (#2170883)
  - test: match all messages with the FILE field (#2170883)
  - test: build the SELinux test module on the host (#2170883)
  - test: make the stress test slightly less stressful on slower machines (#2170883)
  - coredump: use unaligned_read_ne{32,64}() to parse auxv (#2170883)
  - core/transaction: make merge_unit_ids() always return NUL-terminated string (#2170883)
  - core/transaction: make merge_unit_ids() return non-NULL on success (#2170883)
  - core/transaction: do not log "(null)" (#2170883)
  - ci: allow `RHEL-only` labels to mark downstream-only commits (#2170883)
  - elf-util: discard PT_LOAD segment early based on the start address. (#2215412)
  - elf-util: check for overflow when computing end of core's PT_LOAD segments (#2215412)
  - sulogin: use DEFINE_MAIN_FUNCTION() (#2169959)
  - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169959)
  - journal-vacuum: count size of all journal files (#2182632)
  - memory-util: add a concept for gcc cleanup attribute based array destruction (#2182632)
  - macro: introduce FOREACH_ARRAY() macro (#2182632)
  - journal-vacuum: rename function to match struct name (#2182632)
  - journal-vacuum: use CLEANUP_ARRAY (#2182632)
  - pam: add call to pam_umask (#2210145)
  - udev-builtin-net_id: align VF representor names with VF names (#2218886)
  - pam: add a call to pam_namespace (#2218184)
  - rules: online CPU automatically on IBM s390x platforms when configured (#2212612)
  - core/mount: escape invalid UTF8 char in dbus reply (#2208240)
  - Revert "user: delegate cpu controller, assign weights to user slices" (#2176899)
  - udev-rules: fix nvme symlink creation on namespace changes (#2172509)
  - rules: add whitespace after comma before the line continuation (#2172509)
  - udev: restore compat symlink for nvme devices (#2172509)
  - rules: drop doubled space (#2172509)
  - manager: don't taint the host if cgroups v1 is used (#2193456)
  - core/service: when resetting PID also reset known flag (#2210237)
  - ci: drop systemd-stable from advanced-commit-linter config (#2170883)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-17
changelog:
  - Revert "core/service: when resetting PID also reset known flag" (#2225667
  - ci: explicitly install python3-lldb-$COMPILER_VERSION (#2225667)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-18
changelog:
  - doc: add downstream CONTRIBUTING document (#2170883)
  - doc: improve CONTRIBUTING document (#2170883)
  - doc: use link with prefilled Jira issue (#2170883)
  - docs: link downstream CONTRIBUTING in README (#2170883)
  - bpf: fix restrict_fs on s390x (#2230364)
  - udev/net_id: use naming scheme for RHEL-9.3 (#2231845)
  - core/timer: Always use inactive_exit_timestamp if it is set (#2211065)
  - timer: Use dual_timestamp_is_set() in one more place (#2211065)
  - loginctl: list-users: also show state (#2209912)
  - loginctl: list-sessions: minor modernization (#2209912)
  - loginctl: list-sessions: also show state (#2209912)
  - test: add test for state in loginctl list-{users,sessions} (#2209912)
  - test: add a missing session activation (#2209912)
  - test: extend test for loginctl list-* (#2209912)
  - loginctl: shorten variable name (#2209912)
  - loginctl: use bus_map_all_properties (#2209912)
  - loginctl: show session idle status in list-sessions (#2209912)
  - loginctl: some modernizations (#2209912)
  - loginctl: list-sessions: fix timestamp for idle hint (#2209912)
  - loginctl: list-users: use bus_map_all_properties (#2209912)
  - loginctl: also show idle hint in session-status (#2209912)
  - memory-util: make ArrayCleanup passed to array_cleanup() const (#2190226)
  - static-destruct: several cleanups (#2190226)
  - static-destruct: introduce STATIC_ARRAY_DESTRUCTOR_REGISTER() (#2190226)
  - macro: support the case that the number of elements has const qualifier (#2190226)
  - shared/generator: apply similar config reordering of generated units (#2190226)
  - nulstr-util: make ret_size in strv_make_nulstr() optional (#2190226)
  - generator: teach generator_add_symlink() to instantiate specified unit (#2190226)
  - units: rework growfs units to be just a regular unit that is instantiated (#2190226)
  - fstab-generator: use correct targets when /sysroot is specificied in fstab only (#2190226)
  - fstab-generator: add SYSTEMD_SYSFS_CHECK env var (#2190226)
  - test: add fstab file support for fstab-generator tests (#2190226)
  - test-fstab-generator: also check file contents (#2190226)
  - test-fstab-generator: add tests for mount options (#2190226)
  - fstab-generator: split out several functions from parse_fstab() (#2190226)
  - fstab-generator: call add_swap() earlier (#2190226)
  - fstab-generator: refuse to add swap earlier if disabled (#2190226)
  - fstab-generator: refuse invalid mount point path in fstab earlier (#2190226)
  - fstab-generator: fix error code propagation in run_generator() (#2190226)
  - fstab-generator: support defining mount units through kernel command line (#2190226)
  - test: add test cases for defining mount and swap units from kernel cmdline (#2190226)
  - generators: change TimeoutSec=0 to TimeoutSec=infinity (#2190226)
  - units: change TimeoutSec=0 to TimeoutSec=infinity (#2190226)
  - fstab-generator: use correct swap name var (#2190226)
  - fstab-generator: add more parameter name comments (#2190226)
  - fstab-generator: unify initrd-root-device.target dependency handling code (#2190226)
  - fstab-util: add fstab_is_bind (#2190226)
  - fstab-generator: resolve bind mount source when in initrd (#2190226)
  - fstab-generator: rename 'initrd' flag to 'prefix_sysroot' (#2190226)
  - fstab-generator: fix target of /sysroot/usr (#2190226)
  - fstab-generator: add rd.systemd.mount-extra= and friends (#2190226)
  - fstab-generator: add a flag to accept entry for "/" in initrd (#2190226)
  - test-fstab-generator: extract core part as a function (#2190226)
  - test-fstab-generator: also test with SYSTEMD_IN_INITRD=no (#2190226)
  - test-fstab-generator: add more tests for systemd.mount-extra= and friends (#2190226)
  - fstab-generator: enable fsck for block device mounts specified in systemd.mount-extra= (#2190226)
  - core: use correct scope of looking up units (#2226980)
  - test: merge unit file related tests into TEST-23-UNIT-FILE (#2213521)
  - test: rename TEST-07-ISSUE-1981 to TEST-07-PID1 (#2213521)
  - test: merge TEST-08-ISSUE-2730 into TEST-07-PID1 (#2213521)
  - test: merge TEST-09-ISSUE-2691 into TEST-07-PID1 (#2213521)
  - test: merge TEST-10-ISSUE-2467 with TEST-07-PID1 (#2213521)
  - test: merge TEST-11-ISSUE-3166 into TEST-07-PID1 (#2213521)
  - test: merge TEST-12-ISSUE-3171 into TEST-07-PID1 (#2213521)
  - test: move TEST-23's units into a dedicated subfolder (#2213521)
  - test: merge TEST-47-ISSUE-14566 into TEST-07-PID1 (#2213521)
  - test: merge TEST-51-ISSUE-16115 into TEST-07-PID1 (#2213521)
  - test: merge TEST-20-MAINPIDGAMES into TEST-07-PID1 (#2213521)
  - test: abstract the common test parts into a utility script (#2213521)
  - test: add tests for JoinsNamespaceOf= (#2213521)
  - core/unit: drop doubled empty line (#2213521)
  - core/unit: make JoinsNamespaceOf= implies the inverse dependency (#2213521)
  - core/unit: search shared namespace in transitive relation of JoinsNamespaceOf= (#2213521)
  - core/unit: update bidirectional dependency simultaneously (#2213521)
  - resolvectl: fix type of ifindex D-Bus field, and make sure to initialize to zero in all code paths (#2161260)
  - resolved: add some line-breaks/comments (#2161260)
  - resolvectl: don't filter loopback DNS server from global DNS server list (#2161260)
  - blockdev-util: add simple wrapper around BLKSSZGET (#2170883)
  - loop-util: insist on setting the sector size correctly (#2170883)
  - dissect-image: add probe_sector_size() helper for detecting sector size of a GPT disk image (#2170883)
  - loop-util: always tell kernel explicitly about loopback sector size (#2170883)
  - Revert "Treat EPERM as "not available" too" (#2178222)
  - Revert "test: accept EPERM for unavailable idmapped mounts as well" (#2178222)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-19
changelog:
  - ci: Extend source-git-automation (RHEL-1086)
  - netif-naming-scheme: let's also include rhel8 schemes (RHEL-7026)
  - systemd-analyze: Add table and JSON output implementation to plot (RHEL-5070)
  - systemd-analyze: Update man/systemd-analyze.xml with Plot JSON and table (RHEL-5070)
  - systemd-analyze: Add tab complete logic for plot (RHEL-5070)
  - systemd-analyze: Add --json=, --table and -no-legend tests for plot (RHEL-5070)
  - ci: enable source-git automation to validate reviews and ci results (RHEL-1086)
  - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1086)
  - ci: enable auto-merge GH Action (RHEL-1086)
  - ci: add missing permissions (RHEL-1086)
  - ci: `permissions: write-all` (RHEL-1086)
  - ci(lint): exclude `.in` files from ShellCheck lint (RHEL-1086)
  - udev: raise RLIMIT_NOFILE as high as we can (RHEL-11040)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-20
changelog:
  - udev/net: allow new link name as an altname before renaming happens (RHEL-5988)
  - sd-netlink: do not swap old name and alternative name (RHEL-5988)
  - sd-netlink: restore altname on error in rtnl_set_link_name (RHEL-5988)
  - udev: attempt device rename even if interface is up (RHEL-5988)
  - sd-netlink: add a test for rtnl_set_link_name() (RHEL-5988)
  - test-network: add a test for renaming device to current altname (RHEL-5988)
  - udev: align table (RHEL-5988)
  - sd-device: make device_set_syspath() clear sysname and sysnum (RHEL-5988)
  - sd-device: do not directly access entry in sd-device object (RHEL-5988)
  - udev: move device_rename() from device-private.c (RHEL-5988)
  - udev: restore syspath and properties on failure (RHEL-5988)
  - sd-device: introduce device_get_property_int() (RHEL-5988)
  - core/device: downgrade log level for ignored errors (RHEL-5988)
  - core/device: ignore failed uevents (RHEL-5988)
  - test: add tests for failure in renaming network interface (RHEL-5988)
  - test: modernize test-netlink.c (RHEL-5988)
  - test-netlink: use dummy interface to test assigning new interface name (RHEL-5988)
  - udev: use SYNTHETIC_ERRNO() at one more place (RHEL-5988)
  - udev: make udev_builtin_run() take UdevEvent* (RHEL-5988)
  - udev/net: verify ID_NET_XYZ before trying to assign it as an alternative name (RHEL-5988)
  - udev/net: generate new network interface name only on add uevent (RHEL-5988)
  - sd-netlink: make rtnl_set_link_name() optionally append alternative names (RHEL-5988)
  - udev/net: assign alternative names only on add uevent (RHEL-5988)
  - test: add tests for renaming network interface (RHEL-5988)
  - Backport ukify from upstream (RHEL-13199)
  - bootctl: make --json output normal json (RHEL-13199)
  - test: replace readfp() with read_file() (RHEL-13199)
  - stub/measure: document and measure .uname UKI section (RHEL-13199)
  - boot: measure .sbat section (RHEL-13199)
  - Revert "test_ukify: no stinky root needed for signing" (RHEL-13199)
  - ukify: move to /usr/bin and mark as non non-experimental (RHEL-13199)
  - kernel-install: Add uki layout (RHEL-16354)
  - kernel-install: remove math slang from man page (RHEL-16354)
  - kernel-install: handle uki installs automatically (RHEL-16354)
  - 90-uki-copy.install: create $BOOT/EFI/Linux directory if needed (RHEL-16354)
  - kernel-install: Log location that uki is installed in (RHEL-16354)
  - bootctl: fix errno logging (RHEL-16354)
  - bootctl: add kernel-identity command (RHEL-16354)
  - bootctl: add kernel-inspect command (RHEL-16354)
  - bootctl: add kernel-inspect to --help text (RHEL-16354)
  - bootctl: drop full stop at end of --help texts (RHEL-16354)
  - bootctl: change section title for kernel image commands (RHEL-16354)
  - bootctl: remove space that should not be there (RHEL-16354)
  - bootctl: kernel-inspect: print os info (RHEL-16354)
  - bootctl-uki: several coding style fixlets (RHEL-16354)
  - tree-wide: unify how we pick OS pretty name to display (RHEL-16354)
  - bootctl-uki: several follow-ups for inspect_osrel() (RHEL-16354)
  - bootctl: Add missing %m (RHEL-16354)
  - bootctl: tweak DOS header magic check (RHEL-16354)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-21
changelog:
  - meson: fix installation of ukify (RHEL-13199)
  - sd-id128: introduce id128_hash_ops_free (RHEL-5988)
  - udevadm-trigger: allow to fallback without synthetic UUID only first time (RHEL-5988)
  - udevadm-trigger: settle with synthetic UUID if the kernel support it (RHEL-5988)
  - udevadm-trigger: also check with the original syspath if device is renamed (RHEL-5988)
  - test: use 'udevadm trigger --settle' even if device is renamed (RHEL-5988)
  - sd-event: don't mistake USEC_INFINITY passed in for overflow (RHEL-6090)
  - pid1: rework service_arm_timer() to optionally take a relative time value (RHEL-6090)
  - manager: add one more assert() (RHEL-6090)
  - pid1: add new Type=notify-reload service type (RHEL-6090)
  - man: document Type=notify-reload (RHEL-6090)
  - pid1: make sure we send our calling service manager RELOADING=1 when reloading (RHEL-6090)
  - networkd: implement Type=notify-reload protocol (RHEL-6090)
  - udevd: implement the full Type=notify-reload protocol (RHEL-6090)
  - logind: implement Type=notify-reload protocol properly (RHEL-6090)
  - notify: add --stopping + --reloading switches (RHEL-6090)
  - test: add Type=notify-reload testcase (RHEL-6090)
  - update TODO (RHEL-6090)
  - core: check for SERVICE_RELOAD_NOTIFY in manager_dbus_is_running (RHEL-6090)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-22
changelog:
  - Revert "man: mention System Administrator's Guide in systemctl manpage" (RHEL-19436)
  - man: mention RHEL documentation in systemctl's man page (RHEL-19436)
  - resolved: actually check authenticated flag of SOA transaction (RHEL-6216)
  - udev: allow/denylist for reading sysfs attributes when composing a NIC name (RHEL-1317)
  - man: environment value -> udev property (RHEL-1317)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-23
changelog:
  - logind: don't setup idle session watch for lock-screen and greeter (RHEL-20757)
  - logind: don't make idle action timer accuracy more coarse than timeout (RHEL-20757)
  - logind: do TTY idle logic only for sessions marked as "tty" (RHEL-20757)
  - meson: Properly install 90-uki-copy.install (RHEL-16354)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-24
changelog:
  - ci: use source-git-automation composite Action (RHEL-1086)
  - ci: increase the cron interval to 45 minutes (RHEL-1086)
  - ci: add all Z-Stream versions to array of allowed versions (RHEL-1086)
  - udev/net_id: introduce naming scheme for RHEL-9.4 (RHEL-22427)
  - basic/errno-util: add wrappers which only accept negative errno (RHEL-22443)
  - errno-util: allow ERRNO_IS_* to accept types wider than int (RHEL-22443)
  - udev: add new builtin net_driver (RHEL-22443)
  - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22427)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-27
changelog:
  - test: merge TEST-20-MAINPIDGAMES into TEST-07-PID1 (fixup) (RHEL-1086)
  - test: use the default nsec3-iterations value (RHEL-1086)
  - test: explicitly set nsec3-iterations to 0 (RHEL-1086)
  - core: mount namespaces: Remove auxiliary bind mounts directory after unit termination (RHEL-19483)
  - ci: deploy systemd man to GitHub Pages (RHEL-1086)
  - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-7026)
  - man: reorder the list of supported naming schemes (RHEL-7026)
  - tree-wide: fix return value handling of base64mem() (RHEL-16182)
  - Consolidate various TAKE_* into TAKE_GENERIC(), add TAKE_STRUCT() (RHEL-16182)
  - pcrphase: add $SYSTEMD_PCRPHASE_STUB_VERIFY env var for overriding stub check (RHEL-16182)
  - pcrphase: gracefully exit if TPM2 support is incomplete (RHEL-16182)
  - tpm2-util: split out code that derives "good" TPM2 banks into an strv from pcrphase and generalize it in tpm2-util.c (RHEL-16182)
  - tpm2-util: split out code that extends a PCR from pcrphase (RHEL-16182)
  - tpm2-util: optionally do HMAC in tpm2_extend_bytes() in case we process sensitive data (RHEL-16182)
  - cryptsetup: add tpm2-measure-pcr= and tpm2-measure-bank= crypttab options (RHEL-16182)
  - man: document the new crypttab measurement options (RHEL-16182)
  - gpt-auto-generator: automatically measure root/var volume keys into PCR 15 (RHEL-16182)
  - blkid-util: define enum for blkid_do_safeprobe() return values (RHEL-16182)
  - pcrphase: make tool more generic, reuse for measuring machine id/fs uuids (RHEL-16182)
  - units: measure /etc/machine-id into PCR 15 during early boot (RHEL-16182)
  - generators: optionally, measure file systems at boot (RHEL-16182)
  - tpm2: add common helper for checking if we are running on UKI with TPM measurements (RHEL-16182)
  - man: document new machine-id/fs measurement options (RHEL-16182)
  - test: add simple integration test for checking PCR extension works as it should (RHEL-16182)
  - update TODO (RHEL-16182)
  - cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (RHEL-16182)
  - boot: Simplify object erasure (RHEL-16182)
  - tree-wide: use CLEANUP_ERASE() at various places (RHEL-16182)
  - dlfcn: add new safe_dclose() helper (RHEL-16182)
  - tpm2: rename tpm2 alg id<->string functions (RHEL-16182)
  - tpm2: rename struct tpm2_context to Tpm2Context (RHEL-16182)
  - tpm2: use ref counter for Tpm2Context (RHEL-16182)
  - tpm2: use Tpm2Context* instead of ESYS_CONTEXT* (RHEL-16182)
  - tpm2: add Tpm2Handle with automatic cleanup (RHEL-16182)
  - tpm2: simplify tpm2_seal() blob creation (RHEL-16182)
  - tpm2: add salt to pin (RHEL-16182)
  - basic/macro: add macro to iterate variadic args (RHEL-16182)
  - test/test-macro: add tests for FOREACH_VA_ARGS() (RHEL-16182)
  - basic/bitfield: add bitfield operations (RHEL-16182)
  - test/test-bitfield: add tests for bitfield macros (RHEL-16182)
  - tpm2: add tpm2_get_policy_digest() (RHEL-16182)
  - tpm2: add TPM2_PCR_VALID() (RHEL-16182)
  - tpm2: add/rename functions to manage pcr selections (RHEL-16182)
  - test/test-tpm2: add tests for pcr selection functions (RHEL-16182)
  - tpm2: add tpm2_pcr_read() (RHEL-16182)
  - tpm2: move openssl-required ifdef code out of policy-building function (RHEL-16182)
  - tpm2: add tpm2_is_encryption_session() (RHEL-16182)
  - tpm2: move policy building out of policy session creation (RHEL-16182)
  - tpm2: add support for a trusted SRK (RHEL-16182)
  - tpm2: fix nits from PR #26185 (RHEL-16182)
  - tpm2: replace magic number (RHEL-16182)
  - tpm2: add tpm2_digest_*() functions (RHEL-16182)
  - tpm2: replace hash_pin() with tpm2_digest_*() functions (RHEL-16182)
  - tpm2: add tpm2_set_auth() (RHEL-16182)
  - tpm2: add tpm2_get_name() (RHEL-16182)
  - tpm2: rename pcr_values_size vars to n_pcr_values (RHEL-16182)
  - tpm2: add tpm2_policy_pcr() (RHEL-16182)
  - tpm2: add tpm2_policy_auth_value() (RHEL-16182)
  - tpm2: add tpm2_policy_authorize() (RHEL-16182)
  - tpm2: use tpm2_policy_authorize() (RHEL-16182)
  - tpm2: add tpm2_calculate_sealing_policy() (RHEL-16182)
  - tpm: remove external calls to dlopen_tpm2() (RHEL-16182)
  - tpm2: remove all extern tpm2-tss symbols (RHEL-16182)
  - tpm2: add tpm2_get_capability(), tpm2_cache_capabilities(), tpm2_capability_pcrs() (RHEL-16182)
  - tpm2: verify symmetric parms in tpm2_context_new() (RHEL-16182)
  - tpm2: replace _cleanup_tpm2_* macros with _cleanup_() (RHEL-16182)
  - tpm2-util: use compound initialization when allocating tpm2 objects (RHEL-16182)
  - tpm2: add tpm2_get_capability_handle(), tpm2_esys_handle_from_tpm_handle() (RHEL-16182)
  - tpm2: add tpm2_read_public() (RHEL-16182)
  - tpm2: add tpm2_get_legacy_template() and tpm2_get_srk_template() (RHEL-16182)
  - tpm2: add tpm2_load() (RHEL-16182)
  - tpm2: add tpm2_load_external() (RHEL-16182)
  - tpm2: move local vars in tpm2_seal() to point of use (RHEL-16182)
  - tpm2: replace magic number in hmac_sensitive initialization (RHEL-16182)
  - tpm2: add tpm2_create() (RHEL-16182)
  - tpm2: replace tpm2_capability_pcrs() macro with direct c->capaiblity_pcrs use (RHEL-16182)
  - basic/alloc-util: add greedy_realloc_append() (RHEL-16182)
  - tpm2: cache the TPM supported commands, add tpm2_supports_command() (RHEL-16182)
  - tpm2: cache TPM algorithms (RHEL-16182)
  - tpm2: add tpm2_persist_handle() (RHEL-16182)
  - tpm2: add tpm2_get_or_create_srk() (RHEL-16182)
  - tpm2: move local vars in tpm2_unseal() to point of use (RHEL-16182)
  - tpm2: remove tpm2_make_primary() (RHEL-16182)
  - tpm2: use CreatePrimary() to create primary keys instead of Create() (RHEL-16182)
  - cryptsetup: downgrade a bunch of log messages that to LOG_WARNING (RHEL-16182)
  - boot/measure: replace TPM PolicyPCR session with calculation (RHEL-16182)
  - core: imply DeviceAllow=/dev/tpmrm0 with LoadCredentialEncrypted (RHEL-16182)
  - added more test cases (RHEL-16182)
  - test: fixed negative checks in TEST-70-TPM2. Use in-line error handling rather than redirections. Follow up on #27020 (RHEL-16182)
  - systemd-cryptenroll: add string aliases for tpm2 PCRs Fixes #26697. RFE. (RHEL-16182)
  - cryptenroll: fix an assertion with weak passwords (RHEL-16182)
  - man/systemd-cryptenroll: update list of PCRs, link to uapi docs (RHEL-16182)
  - tpm2: add debug logging to functions converting hash or asym algs to/from strings or ids (RHEL-16182)
  - tpm2: add tpm2_hash_alg_to_size() (RHEL-16182)
  - tpm2: change tpm2_tpm*_pcr_selection_to_mask() to return mask (RHEL-16182)
  - tpm2: add more helper functions for managing TPML_PCR_SELECTION and TPMS_PCR_SELECTION (RHEL-16182)
  - tpm2: add Tpm2PCRValue struct and associated functions (RHEL-16182)
  - tpm2: move declared functions in header lower down (RHEL-16182)
  - tpm2: declare tpm2_log_debug_*() functions in tpm2_util.h (RHEL-16182)
  - tpm2: change tpm2_calculate_policy_pcr(), tpm2_calculate_sealing_policy() to use Tpm2PCRValue array (RHEL-16182)
  - tpm2: change tpm2_parse_pcr_argument() parameters to parse to Tpm2PCRValue array (RHEL-16182)
  - tpm2: add TPM2B_*_MAKE(), TPM2B_*_CHECK_SIZE() macros (RHEL-16182)
  - tpm2: add tpm2_pcr_read_missing_values() (RHEL-16182)
  - openssl: add openssl_pkey_from_pem() (RHEL-16182)
  - openssl: add rsa_pkey_new(), rsa_pkey_from_n_e(), rsa_pkey_to_n_e() (RHEL-16182)
  - openssl: add ecc_pkey_new(), ecc_pkey_from_curve_x_y(), ecc_pkey_to_curve_x_y() (RHEL-16182)
  - test: add DEFINE_HEX_PTR() helper function (RHEL-16182)
  - openssl: add test-openssl (RHEL-16182)
  - tpm2: add functions to convert TPM2B_PUBLIC to/from openssl pkey or PEM (RHEL-16182)
  - tpm2: move policy calculation out of tpm2_seal() (RHEL-16182)
  - man: update systemd-cryptenroll man page with details on --tpm2-pcrs format change (RHEL-16182)
  - tpm2: update TEST-70-TPM2 to test passing PCR value to systemd-cryptenroll (RHEL-16182)
  - tpm2: change *alg_to_* functions to use switch() (RHEL-16182)
  - tpm2: lowercase TPM2_PCR_VALUE[S]_VALID functions (RHEL-16182)
  - tpm2: move cast from lhs to rhs in uint16_t/int comparison (RHEL-16182)
  - tpm2: in validator functions, return false instead of assert failure (RHEL-16182)
  - tpm2: in tpm2_pcr_values_valid() use FOREACH_ARRAY() (RHEL-16182)
  - tpm2: use SIZE_MAX instead of strlen() for unhexmem() (RHEL-16182)
  - tpm2: put !isempty() check inside previous !isempty() check (RHEL-16182)
  - tpm2: simplify call to asprintf() (RHEL-16182)
  - tpm2: check pcr value hash != 0 before looking up hash algorithm name (RHEL-16182)
  - tpm2: use strempty() (RHEL-16182)
  - tpm2: split TPM2_PCR_VALUE_MAKE() over multiple lines (RHEL-16182)
  - tpm2: remove ret_ prefix from input/output params (RHEL-16182)
  - tpm2: use memcpy_safe() instead of memcpy() (RHEL-16182)
  - openssl: use new(char, size) instead of malloc(size) (RHEL-16182)
  - tpm2: use table for openssl<->tpm2 ecc curve id mappings (RHEL-16182)
  - tpm2: use switch() instead of if-else (RHEL-16182)
  - tpm2: make logging level consistent at debug for some functions (RHEL-16182)
  - tpm2: remove unnecessary void* cast (RHEL-16182)
  - tpm2: add tpm2_pcr_values_has_(any|all)_values() functions (RHEL-16182)
  - tpm2: wrap (7) in UINT32_C() (RHEL-16182)
  - cryptenroll: change man page example to remove leading 0x and lowercase hex (RHEL-16182)
  - openssl: add log_openssl_errors() (RHEL-16182)
  - openssl: add openssl_digest_size() (RHEL-16182)
  - openssl: add openssl_digest_many() (RHEL-16182)
  - openssl: replace openssl_hash() with openssl_digest() (RHEL-16182)
  - openssl: add openssl_hmac_many() (RHEL-16182)
  - openssl: add rsa_oaep_encrypt_bytes() (RHEL-16182)
  - openssl: add kdf_kb_hmac_derive() (RHEL-16182)
  - openssl: add openssl_cipher_many() (RHEL-16182)
  - openssl: add ecc_edch() (RHEL-16182)
  - openssl: add kdf_ss_derive() (RHEL-16182)
  - dlfcn-util: add static asserts ensuring our sym_xyz() func ptrs match the types from the official headers (RHEL-16182)
  - tpm2: add tpm2_marshal_blob() and tpm2_unmarshal_blob() (RHEL-16182)
  - tpm2: add tpm2_serialize() and tpm2_deserialize() (RHEL-16182)
  - tpm2: add tpm2_index_to_handle() and tpm2_index_from_handle() (RHEL-16182)
  - tpm2: fix build failure without openssl (RHEL-16182)
  - tpm2-util: look for tpm2-pcr-signature.json directly in /.extra/ (RHEL-16182)
  - tpm2: downgrade most log functions from error to debug (RHEL-16182)
  - tpm2: handle older tpm enrollments without a saved pcr bank (RHEL-16182)
  - tpm2: allow tpm2_make_encryption_session() without bind key (RHEL-16182)
  - tpm2: update tpm2 test for supported commands (RHEL-16182)
  - tpm2: use GREEDY_REALLOC_APPEND() in tpm2_get_capability_handles(), cap max value (RHEL-16182)
  - tpm2: change tpm2_unseal() to accept Tpm2Context instead of device string (RHEL-16182)
  - tpm2: cache TPM's supported ECC curves (RHEL-16182)
  - tpm2-util: make tpm2_marshal_blob()/tpm2_unmarshal_blob() static (RHEL-16182)
  - tpm2-util: make tpm2_read_public() static, as we use it only internally in tpm2-util.c (RHEL-16182)
  - cryptenroll: allow specifying handle index of key to use for sealing (RHEL-16182)
  - test: add tests for systemd-cryptenroll --tpm2-seal-key-handle (RHEL-16182)
  - tpm2: do not call Esys_TR_Close() (RHEL-16182)
  - tpm2: don't use GetCapability() to check transient handles (RHEL-16182)
  - tpm2-util: pick up a few new symbols from tpm2-tss (RHEL-16182)
  - tpm2: add tpm2_get_pin_auth() (RHEL-16182)
  - tpm2: instead of adjusting authValue trailing 0(s), trim them as required by tpm spec (RHEL-16182)
  - tpm2-util: rename tpm2_calculate_name() → tpm2_calculate_pubkey_name() (RHEL-16182)
  - cryptenroll: do not implicitly verify with default tpm policy signature (RHEL-16182)
  - cryptenroll: drop deadcode (RHEL-16182)
  - tpm2: allow using tpm2_get_srk_template() without tpm (RHEL-16182)
  - tpm2: add test to verify srk templates (RHEL-16182)
  - tpm2: add tpm2_sym_alg_*_string() and tpm2_sym_mode_*_string() (RHEL-16182)
  - tpm2: add tpm2_calculate_seal() and helper functions (RHEL-16182)
  - tpm2: update test-tpm2 for tpm2_calculate_seal() (RHEL-16182)
  - cryptenroll: add support for calculated TPM2 enrollment (RHEL-16182)
  - test: update TEST-70 with systemd-cryptenroll calculated TPM2 enrollment (RHEL-16182)
  - openssl-util: avoid freeing invalid pointer (RHEL-16182)
  - creds-util: check for CAP_DAC_READ_SEARCH (RHEL-16182)
  - creds-util: do not try TPM2 if there is not support (RHEL-16182)
  - creds-util: merge the TPM2 detection for initrd (RHEL-16182)
  - cryptenroll: fix a memory leak (RHEL-16182)
  - sd-journal: introduce sd_journal_step_one() (RHEL-11591)
  - test: modernize test-journal-flush (RHEL-11591)
  - journal-file-util: do not fail when journal_file_set_offline() called more than once (RHEL-11591)
  - journal-file-util: Prefer punching holes instead of truncating (RHEL-11591)
  - test: add reproducer for SIGBUS issue caused by journal truncation (RHEL-11591)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-28
changelog:
  - random-seed: shorten a bit may_credit() (RHEL-16952)
  - random-seed: make one more use of random_write_entropy() (RHEL-16952)
  - random-seed: use getopt() (RHEL-16952)
  - random-seed: make the logic to calculate the number of bytes read from the random seed file clearer (RHEL-16952)
  - random-seed: no need to pass 'mode' argument when opening /dev/urandom (RHEL-16952)
  - random-seed: split out run() (RHEL-16952)
  - random_seed: minor improvement in run() (RHEL-16952)
  - random-seed: downgrade some messages (RHEL-16952)
  - random-seed: clarify one comment (RHEL-16952)
  - random-seed: make sure to load machine id even if the seed file is missing (RHEL-16952)
  - chase-symlinks: add new flag for prohibiting any following of symlinks (RHEL-16952)
  - bootctl,bootspec: make use of CHASE_PROHIBIT_SYMLINKS whenever we access the ESP/XBOOTLDR (RHEL-16952)
  - boot: implement kernel EFI RNG seed protocol with proper hashing (RHEL-16952)
  - random-seed: refresh EFI boot seed when writing a new seed (RHEL-16952)
  - random-seed: handle post-merge review nits (RHEL-16952)
  - boot: do not truncate random seed file (RHEL-16952)
  - bootctl: install system token on virtualized systems (RHEL-16952)
  - boot: remove random-seed-mode (RHEL-16952)
  - stub: handle random seed like sd-boot does (RHEL-16952)
  - efi: add efi_guid_equal() helper (RHEL-16952)
  - efi: add common implementation for loop finding EFI configuration tables (RHEL-16952)
  - boot: Detect hypervisors using SMBIOS info (RHEL-16952)
  - boot: Skip soft-brick warning when in a VM (RHEL-16952)
  - boot: Replace UINTN with size_t (RHEL-16952)
  - boot: Use unsigned for beep counting (RHEL-16952)
  - boot: Use unicode literals (RHEL-16952)
  - macro: add generic IS_ALIGNED32() anf friends (RHEL-16952)
  - meson: use 0|1 for SD_BOOT (RHEL-16952)
  - boot: Add printf functions (RHEL-16952)
  - boot: Use printf for error logging (RHEL-16952)
  - boot: Introduce log_wait (RHEL-16952)
  - boot: Add log_trace debugging helper (RHEL-16952)
  - tree-wide: Use __func__ in asserts (RHEL-16952)
  - boot: Drop use of xpool_print/SPrint (RHEL-16952)
  - boot: Drop use of Print (RHEL-16952)
  - boot: Rework GUID handling (RHEL-16952)
  - efi-string: Fix strchr() null byte handling (RHEL-16952)
  - efi-string: Add startswith8() (RHEL-16952)
  - efi-string: Add efi_memchr() (RHEL-16952)
  - vmm: Add more const (RHEL-16952)
  - vmm: Add smbios_find_oem_string() (RHEL-16952)
  - stub: Read extra kernel command line items from SMBIOS (RHEL-16952)
  - vmm: Modernize get_smbios_table() (RHEL-16952)
  - stub: measure SMBIOS kernel-cmdline-extra in PCR12 (RHEL-16952)
  - efi: support passing empty cmdline to mangle_stub_cmdline() (RHEL-16952)
  - efi: set EFIVAR to stop Shim from uninstalling its protocol (RHEL-16952)
  - ukify: use empty stub for addons (RHEL-16952)
  - stub: allow loading and verifying cmdline addons (RHEL-16952)
  - TODO: remove fixed item (RHEL-16952)
  - fix: do not check/verify slice units if recursive errors are to be ignored (RHEL-1086)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-30
changelog:
  - resolved: limit the number of signature validations in a transaction (RHEL-26643)
  - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26643)
  - efi: alignment of the PE file has to be at least 512 bytes (RHEL-26133)
  - units: change assert to condition to skip running in initrd/os (RHEL-16182)
  - ci: add configuration for regression sniffer GA (RHEL-1086)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-31
changelog:
  - bootctl: rework random seed logic to use open_mkdir_at() and openat() (RHEL-16952)
  - bootctl: properly sync fs before/after moving random seed file into place (RHEL-16952)
  - bootctl: when updating EFI random seed file, hash old seed with new one (RHEL-16952)
  - sha256: add helper than hashes a buffer *and* its size (RHEL-16952)
  - random-seed: don't refresh EFI random seed from random-seed.c anymore (RHEL-16952)
  - bootctl: downgrade graceful messages to LOG_NOTICE (RHEL-16952)
  - units: rename/rework systemd-boot-system-token.service → systemd-boot-random-seed.service (RHEL-16952)
  - bootctl: split out setting of system token into function of its own (RHEL-16952)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-33
changelog:
  - execute: Pass AT_FDCWD instead of -1 (RHEL-31783)
  - ci(src-git): update list of supported products (RHEL-30372)
  - coredump: by default process and store core files up to 1GiB (RHEL-15501)
  - coredump: keep core files for two weeks (RHEL-15501)
  - ukify: make the test happy with the latest OpenSSL (RHEL-30372)
  - test_ukify: use raw string for the regex (RHEL-30372)
  - coredump: generate stacktraces also for processes running in containers w/o coredump forwarding (RHEL-29430)
  - test: add a couple of tests for systemd-coredump (RHEL-29430)
  - test: don't expand the subshell expression prematurely (RHEL-29430)
  - coredump filter: fix stack overflow with =all (RHEL-29430)
  - coredump filter: add mask for 'all' using UINT32_MAX, not UINT64_MAX (RHEL-29430)
  - test: add coverage for CoredumpFilter=all (RHEL-29430)
  - test: rotate journal before storing coredumps (RHEL-29430)
  - test: sync with the fake binary before killing it (RHEL-29430)
  - test: check coredump handling in containers & namespaces (RHEL-29430)


author: Hans de Goede <hdegoede@redhat.com> - 1:3.2.7b-1
changelog:
  - New upstream release 3.2.7b
  - Add patch fixing CVE-2019-19746 (rhbz#1787040)
  - Add patch fixing CVE-2019-19797 (rhbz#1786726)


author: Ondrej Dubaj <odubaj@redhat.com> - 1:3.2.7b-7
changelog:
  - Fixed CVE-2020-21681 (#1998350)
  - Fixed CVE-2020-21683 (#1998594)
  - Fixed CVE-2020-21680 (#1998306)
  - Fixed CVE-2020-21684 (#2000747)
  - Fixed CVE-2020-21678 (#2000741)
  - Fixed CVE-2020-21676 (#2000751)
  - Fixed CVE-2020-21682 (#2000738)


author: Ondrej Dubaj <odubaj@redhat.com> - 1:3.2.7b-8
changelog:
  - Fixed CVE-2020-21529 (#2005518)
  - Fixed CVE-2020-21532 (#2006007)
  - Fixed CVE-2020-21531 (#2006002)


author: Andreas Schneider <asn@redhat.com> - 1.2.7-1
changelog:
  - Update to version 1.2.7
    * Fix unsetting initial XIDs
    * Fix manpage installation
    * Fix cmake-config installation
    * Fixed running with sanitizers
  - resolves: #1690028 - Allow running without RTLD_DEEPBIND


author: Debarshi Ray <rishi@fedoraproject.org> - 0.64.2-1
changelog:
  - Update to 0.64.2
  - Add missing _VTE_CXX_NOEXCEPT to downstream patches (#1973174)
  - Fix the License fields and ship the correct license texts (#1973299)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.29-7
changelog:
  - compile without sha1 and md5
  - Resolves: rhbz#1936682 - xmlsec1 implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.1-2
changelog:
  - xf86-input-libinput 1.0.1 (#1951879)
  - Fix the upstream source URL
  - Use autosetup instead of manual patch handling


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.9-5
changelog:
  Fix for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408, CVE-2024-0409


author: Olivier Fourdan <ofourdan@redhat.com> - 23.2.7-3
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80204), CVE-2025-26595 (RHEL-80187),
                 CVE-2025-26596 (RHEL-80190), CVE-2025-26597 (RHEL-80193),
                 CVE-2025-26598 (RHEL-80195), CVE-2025-26599 (RHEL-80202),
                 CVE-2025-26600 (RHEL-80203), CVE-2025-26601 (RHEL-80207)


author: Olivier Fourdan <ofourdan@redhat.com> - 23.2.7-4
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97288), CVE-2025-49176 (RHEL-97334),
                 CVE-2025-49177 (RHEL-97357), CVE-2025-49178 (RHEL-97393),
                 CVE-2025-49179 (RHEL-97404), CVE-2025-49180 (RHEL-97244)


author: José Expósito <jexposit@redhat.com> - 1.20.11-22
changelog:
  - CVE fix for: CVE-2023-6377, CVE-2023-6478
    Resolves: https://issues.redhat.com/browse/RHEL-18322
    Resolves: https://issues.redhat.com/browse/RHEL-18329


author: José Expósito <jexposit@redhat.com> - 1.20.11-23
changelog:
  - CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408 and CVE-2024-0409
    Resolves: https://issues.redhat.com/browse/RHEL-21203
    Resolves: https://issues.redhat.com/browse/RHEL-20531
    Resolves: https://issues.redhat.com/browse/RHEL-20380
    Resolves: https://issues.redhat.com/browse/RHEL-20386
    Resolves: https://issues.redhat.com/browse/RHEL-21193
    Resolves: https://issues.redhat.com/browse/RHEL-21200


author: José Expósito <jexposit@redhat.com> - 1.20.11-25
changelog:
  - CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and
    CVE-2024-31083
  - Add util-linux as a dependency of Xvfb
  - Fix compilation error on i686


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-28
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186),
                 CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191),
                 CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199),
                 CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200)


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.11-30
changelog:
  - xfree86: Fix potentially NULL reference to platform device's PCI device
    Resolves: https://issues.redhat.com/browse/RHEL-84253


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-31
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308),
                 CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409),
                 CVE-2025-49180 (RHEL-97253)


