# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 3.0.6-1
changelog:
  - Update to 3.0.6
  - Resolves: RHEL-1681 - [RFE] Log buffering for all log types
  - Resolves: RHEL-5141 - [RFE] For each request, a ldap client can assign an
    identifier to be added in the logs
  - Resolves: RHEL-38917 - dscreate interactive install shows a traceback
    when mdb is selected
  - Resolves: RHEL-42485 - [RFE] pbkdf2 hardcoded parameters should be turned
    into configuration options
  - Resolves: RHEL-59513 - [RFE] Port logconv.pl to python
  - Resolves: RHEL-61253 - Make online import more robust
  - Resolves: RHEL-69819 - "Duplicated DN detected" errors when creating
    indexes or importing entries. [rhel-10.0]
  - Resolves: RHEL-70122 - Crash in attrlist_find() when the Account Policy
    plugin is enabled.
  - Resolves: RHEL-74149 - backup/restore broken
  - Resolves: RHEL-74154 - If an entry RDN is identical to the suffix, then
    Entryrdn gets broken during a reindex
  - Resolves: RHEL-74159 - Crash during bind when acct policy plugin does not
    have "alwaysrecordlogin" set
  - Resolves: RHEL-74164 - On replica consumer, account policy plugin fails
    to manage the last login history
  - Resolves: RHEL-76020 - IPA LDAP error code T3 when no exceeded time limit
    from a paged search result [rhel-10]
  - Resolves: RHEL-76838 - Unlocked and locked users having same error output
  - Resolves: RHEL-76841 - Healthcheck tool should warn admin about creating
    a substring index on membership attribute


author: Viktor Ashirov <vashirov@redhat.com> - 3.0.6-2
changelog:
  - Bump version to 3.0.6-3
  - Resolves: RHEL-5141 - [RFE] For each request, a ldap client can assign an
    identifier to be added in the logs
  - Resolves: RHEL-77948 - ns-slapd crashes with data directory ≥ 2 days old
    [rhel-10]
  - Resolves: RHEL-78342 - During import of entries without nsUniqueId, a
    supplier generates duplicate nsUniqueId (LMDB only)


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-2
changelog:
  - Resolves: RHEL-5117 - ns-slapd crash in
    dbmdb_import_prepare_worker_entry()
  - Resolves: RHEL-31959 - [RFE] add plugin origin or source in security's
    log msg info
  - Resolves: RHEL-35241 - ns-slapd crashes in referral mode
  - Resolves: RHEL-61327 - Incomplete messages about replication in the
    errors log.
  - Resolves: RHEL-61353 - dbscan  on replication changelog does not display
    MOD_TYPE
  - Resolves: RHEL-62874 - dsidm: issue when renaming users
  - Resolves: RHEL-65660 - DSIDM: Re-enabling user accounts that reached
    inactivity limit fails with error
  - Resolves: RHEL-67003 - dsconf backend replication monitor fails if
    replica id starts with 0
  - Resolves: RHEL-67006 - dsconf  utility  should let you configure the
    "uniqueness-exclude-subtrees" parameter of the Attribute Uniqueness plug-
    in
  - Resolves: RHEL-67019 - Crash in __strlen_sse2 when using the nsRole
    filter rewriter.
  - Resolves: RHEL-67022 - Password modify extended operation should skip
    password policy checks when executed by root DN
  - Resolves: RHEL-70117 - Unify how group description can be added to a new
    group in WebUI and CLU
  - Resolves: RHEL-74085 - Increased memory consumption caused by NDN cache
  - Resolves: RHEL-74270 - [RFE] Implement "list-dn" option for dsidm tool in
    Directory Server
  - Resolves: RHEL-76832 - Wrong backend database name syntax causes "Red Hat
    Directory Server" => "Databases" menu blank in Cockpit
  - Resolves: RHEL-76837 - dsidm Error: float() argument must be a string or
    a number, not 'NoneType'
  - Resolves: RHEL-76840 - Monitoring tab should use dsconf monitor
  - Resolves: RHEL-77490 - Complete remove the parameter "nsslapd-subtree-
    rename-switch" from DS-12
  - Resolves: RHEL-79080 - Json option does not work with "dsidm account get-
    by-dn" command
  - Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
    access and error logs
  - Resolves: RHEL-80253 - RHDS hangs when having online backup running
    together with automember_rebuild task executing
  - Resolves: RHEL-80497 - Can't rename users member of automember rule
    [rhel-10]
  - Resolves: RHEL-81277 - logconv.py fails when specific timestamps are
    provided
  - Resolves: RHEL-83850 - mdb database statistics don't work
  - Resolves: RHEL-86279 - Cannot create a nested role using "dsidm role
    create-nested"
  - Resolves: RHEL-86280 - Cannot create a filtered role using "dsidm role
    create-filtered"
  - Resolves: RHEL-86313 - RootDN Access Control Plugin with wildcards for IP
    addresses fails with an error "Invalid IP address"
  - Resolves: RHEL-86314 - dsidm failing with error "argument must be a
    string or a number"
  - Resolves: RHEL-86315 - Dsidm get_dn option fails for organizational unit,
    service and posixgroup
  - Resolves: RHEL-86316 - Dsidm uniquegroup members option does not work
  - Resolves: RHEL-86321 - dsidm role rename-by-dn does not rename a role
  - Resolves: RHEL-86322 - dsidm role subtree-status doesn't work
  - Resolves: RHEL-86323 - dsidm role get-by-dn doesn't work properly with -j
    option
  - Resolves: RHEL-86324 - Deleting a role with dsidm results in proper
    deletion message, but role is still present
  - Resolves: RHEL-86785 - dscontainer: support loading custom schema
  - Resolves: RHEL-86878 - segfault at 7ff2370010c8 ip 00007ff2339ba239 sp
    00007fed321fe100 error 6 in liblmdb.so.0.0.0
  - Resolves: RHEL-89748 - Nested group does not receive memberOf attribute
  - Resolves: RHEL-89774 - Improve the "result" field of ipa-healthcheck if
    replicas are busy [rhel-10]
  - Resolves: RHEL-89776 - RHDS12.2 NSMMReplicationPlugin - release_replica
    Unable to parse the response
  - Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
    00007ff734050cdb sp 00007ff6de9f1430 error 6 in
    libslapd.so.0.1.0[7ff733ec0000+1b3000]
  - Resolves: RHEL-95761 - Improve  error message when bulk import connection
    is closed
  - Resolves: RHEL-97565 - On RHDS 12.6 The user password policy for a user
    was created, but the pwdpolicysubentry attribute for this user
    incorrectly points to the People OU password policy instead of the
    specific user policy.
  - Resolves: RHEL-101926 - ipa-backup failed with error : 'No such file or
    directory: '/usr/sbin/dsctl'


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-3
changelog:
  - Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
    access and error logs
  - Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
    00007ff734050cdb sp 00007ff6de9f1430 error 6 in
    libslapd.so.0.1.0[7ff733ec0000+1b3000]


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-4
changelog:
  - Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so
  - Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN
    cache is disabled.
  - Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral
  - Resolves: RHEL-92054 - Memory leak in
    roles_cache_create_object_from_entry [rhel-10]
  - Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts,
    causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10]
  - Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with
    world readable permission
  - Resolves: RHEL-107035 - CWE-532 Created user password hash available to
    see in audit log
  - Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password
    changed by administrator


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-5
changelog:
  - Resolves: RHEL-101727 - The numSubordinates value is not matching the
    number of direct children.
  - Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
  - Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
    attributes using custom matching rules
  - Resolves: RHEL-111224 - Error showing local password policy on web UI
  - Resolves: RHEL-112675 - Statistics about index lookup report a wrong
    duration
  - Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
  - Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
  - Resolves: RHEL-113969 - AddressSanitizer: memory leak in
    memberof_add_memberof_attr


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-1
changelog:
  - Update to 3.2.0
  - Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto-
    tune should adapt its tuning
  - Resolves: RHEL-58682 - [RFE]  modify entry cache eviction strategy to
    allow large groups to stay in the cache
  - Resolves: RHEL-64019 - Units for changing MDB max size are not consistent
    across different tools
  - Resolves: RHEL-83274 - Replication online reinitialization of a large
    database gets stalled.
  - Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with
    IDL scan limit at INT_MAX
  - Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
  - Resolves: RHEL-89601 - (&(cn:dn:=groups)) no longer returns results
  - Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes
    requests for accounts that do not meet the criteria specified in the
    `pamFilter` option.
  - Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11"
    messages after migrating to LMDB.
  - Resolves: RHEL-96196 - Duplicate/double local password policy entry
    display from redhat directory server webconsole
  - Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the
    conflicts at once instead of deleting each conflict one after the other
  - Resolves: RHEL-105578 - IPA health check up script shows time skew is
    over 24 hours
  - Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when
    LMDB is used.
  - Resolves: RHEL-106559 - When deferred memberof update is enabled after
    the server crashed it should not launch memberof fixup task by default
  - Resolves: RHEL-106849 - Abort the offline import if the root entry cannot
    be added.
  - Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does
    not exist
  - Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific
    groups
  - Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn
    operation
  - Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF
  - Resolves: RHEL-115179 - Several password related attributes are not
    replicating from the Replicas to the Masters
  - Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory
    corruption
  - Resolves: RHEL-116060 - Fix paged result search locking
  - Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth
  - Resolves: RHEL-117140 - Changelog trimming - add number of scanned
    entries to the log
  - Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task.
  - Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept
    whole subnets
  - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
    incorrectly configured system indexes.
  - Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling
    replication as a consumer
  - Resolves: RHEL-123220 - Improve the way to detect asynchronous operations
    in the access logs
  - Resolves: RHEL-123275 - The new ipahealthcheck test
    ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
  - Resolves: RHEL-123663 - Online initialization of consumers fails with
    error -23
  - Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
    space char in DN name correctly
  - Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
  - Resolves: RHEL-124694 - Access logs are not getting deleted as
    configured.
  - Resolves: RHEL-126535 - memory corruption in alias entry plugin
  - Resolves: RHEL-128906 - Scalability issue of replication online
    initialization with large database
  - Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when
    replicating after importing data from ldif files
  - Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc
    sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on
    389-ds-base-2.6.1-11
  - Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-
    base-2.6.1-12
  - Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-2
changelog:
  - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
    ipa-server breaks replication


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-3
changelog:
  - Bump version to 3.2.0-3
  - Resolves: RHEL-76835 - Web console doesn't show the sub suffix of
    ou=foo,ou=people,dc=example,dc=com.
  - Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate
    without restarting slapd
  - Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys
  - Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all
    indexes instead of selected ones
  - Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list
  - Resolves: RHEL-121981 - Setting password history count to 0 does not
    flush history
  - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
    incorrectly configured system indexes.
  - Resolves: RHEL-128906 - Scalability issue of replication online
    initialization with large database
  - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
    ipa-server breaks replication
  - Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf
    plugin


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-4
changelog:
  - Bump version to 3.2.0-4
  - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
    Changelog trimming.
  - Resolves: RHEL-133085 - Replica installation is failing with message
    MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
  - Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote
    Code Execution and Denial of Service via heap buffer overflow [rhel-10.2]
  - Resolves: RHEL-138729 - Crash ( Segmentation fault ) in
    atomic_compare_exchange()


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-6
changelog:
  - Bump version to 3.2.0-6
  - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
    Changelog trimming.


author: Viktor Ashirov <vashirov@redhat.com> - 3.3.0-1
changelog:
  - Bump version to 3.3.0
  - Resolves: RHEL-58681 - high wtime can hide a worker reading a large
    requests
  - Resolves: RHEL-62876 - Inconsistencies in the log messages
  - Resolves: RHEL-68692 - Replication halt caused by an incorrect setting of
    "nsslapd-changelogmaxage"
  - Resolves: RHEL-76836 - Crash in replica_config_add when manually
    configuring a replica with an incorrect nsds5ReplicaRoot.
  - Resolves: RHEL-80256 - [RFE] RHDS healthcheck tool could provide more
    information in offline mode
  - Resolves: RHEL-84531 - access log - suspicious wtime  optime negative and
    large values in internal op
  - Resolves: RHEL-86325 - dbscan utility not filtering using -k option
  - Resolves: RHEL-88942 - LDAP healthcheck and ignoring entrydn index and
    associated config
  - Resolves: RHEL-109505 - Possible memory leak when using the Retro
    Changelog plugin.
  - Resolves: RHEL-117666 - [RFE] Expose stats from deferred memberof
  - Resolves: RHEL-118811 - Password policy can be created even though the
    same one already exists
  - Resolves: RHEL-118867 - Memory leak issue in an IPA deployment.
  - Resolves: RHEL-121119 - Differences on export ldif using online of off-
    line method on RHDS
  - Resolves: RHEL-121169 - dsctl should report error when the ldif to import
    doesn't have permissions to be read by dirsrv.
  - Resolves: RHEL-129204 - Local password policies can be created with
    unallowed values
  - Resolves: RHEL-129597 - Remediate "Could not read password attribute"
    error on directory Servers with chaining enabled(DBLink)
  - Resolves: RHEL-132767 - An online reinitialization with LMDB is
    terminating the receiving server
  - Resolves: RHEL-134188 - RFE: add server-side configuration to ignore
    malformed controls and/or override critical controls from clients
  - Resolves: RHEL-138569 - AddressSanitizer: SEGV
    ldap/servers/plugins/automember/automember.c:1962 in
    automember_mod_post_op
  - Resolves: RHEL-140005 - Memory leaks in IPA context on server restart
  - Resolves: RHEL-141049 - Fail open condition in ACL
  - Resolves: RHEL-141480 - [RFE] Add shadowLastChange fixup task
  - Resolves: RHEL-146147 - Fix dsconf to allow specifying multiple
    certificates for use in 389-ds server
  - Resolves: RHEL-149125 - dnaSharedConfig: "dnaPortNum: 0"
  - Resolves: RHEL-151246 - dsctl healthcheck DSMOLE0001 inaccurate
    recommendations when there is more than 1 LDAP backend
  - Resolves: RHEL-152373 - Entry cache DN hash table corruption causes
    SIGSEGV in ns-slapd
  - Resolves: RHEL-153088 - [RFE] Add OS-level thread names to all server
    threads
  - Resolves: RHEL-153089 - [RFE] Add work queue metrics to cn=monitor
  - Resolves: RHEL-153092 - [RFE] Per-operation thread pool context via STAT
    extension
  - Resolves: RHEL-153372 - dirsrv@.service missing NoNewPrivileges and
    MemoryDenyWriteExecute despite broad capability set
  - Resolves: RHEL-154374 - Prevent the ability of creating a replication
    agreement from a node back to itself is needed
  - Resolves: RHEL-154380 - DS 12 does not handle escape char in bind user
  - Resolves: RHEL-157894 - Online export is failing when using the option
    "-s"
  - Resolves: RHEL-163373 - WARN - keys2idl - received NULL idl from
    index_read_ext_allids
  - Resolves: RHEL-165956 - can't modify user's name/dn if it's owner of
    SubIDs
  - Resolves: RHEL-169529 - Rebase 389-ds-base to 3.3.x
  - Resolves: RHEL-170277 - Memory leaks in syncrepl plugin during persistent
    search operations
  - Resolves: RHEL-170643 - passwordbadwords attribute of the local password
    policy is not functioning
  - Resolves: RHEL-170907 - Substring index produces empty results and can
    crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured
  - Resolves: RHEL-172228 - Replacing a group's member list modifies users
    who were already members
  - Resolves: RHEL-174908 - Replication errors in logs
  - Resolves: RHEL-181022 - Server shutdown during online reindex may lead to
    data loss


author: Simon Pichugin <spichugi@redhat.com> - 3.3.0-2
changelog:
  - Bump version to 3.3.0-2
  - Resolves: RHEL-146147 - Fix dsconf to allow specifying multiple
    certificates for use in 389-ds server
  - Resolves: RHEL-182463 - Error: NssSsl.add_cert() got an unexpected
    keyword argument 'input_file'
  - Resolves: RHEL-166737 - import_monitor_threads and average rate
    214748364.8/sec rate calculation issue
  - Resolves: RHEL-153372 - dirsrv@.service missing NoNewPrivileges and
    MemoryDenyWriteExecute despite broad capability set
  - Resolves: RHEL-164610 - Online reinitialization is failing with the
    supplier being busy calling idrange_add_id()
  - Resolves: RHEL-153094 - [RFE] Thread pool state mmap file with dsctl and
    cn=monitor exposure
  - Resolves: RHEL-129204 - Local password policies can be created with
    unallowed values
  - Resolves: RHEL-185139 - Compressed logs are prematurely deleted
  - Resolves: RHEL-183383 - Post-import cache autotuning does not recompute
    entry cache size
  - Resolves: RHEL-190780 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL
    pointer dereference in defer control plugin BER parser [rhel-10.3]
  - Resolves: RHEL-183109 - CVE-2026-11774 389-ds-base: 389-ds-base: integer
    overflow in SASL packet length bypasses size limit leading to heap buffer
    overflow [rhel-10.3]


author: Nathan Scott <nathans@redhat.com> - 0.11.8-1
changelog:
  - Update to latest upstream version.
  - Update spec file and resolve a build issue (BZ 2113091).
  - Switch to SPDX licensing.


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.2-1
changelog:
  - Update to 1.53.2 (dev)
  - Fix invalid memory access on Dnsconfd DBUS error (RHEL-83175)
  - Avoid getting transient hostname when "localhost" set in /etc/hostname (RHEL-55730)


author: Filip Pokrývka <fpokryvk@redhat.com> - 1:1.53.3-1
changelog:
  - Update to 1.53.3 (dev)
  - Add more IPv6 prefix delegation options (RHEL-81948)
  - Fix order of parsing port/controller properies in nmcli (RHEL-80273)
  - Improve interface activation logic (RHEL-80157)
  - Fix WireGuard IPv6 firewall rules (RHEL-79975)
  - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-78769)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.4-1
changelog:
  - Update to 1.53.4 (dev)
  - initrd: add new NBFT parser (RHEL-83058)
  - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
  - Support reapply on OVS settings (RHEL-86877)
  - Add support for configuring the loopback interface in nmtui (RHEL-70484)
  - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
  - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
  - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.90-1
changelog:
  - Update to 1.54.0 (rc1)
  - Devices not becoming managed sometimes (RHEL-89914)
  - Crash on _l3cfg_notify_cb (RHEL-92020)
  - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.91-1
changelog:
  - Update to 1.54.0 (rc2)
  - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
  - Fix a race condition in ovs tun interface (RHEL-17358)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.92-1
changelog:
  - Update to 1.54.0 (rc3)
  - Fix ipv6 static route deleted with dualstack (RHEL-102774)
  - Allow setting IP method to disabled in port connections (RHEL-90756)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.54.0-1
changelog:
  - Update to 1.54.0
  - Fix reaply on bridge port VLAN (RHEL-102318)
  - Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.55.4-1
changelog:
  - Update to 1.55.4 (dev)
  - Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
  - Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
  - Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
  - Add support for a DHCP client-id kernelarg (RHEL-108454)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.55.90-1
changelog:
  - Update to 1.56.0 (rc1)
  - Support setting protocol version of HSR/PRP (RHEL-100764)
  - Support interlink for HSR/PRP (RHEL-100768)
  - Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
  - Improve logging of networking off (RHEL-103925)
  - Don't delete unrelated OVS ports (RHEL-120176)


author: Ján Václav <jvaclav@redhat.com> - 1:1.56.1-1
changelog:
  - Update to 1.56.1
  - fix handling onlink route flag for ECMP routes (RHEL-1402)
  - Add Geneve support (RHEL-122042)
  - Add support for persistently un/managing devices (RHEL-142555)


author: Josephine Pfeiffer <josie@redhat.com> - 1:1.58~rc1-1
changelog:
  - Update to 1.58-rc1 release
  - Add IPv6-mostly support with CLAT via a BPF program (RHEL-93551)
  - Keep permissive modify.system polkit defaults for RHEL 10 minor compatibility
  - Warn about gateways that are not directly reachable (RHEL-126543)
  - Fix suppressing DHCPv6 DNS servers with ipv6.ignore-auto-dns on reapply (RHEL-149149)
  - Fix sending DHCP release on bridge interfaces (RHEL-126455)
  - Allow selecting from available devices when creating profiles in nmtui (RHEL-129186)
  - Fix AVC error when running NetworkManager --print-config as systemd service (RHEL-140113)
  - Fix invalid default value of the bond arp_missed_max option (RHEL-182559)
  - Fix RPM scriptlet dependencies for udev-less container installs


author: Vladimír Beneš <vbenes@redhat.com> - 1.2.27-2
changelog:
  - Symetric import/export with nm-auto-default (RHEL-119641)
  - Esp param properly exported (RHEL-119653)
  - Correct leftid export when it contains @


author: Gris Ge <fge@redhat.com> - 1.2.29-1
changelog:
  - Upgrade to 1.2.29
  - Support creating both ends of IPsec (Libreswan) tunnels. (RHEL-67307)
  - Support leftprotoport and rightprotoport options. (RHEL-130888)
  - Fix error on duplicate key 'phase2alg'. (RHEL-128213)
  - Fix import connection with RSA key. (RHEL-125174)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.34-1
changelog:
  - Update to 2.0.34 (rhbz#2105023)
  - Resolve issues found by rpmdiff
    - add a patch to fix getaddrinfo detection to avoid using gethostbyname
    - add explicit Requires: on subpackages to avoid the need to test
      interoperability between the various combinations of old and new
      subpackages
  - Conditional Perl & Python module build, by default disabled


author: Radovan Sroka <rsroka@redhat.com> - 0.18.6-8
changelog:
  RHEL 10.0 ERRATUM
  - /boot/grub2/grubenv's timestamp is getting modified continuously due to "boot_success" implementation
  Resolves: RHEL-4320


author: Attila Lakatos <alakatos@redhat.com> - 0.18.6-8.1
changelog:
  RHEL 10.1 ERRATUM
  - CVE-2025-54389 aide: improper output neutralization enables bypassing
  Resolves: RHEL-108928


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-1
changelog:
  - rebase to 0.19.2
  Resolves: RHEL-110572
  - exclude directory but include subitems
  Resolves: RHEL-1382
  - prevent aide from exiting if a file is truncated during check
  Resolves: RHEL-1383
  - Switch to libnettle for hashing
  Resolves: RHEL-59170


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-2
changelog:
  - Modernize aide config file
  Resolves: RHEL-39970
  - No path reference ends with '/'
  Resolves: RHEL-39959


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-3
changelog:
  - /boot/grub2/grubenv is excluded from check due to boot_success implementation
  - Do not monitor link count in /var/log/journal
  Resolves: RHEL-39970


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-6
changelog:
  - Add aide-migrate-config to automate config migration from pre-0.19 syntax
  Resolves: RHEL-178837
  - Re-add syslog_format config option dropped during rebase to 0.19.2


author: Patrik Koncity <pkoncity@redhat.com> - 0.19.2-7
changelog:
  - Support for included files in /etc/aide.d/
  Resolves: RHEL-141673
  - Increase default values for num_workers
  Resolves: RHEL-141678
  - Add pre-configured systemd timer for aide check
  Resolves: RHEL-123520


author: Jaroslav Kysela <perex@perex.cz> - 1.2.7.1-4
changelog:
  - Enable avtp plugin - Peter Robinson <pbrobinson@fedoraproject.org>
  - Enable a52 and lavrate plugins - Yaakov Selkowitz <yselkowi@redhat.com>
  - Remove or soften excess dependendencies - Yaakov Selkowitz <yselkowi@redhat.com>
  - CI test & RHEL cleanups


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.40-1
changelog:
  - rhsm: add --flatpak-registry-url support (bciconel)
    Resolves: RHEL-132652
  - flatpak: handle self-signed certificate errors in registry sources (bciconel)
    Resolves: RHEL-132652
  - flatpak: add utility to check for self-signed certificate errors (bciconel)
    Resolves: RHEL-132652
  - Fix permissions of the ssh config created by Anaconda (ppolawsk)
    Resolves: RHEL-99673
  - Add x-initrd.attach to /etc/crypttab device for / volumes (mkolman)
    Resolves: RHEL-112702
    Related: RHEL-132666


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.41-1
changelog:
  - ostree needs to have /boot be bindmounted into sysroot (k.koukiou)
    Resolves: RHEL-66155
  - modules: rpm_ostree: allow /boot/efi mount point in bootc installation
    (k.koukiou)
    Resolves: RHEL-141155


author: Bruno <bciconel@redhat.com> - 40.22.3.42-1
changelog:
  - payloads: flatpak: fix SSL error detection on older Python versions
    (bciconel)
    Related: RHEL-141069
    Resolves: RHEL-142694


author: Bruno <bciconel@redhat.com> - 40.22.3.43-1
changelog:
  - installation: run subscription tasks after network configuration (bciconel)
    Resolves: RHEL-135111
  - subscription: ensure /var/lib/insights exists before running insights-client
    (bciconel)
    Resolves: RHEL-135111
  - spec: Require zram-generator-defaults for RHEL-10 (k.koukiou)
    Resolves: RHEL-117685
  - Only show compatible translations in text mode (mkolman)
    Resolves: RHEL-16168


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.44-1
changelog:
  - storage: stop creating /etc/mtab symlink during installation (k.koukiou)
    Related: RHEL-135116
  - rescue: Add warning for immutable systems (k.koukiou)
    Related: RHEL-135116
  - rescue: detect OSTree deployments in rescue mode and show deployment path
    (k.koukiou)
    Resolves: RHEL-135116
  - pyanaconda: storage: fix FindExistingSystems API for ostree based OSes
    (k.koukiou)
    Related: RHEL-135116
  - network: List all network interfaces IP for RDP session (ppolawsk)
    Resolves: RHEL-74268


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.45-1
changelog:
  - Fix user input in driver disk menu is not displayed (adamkankovsky)
    Resolves: RHEL-58828
  - flatpak: tests: fix unreachable code (fsouza.bruno)
    Related: RHEL-143566
  - flatpak: Only override remote URLs when subscription module is available
    (bciconel)
    Related: RHEL-143566
  - flatpak: Make installation failures non-blocking (bciconel)
    Resolves: RHEL-143566
  - Reload installer SELinux policy at exit so dracut shutdown works (k.koukiou)
    Resolves: RHEL-144456


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.47-1
changelog:
  - chore: Support multiple console= kernel entries (ppolawsk)
    Resolves: RHEL-101789
  - Increase GUI startup timeout to 120 seconds (mkolman)
    Resolves: RHEL-173441
  - Refactor remaining X timeout references (mkolman)
    Resolves: RHEL-173441
  - Set RHSM machine name based on user provided hostname (mkolman)
    Resolves: RHEL-149198


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.50-1
changelog:
  - dracut: append anchor certs to CA bundle in initramfs (rvykydal)
    Resolves: RHEL-77154
  - security: add --type support for %certificate section (rvykydal)
    Resolves: RHEL-77154


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.51-1
changelog:
  - gui: disable overlay scrolling on disk selection lists (k.koukiou)
    Resolves: RHEL-69902
  - fix: use static string for tmux status line to reduce CPU usage (k.koukiou)
    Resolves: RHEL-180821
  - fix: improve error when enabling missing services on target (k.koukiou)
    Related: RHEL-61134
  - fix: check if service is installed before enabling in kickstart (k.koukiou)
    Resolves: RHEL-61134
  - storage: check disk space in cmdline mode before starting installation
    (rvykydal)
    Resolves: RHEL-142734


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.53-1
changelog:
  - Revert "fix: persist checkisomd5 media verification output in the journal"
    (k.koukiou)
    Related: RHEL-73812
  - fix: persist checkisomd5 media verification output in the journal (k.koukiou)
    Resolves: RHEL-73812
  - fix: allow enabling socket and other systemd units via kickstart (k.koukiou)
    Related: RHEL-61134


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.54-1
changelog:
  - modules: rpm_ostree: fix bootc install when /boot is on root partition
    (k.koukiou)
    Resolves: RHEL-147437
  - fix(bootc): show bootc error output in the installation error dialog
    (bciconel)
    Resolves: RHEL-162832
  - flatpak: honor %packages --ignoremissing (bciconel)
    Related: RHEL-101748
  - flatpak: surface errors when requested flatpaks cannot be installed
    (bciconel)
    Resolves: RHEL-101748


author: Nick Clifton <nickc@redhat.com> - 12.98-1
changelog:
  - Rebase to 12.98.  (RHEL-105572)
  - Improve configure and meson files for consistent builds.
  - Annocheck: Delete the temporary debug info directory after the tests have finished.
  - Annocheck: Fix bugs in debug rpm location code.  Add more glibc exceptions.  (RHEL-95216)
  - Annocheck: Improve performance with multiple debug info files and multiple files to scan.  (#2366180)
  - Annocheck: Update heuristic for detecting gcc files to cope with gcc 15.  (#2365824)


author: Nick Clifton <nickc@redhat.com> - 13.06-1
changelog:
  - Annocheck: Add more files to the gcc heuristics list.  (RHEL-150659)
  - Annocheck: Add .fc44 to list of known rpm file extensions.
  - Annocheck: Fix compile time warnings from GCC-15 re: strchr returning a const char *.
  - Annocheck: Skip production test for gcc libraries.  (RHEL-123175)


author: Nick Clifton <nickc@redhat.com> - 13.10-1
changelog:
  - Rebuild against LLVM 22.  (RHEL-140399)
  - Require C++17 for building.
  - Annocheck: Ignore Risc-V attribute sections.
  - Annocheck: Change result of failing not-XXX tests from FAIL to MAYB.  Update documentation.
  - Annocheck: Process the .ARM.attributes section.


author: Nick Clifton <nickc@redhat.com> - 13.12-1
changelog:
  - Annocheck: Skip the dynamic-tags test if a GNU Property note is present.  (RHEL-170885)
  - Annocheck: Look for compromising characters in pathnames.


author: Nick Clifton <nickc@redhat.com> - 13.15-1
changelog:
  - Annocheck: LTO test: Add exceptions for Clang runtime support object files.  (RHEL-176052)
  - Annocheck: Do not complain about GO binaries that do not support branch protection.
  - Annocheck: Do not complain about Rust binaries that do not support branch protection.


author: Nick Clifton <nickc@redhat.com> - 13.20-1
changelog:
  - Annocheck: Add support for ZIP files and TAR balls.
  - Testsuite: Fixes for the glibcxx and hardening tests.
  - GCC Plugin: Fix several minor bugs.
  - Annocheck: Fix several minor bugs.
  - Testsuite: Fix discrepancies.
  - GCC Plugin: Fix recording the setting of __GLIBCXX_ASSERTIONS.
  - Annocheck: Add exceptions for kernel bootstrap tools.  (RHEL-73522)
  - Testsuite: Add new tests.


author: Nick Clifton <nickc@redhat.com> - 13.22-1
changelog:
  - Annocheck: Enable stack-clash test for Risc-V binaries built by gcc-15+.
  - LLVM & Clang Plugins: Build with -fexceptions enabled.  (RHEL-184482)


author: Nick Clifton <nickc@redhat.com> - 13.28-1
changelog:
  - Annocheck: Fix bug checking the path safety of the --debug-dir option.
  - Annocheck: Add more exceptions for gcc components.  (RHEL-213510)
  - Annocheck: Fix seg-fault in code checking for gcc components.
  - Annocheck: Allow ~ in filenames.  
  - GCC-Plugin: Only use a 64-bit pointer size for s390x binaries built by GCC 17+  (#2502729)


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.0.0.20240502-5
changelog:
  - Fix some compiler warnings
  - src-main/context.c: Fix warning[-Waddress] &ce->str will always evaluate
    as 'true'
  - mkworddic/mkdic.c: Fix warning[-Wformat-overflow=] '%s' directive
    argument is null


author: Neal Gompa <ngompa@fedoraproject.org> - 1.0.2-1
changelog:
  - Update to 1.0.2
  - Clean up some pre-1.0 scriptlet cruft
  - Resolves: RHEL-31497 (Backport latest bulid from Fedora 40)


author: Alessandro Astone <ales.astone@gmail.com> - 1.0.2-2
changelog:
  - Backport patch to fix installing swcatalog
  - Resolves: RHEL-31497 (Backport latest build from Fedora 40)


author: Luboš Uhliarik <luhliari@redhat.com> - 1.7.5-1
changelog:
  - new version 1.7.5
  - Resolves: RHEL-56637 - apr: Lax permissions in Apache Portable Runtime shared
    memory (CVE-2023-49582)


author: Joe Orton <jorton@redhat.com> - 1.6.3-18
changelog:
  - drop ENGINE support from apr_crypto (RHEL-33728)
  - fix (harmless) gcc snprintf warning in testbuckets.c


author: Luboš Uhliarik <luhliari@redhat.com> - 1.6.3-19
changelog:
  - Resolves: RHEL-50386 - drop unnecessary apr-util-devel dependencies
  - Related: RHEL-33728 - drop ENGINE support from apr_crypto


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.1-1
changelog:
  - New upstream version 1.14.1
  - Use github tarballs again.
  - New binary augprint.
  - New bash-completions subpackage.


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.3
changelog:
  - lenses/tmpfiles.aug: Permit '$' character in /usr/lib/tmpfiles.d/*.conf
    resolves: RHEL-76283
  - lenses/multipath.aug: Support all possible values for find_multipaths
  - lenses/systemd.aug: Allow "+"(fullprivileges) command flag


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.9
changelog:
  - Fix: fails to parse /etc/fstab when there is a double comma after character
    resolves: RHEL-77279
  - Fix: fails to parse /etc/iproute2/README and /usr/share/iproute2/
    resolves: RHEL-113748
  - Synchronize spec file with Fedora


author: Petr Menšík <pemensik@redhat.com> - 0.8-22
changelog:
  - Enable unit tests during check
  - Prevent crashes on some invalid DBus calls
  - Provide versioned howl compatibility package
  - Correct bootstrap option


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Jerome Marchand <jmarchan@redhat.com> - 0.29.1-1
changelog:
  - Rebase to the latest release version (#2253688)
  - Enable libbpf-tools on s390x (#2249458)
  - Misc 0.29.1 fixes


author: Jerome Marchand <jmarchan@redhat.com> - 0.30.1-1
changelog:
  - Rebase to the latest version (RHEL-32379)
  - Really prevent the loading of compromised headers (CVE-2024-2314)
  - Add python3-pyelftools dependency
  - Exclude unsupported tools


author: Jerome Marchand <jmarchan@redhat.com> - 0.34.0-1
changelog:
  - Rebase to the latest version (RHEL-78921)
  - Rebuild with LLVM 20 (RHEL-81772)
  - Silence warning of trace tools (RHEL-68952)
  - Fix bpf-runqlen (RHEL-91190)
  - Fix sslsniff and sofdsnoop (RHEL-58348)
  - Fix slabratetop (RHEL-58810)
  - Fix funclatency funcslower and gethostlatency on s390x (RHEL-68947)
  - Fix bpf-klockstat on aarch64 and ppc64 (RHEL-83001)
  - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-75529)
  - Fix multiples ppc64 tools (RHEL-58147)


author: Jerome Marchand <jmarchan@redhat.com> - 0.36.1-1
changelog:
  - Rebase to version 0.36.1 (RHEL-162980)
  - Rebuild with LLVM 22 (RHEL-140402)
  - Fix multiple failure introduced by BPF 6.19 update (RHEL-174797)
  - Fix klockstat (RHEL-174798)
  - Fix bpf-cpufreq (RHEL-93855)      
  - Fix bpf-syncsnoop (RHEL-93854)
  - Fix tcpaccept (RHEL-93424)
  - Fix filegone, kvmexit, netqtop and tcpconnect on s390x (RHEL-75515)
  - Fix profile on s390x (RHEL-68950)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.33-12
changelog:
  - Refuse malformed DNSKEY records (CVE-2025-8677)
  - Address various spoofing attacks (CVE-2025-40778)
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.33-1
changelog:
  - Update to 9.16.33 (rhbz#2342784)
  - Make relative documentation links
  - Permanently remove DLZ parts build


author: Arjun Shankar <arjun@redhat.com> - 3.8.2-6
changelog:
  - Analyse bison sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222079)


author: Bastien Nocera <bnocera@redhat.com> - 5.86-1
changelog:
  - Update to 5.86
  - Re-add btmgmt as it does not require bluetoothd to be running,
    unlike bluetoothctl mgmt
  - Fix audio output not working in some circumstances
    Resolves: RHEL-147735


author: Patrick Palka <ppalka@redhat.com> - 1.83.0-0
changelog:
  - Rebase to 1.83.0
  - See https://fedoraproject.org/wiki/Changes/F40Boost183
  - Drop patch for accumulators library that has since been applied upstream.
  - Fix spurious Boost.Regex test failures.


author: Colin Walters <walters@verbum.org> - 1.13.0-1
changelog:
  - Release 1.13.0
  - Update to bootc 1.13.0
  - Pass CARGO_FEATURES explicitly to make install to prevent auto-detection
    rebuild in install environment (workaround for upstream Makefile issue)
  - Package shell completions (bash, zsh, fish)


author: Viktor Malik <vmalik@redhat.com> - 0.21.1-1
changelog:
  - Rebased to version 0.21.1
  - Resolves: RHEL-36076
  - Rebuilt for LLVM 18
  - Resolves: RHEL-27729
  - Enable gating
  - Resolves: RHEL-45249


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.7.7-1
changelog:
  - Rebase to version 3.7.7
  - Fixing SAST issues, accepted by upstream
  - Resolves: RHEL-39391 RHEL-67895


author: Arjun Shankar <arjun@redhat.com> - 2.0.20230521-2
changelog:
  - Analyse byacc sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222081)


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.0.2-11
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
  - drop java binding for platforms not in %{java_arches}


author: Jon Maloy <jmaloy@redhat.com> - 5.0.1-7
changelog:
  - Fix CVE-2025-67873 (heap buffer overflow)
    Resolves: RHEL-141553
  - Fix CVE-2025-68114 (memory corruption)
    Resolves: RHEL-137749


author: Jindrich Novy <jnovy@redhat.com> - 5:0.2.1-2
changelog:
  - use -static-pie on x86_64/aarch64, fall back to -static on ppc64le/s390x
    where rcrt1.o is not available
  - pass CFLAGS on make command line to override autotools Makefile variables
  - Resolves: RHEL-152096


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - with python3-Cython -> python3dist(cython) < 3~~


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - revert python3-Cython -> python3dist(cython) < 3~~


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-2
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Nikita Popov <npopov@redhat.com> - 19.1.7-1
changelog:
  - Update to LLVM 19.1.7 (RHEL-57456)
  - Remove llvm18 compat package (RHEL-57457)
  - Remove generated html content from llvm-doc subpackage (RHEL-58900)
  - Enable LLVM_ENABLE_ZSTD=ON (RHEL-70325)


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Paul Murphy <murp@redhat.com> - 20.1.8-3
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Kefu Chai <kefu.chai@scylladb.com> - 17.0.6-6
changelog:
  - Fix the too-early instantiation of conditional "explict" by applying the patch
    of https://github.com/llvm/llvm-project/commit/128b3b61fe6768c724975fd1df2be0abec848cf6


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 18.1.8-1
changelog:
  - Update to LLVM 18.1.8 (RHEL-28056)
  - Remove llvm17 compat package (RHEL-30890)
  - Enable pie (RHEL-33489)


author: Jindrich Novy <jnovy@redhat.com> - 1.0.5-2
changelog:
  - update to the latest upstream release https://github.com/containers/composefs/releases/tag/v1.0.5
  - Related: RHEL-39410


author: Jindrich Novy <jnovy@redhat.com> - 1.0.5-1
changelog:
  - composefs-1.0.5-1.el10
  - update to https://github.com/containers/composefs/releases/tag/v1.0.5
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 1.0.6-1
changelog:
  - update to the latest upstream release
    https://github.com/containers/composefs/releases/tag/v1.0.6 Related:
    RHEL-60292


author: Jindrich Novy <jnovy@redhat.com> - 1.0.7-1
changelog:
  - composefs-1.0.7-1.el10
  - update to https://github.com/containers/composefs/releases/tag/v1.0.7
  - Related: RHEL-60292


author: Jindrich Novy <jnovy@redhat.com> - 2:2.2.1-1
changelog:
  - update to https://github.com/containers/conmon/releases/tag/v2.2.1
  - enable RELRO
  - Related: RHEL-122178


author: Jindrich Novy <jnovy@redhat.com> - 2:2.2.1-3
changelog:
  - pass %{optflags} and %{build_ldflags} to enable stack protector
    and FORTIFY_SOURCE hardening flags
  - Resolves: RHEL-152224


author: Paul Wouters <paul.wouters@aiven.io - 1.4.7-1
changelog:
  - Resolves: rhbz#2132747 conntrack-tools-1.4.7 is available
  - Add gpg source code verification
  - Removed patches that were merged upstream


author: Jan Friesse <jfriesse@redhat.com> - 3.1.9-2
changelog:
  - Resolves: RHEL-96073

  - exec: Add support for env STATE_DIRECTORY
  - init: Use LogsDirectory in systemd unit file


author: Jan Friesse <jfriesse@redhat.com> - 3.1.10-2
changelog:
  - Resolves: RHEL-163803
  - Resolves: RHEL-163824

  - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091)
  - totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092)


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-65532)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-73475)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-73585)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-2
changelog:
  - update from releases/gcc-14 branch (RHEL-83953)
    - GCC 14.3 release
    - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
  	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
  	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
  	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
  	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
  	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
  	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
  	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
  	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
  	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
  	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
  	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
  	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
  	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
  	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
  	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
  	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
  	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
  	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
  	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
  	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
  	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
  	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
  	c++/120125, c++/120161, d/114434, d/115249, d/116373,
  	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
  	d/119112, d/119139, d/119817, d/119826, debug/101533,
  	driver/117739, driver/119727, fortran/59252, fortran/81978,
  	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
  	fortran/106948, fortran/108434, fortran/108454,
  	fortran/109066, fortran/110993, fortran/116706,
  	fortran/117434, fortran/118080, fortran/118640,
  	fortran/118683, fortran/118750, fortran/119054,
  	fortran/119380, fortran/119656, fortran/119986,
  	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
  	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
  	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
  	libfortran/120196, libgcc/101075, libgcc/119151,
  	libgcc/119796, libstdc++/21334, libstdc++/90389,
  	libstdc++/99832, libstdc++/100249, libstdc++/101527,
  	libstdc++/101587, libstdc++/104395, libstdc++/105258,
  	libstdc++/105609, libstdc++/106612, libstdc++/108487,
  	libstdc++/108760, libstdc++/108846, libstdc++/110498,
  	libstdc++/112490, libstdc++/112803, libstdc++/114758,
  	libstdc++/114945, libstdc++/115046, libstdc++/115285,
  	libstdc++/115939, libstdc++/116212, libstdc++/116440,
  	libstdc++/116471, libstdc++/117121, libstdc++/117921,
  	libstdc++/117983, libstdc++/118083, libstdc++/118158,
  	libstdc++/118160, libstdc++/118185, libstdc++/118413,
  	libstdc++/118699, libstdc++/118811, libstdc++/119121,
  	libstdc++/119135, libstdc++/119429, libstdc++/119469,
  	libstdc++/119593, libstdc++/119671, libstdc++/120198,
  	libstdc++/120548, lto/91299, lto/113207, lto/114501,
  	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
  	middle-end/111285, middle-end/113546, middle-end/114877,
  	middle-end/115871, middle-end/115913, middle-end/117498,
  	middle-end/117811, middle-end/118140, middle-end/118411,
  	middle-end/118819, middle-end/118950, middle-end/119119,
  	middle-end/119204, middle-end/119219, middle-end/119706,
  	middle-end/119808, middle-end/120547, modula2/115032,
  	modula2/115112, modula2/118703, modula2/118761,
  	preprocessor/108900, preprocessor/116047, preprocessor/120061,
  	rtl-optimization/115568, rtl-optimization/116564,
  	rtl-optimization/117186, rtl-optimization/117239,
  	rtl-optimization/117506, rtl-optimization/118320,
  	rtl-optimization/118638, rtl-optimization/118662,
  	rtl-optimization/118739, rtl-optimization/119071,
  	rtl-optimization/119291, rtl-optimization/119689,
  	rtl-optimization/119785, target/86772, target/106544,
  	target/110901, target/113257, target/115258, target/115485,
  	target/116036, target/116086, target/116111, target/116149,
  	target/116240, target/116256, target/116305, target/116308,
  	target/116550, target/116591, target/116592, target/116593,
  	target/116693, target/116720, target/116809, target/116827,
  	target/116927, target/117286, target/117383, target/117483,
  	target/117544, target/117682, target/117878, target/118067,
  	target/118137, target/118154, target/118182, target/118184,
  	target/118329, target/118357, target/118501, target/118531,
  	target/118561, target/118601, target/118623, target/118685,
  	target/118776, target/118813, target/118815, target/118825,
  	target/118835, target/118843, target/118844, target/118892,
  	target/118942, target/119084, target/119133, target/119172,
  	target/119235, target/119327, target/119340, target/119383,
  	target/119386, target/119408, target/119450, target/119533,
  	target/119547, target/119549, target/119572, target/119610,
  	target/119784, target/119834, target/120441, target/120480,
  	testsuite/52641, testsuite/116448, testsuite/118127,
  	testsuite/118597, tree-optimization/117358,
  	tree-optimization/120638 tree-optimization/87984,
  	tree-optimization/98845, tree-optimization/111873,
  	tree-optimization/112859, tree-optimization/113197,
  	tree-optimization/114052, tree-optimization/115347,
  	tree-optimization/115494, tree-optimization/116098,
  	tree-optimization/116125, tree-optimization/116412,
  	tree-optimization/116749, tree-optimization/116906,
  	tree-optimization/116922, tree-optimization/117113,
  	tree-optimization/117119, tree-optimization/117243,
  	tree-optimization/117424, tree-optimization/117919,
  	tree-optimization/117979, tree-optimization/118476,
  	tree-optimization/118522, tree-optimization/118605,
  	tree-optimization/118653, tree-optimization/118689,
  	tree-optimization/118717, tree-optimization/118915,
  	tree-optimization/118922, tree-optimization/118924,
  	tree-optimization/118953, tree-optimization/118976,
  	tree-optimization/119057, tree-optimization/119096,
  	tree-optimization/119145, tree-optimization/119351,
  	tree-optimization/119399, tree-optimization/119417,
  	tree-optimization/119534, tree-optimization/119706,
  	tree-optimization/119707, tree-optimization/119722,
  	tree-optimization/119778, tree-optimization/120048,
  	tree-optimization/120156


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 14.3.1-4
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
  	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
  	fortran/120784, fortran/121145, fortran/121263, go/104290,
  	libstdc++/110853, libstdc++/117276, libstdc++/120698,
  	libstdc++/121097, libstdc++/121374, libstdc++/121496,
  	libstdc++/121745, libstdc++/121827, libstdc++/122168,
  	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
  	rtl-optimization/121253, target/49857, target/81540, target/118280,
  	target/120442, target/120476, target/120691, target/121118,
  	target/121208, target/121294, target/121414, target/121449,
  	target/121542, target/121599, target/121608, target/121749,
  	target/122177, target/122187, target/122210, target/122220,
  	target/122222, testsuite/118567, tree-optimization/117423,
  	tree-optimization/119085, tree-optimization/120357,
  	tree-optimization/120358, tree-optimization/120654,
  	tree-optimization/120817, tree-optimization/120944,
  	tree-optimization/121059, tree-optimization/121256,
  	tree-optimization/121370, tree-optimization/121772,
  	tree-optimization/121870, tree-optimization/122104


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.1
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libstdc++fs.a and libstdc++exp.a in sysroot packages
    - add libsanitizer sysroot packages
    - save testsuite .sum files in build logs
    - add packages with files from build tree used in testsuite
    - escape \r in dg-regexp test names to avoid truncation in build-tree testing
    - fix iconv linking for installed testing
    - enable compat testing for installed testing
    - distinguish canonical and noncanonical target for installed testing
    - add plugin headers packages for cross compilers
    - install text-art/*.h plugin headers
    - support plugin tests for installed testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.2
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable stack-protector tests in cross testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.3
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable guality tests in cross testing
    - enable simulate-thread tests in cross testing
    - enable gcov tests in cross testing
    - enable some miscellaneous tests in cross testing
    - fix some tree-prof tests for cross testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.4
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libsanitizer.spec and static sanitizer libraries in packages
    - enable tests involving target environment variables in cross testing
    - disable color for more sanitizer tests


author: Joseph Myers <josmyers@redhat.com> - 14.4.1-1
changelog:
  - update from releases/gcc-14 branch (RHEL-174638)
    - GCC 14.4 release
    - PRs ada/107475, ada/123060, ada/123138, ada/123289, ada/123867,
  	ada/124226, ada/124285, ada/124607, ada/124836, ada/125044,
  	ada/125695, c/101312, c/105555, c/123018, c/123156, c/123365,
  	c/123882, c/124830, c++/65271, c++/91388, c++/97740, c++/98930,
  	c++/101670, c++/120224, c++/120685, c++/120876, c++/121445,
  	c++/121822, c++/122070, c++/122318, c++/122494, c++/122550,
  	c++/122658, c++/122772, c++/122834, c++/123346, c++/123529,
  	c++/123578, c++/123597, c++/123667, c++/123676, c++/123684,
  	c++/123814, c++/123818, c++/123845, c++/123889, c++/124489,
  	c++/124632, c++/124850, c++/125315, c++/125376, d/119799, d/120096,
  	d/121477, d/123046, d/123264, d/123349, d/123407, d/123419, d/123422,
  	d/123798, d/124026, d/125089, debug/121964, debug/123886,
  	fortran/79524, fortran/82721, fortran/84245, fortran/85352,
  	fortran/93715, fortran/93814, fortran/93832, fortran/94978,
  	fortran/95338, fortran/95879, fortran/96087, fortran/96986,
  	fortran/98203, fortran/100155, fortran/100194, fortran/102430,
  	fortran/102459, fortran/102596, fortran/102619, fortran/105168,
  	fortran/106546, fortran/106946, fortran/107425, fortran/107968,
  	fortran/109788, fortran/115260, fortran/116829, fortran/119273,
  	fortran/120286, fortran/120723, fortran/121616, fortran/122046,
  	fortran/122206, fortran/124161, fortran/124450, fortran/124482,
  	fortran/124751, ipa/106260, ipa/111036, ipa/114790, ipa/116296,
  	ipa/122856, ipa/123416, ipa/125699, libstdc++/90192, libstdc++/102259,
  	libstdc++/105580, libstdc++/105857, libstdc++/109965,
  	libstdc++/114153, libstdc++/114865, libstdc++/118088,
  	libstdc++/118681, libstdc++/120029, libstdc++/120293,
  	libstdc++/120390, libstdc++/120789, libstdc++/121771,
  	libstdc++/122062, libstdc++/122567, libstdc++/122661,
  	libstdc++/122726, libstdc++/122821, libstdc++/122842,
  	libstdc++/123100, libstdc++/123147, libstdc++/123875,
  	libstdc++/123991, libstdc++/124024, libstdc++/124124,
  	libstdc++/124363, libstdc++/124568, libstdc++/125369, lto/121588,
  	lto/122515, lto/122620, middle-end/111817, middle-end/116772,
  	middle-end/120052, middle-end/120564, middle-end/121581,
  	middle-end/122624, middle-end/122689, middle-end/123175,
  	middle-end/123386, middle-end/123573, middle-end/123575,
  	middle-end/123703, middle-end/123775, middle-end/123876,
  	middle-end/123887, middle-end/123978, middle-end/124056,
  	middle-end/124250, middle-end/124491, middle-end/125146,
  	middle-end/125621, pch/14940, preprocessor/105412,
  	preprocessor/123273, rtl-optimization/106859, rtl-optimization/116053,
  	rtl-optimization/116600, rtl-optimization/120182,
  	rtl-optimization/121773, rtl-optimization/122215,
  	rtl-optimization/123121, rtl-optimization/123294,
  	rtl-optimization/124454, target/99930, target/105192, target/112400,
  	target/117575, target/117771, target/119079, target/119130,
  	target/120250, target/120645, target/122000, target/122097,
  	target/122223, target/122323, target/122446, target/122516,
  	target/122527, target/122695, target/122867, target/123102,
  	target/123155, target/123217, target/123271, target/123285,
  	target/123457, target/123460, target/123484, target/123521,
  	target/123548, target/123607, target/123624, target/123742,
  	target/123766, target/123779, target/123807, target/124126,
  	target/124133, target/124138, target/124236, target/124315,
  	target/124316, target/124335, target/124365, target/124366,
  	target/124705, target/124712, target/124933, target/125049,
  	target/125351, target/125409, target/125611, target/125670,
  	target/125751, target/125752, target/125795, target/125992,
  	testsuite/123004, testsuite/123353, testsuite/124682,
  	tree-optimization/107997, tree-optimization/109410,
  	tree-optimization/110043, tree-optimization/117217,
  	tree-optimization/119532, tree-optimization/119568,
  	tree-optimization/120341, tree-optimization/120560,
  	tree-optimization/120987, tree-optimization/121104,
  	tree-optimization/121776, tree-optimization/121844,
  	tree-optimization/122126, tree-optimization/122394,
  	tree-optimization/122408, tree-optimization/122793,
  	tree-optimization/122943, tree-optimization/122976,
  	tree-optimization/123061, tree-optimization/123300,
  	tree-optimization/123351, tree-optimization/123431,
  	tree-optimization/123513, tree-optimization/123537,
  	tree-optimization/123596, tree-optimization/123602,
  	tree-optimization/123636, tree-optimization/123645,
  	tree-optimization/123729, tree-optimization/123736,
  	tree-optimization/123741, tree-optimization/123864,
  	tree-optimization/124130, tree-optimization/124132,
  	tree-optimization/124135, tree-optimization/124151,
  	tree-optimization/124288, tree-optimization/124358,
  	tree-optimization/124555, tree-optimization/124627,
  	tree-optimization/124677, tree-optimization/124826,
  	tree-optimization/124868, tree-optimization/125019,
  	tree-optimization/125025, tree-optimization/125039,
  	tree-optimization/125079, tree-optimization/125431,
  	tree-optimization/125501, tree-optimization/125774


author: David Malcolm <dmalcolm@redhat.com> - 14.4.1-2
changelog:
  - update from releases/gcc-14 branch
    - PRs c++/125674, c++/126057, fortran/97592, fortran/103367, fortran/125172,
  	fortran/125998, middle-end/126084, rtl-optimization/125173,
  	target/67459, target/105116, target/106895, target/116597,
  	target/119210, target/122948, target/124908, target/125818,
  	target/125972, target/126049, tree-optimization/120201,
  	tree-optimization/126257, tree-optimization/126262


author: Tao Liu <ltao@redhat.com> - 3.0-11
changelog:
  - Fix the hardening issue "FAIL: bind-now test because not linked with -Wl,-z,now"
  - add gating.yaml


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.3-1
changelog:
  - Update to 1.0.3
  - Set compression level 10 for zstd and zck
  - Introduce new --no-pretty option to reduce metadata size
  - Use gzip compression by default when --compatibility is specified
  - Default changelog limit restored for --compatibility
  - Use epoch-friendly sub-package interdependencies
  - Enable sqlite shared cache on connection level
  - Fix const-correctness with libxml2-2.12.0
  - Allow specifying zck compression only


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.4-1
changelog:
  - Update to 1.0.4 (RHEL-38831)
  - Extend the --compatibility flag to cover other defaults
  - mergerepo_c and modifyrepo_c now make "pretty" indented xml
  - Fix building due to bash-completion repackaging


author: Petr Pisar <ppisar@redhat.com> - 1.1.2-3
changelog:
  - Fix a file descriptor and a memory leak in an error path of
    cr_detect_compression() (RHEL-45645)


author: Christopher Lusk <clusk@redhat.com> - 4.2-4
changelog:
  - Fix full RELRO: patch nmk build.mk to preserve -Wl flags for gcc-linked targets
  - Resolves: RHEL-152222


author: Adrian Reber <areber@redhat.com> - 4.2-6
changelog:
  - Apply patch to fix RHEL-189245 RHEL-189246 RHEL-189248
  - Resolves: RHEL-189245
  - Resolves: RHEL-189246
  - Resolves: RHEL-189248


author: Čestmír Kalina <ckalina@redhat.com> - 4.2-9
changelog:
  - replace ELFDATA2LSB with BORD in has_elf_identity (checkpoint-restore/criu#3059)
  - Resolves: RHEL-180600


author: Jindrich Novy <jnovy@redhat.com> - 1.26-2
changelog:
  - use %configure macro instead of ./configure to inject RPM hardening flags
    (stack protector, FORTIFY_SOURCE)
  - Resolves: RHEL-152226


author: Jindrich Novy <jnovy@redhat.com> - 1.27-1
changelog:
  - update to https://github.com/containers/crun/releases/tag/1.27
  - add conditional Requires on container-selinux for SELinux-enabled systems
  - Resolves: RHEL-164639
  - Resolves: RHEL-169517


author: Vladis Dronov <vdronov@redhat.com> - 15.9-26
changelog:
  - Update cscope to 15.9-26 from Fedora (RHEL-65464)
  - Fix signal handling at exit
  - Add emacs-nw and emacs-gtk+x11 to supported emacs flavors
  - Minor edits in the rpm scripts
  - Make xemacs a bcond


author: Vladislav Dronov <vdronov@redhat.com> - 15.9-31
changelog:
  - Add two latest distribution patches (RHEL-158207)
  - Correct the erroneous brace count caused by the unbalanced { }
  - Make it possible to add the new keywords


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-4
changelog:
  - 2253985 - cups-browsed crashes when remote CUPS queue found by DNS-SD is not able to response on IPP Get-Printer-Attributes
  - fix several issues reported by openscanhub


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-6
changelog:
  - RHEL-51349 Cups browsing with 'Autoclustering on' cannot find printer clusters for HA due incorrect orientation-requested-default


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-7
changelog:
  - CVE-2024-47176 cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source
  - RHEL-17124 [cups-browsed] Prints to remote RAW queues are converted to PDF documents


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-8
changelog:
  - RHEL-45525 cups-2.4.10-2.el10: RHEL SAST Automation: address 1 High impact true positive(s)
  - RHEL-60354 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-12
changelog:
  - RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
  - RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-13
changelog:
  - RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-15
changelog:
  - RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
  - RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues


author: Jeff Moyer <jmoyer@redhat.com> - 80-4
changelog:
  - Fix listing of region capabilities (Jeff Moyer)
  - Remove orphaned patch file (Jeff Moyer)
  - Resolves: RHEL-80436


author: Martin Osvald <mosvald@redhat.com> - 3.8.3-1
changelog:
  - Fix CVE-2024-34055
  - Fix wrong symlinks to imtest utilities
  - Convert to %autorelease and %autochangelog


author: Filip Janus <fjanus@redhat.com> - 2.1.28-21
changelog:
  - Remove BerkeleyDB converting tool. It was intended to be removed in
    RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
    Resolves: RHEL-43136


author: Mark Wielaard <mjw@redhat.com> - 5.3-2
changelog:
  - New upstream 5.3 release
  - Drop release gpg key, unsupported by gpgverify.
  - Drop all local patches
  - Add debugedit-5.3-elflint-test.patch
  - Add gcc-c++ as BuildRequires
  - Add gdb as BuildRequires
  - Install debugedit-classify-ar and man page


author: Tomas Korbar <tkorbar@redhat.com> - 1.7.3-2
changelog:
  - Rebuild because of infrastructure problems
  - Resolves: RHEL-92412
  - Resolves: RHEL-88534
  - Resolves: RHEL-81709


author: Petr Menšík <pemensik@redhat.com> - 2.89-3
changelog:
  - Add separate SPDX licenses also to translations
  - Include localized man pages simpler way, make them noarch


author: Petr Menšík <pemensik@redhat.com> - 2.90-7
changelog:
  - Prevent overflow in extract_name function (CVE-2026-2291)
  - Prevent DoS in DNSSEC validation (CVE-2026-4890)
  - Prevent out-of-bounds read in DNSSEC validation (CVE-2026-4891)
  - Prevent out-of-bounds write in DHCPv6 server (CVE-2026-4892)
  - Prevent source check avoidance by RFC 7871 client-subnet (CVE-2026-4893)
  - Prevent out-of-bounds read in extract_addresses (CVE-2026-5172)


author: Andrew Hughes <gnu.andrew@redhat.com> - 11.5.4-2
changelog:
  - Rebuilt with java-21-openjdk as default JDK:
    https://issues.redhat.com/browse/RHEL-34597
  - Resolves: RHEL-54649


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.6.0-1
changelog:
  - Rebase to PKI 11.6.0
  - Resolves: RHEL-70108
  - Resolves: RHEL-75585
  - Resolves: RHEL-75546
  - Resolves: RHEL-74371
  - Resolves: RHEL-63015


author: Omair Majid <omajid@redhat.com> - 10.0.100~rc.2.25502.107-0.12
changelog:
  - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
  - Resolves: RHEL-121558


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-14
changelog:
  - fix CVE-2024-23185: very large headers can cause resource exhaustion
    when parsing message (RHEL-55218)
  - fix CVE-2024-23184: using a large number of address headers may trigger
    a denial of service (RHEL-55205)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-17
changelog:
  - fix building with latest openssl (RHEL-117460)
  - add /var/lib/dovecot to tmpfiles for image mode (RHEL-130953)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-18
changelog:
  - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161626)
  - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162274)
  - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161665)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-8
changelog:
  - dtc-Properly-harden-built-packages.patch [RHEL-33493]
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-10
changelog:
  - Fix missing dynamic tags for aarch64 python3 pylibfdt
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-12
changelog:
  - dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448]
  - dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448]
  - Resolves: RHEL-64318
    ([RHEL10][CS10] dtc fails to build with Swig 4.3.0)
  - Resolves: RHEL-65448
    ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10)


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.24-1
changelog:
  - New release: v1.24
  - Add support to BTF_KIND_ENUM64.
  - Support multithreaded BTF encoding.
  - Encode char type as signed in BTF.
  - Introduce --lang and --lang_exclude to pahole.
  - Introduce --compile to pahole.
  - Don't segfault when processing bogus files.


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.24-3
changelog:
  - Backport the DW_TAG_unspecified_type support while 1.25 gets ready wrt optimized functions support


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.25-1
changelog:
  - New release: v1.25
  - Support for DW_TAG_unspecified_type more generally.
  - Make sure struct member offsets are in ascending order. Rust BTF needs this.
  - Support C atomic types (DW_TAG_atomic_type).
  - Initial support for DW_TAG_LLVM_annotation, used for BTF type tags, for __rcu, __user, etc
  - Exclude functions with the same name (static functions in different CUs), inconsistent prototypes or not following calling convention.
  - Allow generation of BTF for optimized functions, those that end with a .isra*, .constprop*.
  - Support 'pahole --lang=/--lang_exclude=asm'
  - Support --compile from DWARF in addition to from BTF.
  - Exclude RUST CUs in 'btfdiff', as those are not yet being BTF encoded.


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-45148
  - Add gating.yaml
  - Add "Provides: pahole"
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Gregory Bell <grbell@redhat.com> - 1.30-1
changelog:
  - New release: 1.30
  - Better detection of abort during DWARF loader thread processing
  - pahole now detects presence of libbpf APIs and BTF features using weak function
    declarations when built using a shared library libbpf
  - Type tags are emitted for BPF arena pointers with new BTF "attributes" feature
  - New release: 1.29
  - Multithreading is now in the DWARF loader using a jobs queue and a pool of worker threads.
  - The BTF encoding now is always reproducible, and as fast/faster than before.
  - The memory consumption is reduced.
  - Support for multiple BTF_DECL_TAGs pointing to same tag.
  - Verify that pfunct prints btf_decl_tags read from BTF.
  - Don't print functions twice when using 'pfunct -f function_name'.
  - New release: 1.28
  - Various improvements to reduce the memory footprint of pahole, notably when doing BTF encoding.
  - Show flexible arrays statistics
  - Add '--padding N' and '--padding_ge N' to show structs with paddings
  - Introduce --running_kernel_vmlinux to find a vmlinux that matches the build-id of the running kernel.
  - Don't stop pfunct output at the first function that matches a filter, show all of them
  - Allow encoding data about all global variables, not just per CPU ones
  - Handle .BTF_ids section endianness, fully supporting cross builds
  - Generate decl tags for bpf_fastcall for eligible kfuncs
  - Add "distilled_base" BTF feature to split BTF generation.
  - Use the ELF_C_READ_MMAP mode with libelf, reducing peak memory utilization
  - Allow overriding /sys/kernel/btf/vmlinux via the PAHOLE_VMLINUX_BTF_FILENAME env var
  - Allow setting the list of compile units via PAHOLE_LANG_EXCLUDE env var
  - Serialize access to elfutils dwarf_getlocation().
  - Honour --lang_exclude when merging LTO built CUs.
  - Add the debuginfod client cache directory to the vmlinux search path.
  - Print the CU's language when a tag isn't supported.
  - Initial support for GNU_formal_parameter_pack, GNU_template_parameter_pack, template_value_param and template_type_param DWARF tags.
  - Improve the parameter parsing by checking DW_OP_[GNU_]entry_value
  - Introduce a tests/ directory with regression tests


author: Gregory Bell <grbell@redhat.com> - 1.31-1
changelog:
  - Rework the selection of functions to represent in BTF, for instance:
  - Skip functions that passes values thru the stack when those structs don't
    have expected alignment due to some attribute usage that then causes
    problems with BTF trampolines due to lack of expressiveness in BTF to
    signal such special cases.
  - Skip objects (compile units) without DWARF: don't stop a multi object
    encoding session just because one doesn't have any DWARF in it.
  - Fix BTF dedup by updating libbpf. 
  - Fix the inference of the explicit alignment attribute of zero length arrays,
    like struct skb_ext->data[] in the Linux kernel. Important as BTF has no no
    explicit alignment attribute encoding.
  - Fix the inference of alignments after bitfields, such as in struct
    nft_rule_dp->data[] after ->handle:42, also in the Linux kernel.
  - Fix segfault with --show_reorg_steps option, e.g. pahole -R -S -C task_struct.
  - Add comparision of functions encoded in BTF between baseline 'master' branch
    and current branch, i.e. 'next'.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.12.6-1
changelog:
  - Update to 0.12.6 (close RHBZ#2162811)
  - Update License to SPDX
  - Document and/or unbundle all bundled libraries


author: Erico Nunes <ernunes@redhat.com> - 9.0.0-4
changelog:
  - Split xdriinfo into its own package
  - Remove xdriinfo additional source build and autotools dependencies


author: Aaron Merey <amerey@redhat.com> - 0.191-1
changelog:
  - Upgrade to upstream elfutils 0.191
  - Drop upstreamed patches
    elfutils-0.190-fix-core-noncontig.patch
    elfutils-0.190-gcc-14.patch
    elfutils-0.190-remove-ET_REL-unstrip-test.patch
  - Drop testcore-noncontig.bz2
  - Add elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.191-riscv-flatten.patch
  - Add feature flag for reenabling elfutils-libelf-devel-static and elfutils-devel-static


author: Aaron Merey <amerey@redhat.com> - 0.191-3
changelog:
  - eu-srcfiles directly links to libdebuginfod.so so explicitly
    Require elfutils-debuginfod-client not just Recommends


author: Aaron Merey <amerey@redhat.com> - 0.192-1
changelog:
  - Upgrade to upstream elfutils 0.192
  - Drop upstreamed patches
    elfutils-0.190-riscv-flatten.patch
    elfutils-0.191-riscv-flatten.patch
    elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.192-libelf-static.patch


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-fix-configure-conditional.patch
    elfutils-0.192-fix-free.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-stacktrace-lto.patch


author: Aaron Merey <amerey@redhat.com> - 0.195-1
changelog:
  - Upgrade to upstream elfutils 0.195
  - Drop upstreamed patches
    elfutils-0.194-zero-sh_addr.patch
    elfutils-0.194-alloc-jobs.patch


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.51.1-6
changelog:
  - Fixed buffer overflow in SetUpPhonemeTable function at synthdata.c
    Resolves: CVE-2023-49990
  - Fixed buffer underflow in CountVowelPosition function at synthdata.c
    Resolves: CVE-2023-49991
  - Fixed buffer overflow in RemoveEnding at dictionary.c
    Resolves: CVE-2023-49992
  - Fixed buffer overflow in ReadClause function at readclause.c
    Resolves: CVE-2023-49993
  - Fixed floating point exception in PeaksToHarmspect at wavegen.c
    Resolves: CVE-2023-49994


author: Milan Crha <mcrha@redhat.com> - 3.52.0-1
changelog:
  - Resolves: RHEL-30204 (Backport Fedora 40 changes)
  - Update to 3.52.0
  - Add patch to allow reconfiguring the dbus-prefix without rebuilding;
    this is needed to make EDS work with the new Flatpak infrastructure.
  - Remove support _eds_dbus_services_prefix - this was only used by
    F38 and earlier Flatpak builds.


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4-1
changelog:
  - fapolicyd-1.4 and fapolicyd-selinux-1.0
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-1
changelog:
  - fapolicyd-1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd-selinux/releases/tag/v1.1


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-2
changelog:
  - Fix binary path of rpm-loader
  - Map file with MAP_SHARED instead of MAP_PRIVATE
  - Fix segfault when interrupting fapolicyd startup


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.5-2
changelog:
  - fagenrules: Validate new compiled rules
  - Add fapolicyd-cli --check-rules option
  - Bump maximum length of a configuration file line


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-16
changelog:
  - fence_ibm_powervs: update description of api-type parameter to show
    correct default value
    Resolves: RHEL-114752


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-24
changelog:
  - bundled pyasn1: replace with dependency to fix CVE-2026-30922
  - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
    Resolves: RHEL-157188, RHEL-155669


author: Arslan Ahmad <arahmad@redhat.com> - 4.16.0-29
changelog:
  - fence_openstack: fix list-action to avoid timeout when
    there are 100+ VMs on the hypervisor
    Resolves: RHEL-155007


author: Trent Piepho <tpiepho@gmail.com> - 3.3.10-6
changelog:
  - Enable AVX2 on x86-86
  - Enable NEON on aarch64
  - Clean up precision list
  - Fix for OpenMPI build with < 4 processors
  - Fix building with no enabled MPI types
  - Enable single precision Altivec on PPC
  - Enable CNTVCT_EL0 support on ARMv8


author: Fedora Release Engineering <releng@fedoraproject.org> - 3.3.10-10
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix i686 build by disabling openmpi
  - Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build
    https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075)
  - Disable mpich on s390x to fix the build


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Pavel Reichl <preichl@redhat.com> - 3.34-1
changelog:
  - New upstream version (RHBZ#2178183)
  - Drop support for pmeblk https://github.com/axboe/fio/commit/04c1cdc


author: Jan Grulich <jgrulich@redhat.com> - 1.4.7-1
changelog:
  - Update to 1.4.7
    Resolves: RHEL-126427
  - Make flatpak-builder to use fusermount3
    Resolves: RHEL-72576
  - Disable %check


author: Jan Grulich <jgrulich@redhat.com> - 1.16.0-1
changelog:
  - Update to 1.16.0
    Resolves: RHEL-72779
  - Add support for preinstalling Flatpaks
    Resolves: RHEL-26066


author: Jan Grulich <jgrulich@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0
    Resolves: RHEL-126038
    Resolves: RHEL-92123
    Resolves: RHEL-165631
    Resolves: RHEL-170158


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-14
changelog:
  - Analyse flex sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222083)


author: Iñaki Úcar <iucar@fedoraproject.org> - 3.3.1-3
changelog:
  - Require netlib from base package
  - Adapt license tag to SPDX
  - Add rpminspect.yaml file to skip tests with false positives


author: Akira TAGOH <tagoh@redhat.com> - 2.14.2-5
changelog:
  - Update 65-nonlatin.conf to 69-nonlatin.conf
    This basically provides substitutes for certain languages and is helpful
    to determine default behavior though, we have per-package config for similar purpose.
    Since 65 is mostly used for default fonts and this config prevents some behavior for
    packages named something coming later than "nonlatin" in the alphabetical order.
    So moving this to the safer priority.
    This would fixes an issue, particularly Lohit Marathi vs Lohit Devanagari after
    updating their priorities from 65 to 66.


author: Antonio Torres <antorres@redhat.com> - 3.2.8-2
changelog:
  - Disable JIT if PCRE can't allocate executable memory
  - Fix warnings from service file
    Resolves: RHEL-116594


author: Marek Kasik <mkasik@redhat.com> - 2:3.10.3-3
changelog:
  - Initialize function pointers after resource allocation
  - Fixes CVE-2025-4478
  - Resolves: RHEL-91583


author: Ondrej Holy <oholy@redhat.com> - 2:3.10.3-8
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-142414, RHEL-142398, RHEL-142382, RHEL-142366, RHEL-142350
    Resolves: RHEL-142334, RHEL-142318


author: Ondrej Holy <oholy@redhat.com> - 2:3.10.3-9
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894


author: Ondrej Holy <oholy@redhat.com> - 2:3.10.3-11
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
    Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
    Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980


author: Nick Clifton <nickc@redhat.com> - 2.44-4
changelog:
  - Use the new gcc-toolset-15-runtime package.  (RHEL-94763)
  - Add in the temporary fix for ppc64 gcc/glibc generating bad code.  (RHEL-49348)


author: Marek Polacek <polacek@redhat.com> 15.1.1-1
changelog:
  - update from releases/gcc-15 branch
    - GCC 15.1 release
    - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407


author: Marek Polacek <polacek@redhat.com> 15.1.1-2
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
     c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
     c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
     fortran/102900, fortran/119928, fortran/119986, fortran/120049,
     fortran/120107, fortran/120139, fortran/120163, fortran/120179,
     fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
     libfortran/120152, libfortran/120153, libfortran/120158,
     libfortran/120196, libstdc++/118260, libstdc++/119427,
     libstdc++/119714, libstdc++/120029, libstdc++/120114,
     libstdc++/120159, libstdc++/120187, libstdc++/120190,
     libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
     modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
     preprocessor/120061, target/119610, testsuite/119909,
     tree-optimization/111873, tree-optimization/119712,
     tree-optimization/120043, tree-optimization/120048,
     tree-optimization/120074, tree-optimization/120089,
     tree-optimization/120143, tree-optimization/120211


author: Siddhesh Poyarekar <siddhesh@redhat.com> 15.1.1-2.2
changelog:
  - Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282)
  - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
    (RHEL-84680)


author: Marek Polacek <polacek@redhat.com> 15.1.1-2.3
changelog:
  - ship libstdc++.modules.json (RHEL-97043)
  - configure with --with-long-double-format=ieee (RHEL-97055)


author: Siddhesh Poyarekar <siddhesh@redhat.com> 15.2.1-7
changelog:
  - update from releases/gcc-15 branch (RHEL-116507)
    - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
  	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
  	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
  	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
  	c++/122070, c++/122550, c++/122668, c++/122752, c++/122772,
  	c++/122834, c++/122922, c++/123331, c++/123597, debug/121964,
  	diagnostics/120063, fortran/107406, libfortran/122936,
  	libstdc++/120446, libstdc++/122812, libstdc++/122907,
  	libstdc++/123147, middle-end/111817, middle-end/123107,
  	middle-end/123392, middle-end/123703, rtl-optimization/121773,
  	rtl-optimization/122215, rtl-optimization/123121,
  	rtl-optimization/123523, target/117575, target/119130,
  	target/120250, target/121192, target/121485, target/123022,
  	target/123092, target/123155, target/123217, target/123460,
  	target/123484, target/123489, target/123521, target/123607,
  	target/123742, testsuite/123353, tree-optimization/122793,
  	tree-optimization/122868, tree-optimization/123040,
  	tree-optimization/123300, tree-optimization/123351,
  	tree-optimization/123372, tree-optimization/123431,
  	tree-optimization/123513, tree-optimization/123602,
  	tree-optimization/123736, tree-optimization/123741


author: Marek Polacek <polacek@redhat.com> 16.1.1-4
changelog:
  - update from releases/gcc-16 branch
    - PRs ada/18205, ada/125695, c/124303, c/124532, c/124985, c/125252,
  	c++/65271, c++/113563, c++/115314, c++/117259, c++/121094, c++/123536,
  	c++/124584, c++/124978, c++/125007, c++/125123, c++/125135,
  	c++/125284, c++/125333, c++/125334, c++/125376, c++/125378,
  	c++/125384, c++/125408, c++/125412, c++/125423, c++/125454,
  	c++/125490, c++/125498, c++/125745, c++/125759, c++/125764,
  	c++/125768, c++/125770, c++/125889, c++/125900, c++/125939,
  	fortran/60576, fortran/105582, fortran/106546, fortran/115260,
  	fortran/125021, fortran/125051, fortran/125391, fortran/125393,
  	fortran/125416, fortran/125430, fortran/125481, fortran/125527,
  	fortran/125528, fortran/125529, fortran/125530, fortran/125531,
  	fortran/125534, fortran/125535, fortran/125606, fortran/125650,
  	fortran/125669, fortran/125902, fortran/126018, ipa/125699,
  	libstdc++/71301, libstdc++/78302, libstdc++/118158, libstdc++/125228,
  	libstdc++/125312, libstdc++/125369, libstdc++/125374,
  	libstdc++/125450, libstdc++/125890, libstdc++/125956,
  	middle-end/125156, middle-end/125621, middle-end/125977, other/125348,
  	rtl-optimization/125173, rtl-optimization/125375, target/106895,
  	target/120144, target/120870, target/122665, target/122827,
  	target/124870, target/124895, target/124908, target/125148,
  	target/125215, target/125320, target/125351, target/125355,
  	target/125362, target/125373, target/125409, target/125448,
  	target/125469, target/125478, target/125611, target/125628,
  	target/125670, target/125751, target/125752, target/125795,
  	target/125818, target/125838, target/125883, target/125949,
  	target/125972, target/125992, tree-optimization/124151,
  	tree-optimization/125250, tree-optimization/125291,
  	tree-optimization/125419, tree-optimization/125431,
  	tree-optimization/125477, tree-optimization/125501,
  	tree-optimization/125502, tree-optimization/125545,
  	tree-optimization/125553, tree-optimization/125646,
  	tree-optimization/125652, tree-optimization/125686,
  	tree-optimization/125774, tree-optimization/125776
  - don't remove openacc tests for s390x and ppc64le (RHEL-181820)


author: Kalev Lember <klember@redhat.com> - 3.92.0-1
changelog:
  - Update to 3.92.0
  - Remove gtk3 and gtk4 subpackages as the gcr gtk3 and gtk4 libraries are gone
  - Rename gcr-base to gcr-libs
  - Fix gir and vala directory ownership
  - Misc packaging cleanup


author: Guinevere Larsen <guinevere@redhat.com>
changelog:
  - remove gdb-test-bt-cfi-without-die.patch.  This test has been
    accepted upstream and will make its way back to testing with
    the GDB 17 release.


author: Alexandra Hájková <ahajkova@redhat.com> - 16.2-1
changelog:
  - Rebase to FSF GDB 16.2.
    Dropped:  gdb-backport-buildid-related-changes.patch
              gdb-catchpoint-re-set.patch
              gdb-remove-qnx-neutrino-support.patch
    Modified: gdb-add-rpm-suggestion-script.patch


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Remove 32-bit ARM support for RHEL 10+.  This is not a RHEL
    supported target, so lets drop this target.  Retain for older RHEL
    versions, as well as Fedora.


author: Keith Seitz <keiths@redhat.com> - 16.3-3.el10
changelog:
  - Include gdb-index-generation-fixes.patch (renamed).
    (Tom Tromey and Andrew Burgess, RHEL-150992)


author: Kevin Buettner <kevinb@redhat.com>
changelog:
  - Backport upstream commit c1da013915e from Kevin Buettner to fix
    gcore failures caused by glibc 2.42 guard page changes (RHBZ 2413405).
  - Backport upstream commit d2cc16cd7fc from Jan Vrany to fix
    FAILs in gdb.base/fileio.exp caused by macro expansion of
    path components in OUTDIR.


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Backport upstream commits 8bd08ee92c4 and cd289df068e to address
    rhbz2366461.  These backports will not be needed once we rebase to
    GDB 18.


author: Keith Seitz <keiths@redhat.com>
changelog:
  - Backport upstream commit ef7727ae from Tom de Vries to
    fix the test suite for newer Tcl releases.


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Backport the following upstream commits in order to address RHBZ
    2467251: d980317c7f1, 958d06262a7, 7d1d7386561, 8915de0883c,
    8f65ab7b71f.  These commits will all drop out when we rebase to GDB
    18.


author: Kevin Buettner <kevinb@redhat.com>
changelog:
  - Applied proposed patch "[gdb/testsuite, Tcl 9] Fix EILSEQ problems for
    UTF8 related tests".  This is required in order to complete a build
    with testing.


author: Michal Kolar <mkolar@redhat.com>
changelog:
  - Rebase to FSF GDB 17.2.
    Deleted: gdb-rhbz2435950-skip-revert.patch
    Backport e492fb22b70, gdb: backport DAP core file support
    Replace manual, multi-file patch inclusion with modern autosetup
    Add rpminspect.yaml to define package-specific testing policy


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Adjust commit message in gdb-backport-dap-core-file-support.patch to
    remove '---' string which confuses git.


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Backport upstream commit be3a9405ceb4d6d6 to fix and issue with the
    D demangler (RHBZ 2368350).  This commit will drop out when we
    rebase to GDB 18.


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Backport upstream commit 93f536d813c41527 to fix RHBZ 2498034.  This
    commit will drop out when we rebase to GDB 18.


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 2.7.0-3
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Neal Gompa <ngompa@centosproject.org> - 2.7.2-1
changelog:
  - Update to 2.7.2
    + Backport fixes from upstream to use BeaconDB
    + Use BeaconDB for the default location services source
    Resolves: RHEL-79063


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-9
changelog:
  - RHEL-38835 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-12
changelog:
  - RHEL-44771 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-12
changelog:
  - RHEL-46149 CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter
  - RHEL-46131 CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc()
  - RHEL-46112 CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters
  - RHEL-46076 CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter()
  - RHEL-44727 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-15
changelog:
  - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling
  - RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Ondřej Pohořelský <opohorel@redhat.com> - 2.45.2-1
changelog:
  - update to 2.45.2
  - add glibc-utils BuildRequires
  - build docs with asciidoc instead of a asciidoctor
  - drop git-p4 subpackage
  - Resolves: RHEL-45572, RHEL-45215


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.1-12
changelog:
  - Release bump due to internal issue with the build system (missing debug symbols)
    Related: RHEL-24118


author: Dhanuka Warusadura <dhanuka@gnome.org> - 42.1-6
changelog:
  - ssh-agent: update build instructions to disable ssh component
  - Introduced conditional builds based on ssh component required or not


author: Matthias Clasen <mclasen@redhat.com> - 3.36.0-14
changelog:
  - Use autosetup
  - Rename 14.patch to gnome-menus-01.patch
  - Rearrange after design review
  - Resolves: RHEL-65839


author: Tomas Popela <tpopela@redhat.com> - 3.36.0-16
changelog:
  - Fix Calculator to be presented
  - Papers should be in Utilities and not in Graphics and Office
  - Resolves: RHEL-65839


author: Milan Crha <mcrha@redhat.com> - 3.50.1-2
changelog:
  - Resolves: RHEL-33893
  - Disable Microsoft 365 provider
  - Remove support for 'files' in Google provider


author: Olivier Fourdan <ofourdan@redhat.com> - 0.0.11-5
changelog:
  - Fix abort when disconnecting from libei
  - Fix restarting the daemon state after a client has disconnected
    Resolves: RHEL-89455


author: Yaakov Selkowitz <yselkowi@redhat.com> - 44.0-2
changelog:
  - Enable bundled deps in RHEL builds
  - Update bundled provides
  - Only use Fedora branding in Fedora builds


author: Kalev Lember <klember@redhat.com> - 45.0-5
changelog:
  - Drop downstream patch that downgraded pretty_env_logger dep to 0.4
  - Don't use both meson and cargo for building
  - Migrate to SPDX license


author: Jakub Jelen <jjelen@redhat.com> - 2.4.5-5
changelog:
  - Make profile scripts more robust (RHEL-166369)
  - Add compatibility provides for new Fedora source verification (RHEL-142310)


author: Alexander Sosedkin <asosedkin@redhat.com> - 3.8.10-3
changelog:
  - Fix CVE-2025-9820, CVE-2025-14831, drop unused patches
  - Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
  - Fix name constraint processing performance issue (CVE-2025-14831)
  - Drop unused patches


author: Alexander Sosedkin <asosedkin@redhat.com> - 3.8.10-4
changelog:
  - Fix 3.8.13 CVEs and security issues, update Makefile.in
  - Fix CVE-2026-33846
  - Fix CVE-2026-42009
  - Fix CVE-2026-33845
  - Fix CVE-2026-42010
  - Fix CVE-2026-3833
  - Fix CVE-2026-42011
  - Fix CVE-2026-42012
  - Fix CVE-2026-42013
  - Fix CVE-2026-42014
  - Fix CVE-2026-5260
  - Fix CVE-2026-42015
  - Fix CVE-2026-3832
  - Fix CVE-2026-5419
  - Fix upstream security issue #1808
  - Fix upstream security issue #1810
  - Fix upstream security issue #1813
  - Fix upstream security issue #1818
  - Fix upstream security issue #1818
  - Fix upstream security issue #1819
  - Fix upstream security issue #1822
  - Fix upstream security issue #1841
  - Fix upstream security issue #1823
  - Fix upstream security issue #1817
  - Fix upstream security issue #1820
  - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-11
changelog:
  - internalize scons (RHEL-14750)
  - add missing IPv6 support
  - add note about limited Red Hat support
  - drop unneeded API-compatibility patch
  - fix busy wait when reading from gpsd socket
  - fix some issues reported by coverity and shellcheck


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-14
changelog:
  - fix annobin coverage (RHEL-33496)
  - add conflicts for gpsd-minimal (RHEL-33651)
  - drop compat subpackage (RHEL-33651)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-15
changelog:
  - fix icon path in desktop files (RHEL-34158)
  - replace gpsd-minimal conflicts with obsoletes (RHEL-33651)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.26.1-3
changelog:
  - fix buffer overflow in NMEA2000 driver (CVE-2025-67268)
  - fix integer underflow in handling of Navcom packets (CVE-2025-67269)


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-12
changelog:
  - Resolves RHEL-68657: Update configurations to allow loading the valkey datasource
  - Clean up the grafana.ini file


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-13
changelog:
  - Resolves RHEL-68657: Update configurations to allow loading the valkey datasource
  - Revert changes that break older custom dashboards


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-20
changelog:
  - Resolves RHEL-97520: Rework grafana-selinux spec file sections
  - Resolves RHEL-92648: Add additional SELinux rules for grafana-selinux package to allow LDAP connections


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-22
changelog:
  - Resolves RHEL-125629: CVE-2025-58183
  - Resolves RHEL-132756: Grafana-selinux prevents plugins from searching cgroups


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-24
changelog:
  - Resolves RHEL-144949: CVE-2026-21721
  - Resolves RHEL-145413: CVE-2025-61728
  - Resolves RHEL-146073: CVE-2025-61726
  - Resolves RHEL-149246: CVE-2025-68121


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-26
changelog:
  - Resolves RHEL-161792: CVE-2026-27877
  - Resolves RHEL-166318: CVE-2026-33810
  - Resolves RHEL-166490: CVE-2026-32282
  - Resolves RHEL-167360: CVE-2026-32280
  - Resolves RHEL-167516: CVE-2026-32283


author: Sam Feifer <sfeifer@redhat.com> 12.4.3-2
changelog:
  - Resolves RHEL-183692: CVE-2026-39821
  - Resolves RHEL-188283: Remove Lua ExclusiveArch macro for Konflux build


author: Sam Feifer <sfeifer@redhat.com> - 5.2.1-1
changelog:
  - Resolves RHEL-67043: update to 5.2.0/1 tagged upstream community sources, see CHANGELOG
  - Resolves RHEL-16337: added PCP Vector Top Consumers dashboard in new release


author: Sam Feifer <sfeifer@redhat.com> - 5.3.0-5
changelog:
  - Resolves RHEL-166319: CVE-2026-33810
  - Resolves RHEL-166491: CVE-2026-32282
  - Resolves RHEL-167361: CVE-2026-32280
  - Resolves RHEL-167517: CVE-2026-32283


author: Parag Nemade <pnemade AT redhat DOT com> - 1.3.14-13
changelog:
  - Migrate to SPDX license expression
  - Drop Netscape license reference as no test file using it in 1.3.x releases


author: Wim Taymans <wtaymans@redhat.com> - 1.24.10-1
changelog:
  - Update to 1.24.10
    Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996
    Resolves: RHEL-70960, RHEL-70947, RHEL-70934


author: Tomas Popela <tpopela@redhat.com> - 3.24.43-2
changelog:
  - Don't require package gtk-immodules-imsettings as it isn't part of
    RHEL 10 (it's built from GTK 2 SRPM which isn't presented)
  - Resolves: RHEL-38223


author: Matthias Clasen <mclasen@redhat.com> - 3.24.43-4
changelog:
  - Stop relying on xpms in the testsuite
    Resolves: RHEL-69453
  - Avoid criticals on headless systems
    Resolves: RHEL-40884
  - Hide emoji chooser unless explicitly requested
    Resolves: RHEL-65214


author: Richard W.M. Jones <rjones@redhat.com> - 1.52.1-1
changelog:
  - New stable version 1.52.1
  - Rebase on top of patches from RHEL 9.5
  - Reboot Windows between each firstboot script to improve reliability
    resolves: RHEL-56319
  - customize: Implement --inject-blnsvr operation
    resolves: RHEL-56330
  - Add support for nbd+unix:// URIs
    resolves: RHEL-56332


author: Richard W.M. Jones <rjones@redhat.com> - 1.52.2-2
changelog:
  - Rebase to guestfs-tools 1.52.2
    resolves: RHEL-56812
  - Replace Jansson with json-c
    resolves: RHEL-65295


author: Richard W.M. Jones <rjones@redhat.com> - 1.54.0-3
changelog:
  - Rebase to guestfs-tools 1.54.0
    resolves: RHEL-81734
  - virt-builder, virt-v2v & other tools with -v and --install causes dnf5 error
    resolves: RHEL-83201
  - virt-drivers fails on opensuse guest if kernel-source is installed
    resolves: RHEL-92604
  - builder: Update link to templates to use https
    resolves: RHEL-94873
  - Fix SELinux relabelling in Linux split-/usr
    resolves: RHEL-109129


author: Richard W.M. Jones <rjones@redhat.com> - 1.54.0-7
changelog:
  - Synchronize spec file with Fedora
  - Fix pnputils after virt-customize --inject-virtio-win
    resolves: RHEL-116537
  - Unify spec files between Fedora and RHEL.
  - Ensure a minimum version of libguestfs is installed at build and run time.
    resolves: RHEL-116716
  - Remove virt-customize subscription-manager options
    resolves: RHEL-122307
  - Add AV and GPOs to virt-inspector output
    resolves: RHEL-125955


author: Richard W.M. Jones <rjones@redhat.com> - 1.54.0-9
changelog:
  - Synchronize spec file with Fedora
  - Fix pnputils after virt-customize --inject-virtio-win
    resolves: RHEL-116537
  - Unify spec files between Fedora and RHEL.
  - Ensure a minimum version of libguestfs is installed at build and run time.
    resolves: RHEL-116716
  - Remove virt-customize subscription-manager options
    resolves: RHEL-122307
  - Add AV and GPOs to virt-inspector output
    resolves: RHEL-125955
  - Expose XFS version in virt-filesystems
    resolves: RHEL-144074


author: Richard W.M. Jones <rjones@redhat.com> - 1.55.8-1
changelog:
  - Rebase to guestfs-tools 1.55.8
    Synchronize spec file with Fedora
    resolves: RHEL-153360
  - Fix binary LUKS keys
    resolves: RHEL-171896
  - Windows firstboot: Add exit code 250 to skip reboots
    Rework documentation for firstboot feature
    resolves: RHEL-170706


author: Richard W.M. Jones <rjones@redhat.com> - 1.55.9-1
changelog:
  - Rebase to guestfs-tools 1.55.9
    Synchronize spec file with Fedora
    resolves: RHEL-153360
  - Fix binary LUKS keys
    resolves: RHEL-171896
  - Windows firstboot: Add exit code 250 to skip reboots
    Rework documentation for firstboot feature
    resolves: RHEL-170706, RHEL-170708


author: Richard W.M. Jones <rjones@redhat.com> - 1.56.0-1
changelog:
  - Rebase to guestfs-tools 1.56.0
    Synchronize spec file with Fedora
    resolves: RHEL-153360
  - Fix binary LUKS keys
    resolves: RHEL-171896
  - Windows firstboot: Add exit code 250 to skip reboots
    Rework documentation for firstboot feature
    resolves: RHEL-170706, RHEL-170708


author: Zdenek Dohnal <zdohnal@redhat.com> - 5.3.4-11
changelog:
  - GTK2 is not in CentOS Stream 10, dont ship libs-ui subpackage there
  - Add other licenses to License tag and use SPDX identifiers to comply with FPG


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.0-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0
  - Resolves: RHEL-67315


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.1-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1
  - Resolves: RHEL-67315


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.2-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.3-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.4-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4
  - Resolves: RHEL-83030


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.6-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.6
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.7-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.7
  - Resolves: RHEL-111948


author: Christophe Fergeau <cfergeau@redhat.com> - 6:0.8.7-2
changelog:
  - rebuild for CVE-2025-68121, CVE-2025-61726, CVE-2025-61729, CVE-2025-61728, CVE-2025-61729
  - Resolves: RHEL-140518
  - Resolves: RHEL-145414
  - Resolves: RHEL-146723
  - Resolves: RHEL-146928
  - Resolves: RHEL-149248


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.0.5-5
changelog:
  - Add tmpfiles.d file to make systemd-tmpfiles create/set correct
    ownership/permissions of /var/lib/haproxy
    Resolves: RHEL-120174


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.0.5-8
changelog:
  - Fix uint16_t overflow in FCGI demux record length (CVE-2026-55203)
    Resolves: RHEL-211067
  - Fix NULL pointer dereference in hpack_dht_insert() (CVE-2026-55204)
    Resolves: RHEL-211085


author: Petr Dancak <pdancak@redhat.com> - 3.23.12-9
changelog:
  - enable following links with curl in all use cases
    Resolves: RHEL-84817
  - hp-plugin-download wrongly parsed file type
    Resolves: RHEL-97437


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.23.12-11
changelog:
  - CVE-2026-8632 hplip: HPLIP: Privilege escalation and arbitrary code execution
    via operating system command injection [rhel-10.3]
  - CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation
    via integer overflow in hpcups [rhel-10.3]


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-1
changelog:
  - new version 2.4.63
  - Resolves: RHEL-76358 - httpd rebase to 2.4.63
  - Resolves: RHEL-73414 - RewriteRule proxying to UDS (unix domain socket)
    configured in .htaccess doesn't work on httpd-2.4.62-1
  - Resolves: RHEL-66489 - Apache HTTPD no longer parse PHP files with unicode
    characters in the name


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-4
changelog:
  - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
    upgrade (CVE-2025-49812)
  - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
    is possible using TLS 1.3 session resumption (CVE-2025-23048)
  - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
    data in mod_ssl (CVE-2024-47252)
  - Resolves: RHEL-103489 - stickysession field does not work when
    specifying it in the query parameter after upgrade to 9.5


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-5
changelog:
  - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
    updating system in image mode


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-6
changelog:
  - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
    process is reclaimed


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-10
changelog:
  - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
    to avoid unnecessary 421 errors after CVE-2025-23048 fix


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-12
changelog:
  - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
    via AllowOverride FileInfo (CVE-2025-66200)
  - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
    override (CVE-2025-65082)
  - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
    query string to #exec cmd=... (CVE-2025-58098)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-14
changelog:
  - Resolves: RHEL-173559 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
    code execution via heap-based buffer overflow (CVE-2026-28780)
  - Resolves: RHEL-175064 - httpd: NULL pointer dereference can cause a child
    process crash (CVE-2026-33007)
  - Resolves: RHEL-175087 - httpd: off-by-one out-of-bounds reads in AJP getter
    functions (CVE-2026-33857)
  - Resolves: RHEL-175044 - httpd: heap-based buffer over-read due to missing
    null-termination check (CVE-2026-34032)
  - Resolves: RHEL-175060 - httpd: heap-based buffer over-read and memory
    disclosure in ajp_parse_data() (CVE-2026-34059)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.61-1
changelog:
  - new version 2.4.61
  - Resolves: RHEL-45753 - httpd: Potential SSRF in 
    mod_rewrite (CVE-2024-39573)
  - Resolves: RHEL-45757 - httpd: null pointer dereference in
    mod_proxy (CVE-2024-38477)
  - Resolves: RHEL-45776 - httpd: Improper escaping of output in
    mod_rewrite (CVE-2024-38475)
  - Resolves: RHEL-45791 - httpd: Encoding problem in 
    mod_proxy (CVE-2024-38473)
  - Resolves: RHEL-45811 - httpd: Substitution encoding issue in 
    mod_rewrite (CVE-2024-38474)
  - Resolves: RHEL-46051 - httpd: Security issues via backend applications 
    whose response headers are malicious or exploitable (CVE-2024-38476)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-3
changelog:
  - Resolves: RHEL-53632 - RFE: httpd, add IP_FREEBIND support for Listen
  - Resolves: RHEL-53722 - [RFE] ProxyWebsocketIdleTimeout from
    httpd mod_proxy_wstunnel


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.16-11
changelog:
  - Update required packages in CI
  - adobe-source-code-pro-fonts is no longer available in RHEL10
  - dnf and git do not work after systemd-oomd-defaults is installed


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.16-16
changelog:
  - tests: Update packages with comps-f41
  - Add base-graphical
  - Add fonts default
  - Delete libcanberra-gtk3, libproxy-duktape
  - Delete tmt for RHEL CI


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.16-18
changelog:
  - Update CI for RHEL10
  - Add no-overview@fthx until gnome-shell-extension-no-overview is available
  - Add gnome-headless-session@.service until GDM will provide it


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31~beta1-7
changelog:
  - Resolves #2297147 Add directory datadir/GConf/gsettings
  - Resolves #2297735 Move ibus.conf to ibus-xinit sub package
  - Fix memory leaks in error handlings


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31~beta1-11
changelog:
  - Disable ibus-panel rich condition in RHEL
  - Delete ibus-xx-desktop-testing-mutter.patch
  - Delete libXtst-devel dependency
  - Replace gnome-terminal with ptyxis
  - Install gnome-desktop-testing for RHEL
  - Delete xorg-x11-server-Xvfb gnome-session-xsession
  - Delete build packages for gnome-desktop-testing for RHEL
  - Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific
  - Fix CI test case conditions
  - Add no-overview@fthx until gnome-shell-extension-no-overview is available
  - Add gnome-headless-session@.service until GDM will provide it


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31-1
changelog:
  - Bump to 1.5.31
  - Delete RHEL specific packages
  - Update installed packages in CI
  - configure option for Flatpak build
  - Move xinit post scripts
  - Require gnome-shell-extension-no-overview in RHEL


author: Mike FABIAN <mfabian@redhat.com> - 1.4.23-1
changelog:
  - Update to 1.4.23
  - Do not translate the Multi_key when using the option “☑️ Use US keyboard layout”
  - Fix option “☑️ Use US keyboard layout”
    (Resolves: https://github.com/ibus/ibus-m17n/issues/66)
  - Translation update from Weblate: new language Hindi, hi 100%


author: Mike FABIAN <mfabian@redhat.com> - 1.4.24-1
changelog:
  - Update to 1.4.24
  - Make IBusEngineSimple read ~/.XCompose
    (Resolves: https://github.com/ibus/ibus-m17n/issues/70)
  - Do not hide empty preedit text before committing text.
    (Resolves: https://github.com/ibus/ibus-m17n/pull/64).
    Together with ibus >= 1.5.29 this solves the preedit flicker problem perfectly.
  - Use “<developer><name>…</name></developer>” in m17n.appdata.xml instead of “<developer_name>…</developer_name>”
    Because </developer_name> is deprecated and it makes the build fail on Fedora rawhide.


author: Mike FABIAN <mfabian@redhat.com> - 1.4.27-1
changelog:
  - Update to 1.4.27
  - Prefer commit to "return FALSE;" for space, and other keys
    where the msymbol name is exactly one character, add a
    sleep for Return.  This is to avoid ordering problems in
    mutter.
    (Resolves: https://github.com/ibus/ibus-m17n/issues/72)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.28-1
changelog:
  - Update to 1.4.28
  - Translation update from Weblate (Russian (ru), new, 100%)
  - Build against gtk3 by default (Resolves:
    https://github.com/ibus/ibus-m17n/issues/73)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.29-1
changelog:
  - Update to 1.4.29
  - Translation update from Weblate (Malayalam (ml), new, 100%, Swedish (sv)
    100%)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.29-5
changelog:
  - Resolves: RHELMISC-5984 Fix CI tests better: Check for existence of
    directory instead of checking Fedora version.


author: Martin Gieseking <martin.gieseking@uos.de> - 0.32.3-14
changelog:
  - updated License field (https://src.fedoraproject.org/rpms/icoutils/pull-request/2)
  - updated %patch to new syntax


author: Andrew Hughes <gnu.andrew@redhat.com> - 5.5.0-3
changelog:
  - Rebuilt with java-21-openjdk as default JDK:
    https://issues.redhat.com/browse/RHEL-34597
  - Resolves: RHEL-54331


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.7.0-2
changelog:
  - Rebase to JSS 5.7.0
  - Jira Ticket RHCS-98721 ACME server: RFC 8555 violation: Support ES256 #4638 [rhel-10]
  - Jira Ticket IDM-2428 build encountered: PQC alg defs to match with NSS V3.112


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-27
changelog:
  - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier
  - Resolves: RHEL-119628 Include fixes in python3-ipatests
  - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM
  - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
  - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM
  - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine.
  - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.0-1
changelog:
  - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2
  - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache
  - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix
  - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls
  - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-1
changelog:
  - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS
  - Resolves: RHEL-113778 Command that retrieve and install new CA certificates
  - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
  - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-119339 Memory leaks in IPA plugins


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-2
changelog:
  - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
  - Resolves:  RHEL-145855 Include latest fixes in python3-ipatests package
  - Resolves:  RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
  - Resolves:  RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system)
  - Resolves:  RHEL-4895 ipa use systemd-sysusers
  - Resolves:  RHEL-4823 Names of domains from a trusted forest should be compared case-insentive


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-3.1
changelog:
  - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails
  - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set
  - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-22
changelog:
  - Resolves: RHEL-95374 eDNS: multiple issues during encrypted DNS setup
  - Resolves: RHEL-89893 ipa: Privilege escalation from host to domain admin in FreeIPA
  - Resolves: RHEL-99316 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-97053 ipa-idrange-fix: 'Env' object has no attribute 'basedn'
  - Resolves: RHEL-96936 Nightly test failure (rawhide) in test_trust.py::TestTrust::test_server_option_with_unreachable_ad
  - Resolves: RHEL-49440 kdb: support storing and retrieving multiple master keys


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-23
changelog:
  - Resolves: RHEL-105973 Include fixes in python3-ipatests package
  - Resolves: RHEL-105513 kdb: prevent double crash in RBCD ACL free
  - Resolves: RHEL-101708 ipatests: use "sos report" instead of "sosreport" command
  - Resolves: RHEL-95733 Incorrect use of external IdP GitHub trademark
  - Resolves: RHEL-95374 eDNS: multiple issues during encrypted DNS setup


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.2-1
changelog:
  - Resolves: RHEL-178898 Rebase ipa to latest version for RHEL 10.3
  - Resolves: RHEL-179217 ipa-migrate tool is renaming host records & host info in automount information
  - Resolves: RHEL-178538 [Cursor Automated] Include latest fixes in python3-ipatests package
  - Resolves: RHEL-174346 Release Modern UI progress to RHEL 10.3
  - Resolves: RHEL-153857 ipa-migrate doesn't properly handle replication conflicts
  - Resolves: RHEL-153852 ipa-migrate doesn't migrate IPA locations
  - Resolves: RHEL-151578 Extend SELinux policy to allow use of SSSD authentication helpers on non-enrolled hosts
  - Resolves: RHEL-151326 freeipa-client %triggerin and %post can fail (rpm scriptlets should never fail, by policy)
  - Resolves: RHEL-147173 ipa-migrate doesn't process users' sshpublickeys
  - Resolves: RHEL-107899 [RFE] X-Content-Type-Options header in IdM WebUI
  - Resolves: RHEL-107897 [RFE] Implement Referrer-Policy on IdM WebUI
  - Resolves: RHEL-107045 [RFE] CSP not implemented in IdM WebUI
  - Resolves: RHEL-105139 IPA compatibility with tomcat 10
  - Resolves: RHEL-103492 ipalockout_postop is incorrectly warning about locked user
  - Resolves: RHEL-70229 To add "SameSite" flag to ipa_session cookies
  - Resolves: RHEL-29029 Webui 3007 Requirement error "userCertificate" is required (not allowing certificate manage
  - Resolves: RHEL-154589 FreeIPA JSON-RPC CSRF Referer Validation Uses Naive Prefix Match


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.19-7
changelog:
  - Update IANA numbers
  - Apply patch from CentOS Stream, never applied upstream:
    Disable retry of pre-session "Get cipher suites" command as some
    BMCs are ignoring it (#1831158)
  - Apply patches from Debian, never applied upstream:
    - fix tsol buffer overflow,
      https://sourceforge.net/p/ipmitool/mailman/message/24405281/
    - fix non-analog sensor readings, https://sourceforge.net/p/ipmitool/bugs/490/
  - Update /var/run to /run in ipmievd.service that systemd warns about (#2100475)


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.19-10
changelog:
  - Apply Debian/upstream patch: 137aeb64, fixes ipmitool lan print
  - Add patch that partially reverts 6e037d6bfb to fix regression in 1.8.19
    Among others fixes ipmievd startup (fedora#2303185)


author: Phil Sutter <psutter@redhat.com> [1.8.11-4.el10]
changelog:
  - Fix for RPM build warnings '--with legacy' (Phil Sutter) [RHEL-67473]
  - spec: Use bcond macro (Phil Sutter) [RHEL-67473]


author: Phil Sutter <psutter@redhat.com> [1.8.11-6.el10]
changelog:
  - nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725]
  - nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725]


author: Phil Sutter <psutter@redhat.com> [1.8.11-9.el10]
changelog:
  - xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061]
  - extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286]


author: Phil Sutter <psutter@redhat.com> [1.8.11-14.el10]
changelog:
  - tests: shell: Review nft-only/0009-needless-bitwise_0 (Phil Sutter) [RHEL-179504]
  - spec: Soft-depend on kernel-modules-extra (Phil Sutter) [RHEL-176386]


author: Phil Sutter <psutter@redhat.com> [1.8.11-15.el10]
changelog:
  - spec: Recommend kernel-modules-extra only if no other recommendation applies (Phil Sutter) [RHEL-186232]


author: Phil Sutter <psutter@redhat.com> [1.8.11-16.el10]
changelog:
  - spec: Simplify Recommends again, kernel fixed Provides in modules-core packages (Phil Sutter) [RHEL-213273]


author: Brian C. Lane <bcl@redhat.com> - 1.2.5-1
changelog:
  - New Version 1.2.5 (bcl)
    Resolves: RHEL-45005
  - testpyisomd5sum.py: Use a consistent iso size (bcl)
  - Remove quiet from iso creation, size seems wrong (bcl)
  - workflows: Move to Fedora 39 and checkout v4 (bcl)
  - Add support for riscv64 (davidlt)
  - workflows: Update to use actions/checkout (bcl)
  - Add a GitHub Action to run tests (bcl)
  - Add mips64 (wangray1021)
  - testpyisomd5sum.py: Support genisoimage, Python 2 (ryan)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Related: RHEL-103211


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.2-0.1.ea
changelog:
  - Update to jdk-21.0.8+2 (EA)
  - Update release notes to 21.0.8+2
  - Sync the copy of the portable specfile with the latest update
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Related: RHEL-101803
  - Resolves: RHEL-103211


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.8-0.1.ea
changelog:
  - Update to jdk-21.0.8+8 (EA)
  - Update release notes to 21.0.8+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-101803


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Update to jdk-21.0.8+9 (GA)
  - Update release notes to 21.0.8+9
  - Switch to GA mode
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-102295


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-1
changelog:
  - Update to jdk-21.0.9+10 (GA)
  - Update release notes to 21.0.9+10
  - Bump harfbuzz version to 11.2.0 following JDK-8355528
  - Add NEWS corrections from Thomas
  - Use double spacing consistently in notes for this release
  - Correct 11u release reference to corresponding 21u release as pointed out by Kieran
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118771
  - Resolves: RHEL-119468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118771
  - Related: RHEL-119468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.10.0.7-1
changelog:
  - Update to jdk-21.0.10+7 (GA)
  - Update release notes to 21.0.10+7
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-142857
  - Resolves: RHEL-139565
  - Resolves: RHEL-131428
  - Resolves: RHEL-131441
  - Resolves: RHEL-142861
  - Resolves: RHEL-142815
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.10.0.7-2
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-142857
  - Related: RHEL-139565
  - Related: RHEL-131428
  - Related: RHEL-131441
  - Related: RHEL-142861
  - Related: RHEL-142815


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.11.0.10-1
changelog:
  - Update to jdk-21.0.11+10 (GA)
  - Update release notes to 21.0.11+10
  - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
  - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158
  - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078
  - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047
  - Bump zlib version to 1.3.2 following JDK-8378631
  - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
  - Resolves: RHEL-169611
  - Resolves: RHEL-133215
  - Resolves: RHEL-146648
  - Resolves: RHEL-148326
  - Resolves: RHEL-148828
  - Resolves: RHEL-157090
  - Resolves: RHEL-161216
  - Resolves: RHEL-161332
  - Resolves: RHEL-169614


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.11.0.10-1.3
changelog:
  - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
  - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
  - Resolves: RHEL-151162


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.12.0.8-1.1
changelog:
  - Update to jdk-21.0.12+8 (GA)
  - Update release notes to 21.0.12+8
  - Bump freetype version to 2.14.3 following JDK-8385390
  - Bump giflib version to 6.1.3 following JDK-8384902
  - Bump HarfBuzz version to 14.2.0 following JDK-8385490
  - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354
  - Bump libpng version to 1.6.58 following JDK-8384495
  - Update tagging scripts to include signature checks and correctly handle gating
  - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3.
  - Add gating scripts to simplify obtaining results and waiving issues
  - Cleanup tagging and gating scripts to appease shellcheck:
  - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
  - * scripts/builds/check_signatures.sh: Quote variable usage.
  - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
  - * scripts/builds/waive_leapp_issue.sh: Likewise.
  - * scripts/builds/waive_rpminspect.sh: Likewise.
  - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
  - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
  - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
  - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
  - Obsolete old RHEL releases (9.7.0-z, 10.1-z)
  - Make zone string debug output optional in TestTranslations
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
  - Resolves: RHEL-212302
  - Resolves: RHEL-212303
  - Resolves: RHEL-212304
  - Resolves: RHEL-151191
  - Resolves: RHEL-212305
  - Resolves: RHEL-188872
  - Resolves: RHEL-212306
  - Resolves: RHEL-212307


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.12.0.8-1.2
changelog:
  - Bump release for PQC build
  - Related: RHEL-212302
  - Related: RHEL-212303
  - Related: RHEL-212304
  - Related: RHEL-151191
  - Related: RHEL-212305
  - Related: RHEL-188872
  - Related: RHEL-212306
  - Related: RHEL-212307
  - Related: RHEL-151162


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.12.0.8-2.1
changelog:
  - Add CVEs to NEWS file
  - Update to tarball with final changeset ID
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-188872


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Bump portablerelease to match riscv64 patched version
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-92631


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland
  - Resolves: RHEL-102686


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.8+1 (EA)
  - Update release notes to 21.0.8+1
  - Bump freetype version to 2.13.3 following JDK-8348596
  - Bump harfbuzz version to 10.4.0 following JDK-8348597
  - Bump lcms2 version to 2.17.0 following JDK-8348110
  - Bump libpng version to 1.6.47 following JDK-8348598
  - Switch to EA mode
  - Drop JDK-8351500 local patch which is now available in 21.0.8+1 upstream
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-101803


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Create java-25-openjdk package based on java-21-openjdk
  - Introduce fakefeaturever to pretend we are java-25-openjdk ahead of time
  - Sync the copy of the portable specfile with the latest update
  - Update README file for java-25-openjdk
  - Make sure this is not the default/system JDK providing 'java', 'jre', 'java-devel' ,etc.
  - Related: RHEL-100678


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:22.0.2.0.9-1
changelog:
  - Update to jdk-22.0.2+9 (GA)
  - Update release notes with features of JDK 22
  - Remove 21u FIPS patch and disable use until we are ready for the 25 version
  - Adjust CLDR expectations in TestTranslations.java after JDK-8317979 started using tzdata values
  - Adjust TestTranslations.java to expect the same short name throughout for fr_FR and de_DE (bug?)
  - Sync the copy of the portable specfile with the latest update
  - Remove references to libsystemconf.so and nss.fips.cfg from the 21u FIPS patch
  - Include static libraries in the vm_variant subdirectory after JDK-8307858 (libjvm.a)
  - Flip equals test in TestSecurityProperties.java to handle null values from Security.getProperty
  - Introduce crypto_policy_active to designate whether we should expect policy adherence in testing
  - Flip crypto_policy_active to false while the crypto policy & FIPS patch is not present
  - Handle new libsimdsort.so introduced on x86_64 only by JDK-8309130
  - Related: RHEL-100678


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:23.0.2.0.7-1
changelog:
  - Update to jdk-23.0.2+7 (GA)
  - Update release notes with features of JDK 23
  - Sync the copy of the portable specfile with the latest update
  - Remove lible.so handling following its removal in JDK-8327476: "Upgrade JLine to 3.26.1"
  - Install jaxp-strict.properties.template added by JDK-8330542: "Template for Creating Strict JAXP Configuration File"
  - Related: RHEL-120553


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:24.0.2.0.12-1
changelog:
  - Update to jdk-24.0.2+12 (GA)
  - Update release notes with features of JDK 24
  - alt-java man page installation is now handled by the OpenJDK build
  - Adjust TestTranslations.java with updated German translations from CLDR 46 (JDK-8333582) (Mountain->Mountains)
  - Run javap with the disassembled code (-c) option now required for -l by JDK-8345145
  - Sync the copy of the portable specfile with the latest update
  - Remove default.policy and java.policy following JDK-8338411: "Permanently Disable the Security Manager"
  - Make man page handling dependent on pandoc being available during the portable build
  - Handle new CDS archive variants (*_coh*) added by Compact Object Headers (JDK-8305895)
  - Add missing man page alternatives for jdeprscan, jfr, jhsdb, jimage, jlink & jmod and fix alphabetical ordering
  - Support jnativescan added by JDK-8317611: "Add a tool like jdeprscan to find usage of restricted methods"
  - Add recent native libraries to _privatelibs (libjsvml.so, libsimdsort.so, libsyslookup.so)
  - Support libsleef on AArch64 & RISC-V added by JDK-8329816, JDK-8320500 (RISC-V) & JDK-8312425 (AArch64)
  - Related: RHEL-120553


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Update to jdk-25.0.1+8 (GA)
  - Update release notes with features of JDK 25
  - Mention finalisation JEP for features finalised in JDK 22, 23 & 24
  - Drop fakefeaturever now we have reached OpenJDK 25
  - Update release notes to 25.0.1+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-120553


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-2
changelog:
  - Remove superfluous backslashes that cause two alternative commands to be combined
  - Related: RHEL-120553


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-3
changelog:
  - Add libnssadapter.so
  - Add FIPS crypto-policies configuration
  - Remove obsolete security.useSystemPropertiesFile setup
  - Update TestSecurityProperties.java test and calling convention
  - Resolves: RHEL-128413
  - Resolves: RHEL-128409


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-4
changelog:
  - Add java-25-openjdk-crypto-adapter subpackage
  - Update library setting in create-redhat-properties-files.bash
  - Resolves: RHEL-131896


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-5
changelog:
  - Incorporate new FIPS patch for 25u
  - Drop static libjvm.a following adjusted build target for portable build
  - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image
  - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS
  - Patch the nssadapter build to recognise LDFLAGS
  - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly
  - Resolves: RHEL-133733
  - Resolves: RHEL-133735
  - Resolves: RHEL-133763


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-6
changelog:
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-133733
  - Related: RHEL-133735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-1
changelog:
  - Update to jdk-25.0.2+10 (GA)
  - Update release notes to 25.0.2+10
  - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
  - Test for java.security's existence in create-redhat-properties-files.bash
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
  - Resolves: RHEL-139579
  - Resolves: RHEL-131430
  - Resolves: RHEL-131443
  - Resolves: RHEL-142855
  - Resolves: RHEL-142799


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-139579
  - Related: RHEL-131430
  - Related: RHEL-131443
  - Related: RHEL-142855
  - Related: RHEL-142799


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-3
changelog:
  - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
  - Fix FIPS issue list to represent the new 25u version
  - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
  - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
  - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
  - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526
  - Bump harfbuzz version to 12.3.2 following JDK-8375057
  - Bump nssadapter version to bring in shared PKCS11 session fix
  - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
  - Resolves: RHEL-155000
  - Resolves: RHEL-146649
  - Resolves: RHEL-148327
  - Resolves: RHEL-148830
  - Resolves: RHEL-155044


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.2.0.10-3
changelog:
  - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
  - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
  - Resolves: RHEL-150976


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-4
changelog:
  - Add tagging scripts with signature checks and gating handling
  - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3.
  - Add gating scripts to simplify obtaining results and waiving issues
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-155327
  - Resolves: RHEL-155337
  - Resolves: RHEL-155339
  - Related: RHEL-155000
  - Related: RHEL-146649
  - Related: RHEL-148327
  - Related: RHEL-148830


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.3.0.9-1
changelog:
  - Update to jdk-25.0.3+9 (GA)
  - Update release notes to 25.0.3+9
  - Update FIPS patch to 57722aab802 version synced with 25.0.3+8
  - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream
  - Drop local HarfBuzz patch now JDK-8375057 is included upstream
  - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158
  - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078
  - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047
  - Bump zlib version to 1.3.2 following JDK-8378631
  - Bump tzdata version to 2026a following JDK-8379035
  - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
  - Resolves: RHEL-169620
  - Resolves: RHEL-157091
  - Resolves: RHEL-161217
  - Resolves: RHEL-161333
  - Resolves: RHEL-169613


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.3.0.9-3.1
changelog:
  - Cleanup tagging and gating scripts to appease shellcheck:
  - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
  - * scripts/builds/check_signatures.sh: Quote variable usage.
  - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
  - * scripts/builds/waive_leapp_issue.sh: Likewise.
  - * scripts/builds/waive_rpminspect.sh: Likewise.
  - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
  - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
  - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
  - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
  - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-155327
  - Related: RHEL-155339
  - Resolves: RHEL-150977
  - Resolves: RHEL-210972
  - Resolves: RHEL-210993


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.4.0.7-1.1
changelog:
  - Update to jdk-25.0.4+7 (GA)
  - Update release notes to 25.0.4+7
  - Bump freetype version to 2.14.3 following JDK-8385390
  - Bump giflib version to 6.1.3 following JDK-8384902
  - Bump HarfBuzz version to 14.2.0 following JDK-8385490
  - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354
  - Bump libpng version to 1.6.58 following JDK-8384495
  - Require tzdata 2026b due to upstream inclusion of JDK-8383175
  - Drop local copy of JDK-8375294 EOPNOTSUPP patch
  - Obsolete old RHEL releases (9.7.0-z, 10.1-z)
  - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
  - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
  - Make zone string debug output optional in TestTranslations
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
  - Resolves: RHEL-188883
  - Resolves: RHEL-212294
  - Resolves: RHEL-212296


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.4.0.7-2.1
changelog:
  - Add CVEs to NEWS file
  - Update to tarball with final changeset ID
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-188883


author: Čestmír Kalina <ckalina@redhat.com> - 0.29giteedfcb
changelog:
  - Bump release and update to the latest upstream version
    Fix DW_TAG_unspecified_type issue
    Resolves: RHEL-52280


author: Martin Osvald <mosvald@redhat.com> - 2.6.1-4
changelog:
  - Add missing changes to service files so kea starts as non-root
  - Fix startup failures during upgrade due to wrong permissions and
    ownership


author: Martin Osvald <mosvald@redhat.com> - 2.6.3-1
changelog:
  - New version 2.6.3
  - Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
  - kea.conf: Remove /tmp/ from socket-name for existing configurations
  - kea.conf: Set pseudo-random password for default config to secure fresh
    install and allow CA startup without user intervention
  - kea.conf: Restrict directory permissions
  - Sync service files with upstream
  - Fix leases ownership when switching from root to kea user


author: Martin Osvald <mosvald@redhat.com> - 3.0.0-1
changelog:
  - New version 3.0.0
  - Remove broken keactrl in favor of systemd unit files
  - kea.spec: General cleanup and removal of lines that have no effect
  - kea-msg-compiler was moved from kea to kea-devel


author: Petr Menšík <pemensik@redhat.com> - 1.8.3-15
changelog:
  - Remove unneeded openssl/engine.h causing build failures
  - Explicitly disable openssl engine (RHEL-33736)


author: Fedor Vorobev <fvorobev@redhat.com> - 1.8.3-19
changelog:
  - Fix CVE-2026-10846: Off-path poisoning attacks due to insufficient
    query-response matching (RHEL-210693)


author: Michal Ruprich <mruprich@redhat.com> - 4.9.2-20
changelog:
  - Adding a timeout for TLS close
  - Resolves: RHEL-113472 - "cannot seek on data source" in TLS lftp sessions


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.8.7-1
changelog:
  - libX11 1.8.7
    - CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms()
    - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in
      PutSubImage()
    - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
     a heap overflow
    - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
    - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: José Expósito <jexposit@redhat.com> - 1.8.7-4
changelog:
  - Fix XTS test XCopyColormapAndFree/5 hangs
    Resolves: https://issues.redhat.com/browse/RHEL-40132
  - Fix RHEL SAST Automation errors
    Resolves: https://issues.redhat.com/browse/RHEL-34918


author: Olivier Fourdan <ofourdan@redhat.com> - 2.0.6-6
changelog:
  - CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003
    Resolves: https://redhat.atlassian.net/browse/RHEL-191884
    Resolves: https://redhat.atlassian.net/browse/RHEL-191931
    Resolves: https://redhat.atlassian.net/browse/RHEL-191945


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-3
changelog:
  - Fix creating MD RAID arrays without specifying bitmap localtion
    Resolves: RHEL-31379
  - crypto: Fix double free in bd_crypto_luks_remove_key
    Resolves: RHEL-31489
  - tests: Fix running tests without ntfsprogs
    Resolves: RHEL-32875


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-6
changelog:
  - Fix passing size for pvresize over DBus
    Resolves: RHEL-45872
  - Upstream kernel VDO support
    Resolves: RHEL-31953


author: Vojtech Trefny <vtrefny@redhat.com> - 2.8-21
changelog:
  - New version - 2.8 (Vojtech Trefny)
  - ci: Do not use release descriptions for Packit builds (Vojtech Trefny)
  - Do not hardcode pylint executable name in Makefile (Vojtech Trefny)
  - Remove unused test dependencies variables from Makefile (Vojtech Trefny)
  - docs: Remove information about Python 2 support (Vojtech Trefny)
  - Various docstring fixes (Vojtech Trefny)
  - Replace C++ style comments with C style (Vojtech Trefny)
  - Make use of error optional (Vojtech Trefny)
  - spec: Fix source archive URL (Vojtech Trefny)
  - ci: Add Packit automation for downstream builds (Vojtech Trefny)
  - spec: Bump release to 21 for Packit daily builds (Vojtech Trefny)
  - ci: Use Packit for daily builds in Copr (Vojtech Trefny)
  - ci: Remove GitHub action for RPM builds (Vojtech Trefny)
  - ci: Add Packit configuration for RPM builds on pull requests (Vojtech Trefny)
  - configure.ac: Remove invalid email address for bug reports (Vojtech Trefny)
  - ci: Update chroots for RPM builds (Vojtech Trefny)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Added translation using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - misc: Remove "warn: false" from Ansible "command" (Vojtech Trefny)
  - Translated using Weblate (Georgian) (Temuri Doghonadze)
  - spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny)
  - Added translation using Weblate (Georgian) (Temuri Doghonadze)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Update Fedora versions for RPM build tests (Vojtech Trefny)
  - ci: Rename csmock.Dockerfile to ci.Dockerfile (Vojtech Trefny)
  - ci: Update the csmock GitHub actions configuration (Vojtech Trefny)
  - ci: Run rpmbuild tests in GitHub actions (Vojtech Trefny)
  - Add a GitHub action for running csmock static analysis (Vojtech Trefny)
  - README: Remove the Travis CI badge (Vojtech Trefny)
  - Sync spec with downstream (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.9-21
changelog:
  - New version - 2.9 (Vojtech Trefny)
  - build: Exit before AC_OUTPUT on error (Tomas Bzatek)
  - tests: fix locale tests on musl (triallax)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Manually prepare spec file for Packit (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - New version - 2.10 (Vojtech Trefny)
  - Rename 'master' branch to 'main' (Vojtech Trefny)
  - remove dependency on python3-six and python2 crumbs (Alexandre Detiste)
  - ci: Bump actions/checkout from v3 to v4 (Vojtech Trefny)
  - Squashed 'translation-canary/' changes from 4d4e65b..5bb8125 (Vojtech Trefny)
  - dist: Fix release number in spec (Vojtech Trefny)


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Adam Prikryl <aprikryl@redhat.com> - 0.9.3-2
changelog:
  - Rebuild to enable netcap --advanced (kernel-headers now provides vm_sockets.h)
    Resolves: RHEL-208587
  - Fix build failure on non-BPF architectures
    Resolves: RHEL-185783


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-6
changelog:
  - RHEL-26148 - fix grayscale/color raster printing via AirPrint
  - RHEL-29726 Backport fix for typo influencing image filtering from CMYK to CMY


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60322 CVE-2024-47076 libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1:2.0.0-12
changelog:
  - RHEL-212655 CVE-2026-64612 libcupsfilters: Handle libpng errors
    via longjmp()/setjmp() to prevent process abort on malformed PNG


author: Pavel Cahyna <pcahyna@redhat.com> - 6.1.3-8
changelog:
  - migrated to SPDX license, originally from Fedora by <msuchy>
  - Correct License: some files are GPL 2 or GPL 3, but not later


author: Attila Lakatos <alakatos@redhat.com> - 1.2304.0-1
changelog:
  - Rebase to 1.2304.0 (new release number scheme, now like rsyslog)
  Resolves: rhbz#2183193
  - Address CVE-2020-12762
  Resolves: rhbz#2203170


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-1
changelog:
  - Rebase to libguestfs 1.52.2 (along the stable branch)
  - Remove dependency on syslinux packages
    resolves: RHEL-50565


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-4
changelog:
  - Synchronize patches with RHEL 9.5
    resolves: RHEL-56325
  - appliance/init: Don't set impossible "noop" disk scheduler
    resolves: RHEL-56157


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-5
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56810
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62989
  - Replace Jansson with json-c
    resolves: RHEL-65293
  - Remove squashfs-tools on RHEL
    resolves: RHEL-68937
  - Fix perl-Sys-Guestfs debuginfo
    resolves: RHEL-68973


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.56.1-3
changelog:
  - Rebase to libguestfs 1.56.1
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170
  - Add btrfs-scrub-full API
    resolves: RHEL-91936
  - Add e2fsck forceno flag
    resolves: RHEL-92599
  - Capture and raise qemu-img stderr
    resolves: RHEL-92239
  - Ignore btrfs snapshots of roots
    resolves: RHEL-93109
  - Add /etc/fstab, lsblk and blkid to verbose output
    resolves: RHEL-106490
  - Fix conversion of SLES15 with encrypted btrfs filesystem
    resolves: RHEL-93584
  - Add guestfs_setfiles API
    resolves: RHEL-108832
  - Ignore blank disks in Windows drive mapping
    resolves: RHEL-109258


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-2
changelog:
  - Rebase to libguestfs 1.58.1
    resolves: RHEL-111240
  - Synchronize spec file with Fedora
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833
  - Use setfiles -A option if available to reduce memory usage
    resolves: RHEL-114292
  - Add -cpu max when testing for KVM via QMP
    resolves: RHEL-121076
  - Require passt
    resolves: RHEL-122315
  - Add AV and GPOs to inspection info
    resolves: RHEL-125846
  - Add new xfs_info2 API
    resolves: RHEL-143673


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.7-1
changelog:
  - Rebase to libguestfs 1.59.7
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.8-1
changelog:
  - Rebase to libguestfs 1.59.8
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.9-1
changelog:
  - Rebase to libguestfs 1.59.9
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895
  - Ignore RHEL 7 XFS AGFL inconsistency
    resolves: RHEL-178287
  - Allow shell commands with immutable resolv.conf
    resolves: RHEL-178556


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.60.1-1
changelog:
  - Rebase to libguestfs 1.60.1
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895
  - Ignore RHEL 7 XFS AGFL inconsistency
    resolves: RHEL-178287
  - Allow shell commands with immutable resolv.conf
    resolves: RHEL-178556


author: Tomas Popela <tpopela@redhat.com> - 1.0.5-19
changelog:
  - Disable python support. This package is only in RHEL 10, because
    tracker-miners requires it and it doesn't need the Python bits.
  - Resolves: RHEL-52843


author: Jerry James <loganjerry@gmail.com> - 3.28.0-1
changelog:
  - Update to 3.28.0
  - Install internal.h for MuseScore
  - Drop ancient obsoletes
  - Build the python package with dist-info
  - Add tables subpackage for the noarch data
  - Complete and correct SPDX migration
  - Remove need for chrpath
  - Minor spec file cleanups


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49802
  - Print full NBD error from server
    resolves: RHEL-50667


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-2
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104019


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.0-1
changelog:
  - Rebase to libnbd 1.24.0
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.1-1
changelog:
  - Rebase to libnbd 1.24.1
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Richard W.M. Jones <rjones@redhat.com> - 1.25.6-1
changelog:
  - Rebase to libnbd 1.25.6
  - Synch spec file with Fedora
    resolves: RHEL-153363
  - Fix command injection in nbd+ssh URIs
    resolves: RHEL-189057


author: Richard W.M. Jones <rjones@redhat.com> - 1.25.7-1
changelog:
  - Rebase to libnbd 1.25.7
  - Synch spec file with Fedora
    resolves: RHEL-153363
  - Fix command injection in nbd+ssh URIs
    resolves: RHEL-189057
  - Fix regression in nbd+ssh URIs caused by preceding change
    resolves: RHEL-217012


author: Tomas Popela <tpopela@redhat.com> - 0.8.3-5
changelog:
  - Drop the requirement on docbook5-style-xsl as it will be removed from RHEL.
    As it was used to build the man page, add the man page in the native format.
  - Resolves: RHEL-45565


author: Dmitry Belyavskiy - 0.10.1-1
changelog:
  - Rebase to 0.10.1 version (CVE-2024-36405)
    Resolves: RHEL-40699
  - Use dlopen for OpenSSL algos implementation
    Resolves: RHEL-46598
  - Correct license naming
    Resolves: RHEL-45265


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-9
changelog:
  - CVE-2025-64720: buffer overflow (RHEL-131432)
  - CVE-2025-65018: heap buffer overflow (RHEL-131445)
  - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133216)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-10
changelog:
  - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148832)
  - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146650)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-13
changelog:
  - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161334)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60335 CVE-2024-47175 libppd: remote command injection via attacker controlled data in PPD file


author: Remi Collet <remi@remirepo.net> - 0.12.0-1
changelog:
  - update to 0.12.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/749
  - add patch to fix version in pkgconfig file, from
    https://github.com/alanxz/rabbitmq-c/pull/751


author: Attila Lakatos <alakatos@redhat.com> - 1.11.0-9
changelog:
  - Backport: fix SSL_CONF_cmd/SSL_new ordering in OpenSSL client connect path
    Resolves: RHEL-188813


author: Kalev Lember <klember@redhat.com> - 2.57.0-2
changelog:
  - Update the license tag to reflect the licenses of all rust dependencies
  - Use cargo_license_summary and cargo_license macros
  - Convert to SPDX identifiers


author: Romain Geissler <romain.geissler@amadeus.com> - 0.21.2-8
changelog:
  - Backport packaging of mock service from Fedora in order to consume it in EPEL
    Resolves: RHEL-81780


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - setexecfilecon: Remove useless rc check (RHEL-35586)
  - matchpathcon: RESOURCE_LEAK: Variable "con" (RHEL-35584)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.1.0-7
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-8
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148253)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-9
changelog:
  - backport documentation change for CVE-2023-52355 (RHEL-179103)
  - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159311)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-11
changelog:
  - fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189377)
  - make sure documentation is updated during build for CVE-2023-52355 (RHEL-179103)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-1
changelog:
  - Version 2.10.1
  - Default to ntfs-3g for stability reasons (#2182206)
  - Use Recommends: for filesystem tools (#2169848)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-3
changelog:
  - Use a SPDX license tag
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - udiskslinuxmanager: Fix use after free
  - tests: Fix targetcli_config.json


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.90-4
changelog:
  - Rebase to upstream 2.10.90 (pre-)release
  - lvm2: Try opening for unused device detection harder (RHEL-39935)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.11.0-1
changelog:
  - Version 2.11.0 (RHEL-114981)
  - tests: Rework nvme revision check (RHEL-90572)
  - tests: Adapt for missing fstab and crypttab (RHEL-78987)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.11.1-1
changelog:
  - Version 2.11.1 (RHEL-150897)
  - udiskslinuxnvmecontroller: Fix sanitize job start (RHEL-69113)
  - udiskslinuxpartitiontable: Fix missing job completion (RHEL-124987)
  - udiskslinuxdevice: multipath handling fixes (RHEL-128598)
  - lvm2: Prevent a segfault on discarded probe output (RHEL-138293)
  - udisksmodulemanager: Silence console warnings when requested module is not available (RHEL-144145)
  - tests: Make sure to load sr_mod for cdrom tests (RHEL-153132)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-3
changelog:
  - util: json: Increase JSON nesting limit when parsing to 300 (RHEL-135181)
  - virjsontest: Add test for nesting depth (RHEL-135181)
  - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-114412)
  - esx: Allow connecting to IPv6 server (RHEL-138300)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-4
changelog:
  - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
  - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
  - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
  - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
  - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
  - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
  - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
  - esx: Debug URL just before opening with curl (RHEL-138300)
  - esx: Abstract all URL-creation code into one function (RHEL-138300)
  - esx: Switch to creating URLs using virURIFormat (RHEL-138300)
  - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
  - esx: URI encode inventory objects twice (RHEL-140196)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-5
changelog:
  - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
  - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
  - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-6
changelog:
  - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
  - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
  - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
  - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
  - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-8
changelog:
  - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
  - qemu: Ignore cmp_legacy CPU flag (RHEL-148494)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-9
changelog:
  - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
  - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
  - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
  - qemu: Implement support for persistent reservation migration control (RHEL-135115)
  - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
  - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
  - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
  - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
  - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
  - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335)
  - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335)
  - Introduce support for disk operation latency histogram collection (RHEL-131335)
  - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-10
changelog:
  - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
  - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
  - util: Move openning IOMMU device to viriommufd (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
  - util: Move openning VFIO device to virpci (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
  - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
  - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
  - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
  - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
  - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
  - qemuxmlconftest: Refactor host device preparation (RHEL-150351)
  - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
  - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
  - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
  - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
  - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
  - qemu: Save IOMMUFD state into status XML (RHEL-150351)
  - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
  - qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
  - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
  - conf: Introduce iommufd enum for domaincaps (RHEL-148135)
  - qemu: Fill iommufd domain capability (RHEL-148135)
  - tests: properly mock VFIO and IOMMU checks (RHEL-148135)
  - iommufd: fix FD leak in case of error (RHEL-150351)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-11
changelog:
  - qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
  - qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
  - qemu_firmware: Move format=raw compat exception (RHEL-82645)
  - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
  - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
  - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
  - tests: Add firmware-auto-bios-rw (RHEL-82645)
  - tests: Add firmware-manual-bios-rw (RHEL-82645)
  - domain_validate: Reject read/write ROMs (RHEL-82645)
  - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
  - domain_validate: Reject ROMs with format other than raw (RHEL-82645)
  - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
  - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
  - schemas: Allow templateFormat without template path (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
  - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
  - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
  - qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
  - qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
  - qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
  - qemu_firmware: Prefer template format to loader format (RHEL-82645)
  - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
  - qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
  - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
  - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
  - tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
  - tests: Add firmware-manual-efi-tdx (RHEL-82645)
  - qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
  - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
  - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
  - schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Document firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
  - docs: Improvement related to firmware selection (RHEL-82645)
  - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
  - conf: Move type=rom default for loader to drivers (RHEL-82645)
  - tests: Rename custom JSON firmware descriptors (RHEL-82645)
  - schema: Introduce osnvram define (RHEL-82645)
  - conf: Parse and format varstore element (RHEL-82645)
  - conf: Update validation to consider varstore element (RHEL-82645)
  - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
  - qemu: Validate presence of uefi-vars device (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
  - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
  - qemu_firmware: Split sanity check (RHEL-82645)
  - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
  - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
  - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
  - conf: Include varstore element in domcaps (RHEL-82645)
  - qemu: Fill in varstore element in domcaps (RHEL-82645)
  - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
  - qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
  - qemu_firmware: Fill in varstore information (RHEL-82645)
  - qemu: Introduce varstoreDir (RHEL-82645)
  - qemu_firmware: Generate varstore path when necessary (RHEL-82645)
  - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
  - qemu: Create and delete varstore file (RHEL-82645)
  - security: Mark ROMs as read only when using AppArmor (RHEL-82645)
  - security: Handle varstore file (RHEL-82645)
  - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
  - qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
  - include: Mention varstore where applicable (RHEL-82645)
  - virsh: Update for varstore handling (RHEL-82645)
  - domain_conf: initialize network hostdev private data (RHEL-151916)
  - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-12
changelog:
  - test: Default to ROM type for loader (RHEL-82645)
  - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)


author: Jiri Denemark <jdenemar@redhat.com> - 11.4.0-1
changelog:
  - Rebased to libvirt-11.4.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-79460, RHEL-84783, RHEL-85414, RHEL-86952, RHEL-87177
      RHEL-88747, RHEL-89414, RHEL-90160, RHEL-90625, RHEL-92510


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-1
changelog:
  - Rebased to libvirt-11.5.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-86592, RHEL-93775, RHEL-95749, RHEL-100109


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-2
changelog:
  - virSystemdCreateMachine: Document @maxthreds (RHEL-95361)
  - cgroup: Unexport 'virDomainCgroupInitCgroup' (RHEL-95361)
  - qemu: conf: Store 'autoShutdown' config in virDomainDriverAutoShutdownConfig (RHEL-95361)
  - hypervisor: domain: Extract logic for auto shutdown to virDomainDriverAutoShutdownActive (RHEL-95361)
  - virSystemdCreateMachine: Add flag to invert machined unit dependencies (RHEL-95361)
  - cgroup: Plumb the 'daemonDomainShutdown' parameter of 'virSystemdCreateMachine' to drivers (RHEL-95361)
  - qemu: Fix auto-shutdown of qemu VMs by the qemu driver (RHEL-95361)
  - hypervisor: Split out individual steps out of virDomainDriverAutoShutdown (RHEL-95196)
  - virDomainDriverAutoShutdownDoSave: Don't attempt to save transient VMs (RHEL-95196)
  - virDomainDriverAutoShutdown: Refactor selection logic for VMs (RHEL-95196)
  - tls: Don't require 'keyEncipherment' to be enabled altoghther (RHEL-100711)
  - kbase: tlscerts: Drop 'encryption_key' feature request (RHEL-100711)
  - tests: virnettls*test: Drop use of GNUTLS_KEY_KEY_ENCIPHERMENT (RHEL-100711)
  - qemu_tpm: Rename qemuTPMHasSharedStorage -> qemuTPMDomainHasSharedStorage (RHEL-80155)
  - qemu_tpm: Extract per-TPM functionality from qemuTPMDomainHasSharedStorage (RHEL-80155)
  - qemu_tpm: Only warn about missing locking feature on shared filesystems (RHEL-80155)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-4
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-104382)
  - qemu: sanitize blank lines in config file (RHEL-104382)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-104382)


author: Jiri Denemark <jdenemar@redhat.com> - 11.7.0-1
changelog:
  - Rebased to libvirt-11.7.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-72006, RHEL-110191


author: Jiri Denemark <jdenemar@redhat.com> - 11.8.0-1
changelog:
  - Rebased to libvirt-11.8.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-7038, RHEL-50320, RHEL-62032, RHEL-79806, RHEL-113574
      RHEL-116690


author: Jiri Denemark <jdenemar@redhat.com> - 11.9.0-1
changelog:
  - Rebased to libvirt-11.9.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-87522, RHEL-95818, RHEL-122932


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-1
changelog:
  - Rebased to libvirt-11.10.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-74200, RHEL-80679, RHEL-104216, RHEL-104427, RHEL-113843
      RHEL-118671, RHEL-122751, RHEL-126854, RHEL-126945, RHEL-128105
  - spec: Fix RPM build when %{fedora} is undefined (RHEL-104238)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-2
changelog:
  - tests: add test for a single per-device smmuv3 (RHEL-74200)
  - qemu: Use pci_bus to identify multi-smmuv3 model (RHEL-74200)
  - qemu: tpm: Account for possible migration without actually sharing storage (RHEL-132534)
  - tests: Test virFileIsSharedFSOverride (RHEL-102925)
  - util: Fix race condition in virFileIsSharedFSType (RHEL-102925)
  - util: Fix race condition in virFileIsSharedFSOverride (RHEL-102925)
  - util: Rework virFileIsSharedFSOverride using virFileCheckParents (RHEL-102925)


author: Jiri Denemark <jdenemar@redhat.com> - 12.2.0-1
changelog:
  - Rebased to libvirt-12.2.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-76301, RHEL-114415, RHEL-118303, RHEL-145306, RHEL-147660
      RHEL-147661, RHEL-148219, RHEL-150883, RHEL-153832, RHEL-154252
      RHEL-154292, RHEL-154549, RHEL-156689, RHEL-156800, RHEL-156804
      RHEL-159134


author: Jiri Denemark <jdenemar@redhat.com> - 12.4.0-1
changelog:
  - Rebased to libvirt-12.4.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-76301, RHEL-114415, RHEL-118303, RHEL-145306, RHEL-145937
      RHEL-147660, RHEL-147661, RHEL-148219, RHEL-150883, RHEL-153832
      RHEL-154252, RHEL-154292, RHEL-154549, RHEL-155804, RHEL-155809
      RHEL-156689, RHEL-156800, RHEL-156804, RHEL-159134, RHEL-164023
      RHEL-169588, RHEL-170773, RHEL-170993, RHEL-174300, RHEL-176438


author: Jiri Denemark <jdenemar@redhat.com> - 12.5.0-1
changelog:
  - Rebased to libvirt-12.5.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-180448, RHEL-181350, RHEL-185108, RHEL-186015, RHEL-187057


author: Ville-Pekka Vainio <vpvainio@iki.fi> - 4.3.2-1
changelog:
  - New upstream release
  - Update C++ standard from C++11 to C++14
  - Compilation fixes for recent versions of GCC
  - Small fixes to Finnish grammar checker


author: Peter Hutterer <peter.hutterer@redhat.com>
changelog:
  - SPDX migration: update to SPDX identifiers.
    Turns out the COPYING file references the HPND, not MIT.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.7.2-10
changelog:
  - Support added for post-quantum cryptography
    Resolves: RHEL-93091
  - Remove deprecated path from systemd service file
    Resolves: RHEL-101169


author: Toke Høiland-Jørgensen <toke@redhat.com> 1.5.7-1
changelog:
  - Upstream version bump
  - Add annocheck exceptions for BPF objects (Felix)
  - Re-enable debug builds (Felix)
  - Add libcap-ng-devel to BuildDepends


author: Michal Ruprich <mruprich@redhat.com> - 2.1.148-4
changelog:
  - DoS or arbitrary code execution via maliciously crafted LYB binary blob
  - Resolves: RHEL-177026 - CVE-2026-44673


author: Joerg Schmidbauer <jschmidb@de.ibm.com> - 1.2.0
changelog:
  - Support for get/set intermediate iv for CBC and XTS
  - Support for internal iv for GCM
  - Exploit KBLOB2PROTK3 ioctl for clear AES and EC keys
  - Fix AES EP11 version 6 key support for generate and import_clear


author: Dan Horák <dhorak@redhat.com> - 1.5.0-1
changelog:
  - Update to 1.5.0
  - Add support for Live Guest Relocation (RHEL-72962)
  - Resolves: RHEL-136124 RHEL-72962


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-4
changelog:
  - update selinux policy (RHEL-29728)
  - limit unicast message rate per address and grant duration (RHEL-29738)
  - allow old syntax of SET SUBSCRIBE_EVENTS_NP command (RHEL-29738)
  - fix loading and reloading of leapfile (RHEL-29738)
  - fix ts2phc to handle large NMEA delay (RHEL-29737)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.3-1
changelog:
  - update to 4.3 (RHEL-54718)
  - add holdover support to ts2phc (RHEL-54716)
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-54719)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-54724)
  - fix ts2phc to correctly handle leap seconds (RHEL-54721)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58210)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60055)
  - support static sink clocks in phc2sys automatic mode (RHEL-69145)
  - don't require -O option without -a and -w in phc2sys (RHEL-69699)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-3
changelog:
  - add experimental option for external PPS in ts2phc automatic mode
    (RHEL-89605)
  - add command to set external grandmaster properties (RHEL-91310)
  - refresh link status on faults (RHEL-89811)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-6
changelog:
  - add support for dropping root privileges (disabled by default) (RHEL-12183)
  - create linuxptp user and /run/ptp directory


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-9
changelog:
  - fix phc2sys service to allow clocks specified by interface (RHEL-165199)
  - fix high CPU usage by ptp4l when link is down (RHEL-173418)
  - fix phc2sys to not get stuck in static mode (RHEL-187951)


author: Michael Jeanson <mjeanson@efficios.com> - 2.13.5-1
changelog:
  - New upstream release
  - Add builddep on python3-setuptools in prevision of python 3.12 removing distutils


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-4
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).
  - Workaround for NVMe WWID changing after kernel update.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9.0-dev.12.1
changelog:
  - %{gpgverify} sources
  - remove upstreamed patches
  - update to new upstream release
  - use compressed man pages


author: Thomas E. Dickey <dickey@invisible-island.net> - 2.9.0-3
changelog:
  - add brotli build-dependency
  - restore formerly-empty sample files
  - remove a couple of obsolete workarounds for installing


author: Mike FABIAN <mfabian@redhat.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Fix parallel builds by switching from absolute to relative paths
    (Resolves: https://savannah.nongnu.org/bugs/index.php?61377)
  - enable parallel builds in the spec file

  - Update to 1.8.1
  - Remove m17n-lib-c99.patch (included upstream)
  - Remove Fix-segmentation-fault-when-using-ibus-m17n-with-vi-telex-in-gedit-in-wayland.patch
    (included upstream)


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Fixes to be able to create m17n-docs-1.8.3: Fix doxygen tags, change all EUC-JP files to UTF-8


author: Mike FABIAN <mfabian@redhat.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - Fixes “typedef in m17n-core.h causing error when compiling with C++ code”
    (Resolves: https://savannah.nongnu.org/bugs/index.php?64566)


author: Michal Schorm <mschorm@redhat.com> - 3.1.20-2
changelog:
  - Fix minimal required version of mariadb-connector-c as per:
    https://mariadb.com/kb/en/mariadb-connector-odbc-3-1-20-release-notes/


author: Jindrich Novy <jnovy@redhat.com> - 1:4.8.31-1
changelog:
  - update to 4.8.31
  - drop upstreamed python3 patch
  - rename fish -> shell
  - drop obsolete smb option


author: Fabio Valentini <decathorpe@gmail.com> - 1.2.0-3
changelog:
  - Rebuild for fixed frame pointer compiler flags in Rust RPM macros.
  - Slightly modernize Rust packaging (drop ExclusiveArch, __cargo_skip_build).


author: Alex Williamson <alex.williamson@redhat.com> - 1.3.0-1
changelog:
  - New upstream release: https://github.com/mdevctl/mdevctl/releases/tag/v1.3.0
  - Note upstream moved default script location from /etc/mdevctl.d/scripts.d
    to /usr/lib/mdevctl/scripts.d.  Both locations are currently supported, the
    new locations is recommended.


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 0:1.6.23-8
changelog:
  - Fix timing side-channel in SASL password database authentication
    (CVE-2026-47783)
  - Resolves: RHEL-179085


author: Kairui Song <ryncsn@gmail.com> - 0.2.5-1
changelog:
  - Update to upstream latest release.
  - Fix crash when wrong reporter type is used.
  - Fix a few tracing error.


author: Jocelyn Falempe <jfalempe@redhat.com> - 26.1.1-1
changelog:
  - update to 26.1.1
  - remove patches that are in upstream
  - remove vdpau
  - update version of dependencies
  - update rust libwrap filename


author: Joe Orton <jorton@redhat.com> - 1.14.2-21
changelog:
  - restore plaintext password storage by default (per upstream)
  - restrict symbols exposed by DSOs built for httpd


author: Tomas Korbar <tkorbar@redhat.com> - 1.14.3-3
changelog:
  - Fix building with gcc 14
  - incompatible-pointer-types warnings became errors, but they've
  been present for a long time and posed no threat, thus revert
  the behaviour
  - Resolves: rhbz#2259155


author: Joe Orton <jorton@redhat.com> - 1.14.5-2
changelog:
  - update to 1.14.5 (#2331047)
  - use %autosetup
  - enable tests by default again
  - conditionalize Ruby tests (Yaakov Selkowitz)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-1
changelog:
  - new version 2.0.29
  - Resolves: RHEL-45807 - mod_http2: DoS by null pointer in websocket over
    HTTP/2 (CVE-2024-36387)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-3
changelog:
  - Resolves: RHEL-106263 - CVE-2025-49630 httpd: untrusted input from a client
    causes an assertion to fail in the Apache mod_proxy_http2 module


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-4
changelog:
  - Resolves: RHEL-166269 - httpd: Apache HTTP Server: HTTP/2 DoS by Memory
    Increase (CVE-2025-53020)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-5
changelog:
  - Resolves: RHEL-134484 - httpd: Apache HTTP Server: mod_md (ACME), unintended
    retry intervals (CVE-2025-55753)


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_proxy_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-55407 - Rebase mod_proxy_cluster to upstream 1.3.20.Final release


author: Cristian Le <cristian.le@mpsd.mpg.de> - 4.1.2-13
changelog:
  - Added CMAKE_PREFIX_PATH to the module file to unsure that CMake projects
    find the available MPI enabled packages, libraries, executables, etc.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.17.10-11
changelog:
  - Remove redundand restorecon call, redirect safe to ignore output
    to /dev/null, mark module directory to avoid rpm verification
    Resolves: RHEL-67894


author: Richard W.M. Jones <rjones@redhat.com> - 1.40.0-2
changelog:
  - Rebase to nbdkit 1.40.0
    related: RHEL-49594
  - Send the last error to the NBD client
    resolves: RHEL-50666


author: Richard W.M. Jones <rjones@redhat.com> - 1.44.1-2
changelog:
  - Rebase to nbdkit 1.44.1
    resolves: RHEL-78830, RHEL-101180
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-count-filter & nbdkit-time-limit-filter.
  - Remove nbdkit-cacheextents-filter.
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819
  - Add support for VDDK 9.0.0.0
    resolves: RHEL-99467
  - server: Fix .zero fallback path
    resolves: RHEL-101636


author: Richard W.M. Jones <rjones@redhat.com> - 1.45.17-1
changelog:
  - Rebase to nbdkit 1.45.17
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-1
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-2
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-3
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff and nbdkit_name from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.2-1
changelog:
  - Rebase to nbdkit 1.46.2
  - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp
    from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Josef Ridky <jridky@redhat.com> - 1:5.9.4-20
changelog:
  - revert default snmpd.conf change from -15 that restricted SNMP view
    to system MIB only, breaking third-party MIBs (RHEL-86820)


author: Florian Weimer <fweimer@redhat.com> - 11.02.00-5
changelog:
  - GCC 14 compatibility fixes:
    Drop netpbm-cmuwtopbm.patch to fix an out-of-bounds stack write (#2259450)
    Stub out unused converter/other/jpeg2000/libjasper_compat.c (#2259448)


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-4
changelog:
  - nfsiostat: normalize the mountpoints passed in from the command line (RHEL-90562)
  - Remove /var/lib/nfs/v4recovery (RHEL-137935)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-5
changelog:
  - mountd: Minor refactor of get_rootfh() (RHEL-127093)
  - mountd: Separate lookup of the exported directory and the mount path (RHEL-127093)
  - support: Add a mini-library to extract and apply RPC credentials (RHEL-127093)
  - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127093)
  - Add requires for selinux-policy (RHEL-127093)
    Resolves: CVE-2025-12801


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-6
changelog:
  - nfsdctl: ignore ipv6 listener creation error (RHEL-71352)
  - nfsdclnts: fix display of stateids where the kernel doesn't provide the superblock (RHEL-151444)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-7
changelog:
  - nfsrahead: enable event-driven mountinfo monitoring and skip non-NFS devices (RHEL-158528)
  - nfsrahead: zero-initialise device_info struct (RHEL-158528)
  - nfsrahead: quieten misleading error for non-NFS block devices (RHEL-158528)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-9
changelog:
  - nfsd: don't assume service is running when setting thread count to 0 (RHEL-174806)
  - Pass ignore_hosts to export_create() in export_read() (RHEL-223703)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.3-6
changelog:
  - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack
    on TLS proxied connections


author: pdancak <pdancak@redhat.com> - 2:1.26.3-7
changelog:
  - RHEL-159548 - CVE-2026-27654 nginx: NGINX: Denial of Service or file
    modification via buffer overflow in ngx_http_dav_module


author: pdancak <pdancak@redhat.com> - 2:1.26.3-8
changelog:
  - RHEL-159527 - CVE-2026-27784 nginx: NGINX: Denial of Service due to
    memory corruption via crafted MP4 file


author: pdancak <pdancak@redhat.com> - 2:1.26.3-9
changelog:
  - RHEL-159435 - CVE-2026-27651 nginx: NGINX: Denial of Service via
    undisclosed requests when ngx_mail_auth_http_module is enabled


author: pdancak <pdancak@redhat.com> - 2:1.26.3-10
changelog:
  - RHEL-157876 CVE-2026-32647 nginx: NGINX: Denial of Service or Code
    Execution via specially crafted MP4 files


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.3-12
changelog:
  - Fixes CVE-2026-9256, CVE-2026-42055 and HTTP/2: Remote Denial of Service
    via compression bomb and Slowloris-style attack


author: Joe Orton <jorton@redhat.com> - 2:1.26.2-2
changelog:
  - Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
    start nginx@foobar.service" to start an instance of nginx using
    /etc/nginx/foobar.conf as the configuration.


author: Martin Osvald <mosvald@redhat.com> - 4:7.92-1
changelog:
  - Downgrade Nmap to 7.92 to fix NPSL licensing issue
  - nmap.spec: fix missing versioned Obsoletes and add ncat to Provides


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91250
  - Support nmpolicy against down iface. RHEL-86240
  - Support removal VLAN connection with empty ifname. RHEL-92916


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-37922
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-1415
  - Support matching by PCI adress. RHEL-80116
  - Apply dispatch changes first. RHEL-94840
  - Fix SRIOV VF reference. RHEL-91588
  - Fix deleting with `fail_over_mac` bond. RHEL-102600


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.49-1
changelog:
  - Upgrade to 2.2.49
  - Ignore desired MAC for bonds with fail_over_mac. RHEL-106135
  - Fix setting DNS only with search or option. RHEL-102333


author: Mingyu Shi <mshi@redhat.com> - 2.2.50-1
changelog:
  - Upgrade to 2.2.50
  - Support MAC referring for VLAN in gen_conf.
  - Introduce state: ignore for route.
  - Support PCI address matching in gen_conf.
  - Support MacSec interface in gen_conf.


author: Gris Ge <fge@redhat.com> - 2.2.56-1
changelog:
  - Upgrade to 2.2.56
  - Allow using VRF name to specify route table. RHEL-119046
  - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-53956
  - Applying desired state with static DNS with static IP will touch `br-ex`
    even not mentioned. RHEL-125548
  - Align with libreswan default values. RHEL-26350
  - Support rightca ipsec option. RHEL-114237
  - Fix error when changing existing HSR interface. RHEL-100773


author: Gris Ge <fge@redhat.com> - 2.2.57-1
changelog:
  - Upgrade to 2.2.57
  - Add libreswan leftprotoport and rightprotoport support. (RHEL-107158)
  - Support setting protocol version of HSR/PRP. (RHEL-100763)
  - Fix inconsistent interface order. (RHEL-130157)


author: Mingyu Shi <mshi@redhat.com> - 2.2.58-1
changelog:
  - Upgrade to 2.2.58
  - vrf: Handle ignore interface when verifying desired state. RHEL-1417
  - alt-name: Remove alt-names when interface marked as absent. RHEL-126481
  - hsr: Automatically disable IP on hsr port. RHEL-100774
  - hsr: add support for configuring "interlink" property. RHEL-100766
  - Support referring alternative-name as port/parent/next-hop-interface.
    RHEL-126508
  - Support referring interface name using its alternative name. RHEL-126510


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.59-1
changelog:
  - Upgrade to 2.2.59
  - route: add support for lock-mtu option. RHEL-151844
  - iptunnel: introduce support for ipip/sit/ip6ip6/ipip6 tunnels. RHEL-79801
  - nm: Fix error when modify port list of down interface. RHEL-52334


author: Jan Vaclav <jvaclav@redhat.com> - 2.2.60-1
changelog:
  - Upgrade to 2.2.60
  - Add support for configuring ipip tunnel in nmstate RHEL-79801
  - Fix error when modify port list of down interface RHEL-52334
  - Add support for mtu-lock route option RHEL-151844
  - ipv4: Add new parameter prefix-route-metric RHEL-147209


author: Rahul Rajesh <rajeshrah22@gmail.com> - 2.2.61-1
changelog:
  - Upgrade to 2.2.61
  - Support referring alt-name in `copy-mac-from` property. RHEL-145074
  - Fix validation of conflicting routes in kernel mode. RHEL-124835
  - Update GPG public key


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.61-2
changelog:
  - Fix copy-mac-from for down interfaces
  - Fix copy-mac-from failing when source interface is down. RHEL-145074
  - Fix OriginalName link match for stacked interfaces. RHEL-167955


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.22.2-1
changelog:
  - Update to version 22.22.2
  - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
  - disabled failing tests in nghttp2 due to newer version
  - patch for npm/braces CVE-2026-25547


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.22.2-2
changelog:
  - De-bundle c-ares, libuv
  - we waited for c-ares for about 4 months, so added conditional flag in
    case it falls behind in future again, same for libuv


author: Jan Staněk <jstanek@redhat.com> - 1:24.4.1-2
changelog:
  - Make package buildable in centos-stream
  - Remove tests that have issues with kojistream network
  - Temporarily use vendor copies of dependencies not up-to-date enough in
    the system


author: Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.101.0-13
changelog:
  - fix the "Allow RSA-OAEP in FIPS mode" patch for the declaration after switch statement
  - fix changelog message for 3.101.0-11


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally remvoed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally removed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-5
changelog:
  - fips update
  -   Fix indicators for the new post-quantum algorithms
  -   Fix the ML-KEM Self-tests
  -   Fix the ML-KEM zeroizaiton
  -   Add partial public validation before OAEP
  - bug fixes
  -   add CKA_SEED to private attributes so they are updated on password change.
  -   mark CKA_PARAMETER_SET as CK_ULONG when storing into the database
  -   fix unrefrence read in leancrypto.


author: Bob Relyea <rrelyea@redhat.com> - 3.124.0-1
changelog:
  - rebase to upstream NSS 3.124
  - backport ml-dsa support that is not upstream yet.
  - pick up in process patches upstream including eddsa


author: Bob Relyea <rrelyea@redhat.com> - 3.124.0-2
changelog:
  - rebase fixes
  - restore mlkem aliases
  - add mlkem key lengths to the mechanism info
  - fix crash if you try to encapsulate with an unimported
    public key
  - restore distrusted certs to certdata.txt even though we
    never reference them to make tests happy.


author: Jan Pazdziora <jpazdziora@redhat.com> - 2.23.0-1
changelog:
  - Rebase to 2.23.0 (fedora#2036375)
  - Change upstream to https://github.com/flatcar/nss-altfiles
  - Enable all maps (fedora#2036375)


author: Joseph Marrero <jmarrero@redhat.com> - 2.23.0-6
changelog:
  - Add RPM macros to configure %_passwd_path and %_group_path
  - Fixes user/group lookup for packages with non-root file ownership
  - See: https://github.com/rpm-software-management/rpm/pull/3672


author: Andreas Schneider <asn@redhat.com> - 1.1.13-1
changelog:
  - Update to version 1.1.13
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.13/CHANGELOG


author: Andreas Schneider <asn@redhat.com> - 1.1.15-1
changelog:
  - Update to version 1.1.15
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.15/CHANGELOG
  - Fix building with cmocka >= 1.1.6


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.25-1
changelog:
  - alternatives: fix possible buffer overrun
  - Translated using Weblate (Korean)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))


author: Jan Macku <jamacku@redhat.com> - 1.26-1
changelog:
  - fix(test): dot't call `basename` with empty string
  - spec: sort BuildRequires alphabetically
  - fix(test): remove dangling `rlPhase` fn call
  - ci: run tests using Packit and Testing Farm
  - build: update `.pot` file
  - ci: fix typo in test workflow
  - test: add support for running using tmt
  - Translated using Weblate (Czech)
  - Translated using Weblate (Punjabi)
  - build(deps): bump actions/upload-artifact from 3 to 4
  - build(deps): bump github/codeql-action from 2 to 3
  - leveldb: fix systemdActive()
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck
  - Translated using Weblate (Hungarian)
  - build(deps): bump actions/checkout from 3 to 4


author: Jan Macku <jamacku@redhat.com> - 1.27-1
changelog:
  - alternatives: properly handle chars with const in normalize_path
  - alternatives: use exit in main instead of return for critical failures
  - alternatives: fix leak
  - alternatives: fix leak
  - alternatives: fix possible overrun
  - alternatives: fix all the leaks of groups in readConfig
  - alternatives: fix all the leaks of read line in readConfig
  - alternatives: fix leak
  - alternatives: fix memory leak
  - alternatives: fix memory leak
  - alternatives: initialize parameters in main to NULL
  - alternatives: fix memory leak
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Update translation files
  - Translated using Weblate (Japanese)
  - Fix systemd dependency


author: Jan Macku <jamacku@redhat.com> - 1.29-1
changelog:
  - add basic mkosi config
  - remove not used directory from makefile
  - ntsysv: fix leaks
  - leveldb: security_context_t is deprecated
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - chkconfig: fix leak
  - chkconfig: fix leak
  - chkconfig: fix memory leak when deleting a service
  - leveldb: add destructors for service
  - leveldb: fix memory leak
  - leveldb.c: fix memory leak
  - chkconfig: fix leak
  - leveldb: fix memory leak
  - alternatives: ensure the current alt. is freed if parsing fails
  - alternatives: ensure the current group is freed
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Turkish)


author: Jindrich Novy <jnovy@redhat.com> - 1.2.11-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.11
  - simplify spec
  - Resolves: RHEL-85838


author: Jindrich Novy <jnovy@redhat.com> - 1.3.0-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.3.0
  - Resolves: RHEL-212011


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.7-7
changelog:
  - Provide a switch to restore pre-CVE-2020-10737 behavior
  - Always set the home directory permissions according to HOME_MODE


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.10-5
changelog:
  - Fix fortification issues leading to crash in FreeIPA setup
    Upstream PR: https://github.com/opendnssec/opendnssec/pull/842


author: Rafael Jeffman <rjeffman@redhat.com> - 2.1.14-1
changelog:
  - Rebase to stable version 2.1.14
    Resolves: RHEL-75904
  - Use systemd-sysusers to create users
    Resolves: RHEL-4896


author: Michal Ambroz <rebus _AT seznam.cz> - 1:1.3.9-7
changelog:
  - add conditionals to be able to rebuild with opendbx/apt even on EPEL+RHEL
  - cosmetics: rename patches, add comments, use buildroot macro instead of env
  - add explicit build requirement to python3-setuptools, needed for 3.13+


author: Jan Černý <jcerny@redhat.com> - 1:1.4.0-1
changelog:
  - Update to the latest upstream release (RHEL-53981)
  - Remove openscap-devel, openscap-engine-sce-devel and openscap-python3 subpackages


author: Matthew Burket <mburket@redhat.com> - 1:1.4.3-1
changelog:
  - Upgrade to the latest upstream release (RHEL-133978)
  - Add the ability to show rule details in output (RHEL-104651)


author: Matthew Burket <mburket@redhat.com> - 1:1.4.4-1
changelog:
  - Upgrade to the latest upstream release (RHEL-161763)
  - Fix Bash completion (RHEL-145121)
  - Add ability to list rules and variables in a profile by the "oscap info" command (RHEL-143569)


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-15
changelog:
  - Fix implicit destination path selection when source path ends with ".."
    Resolves: RHEL-118406
  - Canonicalize username when matching a user
    Resolves: RHEL-101440


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-17
changelog:
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-128399
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-128388


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-21
changelog:
  - Implement obtaining Kerberos tickets on behalf of user on SSH authentication
    Resolves: RHEL-92932


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-22
changelog:
  - Remove recommendation of p11-kit
    Resolves: RHEL-139070
  - Only the first value of MaxStartups, PerSourceNetBlockSize and IPQoS
    in sshd_config should count when defined multiple times
    Resolves: RHEL-150365
  - Fix mistracking of MaxStartups process exits in some situations
    Resolves: RHEL-121768
  - Fix GSSAPI authentication indicator issues found by AI
    Resolves: RHEL-154309
  - CVE-2026-3497: Fix information disclosure or denial of service due
    to uninitialized variables in gssapi-keyex
    Resolves: RHEL-155813


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-23
changelog:
  - Don't negotiate non-FIPS algorithms in ssh-keyscan key exchange in FIPS mode
    Resolves: RHEL-88565
  - Fix duplicate audit log entry when destroying ed25519 private keys
    Resolves: RHEL-46782
  - Fix typo in GSSAPIProxyS4U2Services
    Related: RHEL-92932


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-25
changelog:
  - Fix static analysis issues
    Resolves: RHEL-163365
  - Ssh should refuse connection when mlkem kex is specified in FIPS
    Resolves: RHEL-155178
  - CVE-2026-35385: Fix privilege escalation via scp legacy protocol
    when not in preserving file mode
    Resolves: RHEL-164740
  - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
    multiplexing sessions
    Resolves: RHEL-166239
  - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
    and HostbasedAcceptedAlgorithms with regard to ECDSA keys
    Resolves: RHEL-166223
  - CVE-2026-35414: Fix mishandling of authorized_keys principals option
    Resolves: RHEL-166191
  - CVE-2026-35386: Add validation rules to usernames and hostnames
    set for ProxyJump/-J on the commandline
    Resolves: RHEL-166207


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-26
changelog:
  - Improve keytab detection when obtaining Kerberos tickets on behalf of user on SSH authentication
    Related: RHEL-92932
  - Add missing NULL check for server key generation in ML-KEM hybrids
    Resolves: RHEL-168106


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-27
changelog:
  - CVE-2026-55653: Fix double free in openssh DH-GEX client path during
    FIPS known-group validation that leads to client-side denial of service
    Resolves: RHEL-185776
  - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator
    cleanup due to missing NULL terminator
    Resolves: RHEL-185831
  - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket
    pre-binding
    Resolves: RHEL-185848
  - CVE-2026-59996: Fix remote glob result of ".." causing files to be placed
    in unintended parent directories when scp performs remote-to-remote copy
    via the local host
    Resolves: RHEL-193172
  - CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange
    Resolves: RHEL-193015


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-28
changelog:
  - Fix GSSAPI indicators check ignoring subsequent deny rules if
    allow rule matched first
    Resolves: RHEL-182151
  - Add default value for GSSAPIDelegateCredentials property in sshd_config manpage
    Resolves: RHEL-211135
  - Fix self-copy guard bypass in copy-data extension
    Resolves: RHEL-191388


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-29
changelog:
  - Fix CVE-2026-59995 OpenSSH: sftp client allows attacker to control downloaded
    file location
    Resolves: RHEL-236323
  - Fix CVE-2026-59999 and CVE-2026-73283: Security bypass due to incorrect
    handling of forwarding and tunneling options
    Resolves: RHEL-236275


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.3.1-12
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
  - Fix build in all arches, copied from Debian
  - Run autoreconf to make sure that autotools are updated
  - Clean up some trailing white spaces


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 0.5.3-2
changelog:
  - We run tests with specially crafted OpenSSL configuration, not the system one
    Resolves: RHEL-25983


author: Chris Lumens <clumens@redhat.com> - 3.0.0-2
changelog:
  - Rebase on upstream 3.0.0-rc1
  - Default globally-unique to true when clone-node-max > 1
  - Fix regression in crm_resource master resource handling
  - Related: RHEL-61383
  - Resolves: RHEL-56675
  - Resolves: RHEL-60534


author: Chris Lumens <clumens@redhat.com> - 3.0.0-3
changelog:
  - Rebase on upstream 3.0.0-rc2
  - Support X.509 certificates for Pacemaker Remote connections and remote
    CIB administration
  - Fix ability to do rolling upgrades (regression introduced in 3.0.0-rc1)
  - Fix memory leaks in daemons (regressions introduced in 3.0.0-rc1)
  - Ensure ACLs remain valid after CIB upgrades (regression introduced in
    3.0.0-rc1)
  - Related: RHEL-61383
  - Resolves: RHEL-7600


author: Chris Lumens <clumens@redhat.com> - 3.0.0-4
changelog:
  - Rebase on upstream 3.0.0-rc3
  - Log warnings if XSL transforms cannot preserve previous behavior
  - Ensure XSL transforms do not invalidate ACLs
  - Remove build dependency on inkscape
  - Resolves: RHEL-62096
  - Resolves: RHEL-62722


author: Chris Lumens <clumens@redhat.com> - 3.0.0-5
changelog:
  - Rebase on upstream 3.0.0 final release
  - Raise minimum GnuTLS dependency to 3.4.6
  - Move logrotate script back to pacemaker-cli package
  - Clear warnings and errors when resetting scheduler object
  - Resolves: RHEL-61383


author: Chris Lumens <clumens@redhat.com> - 3.0.1-1
changelog:
  - Rebase on upstream 3.0.1-rc1
  - Use dbus to detect completion of systemd resource start/stop actions
  - Add an option for controlling remote node fencing behavior
  - Split large IPC messages into multiple smaller ones
  - Related: RHEL-86085
  - Resolves: RHEL-71181
  - Resolves: RHEL-86146
  - Resolves: RHEL-86144


author: Chris Lumens <clumens@redhat.com> - 3.0.1-4
changelog:
  - Fix promoting instances of a cloned resource
  - Handle large timeouts correctly in crm_resource --wait
  - Don't evict IPC clients as long as they're still processing messages
  - Don't overwhelm the FSA queue with repeated CIB queries
  - Resolves: RHEL-120932
  - Resolves: RHEL-86148
  - Resolves: RHEL-114895


author: Chris Lumens <clumens@redhat.com> - 3.0.2-1
changelog:
  - Rebase on upstream 3.0.2-rc2
  - Don't hang waiting on certain pending monitor actions
  - Resolves: RHEL-78393


author: Chris Lumens <clumens@redhat.com> - 3.0.3-1
changelog:
  - Rebase on upstream 3.0.3-rc1
  - Fix integer overflows in remote message decompression code (CVE-2026-10649)
  - Fix a bug preventing the ClusterMon resource from starting
  - Support UTF-8 characters in the cibsecret tool
  - Allow modifying the status section of the CIB without triggering refresh
  - Resolves: RHEL-181155
  - Resolves: RHEL-184531
  - Resolves: RHEL-178864
  - Resolves: RHEL-70283


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Make pcp-zeroconf start enabled services once again (RHEL-93182)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories
  - Backport some more fixes to the OpenMetrics PMDA
  - Fix a multilib regression in PCP header files


author: Jan Kuřík <jkurik@redhat.com> - 7.1.5-5
changelog:
  - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213661)
  - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213692)
  - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213717)
  - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213726)


author: Jan Kuřík <jkurik@redhat.com> - 7.1.5-6
changelog:
  - Backport remaining PCP security hardening fixes from private-pcp
  - pmieconf and pmlogmv command injection hardening (CWE-78)
  - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195)
  - timezone and zoneinfo string validation
  - pmdaroot peer credential verification (CWE-403)
  - pmproxy REST CERT_REQD enforcement and logger servlet authentication


author: Nathan Scott <nathans@redhat.com> - 6.1.1-1
changelog:
  - Improve pmlogcheck performance with compressed archives (RHEL-3930)
  - Fix pcp-ss(1) utility handling of duplicate sources (RHEL-7498)
  - Fine-tune PCP python wrapper path resolution (RHEL-7509)
  - Rebase to latest stable version of PCP (RHEL-2317)


author: Nathan Scott <nathans@redhat.com> - 6.1.1-2
changelog:
  - Fix pcp-ss(1) default handling of listen state (RHEL-17335)
  - Added pcp package dependency on diffutils for diffstat(1)


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Align start of PCP services with systemd presets (RHEL-22723)
  - Improved pcp-xsos command line error diagnostics (RHEL-56836)
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57795)
  - Guard against symlink attacks in pmpost program (RHEL-57797)
  - Update to latest stable version of PCP (RHEL-62801)


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-241.el10]
changelog:
  - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185115]
  - s390: Revert support for DCACHE_WORD_ACCESS (Rafael Aquini) [RHEL-184095]
  - redhat/configs: Add CONFIG_DIBS configuration option (Mircea Dragan) [RHEL-136142]
  - net/smc: fix missing sk_err when TCP handshake fails (Mircea Dragan) [RHEL-136142]
  - net/smc: avoid early lgr access in smc_clc_wait_msg (Mircea Dragan) [RHEL-136142]
  - net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer (Mircea Dragan) [RHEL-136142]
  - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (Mircea Dragan) [RHEL-136142]
  - dibs: change dibs_class to a const struct (Mircea Dragan) [RHEL-136142]
  - Revert 'net/smc: Introduce TCP ULP support' (Mircea Dragan) [RHEL-136142]
  - dibs: Remove KMSG_COMPONENT macro (Mircea Dragan) [RHEL-136142]
  - net/smc: fix mismatch between CLC header and proposal (Mircea Dragan) [RHEL-136142]
  - net/smc: handle -ENOMEM from smc_wr_alloc_link_mem gracefully (Mircea Dragan) [RHEL-136142]
  - net/smc: make wr buffer count configurable (Mircea Dragan) [RHEL-136142]
  - dibs: Use subsys_initcall() (Mircea Dragan) [RHEL-136142]
  - dibs: Remove reset of static vars in dibs_init() (Mircea Dragan) [RHEL-136142]
  - smc: rename smc_find_ism_store_rc to reflect broader usage (Mircea Dragan) [RHEL-136142]
  - net/smc: fix general protection fault in __smc_diag_dump (Mircea Dragan) [RHEL-136142]
  - dibs: Check correct variable in dibs_init() (Mircea Dragan) [RHEL-136142]
  - dibs: Move event handling to dibs layer (Mircea Dragan) [RHEL-136142]
  - dibs: Move data path to dibs layer (Mircea Dragan) [RHEL-136142]
  - dibs: Move query_remote_gid() to dibs_dev_ops (Mircea Dragan) [RHEL-136142]
  - dibs: Move vlan support to dibs_dev_ops (Mircea Dragan) [RHEL-136142]
  - dibs: Local gid for dibs devices (Mircea Dragan) [RHEL-136142]
  - dibs: Create class dibs (Mircea Dragan) [RHEL-136142]
  - dibs: Move struct device to dibs_dev (Mircea Dragan) [RHEL-136142]
  - dibs: Define dibs_client_ops and dibs_dev_ops (Mircea Dragan) [RHEL-136142]
  - dibs: Define dibs loopback (Mircea Dragan) [RHEL-136142]
  - dibs: Register ism as dibs device (Mircea Dragan) [RHEL-136142]
  - dibs: Register smc as dibs_client (Mircea Dragan) [RHEL-136142]
  - dibs: Create drivers/dibs (Mircea Dragan) [RHEL-136142]
  - net/smc: Decouple sf and attached send_buf in smc_loopback (Mircea Dragan) [RHEL-136142]
  - net/smc: Remove error handling of unregister_dmb() (Mircea Dragan) [RHEL-136142]
  - net/smc: fix warning in smc_rx_splice() when calling get_page() (Mircea Dragan) [RHEL-136142]
  - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_vlan_by_tcpsk(). (Mircea Dragan) [RHEL-136142]
  - smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set(). (Mircea Dragan) [RHEL-136142]
  - net/smc: Remove unused argument from 2 SMC functions (Mircea Dragan) [RHEL-136142]
  - net/smc: Improve log message for devices w/o pnetid (Mircea Dragan) [RHEL-136142]
  - net/smc: Replace use of strncpy on NUL-terminated string with strscpy (Mircea Dragan) [RHEL-136142]
  - net: Introduce netif_xmit_timeout_ms() helper (CKI Backport Bot) [RHEL-180966]
  - queue_api: add subqueue variant netif_subqueue_sent (CKI Backport Bot) [RHEL-180966]
  - nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180107] {CVE-2026-46135}
  - crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179772] {CVE-2026-43330}
  - Add epoch support for rv and rv-debuginfo packages (John Kacur) [RHEL-163488]
  - KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (CKI Backport Bot) [RHEL-170798] {CVE-2026-23401}
  - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (CKI Backport Bot) [RHEL-170798] {CVE-2026-23401}
  - dm vdo: use GFP_NOIO for blkdev_issue_zeroout on format path (Benjamin Marzinski) [RHEL-113137]
  - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169623]
  - dm cache: fix missing return in invalidate_committed's error path (Benjamin Marzinski) [RHEL-92782]
  - dm vdo: save the formatted metadata to disk (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add formatting logic and initialization (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add synchronous metadata I/O submission helper (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add geometry block structure (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add geometry block encoding (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add upfront validation for logical size (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add formatting parameters to table line (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add super block initialization to encodings.c (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add geometry block initialization to encodings.c (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add __counted_by attribute to a number of structures (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: remove redundant TYPE argument from vdo_allocate macro (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: update vdo_allocate_extended to take a field name, no types (Benjamin Marzinski) [RHEL-113137]
  - dm vdo slab-depot: validate old zone count on load (Benjamin Marzinski) [RHEL-113137]
  - dm vdo indexer: validate saved zone count (Benjamin Marzinski) [RHEL-113137]
  - dm cache metadata: fix memory leak on metadata abort retry (Benjamin Marzinski) [RHEL-155190]
  - dm cache: prevent entering passthrough mode after unclean shutdown (Benjamin Marzinski) [RHEL-92782]
  - dm cache: fix dirty mapping checking in passthrough mode switching (Benjamin Marzinski) [RHEL-92782]
  - dm cache: fix concurrent write failure in passthrough mode (Benjamin Marzinski) [RHEL-92782]
  - dm cache policy smq: fix missing locks in invalidating cache blocks (Benjamin Marzinski) [RHEL-92782]
  - dm cache: fix write hang in passthrough mode (Benjamin Marzinski) [RHEL-92782]
  - dm cache: fix write path cache coherency in passthrough mode (Benjamin Marzinski) [RHEL-92782]
  - dm cache: fix null-deref with concurrent writes in passthrough mode (Benjamin Marzinski) [RHEL-92782]
  - net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-168103] {CVE-2024-56603}
  - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-166731] {CVE-2025-39766}
  - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-166731] {CVE-2025-39766}
  - dm-verity-fec: fix corrected block count stat (Benjamin Marzinski) [RHEL-154975]
  - dm-mpath: don't stop probing paths at presuspend (Benjamin Marzinski) [RHEL-148451]
  - dm mpath: make pg_init_delay_msecs settable (Benjamin Marzinski) [RHEL-154975]
  - dm: use bio_clone_blkg_association (Benjamin Marzinski) [RHEL-154975]
  - dm-unstripe: fix mapping bug when there are multiple targets in a table (Benjamin Marzinski) [RHEL-154975]
  - dm-integrity: fix recalculation in bitmap mode (Benjamin Marzinski) [RHEL-144458]
  - dm: clear cloned request bio pointer when last clone bio completes (Benjamin Marzinski) [RHEL-154975]
  - dm-integrity: fix a typo in the code for write/discard race (Benjamin Marzinski) [RHEL-154975]
  - dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-154975]
  - dm: replace -EEXIST with -EBUSY (Benjamin Marzinski) [RHEL-154975]
  - dm: remove fake timeout to avoid leak request (Benjamin Marzinski) [RHEL-154975]
  - dm pcache: fix segment info indexing (Benjamin Marzinski) [RHEL-154975]
  - dm pcache: fix cache info indexing (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: advance slot index before writing slot (Benjamin Marzinski) [RHEL-154975]
  - dm raid: add documentation for takeover/reshape raid1 -> raid5 table line examples (Benjamin Marzinski) [RHEL-154975]
  - dm: ignore discard return value (Benjamin Marzinski) [RHEL-154975]
  - MAINTAINERS: add Benjamin Marzinski as a device mapper maintainer (Benjamin Marzinski) [RHEL-154975]
  - dm-mpath: Simplify the setup_scsi_dh code (Benjamin Marzinski) [RHEL-154975]
  - dm vdo: fix kerneldoc warnings (Benjamin Marzinski) [RHEL-154975]
  - dm-bufio: align write boundary on physical block size (Benjamin Marzinski) [RHEL-154975]
  - dm-crypt: enable DM_TARGET_ATOMIC_WRITES (Benjamin Marzinski) [RHEL-136802]
  - dm: test for REQ_ATOMIC in dm_accept_partial_bio() (Benjamin Marzinski) [RHEL-154975]
  - dm-verity: remove useless mempool (Benjamin Marzinski) [RHEL-154975]
  - dm-verity: disable recursive forward error correction (Benjamin Marzinski) [RHEL-127492] {CVE-2025-71161}
  - dm-ebs: Mark full buffer dirty even on partial write (Benjamin Marzinski) [RHEL-154975]
  - dm mpath: enable DM_TARGET_ATOMIC_WRITES (Benjamin Marzinski) [RHEL-154975]
  - dm verity fec: Expose corrected block count via status (Benjamin Marzinski) [RHEL-154975]
  - dm: Don't warn if IMA_DISABLE_HTABLE is not enabled (Benjamin Marzinski) [RHEL-154975]
  - dm-verity: remove log message with shash driver name (Benjamin Marzinski) [RHEL-154975]
  - dm: sysfs: use sysfs_emit() in dm-sysfs.c (Benjamin Marzinski) [RHEL-154975]
  - dm: remove useless md->nr_zones variable (Benjamin Marzinski) [RHEL-154975]
  - dm-crypt: use folio_nr_pages() instead of shift operation (Benjamin Marzinski) [RHEL-136802]
  - dm: fix failure when empty flush's bi_sector points beyond the device end (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: zero cache_info before default init (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: reuse meta_addr in pcache_meta_find_latest (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: allow built-in build and rename flush helper (Benjamin Marzinski) [RHEL-154975]
  - dm raid: use proper md_ro_state enumerators (Benjamin Marzinski) [RHEL-154975]
  - dm-integrity: prefer synchronous hash interface (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: enable asynchronous hash interface (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: rename internal_hash (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: add the "offset" argument (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: allocate the recalculate buffer with kmalloc (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: introduce integrity_kmap and integrity_kunmap (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: replace bvec_kmap_local with kmap_local_page (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: use internal variable for digestsize (Benjamin Marzinski) [RHEL-136802]
  - dm vdo: Update code to use mem_is_zero (Benjamin Marzinski) [RHEL-154975]
  - dm: optimize REQ_PREFLUSH with data when using the linear target (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: use int type to store negative error codes (Benjamin Marzinski) [RHEL-154975]
  - dm: fix "writen"->"written" (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: cleanup: fix coding style report by checkpatch.pl (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: remove ctrl_lock for pcache_cache_segment (Benjamin Marzinski) [RHEL-154975]
  - redhat/configs: Add CONFIG_DM_PCACHE (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: add persistent cache target in device-mapper (Benjamin Marzinski) [RHEL-154975]
  - dm error: mark as DM_TARGET_PASSES_INTEGRITY (Benjamin Marzinski) [RHEL-154975]
  - dm-vdo: Promote dm-vdo title to title heading (Benjamin Marzinski) [RHEL-154975]
  - docs: device-mapper: fixed spelling mistakes in documentation (Benjamin Marzinski) [RHEL-154975]
  - dm bufio: remove redundant __GFP_NOWARN (Benjamin Marzinski) [RHEL-154975]
  - dm-ima: drop a useless argument (Benjamin Marzinski) [RHEL-154975]
  - dm: use vmalloc_array() to simplify code (Benjamin Marzinski) [RHEL-154975]
  - dm-ima: more strlen() drops (Benjamin Marzinski) [RHEL-154975]
  - docs: device-mapper: fix typos in delay.rst and vdo-design.rst (Benjamin Marzinski) [RHEL-154975]
  - RDMA/bnxt_re: fix dma_free_coherent() pointer (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix to use correct page size for PDE table (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix OOB write in bnxt_re_copy_err_stats() (Sreekanth Reddy) [RHEL-135357] {CVE-2025-71092}
  - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Pass correct flag for dma mr creation (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix the inline size for GenP7 devices (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix wrong check for CQ coalesc support (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add a debugfs entry for CQE coalescing tuning (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix a potential memory leak in destroy_gsi_sqp (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: improve clarity in ALLOC_PAGE handler (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Remove non-statistics counters from hw_counters (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add debugfs info entry for device and resource information (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix incorrect errno used in function comments (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Avoid GID level QoS update from the driver (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Update sysfs entries with appropriate data (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Call strscpy() with correct size argument (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Remove unnecessary condition checks (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Use firmware provided message timeout value (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Initialize fw with roce_mirror support (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add support for flow create/destroy (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add support for mirror vnic (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add support for unique GID (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Refactor stats context memory allocation (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Refactor hw context memory allocation (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add data structures for RoCE mirror support (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Enhance a log message when bnxt_re_register_netdev fails (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Delete always true SGID table check (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Report udp source port for flow_label in bnxt_re_query_qp (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: RoCE related hardware counters update (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Optimize bnxt_qplib_get_dev_attr function (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: RoCE Driver Dynamic Debug for HWRM's (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Show srq_limit in fill_res_srq_entry hook (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix to initialize the PBL array (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix a possible memory leak in the driver (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix to remove workload check in SRQ limit path (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix to do SRQ armena by default (Sreekanth Reddy) [RHEL-135357]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-242.el10]
changelog:
  - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179758] {CVE-2026-43414}
  - sched/fair: Fix wakeup_preempt_fair() for not waking up task (Phil Auld) [RHEL-174703]
  - sched/fair: Fix overflow in vruntime_eligible() (Phil Auld) [RHEL-174703]
  - sched/fair: Clear rel_deadline when initializing forked entities (Phil Auld) [RHEL-174703]
  - sched/fair: Fix wakeup_preempt_fair() vs delayed dequeue (Phil Auld) [RHEL-174703]
  - sched/deadline: Use revised wakeup rule for dl_server (Phil Auld) [RHEL-174703]
  - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() (Phil Auld) [RHEL-174703]
  - sched/debug: Fix avg_vruntime() usage (Phil Auld) [RHEL-174703]
  - sched/fair: Fix zero_vruntime tracking fix (Phil Auld) [RHEL-174703] {CVE-2026-43323}
  - NFS: write_completion: dereference loop-local req, not hdr->req (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Report whether fh_key was actually updated (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: prevent out-of-bounds read in __cache_seq_start() (Olga Kornievskaia) [RHEL-171581]
  - xfs: fix overlapping extents returned for pNFS LAYOUTGET (Olga Kornievskaia) [RHEL-171581]
  - xfs: fix use of uninitialized imap in xfs_fs_map_blocks error path (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Fix infinite loop in layout state revocation (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: start cache request seqno at 1 to fix netlink GET_REQS (Olga Kornievskaia) [RHEL-171581]
  - nfsd: update mtime/ctime on COPY in presence of delegated attributes (Olga Kornievskaia) [RHEL-171581]
  - nfsd: update mtime/ctime on CLONE in presense of delegated attributes (Olga Kornievskaia) [RHEL-171581]
  - nfsd: fix file change detection in CB_GETATTR (Olga Kornievskaia) [RHEL-171581]
  - net/handshake: Add new parameter 'HANDSHAKE_A_ACCEPT_KEYRING' (Olga Kornievskaia) [RHEL-171581]
  - NFS: Fix RCU dereference of cl_xprt in nfs_compare_super_address (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove redundant __private attribute from nfs_page_class (Olga Kornievskaia) [RHEL-171581]
  - NFSv4.2: fix CLONE/COPY attrs in presence of delegated attributes (Olga Kornievskaia) [RHEL-171581]
  - NFS: fix writeback in presence of errors (Olga Kornievskaia) [RHEL-171581]
  - nfs: use memcpy_and_pad in decode_fh (Olga Kornievskaia) [RHEL-171581]
  - NFSv4.1: Apply session size limits on clone path (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: retry GETATTR if GET_DIR_DELEGATION failed (Olga Kornievskaia) [RHEL-171581]
  - NFS: fix RENAME attr in presence of directory delegations (Olga Kornievskaia) [RHEL-171581]
  - pnfs/flexfiles: validate ds_versions_cnt is non-zero (Olga Kornievskaia) [RHEL-171581]
  - NFS/blocklayout: print each device used for SCSI layouts (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Post receive buffers after RPC completion (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Scale receive batch size with credit window (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Replace rpcrdma_mr_seg with xdr_buf cursor (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Decouple frwr_wp_create from frwr_map (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Close lost-wakeup race in xprt_rdma_alloc_slot (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Avoid 250 ms delay on backlog wakeup (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Close sendctx get/put race that can block a transport (Olga Kornievskaia) [RHEL-171581]
  - nfs: update inode ctime after removexattr operation (Olga Kornievskaia) [RHEL-171581]
  - nfs: fix utimensat() for atime with delegated timestamps (Olga Kornievskaia) [RHEL-171581]
  - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-171581]
  - NFSv4/pnfs: If the server is down, retry the layout returns on reboot (Olga Kornievskaia) [RHEL-171581]
  - nfsd: fix comment typo in nfsxdr (Olga Kornievskaia) [RHEL-171581]
  - nfsd: fix comment typo in nfs3xdr (Olga Kornievskaia) [RHEL-171581]
  - NFSD: convert callback RPC program to per-net namespace (Olga Kornievskaia) [RHEL-171581]
  - NFSD: use per-operation statidx for callback procedures (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Use contiguous pages for RDMA Read sink buffers (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Add svc_rqst_page_release() helper (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: xdr.h: fix all kernel-doc warnings (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Factor out WR chain linking into helper (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Add Write chunk WRs to the RPC's Send WR chain (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Clean up use of rdma->sc_pd->device (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Clean up use of rdma->sc_pd->device in Receive paths (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Add fair queuing for Send Queue access (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Optimize rq_respages allocation in svc_alloc_arg (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Track consumed rq_pages entries (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Handle NULL entries in svc_rqst_release_pages (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Allocate a separate Reply page array (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Tighten bounds checking in svc_rqst_replace_page (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Sign filehandles (Olga Kornievskaia) [RHEL-171581]
  - NFSD/export: Add sign_fh export option (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add a key for signing filehandles (Olga Kornievskaia) [RHEL-171581]
  - nfsd: use dynamic allocation for oversized NFSv4.0 replay cache (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: split cache_detail queue into request and reader lists (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: convert queue_wait from global to per-cache-detail waitqueue (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: convert queue_lock from global spinlock to per-cache-detail lock (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: Add XPT flags missing from SVC_XPRT_FLAG_LIST (Olga Kornievskaia) [RHEL-171581]
  - lockd: Remove dead code from fs/lockd/xdr4.c (Olga Kornievskaia) [RHEL-171581]
  - lockd: Remove C macros that are no longer used (Olga Kornievskaia) [RHEL-171581]
  - lockd: Add LOCKD_SHARE_SVID constant for DOS sharing mode (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 FREE_ALL procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 NM_LOCK procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 UNSHARE procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 SHARE procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Prepare share helpers for xdrgen conversion (Olga Kornievskaia) [RHEL-171581]
  - lockd: Hoist file_lock init out of nlm4svc_decode_shareargs() (Olga Kornievskaia) [RHEL-171581]
  - lockd: Convert server-side undefined procedures to xdrgen (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 SM_NOTIFY procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 GRANTED_RES procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 UNLOCK_RES procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 CANCEL_RES procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 LOCK_RES procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 TEST_RES procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 GRANTED_MSG procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 UNLOCK_MSG procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 CANCEL_MSG procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 LOCK_MSG procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 TEST_MSG procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Refactor nlm4svc_callback() (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 GRANTED procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 UNLOCK procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 CANCEL procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 LOCK procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 TEST procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 NULL procedure (Olga Kornievskaia) [RHEL-171581]
  - Documentation: Add the RPC language description of NLM version 4 (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Enforce timeout on layout recall and integrate lease manager fencing (Olga Kornievskaia) [RHEL-171581]
  - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: Fix compilation error (`make W=1`) when dprintk() is no-op (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: Kill RPC_IFDEBUG() (Olga Kornievskaia) [RHEL-171581]
  - nfs/blocklayout: Fix compilation error (`make W=1`) in bl_write_pagelist() (Olga Kornievskaia) [RHEL-171581]
  - lockd: Relocate svc_version definitions to XDR layer (Olga Kornievskaia) [RHEL-171581]
  - lockd: Move nlm4svc_set_file_lock_range() (Olga Kornievskaia) [RHEL-171581]
  - lockd: Make linux/lockd/nlm.h an internal header (Olga Kornievskaia) [RHEL-171581]
  - lockd: Move xdr.h from include/linux/lockd/ to fs/lockd/ (Olga Kornievskaia) [RHEL-171581]
  - lockd: Remove lockd/debug.h (Olga Kornievskaia) [RHEL-171581]
  - lockd: Relocate include/linux/lockd/lockd.h (Olga Kornievskaia) [RHEL-171581]
  - lockd: Move share.h from include/linux/lockd/ to fs/lockd/ (Olga Kornievskaia) [RHEL-171581]
  - lockd: Move xdr4.h from include/linux/lockd/ to fs/lockd/ (Olga Kornievskaia) [RHEL-171581]
  - NFS: Use nlmclnt_shutdown_rpc_clnt() to safely shut down NLM (Olga Kornievskaia) [RHEL-171581]
  - lockd: Relocate nlmsvc_unlock API declarations (Olga Kornievskaia) [RHEL-171581]
  - lockd: Have nlm_fopen() return errno values (Olga Kornievskaia) [RHEL-171581]
  - lockd: Introduce nlm__int__deadlock (Olga Kornievskaia) [RHEL-171581]
  - lockd: Relocate and rename nlm_drop_reply (Olga Kornievskaia) [RHEL-171581]
  - lockd: Simplify cast_status() in svcproc.c (Olga Kornievskaia) [RHEL-171581]
  - nfsd: remove NFSD_V4_DELEG_TIMESTAMPS Kconfig option (Olga Kornievskaia) [RHEL-171581]
  - nfsd: add a runtime switch for disabling delegated timestamps (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Replace KUnit tests for memcmp() with KUNIT_EXPECT_MEMEQ_MSG() (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Track SCSI Persistent Registration Fencing per Client with xarray (Olga Kornievskaia) [RHEL-171581]
  - sunrpc/cache: improve RCU safety in cache_list walking. (Olga Kornievskaia) [RHEL-171581]
  - nfsd/sunrpc: move rq_cachetype into struct nfsd_thread_local_info (Olga Kornievskaia) [RHEL-171581]
  - nfsd/sunrpc: add svc_rqst->rq_private pointer and remove rq_lease_breaker (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: fix cache_request leak in cache_release (Olga Kornievskaia) [RHEL-171581] {CVE-2026-31400}
  - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (Olga Kornievskaia) [RHEL-171581] {CVE-2026-31403}
  - nfsd: switch purge_old() to use start_removing_noperm() (Olga Kornievskaia) [RHEL-171581]
  - NFS: Fix NFS KConfig typos (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Decrement re_receiving on the early exit paths (Olga Kornievskaia) [RHEL-171581] {CVE-2026-43469}
  - nfsd: report the requested maximum number of threads instead of number running (Olga Kornievskaia) [RHEL-171581]
  - nfs: return EISDIR on nfs3_proc_create if d_alias is a dir (Olga Kornievskaia) [RHEL-171581] {CVE-2026-43470}
  - nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit(). (Olga Kornievskaia) [RHEL-171581] {CVE-2026-43394}
  - nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit(). (Olga Kornievskaia) [RHEL-171581] {CVE-2026-23297}
  - SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path (Olga Kornievskaia) [RHEL-171581]
  - nfs: nfs4proc: Convert comma to semicolon (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Change list definition method (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: rpc_debug and others are defined even if CONFIG_SUNRPC_DEBUG unset (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: limit lease period in nfs4_set_lease_period() (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: pass lease period in seconds to nfs4_set_lease_period() (Olga Kornievskaia) [RHEL-171581]
  - fs/nfs: Fix readdir slow-start regression (Olga Kornievskaia) [RHEL-171581]
  - NFS: fix delayed delegation return handling (Olga Kornievskaia) [RHEL-171581]
  - NFS: simplify error handling in nfs_end_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: fold nfs_abort_delegation_return into nfs_end_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove the delegation == NULL check in nfs_end_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: use bool for the issync argument to nfs_end_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: return void from ->return_delegation (Olga Kornievskaia) [RHEL-171581]
  - NFS: return void from nfs4_inode_make_writeable (Olga Kornievskaia) [RHEL-171581]
  - NFS: Merge CONFIG_NFS_V4_1 with CONFIG_NFS_V4 (Olga Kornievskaia) [RHEL-171581]
  - NFS: Add a way to disable NFS v4.0 via KConfig (Olga Kornievskaia) [RHEL-171581]
  - redhat/configs: Add NFS_V4_0 (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move sequence slot operations into minorversion operations (Olga Kornievskaia) [RHEL-171581]
  - NFS: Pass a struct nfs_client to nfs4_init_sequence() (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move NFS v4.0 pathdown recovery into nfs40client.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move nfs40_init_client into nfs40client.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move nfs40_shutdown_client into nfs40client.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Make the various NFS v4.0 operations static again (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move the NFS v4.0 minor version ops into nfs40proc.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Split out the nfs40_mig_recovery_ops to nfs40proc.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Split out the nfs40_state_renewal_ops into nfs40proc.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Split out the nfs40_nograce_recovery_ops into nfs40proc.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Split out the nfs40_reboot_recovery_ops into nfs40client.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move nfs40_call_sync_ops into nfs40proc.c (Olga Kornievskaia) [RHEL-171581]
  - exportfs: clarify the documentation of open()/permission() expotrfs ops (Olga Kornievskaia) [RHEL-171581]
  - nfsd: do not allow exporting of special kernel filesystems (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add POSIX ACL file attributes to SUPPATTR bitmasks (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add POSIX draft ACL support to the NFSv4 SETATTR operation (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add support for POSIX draft ACLs for file creation (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add support for XDR decoding POSIX draft ACLs (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Refactor nfsd_setattr()'s ACL error reporting (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Do not allow NFSv4 (N)VERIFY to check POSIX ACL attributes (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add nfsd4_encode_fattr4_posix_access_acl (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add nfsd4_encode_fattr4_posix_default_acl (Olga Kornievskaia) [RHEL-171581]
  - lsm,nfs: fix memory leak of lsm_context (Olga Kornievskaia) [RHEL-171581]
  - lsm: lsm_context in security_dentry_init_security (Olga Kornievskaia) [RHEL-171581]
  - lsm: use lsm_context in security_inode_getsecctx (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add nfsd4_encode_fattr4_acl_trueform_scope (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add nfsd4_encode_fattr4_acl_trueform (Olga Kornievskaia) [RHEL-171581]
  - Add RPC language definition of NFSv4 POSIX ACL extension (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add a Kconfig setting to enable support for NFSv4 POSIX ACLs (Olga Kornievskaia) [RHEL-171581]
  - redhat/configs: Add NFSD_V4_POSIX_ACLS (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Implement pass-through lines in specifications (Olga Kornievskaia) [RHEL-171581]
  - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-171581]
  - nfsd: add controls to set the minimum number of threads per pool (Olga Kornievskaia) [RHEL-171581]
  - nfsd: adjust number of running nfsd threads based on activity (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: allow svc_recv() to return -ETIMEDOUT and -EBUSY (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: split new thread creation into a separate function (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: introduce the concept of a minimum number of threads per pool (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: track the max number of requested threads in a pool (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: remove special handling of NULL pool from svc_start/stop_kthreads() (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: split svc_set_num_threads() into two functions (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: use bvec-based RDMA read/write API (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Add enum value validation to generated decoders (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Emit a max_arg_sz macro (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Extend error reporting to AST transformation phase (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Improve parse error reporting (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Remove inclusion of nlm4.h header (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths (Olga Kornievskaia) [RHEL-171581]
  - nfsd: fix return error code for nfsd_map_name_to_[ug]id (Olga Kornievskaia) [RHEL-171581]
  - nfsd: never defer requests during idmap lookup (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Initialize data pointer for zero-length items (Olga Kornievskaia) [RHEL-171581]
  - NFSD: fix setting FMODE_NOCMTIME in nfs4_open_delegation (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Implement short (16-bit) integer types (Olga Kornievskaia) [RHEL-171581]
  - nfsd: use workqueue enable/disable APIs for v4_end_grace sync (Olga Kornievskaia) [RHEL-171581]
  - NFS: NFSERR_INVAL is not defined by NFSv2 (Olga Kornievskaia) [RHEL-171581]
  - nfsd: prefix notification in nfsd4_finalize_deleg_timestamps() with "nfsd: " (Olga Kornievskaia) [RHEL-171581]
  - locks: ensure vfs_test_lock() never returns FILE_LOCK_DEFERRED (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Generate "if" instead of "switch" for boolean union enumerators (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add instructions on how to deal with xdrgen files (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Clean up nfsd4_check_open_attributes() (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: switch nfs_local_do_read and nfs_local_do_write to return void (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: remove -EAGAIN handling in nfs_local_doio() (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: use GFP_NOIO and non-memreclaim workqueue in nfs_local_commit (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: prevent direct reclaim recursion into NFS via nfs_writepages (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: Cleanup the nfs_local_pgio_done() parameters (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: Handle short writes by retrying (Olga Kornievskaia) [RHEL-171581]
  - NFS: make nfs_mark_return_unreferenced_delegations less aggressive (Olga Kornievskaia) [RHEL-171581]
  - NFS: return delegations from the end of a LRU when over the watermark (Olga Kornievskaia) [RHEL-171581]
  - NFS: add a separate delegation return list (Olga Kornievskaia) [RHEL-171581]
  - NFS: reformat nfs_mark_delegation_revoked (Olga Kornievskaia) [RHEL-171581]
  - NFS: use a local RCU critical section in nfs_start_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: use refcount_inc_not_zero nfs_start_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: don't consume a delegation reference in nfs_end_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: take a delegation reference in nfs4_get_valid_delegation (Olga Kornievskaia) [RHEL-171581]
  - NFS: simplify the detached delegation check in update_open_stateid (Olga Kornievskaia) [RHEL-171581]
  - NFS: move the deleg_cur check out of nfs_detach_delegation_locked (Olga Kornievskaia) [RHEL-171581]
  - NFS: return bool from nfs_detach_delegation{,_locked} (Olga Kornievskaia) [RHEL-171581]
  - NFS: move delegation lookup into can_open_delegated (Olga Kornievskaia) [RHEL-171581]
  - NFS: rewrite nfs_delegations_present in terms of nr_active_delegations (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove nfs_free_delegation (Olga Kornievskaia) [RHEL-171581]
  - NFS: open code nfs_delegation_need_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove NFS_DELEGATION_INODE_FREEING (Olga Kornievskaia) [RHEL-171581]
  - NFS: drop the _locked postfix from nfs_start_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: assert rcu_read_lock is held in nfs_start_delegation_return_locked (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove nfs_start_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove nfs_inode_detach_delegation (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove the NULL inode check in nfs4_inode_return_delegation_on_close (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove nfs_client_mark_return_all_delegations (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove nfs_client_mark_return_unused_delegation_types (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove __nfs_client_for_each_server (Olga Kornievskaia) [RHEL-171581]
  - exportfs: Mark struct export_operations functions at kernel-doc (Olga Kornievskaia) [RHEL-171581]
  - exportfs: Fix kernel-doc output for get_name() (Olga Kornievskaia) [RHEL-171581]
  - docs: exportfs: Use source code struct documentation (Olga Kornievskaia) [RHEL-171581]
  - NFS: Don't immediately return directory delegations when disabled (Olga Kornievskaia) [RHEL-171581]
  - NFSv4.x: Directory delegations don't require any state recovery (Olga Kornievskaia) [RHEL-171581]
  - nfs: unify security_inode_listsecurity() calls (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: Don't free slots prematurely if requesting a directory delegation (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: Fix nfs_clear_verifier_delegated() for delegated directories (Olga Kornievskaia) [RHEL-171581]
  - NFS: Fix directory delegation verifier checks (Olga Kornievskaia) [RHEL-171581]
  - NFSD: net ref data still needs to be freed even if net hasn't startup (Olga Kornievskaia) [RHEL-171581]
  - nfsd: provide locking for v4_end_grace (Olga Kornievskaia) [RHEL-171581] {CVE-2026-22980}
  - NFSD: Remove NFSERR_EAGAIN (Olga Kornievskaia) [RHEL-171581]
  - nfsd: use ATTR_DELEG in nfsd4_finalize_deleg_timestamps() (Olga Kornievskaia) [RHEL-171581]
  - NFSD: NFSv4 file creation neglects setting ACL (Olga Kornievskaia) [RHEL-171581] {CVE-2025-68803}
  - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: Handle NFS4ERR_NOTSUPP errors for directory delegations (Olga Kornievskaia) [RHEL-171581]
  - NFSD: nfsd-io-modes: Separate lists (Olga Kornievskaia) [RHEL-171581]
  - NFSD: nfsd-io-modes: Wrap shell snippets in literal code blocks (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add toctree entry for NFSD IO modes docs (Olga Kornievskaia) [RHEL-171581]
  - NFSD: add Documentation/filesystems/nfs/nfsd-io-modes.rst (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Implement NFSD_IO_DIRECT for NFS WRITE (Olga Kornievskaia) [RHEL-171581]
  - NFS: Fix up the automount fs_context to use the correct cred (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add trace point for SCSI fencing operation. (Olga Kornievskaia) [RHEL-171581]
  - NFS: Add a module option to disable directory delegations (Olga Kornievskaia) [RHEL-171581]
  - NFS: Shortcut lookup revalidations if we have a directory delegation (Olga Kornievskaia) [RHEL-171581]
  - NFS: Request a directory delegation during RENAME (Olga Kornievskaia) [RHEL-171581]
  - NFS: Request a directory delegation on ACCESS, CREATE, and UNLINK (Olga Kornievskaia) [RHEL-171581]
  - NFS: Add support for sending GDD_GETATTR (Olga Kornievskaia) [RHEL-171581]
  - nfsd: Use MD5 library instead of crypto_shash (Olga Kornievskaia) [RHEL-171581]
  - nfsd: stop pretending that we cache the SEQUENCE reply. (Olga Kornievskaia) [RHEL-171581]
  - NFS: nfsd-maintainer-entry-profile: Inline function name prefixes (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add a subsystem policy document (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: allocate a separate bvec array for socket sends (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Improve "fragment too large" warning (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Implement NFSD_IO_DIRECT for NFS READ (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Relocate the xdr_reserve_space_vec() call site (Olga Kornievskaia) [RHEL-171581]
  - NFSD: pass nfsd_file to nfsd_iter_read() (Olga Kornievskaia) [RHEL-171581]
  - NFSD/blocklayout: Support multiple extents per LAYOUTGET (Olga Kornievskaia) [RHEL-171581]
  - NFSD/blocklayout: Introduce layout content structure (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Increase the server's default RPC/RDMA credit grant (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Update comment documenting unsupported fattr4 attributes (Olga Kornievskaia) [RHEL-171581]
  - nfsd: delete unreachable confusing code in nfs4_open_delegation() (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add array bounds-checking in nfsd_iter_read() (Olga Kornievskaia) [RHEL-171581]
  - nfsd: switch the default for NFSD_LEGACY_CLIENT_TRACKING to "n" (Olga Kornievskaia) [RHEL-171581]
  - nfsd: change nfs4_client_to_reclaim() to allocate data (Olga Kornievskaia) [RHEL-171581]
  - nfsd: move name lookup out of nfsd4_list_rec_dir() (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Define actions for the new time_deleg FATTR4 attributes (Olga Kornievskaia) [RHEL-171581] {CVE-2025-40326}
  - NFSD: Allow layoutcommit during grace period (Olga Kornievskaia) [RHEL-171581]
  - fs: lift the FMODE_NOCMTIME check into file_update_time_flags (Olga Kornievskaia) [RHEL-171581]
  - fs: refactor file timestamp update logic (Olga Kornievskaia) [RHEL-171581]
  - nfsd: freeze c/mtime updates with outstanding WRITE_ATTRS delegation (Olga Kornievskaia) [RHEL-171581]
  - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172775] {CVE-2026-43056}
  - bonding: 3ad: Add support for 1600G speed (Kamal Heib) [RHEL-165176]
  - net: ethtool: Add support for 1600Gbps speed (Kamal Heib) [RHEL-165176]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-243.el10]
changelog:
  - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-178260]
  - nvme: make nvme_add_ns{_head}_cdev return void (Utkarsh Singh) [RHEL-186079]
  - nvme: fix crash and memory leak during invalid cdev teardown (Utkarsh Singh) [RHEL-186079]
  - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-185104]
  - KVM: s390: Increase permitted SE header size to 1 MiB (Ramesh Chhetri) [RHEL-185661]
  - net/sched: fix pedit partial COW leading to page cache corruption (CKI Backport Bot) [RHEL-177381] {CVE-2026-46331}
  - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-176465] {CVE-2026-31739}
  - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-176465]
  - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180700] {CVE-2026-31530}
  - s390/uv: Fix comment of uv_find_secret() function (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Fix memory leak with CCA cards used as accelerator (Mircea Dragan) [RHEL-136440]
  - crypto: s390/paes - Refuse clear key material by default (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Support new xflag PKEY_XFLAG_NOCLEARKEY (Mircea Dragan) [RHEL-136440]
  - crypto: skcipher - Add new helper function crypto_skcipher_tested (Mircea Dragan) [RHEL-136440]
  - s390/crypto: Select crypto engine in Kconfig when PAES is chosen (Mircea Dragan) [RHEL-136440]
  - s390/crypto: Extend protected key conversion retry loop (Mircea Dragan) [RHEL-136440]
  - s390/crypto: Rework protected key AES for true asynch support (Mircea Dragan) [RHEL-136440]
  - s390/cpacf: Rework cpacf_pcc() to return condition code (Mircea Dragan) [RHEL-136440]
  - s390/pkey/crypto: Introduce xflags param for pkey in-kernel API (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Provide and pass xflags within pkey and zcrypt layers (Mircea Dragan) [RHEL-136440]
  - s390/uv: Remove uv_get_secret_metadata function (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Use preallocated memory for retrieve of UV secret metadata (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Rework EP11 pkey handler to use stack for small memory allocs (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Rework CCA pkey handler to use stack for small memory allocs (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework ep11 misc functions to use cprb mempool (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Locate ep11_domain_query_info onto the stack instead of kmalloc (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Propagate xflags argument with cca_get_info() (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework cca misc functions kmallocs to use the cprb mempool (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework ep11 findcard() implementation and callers (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework cca findcard() implementation and callers (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Remove CCA and EP11 card and domain info caches (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Remove unused functions from cca misc (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Introduce pre-allocated device status array for ep11 misc (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Introduce pre-allocated device status array for cca misc (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework zcrypt function zcrypt_device_status_mask_ext (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Introduce cprb mempool for ep11 misc functions (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Introduce cprb mempool for cca misc functions (Mircea Dragan) [RHEL-136440]
  - s390/ap/zcrypt: New xflag parameter (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Avoid alloc and copy of ep11 targets if kernelspace cprb (Mircea Dragan) [RHEL-136440]
  - s390/ap: Introduce ap message buffer pool (Mircea Dragan) [RHEL-136440]
  - s390/ap/zcrypt: Rework AP message buffer allocation (Mircea Dragan) [RHEL-136440]
  - s390/ap: Move response_type struct into ap_msg struct (Mircea Dragan) [RHEL-136440]
  - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179311] {CVE-2026-46090}
  - KVM: s390: vsie: Allow non-zarch guests (Mircea Dragan) [RHEL-136477]
  - KVM: s390: Add KVM capability for ESA mode guests (Mircea Dragan) [RHEL-136477]
  - KVM: s390: Add capability that forwards operation exceptions (Mircea Dragan) [RHEL-136477]
  - KVM: s390: vsie: Accommodate ESA prefix pages (Mircea Dragan) [RHEL-136477]
  - KVM: s390: vsie: Disable some bits when in ESA mode (Mircea Dragan) [RHEL-136477]
  - KVM: s390: only deliver service interrupt with payload (Mircea Dragan) [RHEL-136477]
  - KVM: s390: vsie: retry SIE when unable to get vsie_page (Mircea Dragan) [RHEL-136477]
  - KVM: s390: vsie: Check alignment of BSCA header (Mircea Dragan) [RHEL-136477]
  - rhashtable: Fix rhashtable_try_insert test (Herton R. Krzesinski) [RHEL-115002]
  - rhashtable: Fix potential deadlock by moving schedule_work outside lock (Herton R. Krzesinski) [RHEL-115002]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-244.el10]
changelog:
  - x86/microcode: Add platform mask to Intel microcode "old" list (Luis Claudio R. Goncalves) [RHEL-184788]
  - x86/cpu: Add platform ID to CPU matching structure (Luis Claudio R. Goncalves) [RHEL-184788]
  - x86/cpu: Add platform ID to CPU info structure (Luis Claudio R. Goncalves) [RHEL-184788]
  - x86/microcode: Refactor platform ID enumeration into a helper (Luis Claudio R. Goncalves) [RHEL-184788]
  - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-186142]
  - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180777]
  - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180777]
  - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180777]
  - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180777] {CVE-2025-38614}
  - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180777]
  - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180777]
  - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180777]
  - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180777] {CVE-2026-46242}
  - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180777]
  - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180777]
  - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180777]
  - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180777]
  - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180777]
  - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180777]
  - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173837] {CVE-2026-43074}
  - epoll: annotate racy check (Ian Kent) [RHEL-180777]
  - ima: Add code comments to explain IMA iint cache atomic_flags (Bruno Meneguele) [RHEL-104343]
  - evm: fix security.evm for a file with IMA signature (Bruno Meneguele) [RHEL-104343]
  - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183963] {CVE-2026-46316}
  - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181905] {CVE-2026-46259}
  - mei: late_bind: fix struct intel_lb_component_ops kernel-doc (Steve Best) [RHEL-177639]
  - misc/mei: INTEL_MEI should depend on X86 or DRM_XE (Steve Best) [RHEL-177639]
  - mei: me: reduce the scope on unexpected reset (Steve Best) [RHEL-177639]
  - mei: trace: treat reg parameter as string (Steve Best) [RHEL-177639]
  - misc/mei: gsc_proxy: add dependency on Xe driver (Steve Best) [RHEL-177639]
  - misc/mei: Allow building standalone for compile testing (Steve Best) [RHEL-177639]
  - misc/mei: Decouple ME interfaces from GPU drivers (Steve Best) [RHEL-177639]
  - misc/mei: Allow building Intel ME interface on non-x86 (Steve Best) [RHEL-177639]
  - mei: Fix error handling in mei_register (Steve Best) [RHEL-177639]
  - mei: gsc: add dependency on Xe driver (Steve Best) [RHEL-177639]
  - mei: Remove redundant pm_runtime_mark_last_busy() calls (Steve Best) [RHEL-177639]
  - mei: fix error flow in probe (Steve Best) [RHEL-177639]
  - mei: txe: fix initialization order (Steve Best) [RHEL-177639]
  - mei: late_bind: Fix -Wincompatible-function-pointer-types-strict (Steve Best) [RHEL-177639]
  - redhat/configs: disable CONFIG_INTEL_MEI_LB (Steve Best) [RHEL-177639]
  - mei: late_bind: add late binding component driver [partial] (Steve Best) [RHEL-177639]
  - mei: bus: add mei_cldev_mtu interface (Steve Best) [RHEL-177639]
  - mei: gsc: demote unexpected reset print (Steve Best) [RHEL-177639]
  - mei: bus: demote error on connect (Steve Best) [RHEL-177639]
  - mei: retry connect if interrupted by link reset (Steve Best) [RHEL-177639]
  - mei: make a local copy of client uuid in connect (Steve Best) [RHEL-177639]
  - mei: me: trigger link reset if hw ready is unexpected (Steve Best) [RHEL-177639]
  - mei: gsc: fix remove operations order (Steve Best) [RHEL-177639]
  - mei: hook mei_device on class device (Steve Best) [RHEL-177639]
  - RDMA/irdma: Add support for GEN4 hardware (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Provide scratch buffers to firmware for internal use (Michal Schmidt) [RHEL-186151]
  - RDMA: Don't use %pK through printk (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Harden depth calculation functions (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Return EINVAL for invalid arp index error (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Fix deadlock during netdev reset with active connections (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Remove reset check from irdma_modify_qp_to_err() (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Clean up unnecessary dereference of event->cm_node (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce() (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Update ibqp state to error if QP is already in error state (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Initialize free_qp completion before using it (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Fix double free related to rereg_user_mr (Michal Schmidt) [RHEL-186151]
  - RDMA: Complete k[z|m|c]alloc-to-k[z|m]alloc_obj conversion [irdma] (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() (Michal Schmidt) [RHEL-186151]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [irdma] (Michal Schmidt) [RHEL-186151]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [irdma] (Michal Schmidt) [RHEL-186151]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [irdma] (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Use kvzalloc for paged memory DMA address array (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Use CQ ID for CEQE context (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Add enum defs for reserved CQs/QPs (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Remove fixed 1 ms delay during AH wait loop (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Remove redundant dma_wmb() before writel() (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Simplify bool conversion (Michal Schmidt) [RHEL-186151]
  - rtla: Fix parsing of multi-character short options (Tomas Glozar) [RHEL-151369]
  - tracing: Fix potential deadlock in cpu hotplug with osnoise (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Convert links to RST format (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Document SIGINT behavior (Tomas Glozar) [RHEL-151369]
  - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-151369 RHEL-151475]
  - rtla/utils: Fix loop condition in PID validation (Tomas Glozar) [RHEL-151369]
  - rtla/utils: Fix resource leak in set_comm_sched_attr() (Tomas Glozar) [RHEL-151369]
  - rtla/trace: Fix I/O handling in save_trace_to_file() (Tomas Glozar) [RHEL-151369]
  - rtla/trace: Fix write loop in trace_event_save_hist() (Tomas Glozar) [RHEL-151369]
  - rtla/timerlat: Simplify RTLA_NO_BPF environment variable check (Tomas Glozar) [RHEL-151369]
  - rtla: Use str_has_prefix() for option prefix check (Tomas Glozar) [RHEL-151369]
  - rtla: Enforce exact match for time unit suffixes (Tomas Glozar) [RHEL-151369]
  - rtla: Use str_has_prefix() for prefix checks (Tomas Glozar) [RHEL-151369]
  - rtla: Add str_has_prefix() helper function (Tomas Glozar) [RHEL-151369]
  - rtla: Handle pthread_create() failure properly (Tomas Glozar) [RHEL-151369]
  - rtla/timerlat: Add bounds check for softirq vector (Tomas Glozar) [RHEL-151369]
  - rtla: Simplify code by caching string lengths (Tomas Glozar) [RHEL-151369]
  - rtla: Replace magic number with MAX_PATH (Tomas Glozar) [RHEL-151369]
  - rtla: Introduce common_threshold_handler() helper (Tomas Glozar) [RHEL-151369]
  - rtla/actions: Simplify argument parsing (Tomas Glozar) [RHEL-151369]
  - rtla: Use strdup() to simplify code (Tomas Glozar) [RHEL-151369]
  - rtla: Exit on memory allocation failures during initialization (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Remove unneeded nr_cpus from for_each_monitored_cpu (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Remove unneeded nr_cpus members (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Remove unneeded nr_cpus arguments (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate nr_cpus usage across all tools (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Document --stack-format option (Tomas Glozar) [RHEL-136812 RHEL-151369]
  - rtla/timerlat: Add --stack-format option (Tomas Glozar) [RHEL-136812 RHEL-151369]
  - tools/rtla: Add unit tests for utils.c (Tomas Glozar) [RHEL-151369]
  - tools/build: Add feature test for libcheck (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Generate optstring from long options (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Add hwnoise to main page (Tomas Glozar) [RHEL-151369]
  - rtla: Fix build without libbpf header (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Include defaults for tracer options (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Mention default cgroup state (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Mention default priority (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Correct tracer name for common options (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Fix typo in common_timerlat_options.txt (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Fix typo in rtla-timerlat-top.rst (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Fix typo in common_timerlat_options.txt (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Fix typo in common_options.txt (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: rename common_xxx.rst files to common_xxx.txt (Tomas Glozar) [RHEL-151369]
  - rtla: Fix parse_cpu_set() bug introduced by strtoi() (Tomas Glozar) [RHEL-151369]
  - rtla: Fix parse_cpu_set() return value documentation (Tomas Glozar) [RHEL-151369]
  - rtla: Ensure null termination after read operations in utils.c (Tomas Glozar) [RHEL-151369]
  - rtla: Make stop_tracing variable volatile (Tomas Glozar) [RHEL-151369]
  - rtla: Add generated output files to gitignore (Tomas Glozar) [RHEL-151369]
  - rtla: Fix NULL pointer dereference in actions_parse (Tomas Glozar) [RHEL-151369]
  - rtla: Remove unused headers (Tomas Glozar) [RHEL-151369]
  - rtla: Remove redundant memset after calloc (Tomas Glozar) [RHEL-151369]
  - rtla: Use standard exit codes for result enum (Tomas Glozar) [RHEL-151369]
  - rtla: Replace atoi() with a robust strtoi() (Tomas Glozar) [RHEL-151369]
  - rtla: Introduce for_each_action() helper (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Deduplicate cgroup path opening code (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -H/--house-keeping option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -P/--priority option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -e/--event option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -d/--duration option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -D/--debug option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -C/--cgroup option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -c/--cpus option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Add common_parse_options() (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Add common_usage() (Tomas Glozar) [RHEL-151369]
  - rtla: Set stop threshold after all instances are enabled (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Remove unused function declarations (Tomas Glozar) [RHEL-151369]
  - tracing: Fix multiple typos in trace_osnoise.c (Tomas Glozar) [RHEL-151369]
  - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-147742 RHEL-151369]
  - rtla/tests: Don't rely on matching ^1ALL (Tomas Glozar) [RHEL-151369]
  - rtla: Fix -a overriding -t argument (Tomas Glozar) [RHEL-151369]
  - rtla: Fix -C/--cgroup interface (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Replace osnoise_hist_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Replace osnoise_top_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Replace timerlat_hist_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Replace timerlat_top_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Add fatal() and replace error handling pattern (Tomas Glozar) [RHEL-151369]
  - rtla/tests: Fix osnoise test calling timerlat (Tomas Glozar) [RHEL-151369]
  - rtla/tests: Extend action tests to 5s (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Fix --on-threshold always triggering (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Fix unassigned nr_cpus (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Remove unused optional option_index (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Add for_each_monitored_cpu() helper (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Add remaining support for osnoise actions (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Add test engine support for unexpected output (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Fix -A option name in test comment (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Consolidate code between osnoise/timerlat and hist/top (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Create common_apply_config() (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Move top/hist params into common struct (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Consolidate common parameters into shared structure (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tracing: Replace opencoded cpumask_next_wrap() in move_to_next_cpu() (Tomas Glozar) [RHEL-151369]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-245.el10]
changelog:
  - riscv: entry: Split ret_from_fork() into user and kernel (Jennifer Berringer) [RHEL-188766]
  - riscv: entry: Convert ret_from_fork() to C (Jennifer Berringer) [RHEL-188766]
  - ACPICA: actbl2: Add definitions for RIMT (Jennifer Berringer) [RHEL-187991]
  - soc/tegra: Use ARM SMCCC to get chip ID, revision, and platform info (Steve Dunnagan) [RHEL-143339]
  - dma-debug: suppress cacheline overlap warning when arch has no DMA alignment requirement (Jerry Snitselaar) [RHEL-182720]
  - platform/x86: intel-hid: Check ACPI_HANDLE() against NULL (Steve Best) [RHEL-182291]
  - redhat/configs: riscv: Enable ARCH_SPACEMIT (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Clear interrupt move state during CPU offlining (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-aplic: Prevent crash when MSI domain is missing (Jennifer Berringer) [RHEL-174301] {CVE-2024-56682}
  - irqchip/riscv-imsic: Adjust the number of available guest irq files (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Add a CPU pm notifier to restore the IMSIC on exit (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Inline imsic_vector_from_local_id() (Jennifer Berringer) [RHEL-174301]
  - irqchip/irq-riscv-imsic-early: Export imsic_acpi_get_fwnode() (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Don't dereference before NULL pointer check (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Add kernel parameter to disable IPIs (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Convert to msi_create_parent_irq_domain() helper (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Start local sync timer on correct CPU (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Avoid interrupt translation in interrupt handler (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Implement irq_force_complete_move() for IMSIC (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Separate next and previous pointers in IMSIC vector (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv: Ensure ordering of memory writes and IPI writes (Jennifer Berringer) [RHEL-174301]
  - serial: 8250_of: manage bus clock in suspend/resume (Jennifer Berringer) [RHEL-174301]
  - serial: 8250_of: add support for an optional bus clock (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: k3: mark top_dclk as CLK_IS_CRITICAL (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_mix: fix inverted condition in ccu_mix_trigger_fc() (Jennifer Berringer) [RHEL-174301]
  - reset: spacemit: k3: Decouple composite reset lines (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: return -ENOTSUPP for unsupported pin configurations (Jennifer Berringer) [RHEL-174301]
  - reset: spacemit: Add SpacemiT K3 reset driver (Jennifer Berringer) [RHEL-174301]
  - reset: spacemit: Extract common K1 reset code (Jennifer Berringer) [RHEL-174301]
  - reset: Create subdirectory for SpacemiT drivers (Jennifer Berringer) [RHEL-174301]
  - reset: spacemit: fix auxiliary device id (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: soc: spacemit: Add K3 reset support and IDs (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: support I/O power domain configuration (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: k3: add the clock tree (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: k3: extract common header (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_pll: add plla type clock (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_mix: add inverted enable gate clock (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: soc: spacemit: k3: add clock support (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: add platform SoC prefix to reset name (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: extract common ccu functions (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: prepare common ccu header (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: k3: adjust drive strength and schmitter trigger (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: k3: add initial pin support (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: Hide common clock driver from user controller (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: Respect Kconfig setting when building modules (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: Set clk_hw_onecell_data::num before using flex array (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: fix comment typo (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: fix i2s clock (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: introduce pre-div for ddn clock (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: clock: spacemit: introduce i2s pre-clock to fix i2s clock (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: fix typo in PRI_TDI pin name (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_pll: convert from round_rate() to determine_rate() (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_mix: convert from round_rate() to determine_rate() (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_ddn: convert from round_rate() to determine_rate() (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: fix sspax_clk (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: clock: spacemit: CLK_SSPA_I2S_BCLK for SSPA (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: remove extra line in debug output (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_pll: fix error return value in recalc_rate callback (Jennifer Berringer) [RHEL-174301]
  - reset: spacemit: add support for SpacemiT CCU resets (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: mark K1 pll1_d8 as critical (Jennifer Berringer) [RHEL-174301] {CVE-2025-38633}
  - clk: spacemit: define three reset-only CCUs (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: set up reset auxiliary devices (Jennifer Berringer) [RHEL-174301]
  - soc: spacemit: create a header for clock/reset registers (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: soc: spacemit: define spacemit,k1-ccu resets (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: add clock support for K1 SoC (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: k1: Add TWSI8 bus and function clocks (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: Add clock support for SpacemiT K1 SoC (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: clock: spacemit: Add spacemit,k1-pll (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: soc: spacemit: Add spacemit,k1-syscon (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: PINCTRL_SPACEMIT_K1 should not default to y unconditionally (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: destroy mutex at driver detach (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: enable config option (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: fix double free of map (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: add support for SpacemiT K1 SoC (Jennifer Berringer) [RHEL-174301]
  - reset: amlogic: move drivers to a dedicated directory (Jennifer Berringer) [RHEL-174301]
  - reset: amlogic: convert driver to regmap (Jennifer Berringer) [RHEL-174301]
  - dts: riscv: spacemit: k3: add P1 PMIC regulator tree (Jennifer Berringer) [RHEL-174301]
  - dts: riscv: spacemit: k3: Add i2c nodes (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable PCIe ports on Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable USB 3 ports on Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable QSPI and add SPI NOR on Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add i2c aliases on Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add 24c04 eeprom on Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add LEDs for Milk-V Jupiter board (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add ethernet device for K3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: drop incorrect pinctrl for combo PHY (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: reorder phy nodes for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: k3: add full resource to UART (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: k3: add GPIO support (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: k3: add pinctrl support (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: k3: add clock tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add 'linux,pci-domain' to PCIe nodes for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: adapt regulator node name to preferred form (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Update PMIC supply properties for BPI-F3 and Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: pcie: fix missing power regulator (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Disable ETH PHY sleep mode for OrangePi (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: pinctrl: update register and IO power (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add K3 Pico-ITX board support (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add initial support for K3 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: k1: Add "b" ISA extension (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Enable USB3.0 on BananaPi-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add DWC3 USB 3.0 controller node for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add USB2 PHY node for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: sdhci: add reset support (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add reset property (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: PCIe and PHY-related updates (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add a PCIe regulator (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Define the P1 PMIC regulators for Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Define fixed regulators for Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Enable i2c8 adapter for Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: define all missing I2C controller nodes (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: reorder i2c2 node (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add OrangePi R2S board device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable K1 SoC QSPI on BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add MusePi Pro board device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add Ethernet and PDMA to OrangePi RV2 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add i2c aliases on BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add 24c02 eeprom on BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable the i2c2 adapter on BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: define regulator constraints (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: define fixed regulators (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable the i2c8 adapter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add UART pinctrl combinations (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add Ethernet support for Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add Ethernet support for BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add Ethernet support for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: uart: remove sec_uart1 device node (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Enable PDMA on Banana Pi F3 and Milkv Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add PDMA node for K1 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add UART resets for Soc K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add OrangePi RV2 board device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Move eMMC under storage-bus for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Move UARTs under dma-bus for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add DMA translation buses for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add pwm14_1 pinctrl setting (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add PWM support for K1 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add reset support for the K1 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable eMMC for K1 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add gpio LED for system heartbeat (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add gpio support for K1 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Acquire clocks for UART (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Acquire clocks for pinctrl (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add clock tree for SpacemiT K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add Milk-V Jupiter board device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: move aliases to board dts (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add pinctrl property to uart0 in BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add Banana Pi BPI-F3 board device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: add initial SpacemiT K1 SoC device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: add SpacemiT SoC family Kconfig support (Jennifer Berringer) [RHEL-174301]
  - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179911] {CVE-2026-46209}
  - platform/x86: intel-hid: disable wakeup_mode during hibernation (Steve Best) [RHEL-176441]
  - platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 (Steve Best) [RHEL-176441]
  - platform/x86: intel-hid: Add Dell 16 Plus 2-in-1 to dmi_vgbs_allow_list (Steve Best) [RHEL-176441]
  - platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list (Steve Best) [RHEL-176441]
  - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks (Steve Best) [RHEL-176441]
  - platform/x86: int0002: Remove IRQF_ONESHOT from request_irq() (Steve Best) [RHEL-176441]
  - platform/x86/intel/tpmi/plr: Make the file domain<n>/status writeable (Steve Best) [RHEL-176441]
  - platform/x86: intel_telemetry: Fix PSS event register mask (Steve Best) [RHEL-176441]
  - platform/x86: intel_telemetry: Fix swapped arrays in PSS output (Steve Best) [RHEL-176441]
  - platform/x86: intel: punit_ipc: fix memory corruption (Steve Best) [RHEL-176441]
  - New configs in drivers/platform (Steve Best) [RHEL-176441]
  - platform/x86/intel: Introduce Intel Elkhart Lake PSE I/O (Steve Best) [RHEL-176441]
  - platform/x86/amd: hfi: Remove redundant assignment to .owner (Steve Best) [RHEL-176387]
  - platform/x86/amd: hfi: Remove unused cpumask from cpuinfo struct (Steve Best) [RHEL-176387]
  - powercap: intel_rapl_tpmi: Remove FW_BUG from invalid version check (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Expose all package CPUs in PMU cpumask (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Remove incorrect CPU check in PMU context (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Add PL4 support for Ice Lake (Steve Best) [RHEL-130025]
  - powercap: Replace sprintf() with sysfs_emit() in sysfs show functions (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Fix possible recursive lock warning (Steve Best) [RHEL-130025]
  - powercap: fix sscanf() error return value handling (Steve Best) [RHEL-130025]
  - powercap: fix race condition in register_control_type() (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Enable MSR-based RAPL PMU support (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Prepare read_raw() interface for atomic-context callers (Steve Best) [RHEL-130025]
  - x86/msr: Rename 'rdmsrl_safe_on_cpu()' to 'rdmsrq_safe_on_cpu()' [partial] (Steve Best) [RHEL-130025]
  - x86/msr: Rename 'wrmsrl_safe()' to 'wrmsrq_safe()' [partial] (Steve Best) [RHEL-130025]
  - x86/msr: Rename 'rdmsrl_safe()' to 'rdmsrq_safe()' [partial] (Steve Best) [RHEL-130025]
  - powercap: idle_inject: use us_to_ktime() where appropriate (Steve Best) [RHEL-130025]
  - irqchip/sifive-plic: Fix frozen interrupt due to affinity setting (Jennifer Berringer) [RHEL-174305] {CVE-2026-23287}
  - irqchip/sifive-plic: Handle number of hardware interrupts correctly (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Fix call to __plic_toggle() in M-Mode code path (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Add support for UltraRISC DP1000 PLIC (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Cache the interrupt enable state (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Avoid interrupt ID 0 handling during suspend/resume (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Respect mask state when setting affinity (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Use for_each_present_cpu() instead of for_each_cpu() (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Make use of __assign_bit() (Jennifer Berringer) [RHEL-174305]
  - cache: sifive_ccache: Optimize cache flushes (Jennifer Berringer) [RHEL-174305]
  - PCI: starfive: Use regulator APIs to control the 3v3 power supply of PCIe slots (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Append JH-7110 SoC compatible to VisionFive 2 Lite eMMC board (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Append JH-7110 SoC compatible to VisionFive 2 Lite board (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: add Orange Pi RV (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Add VisionFive 2 Lite eMMC board device tree (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Add VisionFive 2 Lite board device tree (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Add common board dtsi for VisionFive 2 Lite variants (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: Move out some nodes to the board dts (Jennifer Berringer) [RHEL-174305]
  - dts: starfive: jh7110-common: split out mmc0 reset pins from common into boards (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: add Milk-V Mars CM Lite system-on-module (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: add Milk-V Mars CM system-on-module (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: add common board dtsi for Milk-V Mars CM variants (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: drop mmc post-power-on-delay-ms (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: drop no-mmc property from mmc1 (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110: bootph-pre-ram hinting needed by boot loader (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110: add DMC memory controller (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: drop no-sdio property from mmc1 (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: add status power led node (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-milkv-mars sort properties (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: bootph-pre-ram hinting needed by boot loader (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: add eeprom node to i2c5 (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: qspi flash setting read-delay 2 cycles max 100MHz (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: add CPU BUS PERH QSPI clocks to syscrg (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: use macros for MMC0 pins (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: fml13v01: enable USB 3.0 port (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-pine64-star64: enable USB 3.0 port (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110: pciephy0 USB 3.0 configuration registers (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: fml13v01: enable pcie1 (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: remove non-existent dac from jh7110 (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Unify regulator naming scheme (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Fix a typo in StarFive JH7110 pin function definitions (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-milkv-mars: enable usb0 host function (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-pine64-star64: enable usb0 host function (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: add DeepComputing FML13V01 board device tree (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: move usb0 config to board dts (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: revised device node (Jennifer Berringer) [RHEL-174305]
  - redhat/configs: enable CONFIG_GPIO_NOVALAKE for x86 on RHEL (Steve Best) [RHEL-117349]
  - gpio: Add Intel Nova Lake ACPI GPIO events driver (Steve Best) [RHEL-117349]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-246.el10]
changelog:
  - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189498] {CVE-2026-43112}
  - objtool/x86: Reorder ORC register numbering (Yannick Cote) [RHEL-152190]
  - objtool: Support Clang RAX DRAP sequence (Yannick Cote) [RHEL-152190]
  - objtool/klp: Correlate locals to globals (Yannick Cote) [RHEL-152190]
  - objtool/klp: Match symbols based on demangled_name for global variables (Yannick Cote) [RHEL-152190]
  - objtool/klp: Remove .llvm suffix in demangle_name() (Yannick Cote) [RHEL-152190]
  - objtool/klp: Also demangle global objects (Yannick Cote) [RHEL-152190]
  - objtool/klp: Use sym->demangled_name for symbol_name hash (Yannick Cote) [RHEL-152190]
  - objtool/klp: Remove trailing '_' in demangle_name() (Yannick Cote) [RHEL-152190]
  - objtool/klp: Remove redundant strcmp() in correlate_symbols() (Yannick Cote) [RHEL-152190]
  - objtool: Use section/symbol type helpers (Yannick Cote) [RHEL-152190]
  - redhat/configs: disable CONFIG_INET_PSP on RHEL for now (Ivan Vecera) [RHEL-185448]
  - psp: strip variable-length PSP header in psp_dev_rcv() (Ivan Vecera) [RHEL-185448]
  - net: psp: require admin permission for dev-set and key-rotate (Ivan Vecera) [RHEL-185448]
  - net: psp: check for device unregister when creating assoc (Ivan Vecera) [RHEL-185448]
  - psp: add missing device stats to get-stats reply attributes (Ivan Vecera) [RHEL-185448]
  - psp: use sk->sk_hash in psp_write_headers() (Ivan Vecera) [RHEL-185448]
  - net: psp: select CONFIG_SKB_EXTENSIONS (Ivan Vecera) [RHEL-185448]
  - psp: Expand PSP acronym in INET_PSP help description (Ivan Vecera) [RHEL-185448]
  - psp: clarify checksum behavior of psp_dev_rcv() (Ivan Vecera) [RHEL-185448]
  - psp: don't use flags for checking sk_state (Ivan Vecera) [RHEL-185448]
  - psp: fix preemptive inet_twsk() cast in psp_sk_get_assoc_rcu() (Ivan Vecera) [RHEL-185448]
  - psp: make struct sock argument const in psp_sk_get_assoc_rcu() (Ivan Vecera) [RHEL-185448]
  - psp: add stats from psp spec to driver facing api (Ivan Vecera) [RHEL-185448]
  - psp: report basic stats from the core (Ivan Vecera) [RHEL-185448]
  - net: psp: don't assume reply skbs will have a socket (Ivan Vecera) [RHEL-185448]
  - psp: do not use sk_dst_get() in psp_dev_get_for_sock() (Ivan Vecera) [RHEL-185448]
  - psp: rename our psp_dev_destroy() (Ivan Vecera) [RHEL-185448]
  - psp: provide decapsulation and receive helper for drivers (Ivan Vecera) [RHEL-185448]
  - psp: provide encapsulation helper for drivers (Ivan Vecera) [RHEL-185448]
  - psp: track generations of device key (Ivan Vecera) [RHEL-185448]
  - net: psp: update the TCP MSS to reflect PSP packet overhead (Ivan Vecera) [RHEL-185448]
  - net: psp: add socket security association code (Ivan Vecera) [RHEL-185448]
  - net: tcp: allow tcp_timewait_sock to validate skbs before handing to device (Ivan Vecera) [RHEL-185448]
  - net: move sk_validate_xmit_skb() to net/core/dev.c (Ivan Vecera) [RHEL-185448]
  - psp: add op for rotation of device key (Ivan Vecera) [RHEL-185448]
  - tcp: add datapath logic for PSP with inline key exchange (Ivan Vecera) [RHEL-185448]
  - net: modify core data structures for PSP datapath support (Ivan Vecera) [RHEL-185448]
  - psp: base PSP device support (Ivan Vecera) [RHEL-185448]
  - psp: add documentation (Ivan Vecera) [RHEL-185448]
  - scsi: target: iscsi: Validate CHAP_R length before base64 decode (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: tcm_loop: Fix NULL ptr dereference (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: iscsi: reject invalid size Extended CDB AHS (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (Maurizio Lombardi) [RHEL-163760] {CVE-2026-46149}
  - scsi: target: tcm_loop: Drain commands in target_reset handler (Maurizio Lombardi) [RHEL-163760] {CVE-2026-43054}
  - scsi: target: Fix recursive locking in __configfs_open_file() (Maurizio Lombardi) [RHEL-163760] {CVE-2026-23292}
  - scsi: target: Reset t_task_cdb pointer in error case (Maurizio Lombardi) [RHEL-163760] {CVE-2025-68782}
  - scsi: target: Do not write NUL characters into ASCII configfs output (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() (Maurizio Lombardi) [RHEL-163760] {CVE-2025-68229}
  - scsi: target: target_core_configfs: Add length check to avoid buffer overflow (Maurizio Lombardi) [RHEL-163760] {CVE-2025-39998}
  - scsi: target: iscsi: fix typos and formatting in lio_target messages (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: iscsi: Use int type to store negative value (Maurizio Lombardi) [RHEL-163760]
  - arm64/simd: Add scoped guard API for kernel mode SIMD (CKI Backport Bot) [RHEL-180976]
  - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171143] {CVE-2026-31684}
  - exec: fix up /proc/pid/comm in the execveat(AT_EMPTY_PATH) case (Oleg Nesterov) [RHEL-95059]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-247.el10]
changelog:
  - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180047] {CVE-2026-46155}
  - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180047]
  - nvme-fc: Do not cancel requests in io target before it is initialized (Utkarsh Singh) [RHEL-178259]
  - tg3: Fix race for querying speed/duplex (Thomas Walsh) [RHEL-182561]
  - EDAC/amd64: Add support for AMD family 1Ah-based newer models (Joel Savitz) [RHEL-100950]
  - EDAC/mc_sysfs: Increase legacy channel support to 16 (Joel Savitz) [RHEL-100950]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [gve] (Michal Schmidt) [RHEL-178516]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [gve] (Michal Schmidt) [RHEL-178516]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [gve] (Michal Schmidt) [RHEL-178516]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [gve] (Michal Schmidt) [RHEL-178516]
  - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-178516]
  - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-178516]
  - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-178516]
  - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-178516]
  - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-178516]
  - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-178516]
  - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-178516]
  - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-178516] {CVE-2026-23386}
  - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-178516]
  - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-178516] {CVE-2026-23262}
  - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-178516]
  - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-178516]
  - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-178516] {CVE-2025-71156}
  - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-178516]
  - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-178516]
  - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-178516]
  - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-178516]
  - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-178516]
  - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-178516]
  - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-178516]
  - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-178516]
  - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-178516]
  - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-178516]
  - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-178516] {CVE-2025-40298}
  - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-178516] {CVE-2025-40299}
  - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-178516]
  - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-178516]
  - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-178516] {CVE-2025-38735}
  - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-178516]
  - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-178516]
  - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-178516]
  - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-178516]
  - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-178516]
  - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-178516]
  - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-178516]
  - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-178516]
  - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-178516]
  - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-178516]
  - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-178516]
  - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-178516]
  - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-178516]
  - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-178516]
  - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-178516]
  - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-178516]
  - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-178516]
  - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-178516]
  - gve: Add initial PTP device support (Michal Schmidt) [RHEL-178516]
  - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-178516]
  - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-178516]
  - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-178516] {CVE-2025-38122}
  - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-178516]
  - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-178516]
  - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-178516]
  - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-178516]
  - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-178516]
  - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-178516]
  - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-178516]
  - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-178516]
  - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-178516]
  - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-178516]
  - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-178516]
  - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-178516]
  - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-178516]
  - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-178516]
  - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-178516]
  - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-178516] {CVE-2024-57933}
  - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-178516] {CVE-2024-57932}
  - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-178516]
  - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-178516]
  - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-178516]
  - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-178516]
  - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-178516]
  - gve: add support for basic queue stats (Michal Schmidt) [RHEL-178516]
  - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-178516]
  - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-178516]
  - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-178516]
  - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-178516]
  - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180077] {CVE-2026-46150}
  - sched: idle: Make skipping governor callbacks more consistent (Mark Langsdorf) [RHEL-176383]
  - cpuidle: menu: Remove single state handling (Mark Langsdorf) [RHEL-176383]
  - cpuidle: teo: Remove single state handling (Mark Langsdorf) [RHEL-176383]
  - cpuidle: haltpoll: Remove single state handling (Mark Langsdorf) [RHEL-176383]
  - cpuidle: Skip governor when only one idle state is available (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Refine intercepts-based idle state lookup (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Adjust the classification of wakeup events (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Refine tick_intercepts vs total events check (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Avoid fake intercepts produced by tick (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Avoid selecting states with zero-size bins (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: menu: Always check timers with tick stopped (Mark Langsdorf) [RHEL-176383]
  - cpuidle: zynq: Switch Michal Simek's email to new one (Mark Langsdorf) [RHEL-176383]
  - cpuidle: menu: Remove incorrect unlikely() annotation (Mark Langsdorf) [RHEL-176383]
  - cpuidle: tegra: Export tegra_cpuidle_pcie_irqs_in_use() (Mark Langsdorf) [RHEL-176383]
  - cpuidle: big_little: Simplify with of_machine_device_match() (Mark Langsdorf) [RHEL-176383]
  - cpuidle: Warn instead of bailing out if target residency check fails (Mark Langsdorf) [RHEL-176383]
  - cpuidle: Update header inclusion (Mark Langsdorf) [RHEL-176383]
  - cpuidle: Respect the CPU system wakeup QoS limit for cpuidle (Mark Langsdorf) [RHEL-176383]
  - sched: idle: Respect the CPU system wakeup QoS limit for s2idle (Mark Langsdorf) [RHEL-176383]
  - pmdomain: Respect the CPU system wakeup QoS limit for s2idle (Mark Langsdorf) [RHEL-176383]
  - PM: QoS: Introduce a CPU system wakeup QoS limit (Mark Langsdorf) [RHEL-176383]
  - redhat/configs: enable CONFIG_PM_QOS_CPU_SYSTEM_WAKEUP (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Add missing space to the description (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Simplify intercepts-based state lookup (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Fix tick_intercepts handling in teo_update() (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Rework the handling of tick wakeups (Mark Langsdorf) [RHEL-176383]
  - cpuidle: psci: Replace deprecated strcpy in psci_idle_init_cpu (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Decay metrics below DECAY_SHIFT threshold (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Use s64 consistently in teo_update() (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Drop redundant function parameter (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Drop misguided target residency check (Mark Langsdorf) [RHEL-176383]
  - cpuidle: teo: Use this_cpu_ptr() where possible (Mark Langsdorf) [RHEL-176383]
  - cpuidle: Add sanity check for exit latency and target residency (Mark Langsdorf) [RHEL-176383]
  - cpuidle: riscv-sbi: Replace deprecated strcpy in sbi_cpuidle_init_cpu (Mark Langsdorf) [RHEL-176383]
  - Revert "cpuidle: menu: Avoid discarding useful information" (Mark Langsdorf) [RHEL-176383]
  - cpuidle: Fail cpuidle device registration if there is one already (Mark Langsdorf) [RHEL-176383]
  - cpuidle: sysfs: Use sysfs_emit()/sysfs_emit_at() instead of sprintf()/scnprintf() (Mark Langsdorf) [RHEL-176383]
  - cpuidle: qcom-spm: drop unnecessary initialisations (Mark Langsdorf) [RHEL-176383]
  - cpuidle: qcom-spm: fix device and OF node leaks at probe (Mark Langsdorf) [RHEL-176383]
  - cpuidle: riscv-sbi: Drop redundant sync_state support (Mark Langsdorf) [RHEL-176383]
  - cpuidle: riscv-sbi: Opt-out from genpd's common ->sync_state() support (Mark Langsdorf) [RHEL-176383]
  - dt-bindings: arm: qcom,ids: add SoC ID for IPQ5424/IPQ5404 (Mark Langsdorf) [RHEL-176381]
  - arm64: topology: Fix false warning in counters_read_on_cpu() for same-CPU reads (Mark Langsdorf) [RHEL-176381]
  - cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path (Mark Langsdorf) [RHEL-176381]
  - cpufreq: conservative: Reset requested_freq on limits change (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Don't skip cpufreq_frequency_table_cpuinfo() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: s5pv210: Simplify with scoped for each OF child loop (Mark Langsdorf) [RHEL-176381]
  - cpufreq: ondemand: Simplify idle cputime granularity test (Mark Langsdorf) [RHEL-176381]
  - cpufreq: userspace: make scaling_setspeed return the actual requested frequency (Mark Langsdorf) [RHEL-176381]
  - cpufreq: scmi: Fix device_node reference leak in scmi_cpu_domain_id() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: ti-cpufreq: add support for AM62L3 SoC (Mark Langsdorf) [RHEL-176381]
  - cpufreq: dt-platdev: Add ti,am62l3 to blocklist (Mark Langsdorf) [RHEL-176381]
  - cpufreq: scmi: correct SCMI explanation (Mark Langsdorf) [RHEL-176381]
  - cpufreq: dt-platdev: Block the driver from probing on more QC platforms (Mark Langsdorf) [RHEL-176381]
  - cpufreq: CPPC: Update FIE arch_freq_scale in ticks for non-PCC regs (Mark Langsdorf) [RHEL-176381]
  - cpufreq: CPPC: Factor out cppc_fie_kworker_init() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: qcom-nvmem: add sentinel to qcom_cpufreq_ipq806x_match_list (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Add Tegra186 and Tegra194 to cpufreq-dt-platdev blocklist (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Add new helper function returning cpufreq policy (Mark Langsdorf) [RHEL-176381]
  - cpufreq: dt-platdev: Fix creating device on OPPv1 platforms (Mark Langsdorf) [RHEL-176381]
  - cpufreq: cpufreq_boost_trigger_state() optimization (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Return -EOPNOTSUPP if no policy supports boost (Mark Langsdorf) [RHEL-176381]
  - cpufreq: sun50i: Simplify with of_machine_device_match() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek: Simplify with of_machine_get_match_data() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: dt-platdev: Simplify with of_machine_get_match_data() (Mark Langsdorf) [RHEL-176381]
  - of: Add of_machine_get_match() helper (Mark Langsdorf) [RHEL-176381]
  - of: Add wrappers to match root node with OF device ID tables (Mark Langsdorf) [RHEL-176381]
  - cpufreq: qcom-nvmem: fix compilation warning for qcom_cpufreq_ipq806x_match_list (Mark Langsdorf) [RHEL-176381]
  - cpufreq: ACPI: Replace udelay() with usleep_range() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: tegra194: add WQ_PERCPU to alloc_workqueue users (Mark Langsdorf) [RHEL-176381]
  - cpufreq: qcom-nvmem: add compatible fallback for ipq806x for no SMEM (Mark Langsdorf) [RHEL-176381]
  - cpufreq: CPPC: Don't warn if FIE init fails to read counters (Mark Langsdorf) [RHEL-176381]
  - cpufreq: nforce2: fix reference count leak in nforce2 (Mark Langsdorf) [RHEL-176381]
  - cpufreq: tegra186: add OPP support and set bandwidth (Mark Langsdorf) [RHEL-176381]
  - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist (Mark Langsdorf) [RHEL-176381]
  - cpufreq: s5pv210: fix refcount leak (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Replace deprecated strcpy() in cpufreq_unregister_governor() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: preserve freq_table_sorted across suspend/hibernate (Mark Langsdorf) [RHEL-176381]
  - cpufreq: tegra186: Initialize all cores to max frequencies (Mark Langsdorf) [RHEL-176381]
  - cpufreq: tegra186: Set target frequency for all cpus in policy (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek: fix device leak on probe failure (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Replace pointer subtraction with iteration macro (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Add defensive check during driver registration (Mark Langsdorf) [RHEL-176381]
  - cpufreq: ACPI: Use on_each_cpu_mask() in drv_write() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: conservative: Replace sscanf() with kstrtouint() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: core: Rearrange variable declarations involving __free() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Use int type to store negative error codes (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Drop redundant freq_table parameter (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek: avoid redundant conditions (Mark Langsdorf) [RHEL-176381]
  - cpufreq: tegra186: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176381]
  - cpufreq: s5pv210: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176381]
  - cpufreq: CPPC: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176381]
  - cpufreq: brcmstb-avs: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176381]
  - cpufreq: use strlen() for governor name comparison (Mark Langsdorf) [RHEL-176381]
  - cpufreq: simplify setpolicy/target check in driver verification (Mark Langsdorf) [RHEL-176381]
  - cpufreq: ti: Allow all silicon revisions to support OPPs (Mark Langsdorf) [RHEL-176381]
  - cpufreq: ti: Support more speed grades on AM62Px SoC (Mark Langsdorf) [RHEL-176381]
  - cpufreq: ti: Add support for AM62D2 (Mark Langsdorf) [RHEL-176381]
  - cpufreq: dt-platdev: Blacklist ti,am62d2 SoC (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek-hw: don't use error path on NULL fdvfs (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Avoid calling get_governor() for first policy (Mark Langsdorf) [RHEL-176381]
  - cpufreq: qcom-nvmem: Enable cpufreq for ipq5424 (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Remove unused parameter in cppc_perf_from_fbctrs() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: armada-37xx: use max() to calculate target_vm (Mark Langsdorf) [RHEL-176381]
  - cpufreq: airoha: Add support for AN7583 SoC (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek-hw: Add support for MT8196 (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek-hw: Separate per-domain and per-instance data (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek-hw: Refactor match data into struct (Mark Langsdorf) [RHEL-176381]
  - cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: armada-8k: make both cpu masks static (Mark Langsdorf) [RHEL-176381]
  - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-171990]
  - selftests: net: add bridge STP mode selection test (Mohammad Heib) [RHEL-171990]
  - docs: net: bridge: document stp_mode attribute (Mohammad Heib) [RHEL-171990]
  - net: bridge: add stp_mode attribute for STP mode selection (Mohammad Heib) [RHEL-171990]
  - selftests: net: bridge_vlan_mcast: wait for h1 before querier check (Mohammad Heib) [RHEL-171990]
  - bridge: guard local VLAN-0 FDB helpers against NULL vlan group (Mohammad Heib) [RHEL-171990]
  - bridge: mrp: reject zero test interval to avoid OOM panic (Mohammad Heib) [RHEL-171990]
  - bridge: br_nd_send: validate ND option lengths (Mohammad Heib) [RHEL-171990]
  - bridge: br_nd_send: linearize skb before parsing ND options (Mohammad Heib) [RHEL-171990]
  - bridge: No DEV_PATH_BR_VLAN_UNTAG_HW for dsa foreign (Mohammad Heib) [RHEL-171990]
  - bridge: cfm: Fix race condition in peer_mep deletion (Mohammad Heib) [RHEL-171990]
  - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled (Mohammad Heib) [RHEL-171990]
  - selftests: net: Add bridge VLAN range grouping tests (Mohammad Heib) [RHEL-171990]
  - bridge: Check relevant per-VLAN options in VLAN range grouping (Mohammad Heib) [RHEL-171990]
  - selftests: forwarding: bridge_mdb_max: add tests for mdb_n_entries warning (Mohammad Heib) [RHEL-171990]
  - net: bridge: mcast: always update mdb_n_entries for vlan contexts (Mohammad Heib) [RHEL-171990]
  - net: bridge: use sysfs_emit instead of sprintf (Mohammad Heib) [RHEL-171990]
  - net: bridge: fix static key check (Mohammad Heib) [RHEL-171990]
  - net: bridge: mcast: fix memcpy with u64_stats (Mohammad Heib) [RHEL-171990]
  - u64_stats: Introduce u64_stats_copy() (Mohammad Heib) [RHEL-171990]
  - bus: mhi: ep: Use bus callbacks for .probe() and .remove() (Jose Ignacio Tornos Martinez) [RHEL-171362]
  - bus: mhi: host: Use bus callbacks for .probe() and .remove() (Jose Ignacio Tornos Martinez) [RHEL-171362]
  - bus: mhi: host: Drop the auto_queue support (Jose Ignacio Tornos Martinez) [RHEL-171362]
  - net: qrtr: Drop the MHI auto_queue feature for IPCR DL channels (Jose Ignacio Tornos Martinez) [RHEL-171362]
  - mhi: host: Add support for loading dual ELF image format (Jose Ignacio Tornos Martinez) [RHEL-171362]
  - net: ethtool: pass genl_info to the ethnl parse_request operation (Mohammad Heib) [RHEL-167299]
  - selftests: rss_drv: Add RSS indirection table resize tests (Mohammad Heib) [RHEL-167299]
  - docs: networking: mention that RSS table should be 4x the queue count (Mohammad Heib) [RHEL-167299]
  - selftests: drv-net: rss: validate min RSS table size (Mohammad Heib) [RHEL-167299]
  - ethtool: Add RSS indirection table resize helpers (Mohammad Heib) [RHEL-167299]
  - ethtool: Track user-provided RSS indirection table size (Mohammad Heib) [RHEL-167299]
  - net: ethtool: re-order local includes (Mohammad Heib) [RHEL-167299]
  - net: ethtool: add ethtool COALESCE_RX_CQE_FRAMES/NSECS (Mohammad Heib) [RHEL-167299]
  - ynl: ethtool: remove duplicated unspec entry (Mohammad Heib) [RHEL-167299]
  - net: ethtool: Update doc for tunable (Mohammad Heib) [RHEL-167299]
  - net: ethtool: Track pause storm events (Mohammad Heib) [RHEL-167299]
  - net: rss: fix reporting RXH_XFRM_NO_CHANGE as input_xfrm for contexts (Mohammad Heib) [RHEL-167299]
  - ethtool: remove ETHTOOL_GRXRINGS fallback through get_rxnfc (Mohammad Heib) [RHEL-167299]
  - net: ethtool: Add support for 80Gbps speed (Mohammad Heib) [RHEL-167299]
  - ethtool: uapi: Use UAPI definition of INT_MAX (Mohammad Heib) [RHEL-167299]
  - uapi: add INT_MAX and INT_MIN constants (Mohammad Heib) [RHEL-167299]
  - ethtool: Clarify len/n_stats fields in/out semantics (Mohammad Heib) [RHEL-167299]
  - net: ethtool: Introduce ETHTOOL_LINK_MEDIUM_* values (Mohammad Heib) [RHEL-167299]
  - ethtool: Avoid overflowing userspace buffer on stats query (Mohammad Heib) [RHEL-167299]
  - ethtool: fix incorrect kernel-doc style comment in ethtool.h (Mohammad Heib) [RHEL-167299]
  - ethtool: netlink: add ETHTOOL_MSG_MSE_GET and wire up PHY MSE access (Mohammad Heib) [RHEL-167299]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-248.el10]
changelog:
  - ipv4: account for fraggap on the paged allocation path (Íñigo Huguet) [RHEL-191369]
  - ipv6: account for fraggap on the paged allocation path (Íñigo Huguet) [RHEL-191369] {CVE-2026-53362}
  - net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Sabrina Dubroca) [RHEL-192922]
  - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177855] {CVE-2026-46323}
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-178627] {CVE-2026-43503}
  - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176055] {CVE-2026-46300}
  - Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref (David Marlin) [RHEL-184635]
  - Bluetooth: MGMT: Fix backward compatibility with userspace (David Marlin) [RHEL-184635]
  - Bluetooth: SCO: Fix data-race on sco_pi fields in sco_connect (David Marlin) [RHEL-184635]
  - Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls (David Marlin) [RHEL-184635]
  - Bluetooth: ISO: Fix a use-after-free of the hci_conn pointer (David Marlin) [RHEL-184635]
  - Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync (David Marlin) [RHEL-184635]
  - Bluetooth: fix memory leak in error path of hci_alloc_dev() (David Marlin) [RHEL-184635]
  - Bluetooth: bnep: reject short frames before parsing (David Marlin) [RHEL-184635]
  - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (David Marlin) [RHEL-184635]
  - Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig (David Marlin) [RHEL-184635]
  - Bluetooth: RFCOMM: validate skb length in MCC handlers (David Marlin) [RHEL-184635]
  - Bluetooth: MGMT: validate advertising TLV before type checks (David Marlin) [RHEL-184635]
  - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (David Marlin) [RHEL-184635]
  - Bluetooth: hci_sync: Reset device counters in hci_dev_close_sync() (David Marlin) [RHEL-184635]
  - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (David Marlin) [RHEL-184635]
  - Bluetooth: hci_core: Rework hci_dev_do_reset() to use hci_sync functions (David Marlin) [RHEL-184635]
  - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (David Marlin) [RHEL-184635]
  - Bluetooth: ISO: fix UAF in iso_recv_frame (David Marlin) [RHEL-184635]
  - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (David Marlin) [RHEL-184635]
  - Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success (David Marlin) [RHEL-184635]
  - Bluetooth: hci_qca: Use 100 ms SSR delay for rampatch and NVM loading (David Marlin) [RHEL-184635]
  - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (David Marlin) [RHEL-184635]
  - Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt() (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Allow firmware re-download when version matches (David Marlin) [RHEL-184635]
  - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (David Marlin) [RHEL-184635]
  - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-184635]
  - Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn (David Marlin) [RHEL-184635]
  - Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate() (David Marlin) [RHEL-184635]
  - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (David Marlin) [RHEL-184635]
  - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (David Marlin) [RHEL-184635]
  - Bluetooth: MGMT: validate Add Extended Advertising Data length (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: fix urb->setup_packet leak in error paths (David Marlin) [RHEL-184635]
  - Bluetooth: ISO: drop ISO_END frames received without prior ISO_START (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: Fix incorrect MAC access programming (David Marlin) [RHEL-184635]
  - Bluetooth: hci_sync: Fix not setting mask for HCI_EVT_LE_ALL_REMOTE_FEATURES_COMPLETE (David Marlin) [RHEL-184635]
  - Bluetooth: bnep: Fix UAF read of dev->name (David Marlin) [RHEL-184635]
  - Bluetooth: hci_qca: Convert timeout from jiffies to ms (David Marlin) [RHEL-184635]
  - Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: accept too short WMT FUNC_CTRL events (David Marlin) [RHEL-184635]
  - Bluetooth: serialize accept_q access (David Marlin) [RHEL-184635]
  - Bluetooth: HIDP: serialise l2cap_unregister_user via hidp_session_sem (David Marlin) [RHEL-184635]
  - Bluetooth: hci_event: fix memset typo (David Marlin) [RHEL-184635]
  - Bluetooth: RFCOMM: pull credit byte with skb_pull_data() (David Marlin) [RHEL-184635]
  - Bluetooth: virtio_bt: validate rx pkt_type header length (David Marlin) [RHEL-184635]
  - Bluetooth: virtio_bt: clamp rx length before skb_put (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: validate WMT event SKB length before struct access (David Marlin) [RHEL-184635]
  - Bluetooth: ISO: Fix data-race on iso_pi(sk) in socket and HCI event paths (David Marlin) [RHEL-184635]
  - Bluetooth: ISO: Fix data-race on dst in iso_sock_connect() (David Marlin) [RHEL-184635]
  - Bluetooth: hci_uart: Fix NULL deref in recv callbacks when priv is uninitialized (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: treat boot stage bit 12 as warning (David Marlin) [RHEL-184635]
  - Bluetooth: SCO: hold sk properly in sco_conn_ready (David Marlin) [RHEL-184635]
  - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (David Marlin) [RHEL-184635]
  - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (David Marlin) [RHEL-184635]
  - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() (David Marlin) [RHEL-184635]
  - Bluetooth: l2cap: defer conn param update to avoid conn->lock/hdev->lock inversion (David Marlin) [RHEL-184635]
  - Bluetooth: l2cap: fix MPS check in l2cap_ecred_reconf_req (David Marlin) [RHEL-184635]
  - Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension handling (David Marlin) [RHEL-184635]
  - Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt (David Marlin) [RHEL-184635]
  - Bluetooth: hci_conn: fix potential UAF in create_big_sync (David Marlin) [RHEL-184635]
  - Bluetooth: SCO: fix sleeping under spinlock in sco_conn_ready (David Marlin) [RHEL-184635]
  - Bluetooth: hci_qca: Fix missing wakeup during SSR memdump handling (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: use strscpy to copy plain strings (David Marlin) [RHEL-184635]
  - Bluetooth: SCO: check for codecs->num_codecs == 1 before assigning to sco_pi(sk)->codec (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: Align shared DMA memory to 128 bytes (David Marlin) [RHEL-184635]
  - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (David Marlin) [RHEL-184635]
  - Bluetooth: hci_ll: Enable BROKEN_ENHANCED_SETUP_SYNC_CONN for WL183x (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: MediaTek MT7922: Add VID 0489 & PID e11d (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: hide unused btmtk_mt6639_devs[] array (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add MT7927 ID for ASUS X870E / ProArt X870E-Creator (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add MT7927 ID for TP-Link Archer TBE550E (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add MT7927 ID for MSI X870E Ace Max (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add MT7927 ID for Gigabyte Z790 AORUS MASTER X (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add MT7927 ID for Lenovo Legion Pro 7 16ARX9 (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add MT7927 ID for ASUS ROG Crosshair X870E Hero (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: fix ISO interface setup for single alt setting (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: Add MT6639 (MT7927) Bluetooth support (David Marlin) [RHEL-184635]
  - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: refactor endpoint lookup (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: refactor endpoint lookup (David Marlin) [RHEL-184635]
  - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (David Marlin) [RHEL-184635]
  - Bluetooth: hci_sync: make hci_cmd_sync_run_once return -EEXIST if exists (David Marlin) [RHEL-184635]
  - Bluetooth: hci_qca: disable power control for WCN7850 when bt_en is not defined (David Marlin) [RHEL-184635]
  - bluetooth: btusb: Fix whitespace in btusb.c (David Marlin) [RHEL-184635]
  - Bluetooth: qca: enable pwrseq support for WCN39xx devices (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pci: Fix btintel_pcie_read_hwexp code style (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: Add device id of Scorpious2, Nova Lake-PCD-S (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: Add device id of Scorpius Peak2, Nova Lake-PCD-H (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: Add support for exception dump for ScP2F (David Marlin) [RHEL-184635]
  - Bluetooth: btintel: Add support for Scorpious Peak2F support (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: Add support for exception dump for ScP2 (David Marlin) [RHEL-184635]
  - Bluetooth: btintel: Add DSBR support for ScP2 onwards (David Marlin) [RHEL-184635]
  - Bluetooth: btintel: Add support for Scorpious Peak2 support (David Marlin) [RHEL-184635]
  - Bluetooth: btintel: Replace CNVi id with hardware variant (David Marlin) [RHEL-184635]
  - Bluetooth: btintel: Add support for hybrid signature for ScP2 onwards (David Marlin) [RHEL-184635]
  - Bluetooth: L2CAP: CoC: Disconnect if received packet size exceeds MPS (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: add MT7902 SDIO support (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add new VID/PID 0e8d/1ede for MT7902 (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add new VID/PID 13d3/3596 for MT7902 (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add new VID/PID 13d3/3594 for MT7902 (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add new VID/PID 13d3/3580 for MT7902 (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add new VID/PID 13d3/3579 for MT7902 (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: add MT7902 MCU support (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: Use struct_size to improve hci_drv_read_info (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add Lite-On 04ca:3807 for MediaTek MT7921 (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: Replace snprintf("%s") with strscpy (David Marlin) [RHEL-184635]
  - Bluetooth: hci_qca: Fix BT not getting powered-off on rmmod (David Marlin) [RHEL-184635]
  - Bluetooth: hci_qca: Fix confusing shutdown() and power_off() naming (David Marlin) [RHEL-184635]
  - Bluetooth: btbcm: Add entry for BCM4343A2 UART Bluetooth (David Marlin) [RHEL-184635]
  - Bluetooth: qca: Refactor code on the basis of chipset names (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: Add reset mechanism if downloading firmware failed (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: add status check in mt79xx firmware setup (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: improve mt79xx firmware setup retry flow (David Marlin) [RHEL-184635]
  - Bluetooth: btbcm: remove done label in btbcm_patchram (David Marlin) [RHEL-184635]
  - Bluetooth: hci_core: Rate limit the logging of invalid ISO handle (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: MT7922: Add VID/PID 0489/e174 (David Marlin) [RHEL-184635]
  - klp-build: Fix patch cleanup on interrupt (Yannick Cote) [RHEL-152194]
  - selftests/livepatch: add test for module function patching (Yannick Cote) [RHEL-152194]
  - livepatch/klp-build: report patch validation fuzz (Yannick Cote) [RHEL-152194]
  - livepatch/klp-build: add terminal color output (Yannick Cote) [RHEL-152194]
  - livepatch/klp-build: provide friendlier error messages (Yannick Cote) [RHEL-152194]
  - livepatch/klp-build: improve short-circuit validation (Yannick Cote) [RHEL-152194]
  - livepatch/klp-build: fix shellcheck complaints (Yannick Cote) [RHEL-152194]
  - livepatch/klp-build: add Makefile with check target (Yannick Cote) [RHEL-152194]
  - livepatch/klp-build: add grep-override function (Yannick Cote) [RHEL-152194]
  - livepatch/klp-build: switch to GNU patch and recountdiff (Yannick Cote) [RHEL-152194]
  - livepatch/klp-build: support patches that add/remove files (Yannick Cote) [RHEL-152194]
  - selftests: livepatch: test-ftrace: livepatch a traced function (Yannick Cote) [RHEL-152194]
  - crypto: asymmetric_keys - Remove unused key_being_used_for[] (Thomas Huth) [RHEL-186630]
  - crypto: skcipher - call cond_resched() directly (Thomas Huth) [RHEL-186630]
  - crypto: skcipher - optimize initializing skcipher_walk fields (Thomas Huth) [RHEL-186630]
  - crypto: skcipher - clean up initialization of skcipher_walk::flags (Thomas Huth) [RHEL-186630]
  - crypto: skcipher - fold skcipher_walk_skcipher() into skcipher_walk_virt() (Thomas Huth) [RHEL-186630]
  - crypto: skcipher - remove redundant check for SKCIPHER_WALK_SLOW (Thomas Huth) [RHEL-186630]
  - crypto: skcipher - remove redundant clamping to page size (Thomas Huth) [RHEL-186630]
  - crypto: skcipher - remove unnecessary page alignment of bounce buffer (Thomas Huth) [RHEL-186630]
  - crypto: skcipher - document skcipher_walk_done() and rename some vars (Thomas Huth) [RHEL-186630]
  - crypto: omap - switch from scatter_walk to plain offset (Thomas Huth) [RHEL-186630]
  - crypto: powerpc/p10-aes-gcm - simplify handling of linear associated data (Thomas Huth) [RHEL-186630]
  - crypto: bcm - Drop unused setting of local 'ptr' variable (Thomas Huth) [RHEL-186630]
  - crypto: hisilicon/qm - support new function communication (Thomas Huth) [RHEL-186630]
  - crypto: proc - Use str_yes_no() and str_no_yes() helpers (Thomas Huth) [RHEL-186630]
  - crypto: ahash - make hash walk functions private to ahash.c (Thomas Huth) [RHEL-186630]
  - redhat: Remove CONFIG_CRYPTO_KEYWRAP setting (Thomas Huth) [RHEL-186630]
  - crypto: keywrap - remove unused keywrap algorithm (Thomas Huth) [RHEL-186630]
  - crypto: fips - Use str_enabled_disabled() helper in fips_enable() (Thomas Huth) [RHEL-186630]
  - crypto: lib/aesgcm - Reduce stack usage in libaesgcm_init (Thomas Huth) [RHEL-186630]
  - crypto: x86/aes-xts - additional optimizations (Thomas Huth) [RHEL-186630]
  - crypto: x86/aes-xts - more code size optimizations (Thomas Huth) [RHEL-186630]
  - crypto: x86/aes-xts - change len parameter to int (Thomas Huth) [RHEL-186630]
  - crypto: x86/aes-xts - improve some comments (Thomas Huth) [RHEL-186630]
  - crypto: x86/aes-xts - make the register aliases per-function (Thomas Huth) [RHEL-186630]
  - crypto: x86/aes-xts - use .irp when useful (Thomas Huth) [RHEL-186630]
  - crypto: x86/aes-gcm - tune better for AMD CPUs (Thomas Huth) [RHEL-186630]
  - crypto: x86/aes-gcm - code size optimization (Thomas Huth) [RHEL-186630]
  - crypto: lib/gf128mul - Remove some bbe deadcode (Thomas Huth) [RHEL-186630]
  - crypto: keywrap - remove assignment of 0 to cra_alignmask (Thomas Huth) [RHEL-186630]
  - crypto: aegis - remove assignments of 0 to cra_alignmask (Thomas Huth) [RHEL-186630]
  - crypto: x86 - remove assignments of 0 to cra_alignmask (Thomas Huth) [RHEL-186630]
  - crypto: seed - stop using cra_alignmask (Thomas Huth) [RHEL-186630]
  - crypto: khazad - stop using cra_alignmask (Thomas Huth) [RHEL-186630]
  - crypto: tea - stop using cra_alignmask (Thomas Huth) [RHEL-186630]
  - crypto: aria - stop using cra_alignmask (Thomas Huth) [RHEL-186630]
  - crypto: anubis - stop using cra_alignmask (Thomas Huth) [RHEL-186630]
  - crypto: skcipher - remove support for physical address walks (Thomas Huth) [RHEL-186630]
  - crypto: n2 - remove Niagara2 SPU driver (Thomas Huth) [RHEL-186630]
  - crypto: sig - Set maskset to CRYPTO_ALG_TYPE_MASK (Thomas Huth) [RHEL-186630]
  - crypto: caam - use JobR's space to access page 0 regs (Thomas Huth) [RHEL-186630]
  - crypto: api - Call crypto_schedule_test outside of mutex (Thomas Huth) [RHEL-186630]
  - crypto: api - Fix boot-up self-test race (Thomas Huth) [RHEL-186630]
  - lib/crc32: drop leading underscores from __crc32c_le_base (Thomas Huth) [RHEL-186630]
  - crypto: hisilicon/debugfs - fix the struct pointer incorrectly offset problem (Thomas Huth) [RHEL-186630]
  - crypto: rsassa-pkcs1 - Copy source data for SG list (Thomas Huth) [RHEL-186630]
  - s390/ap: Replace xchg() with WRITE_ONCE() (Thomas Huth) [RHEL-186630]
  - crypto: marvell/cesa - fix uninit value for struct mv_cesa_op_ctx (Thomas Huth) [RHEL-186630]
  - crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() (Thomas Huth) [RHEL-186630]
  - crypto: aesni - Move back to module_init (Thomas Huth) [RHEL-186630]
  - crypto: lib/mpi - Export mpi_set_bit (Thomas Huth) [RHEL-186630]
  - crypto: arm/crct10dif - Implement plain NEON variant (Thomas Huth) [RHEL-186630]
  - crypto: arm/crct10dif - Macroify PMULL asm code (Thomas Huth) [RHEL-186630]
  - crypto: arm/crct10dif - Use existing mov_l macro instead of __adrl (Thomas Huth) [RHEL-186630]
  - crypto: bcm - add error check in the ahash_hmac_init function (Thomas Huth) [RHEL-186630]
  - crypto: caam - add error check to caam_rsa_set_priv_key_form (Thomas Huth) [RHEL-186630]
  - crypto: inside-secure - Fix the return value of safexcel_xcbcmac_cra_init() (Thomas Huth) [RHEL-186630]
  - crypto: rsassa-pkcs1 - Reinstate support for legacy protocols (Thomas Huth) [RHEL-186630]
  - crypto: hisilicon/qm - disable same error report before resetting (Thomas Huth) [RHEL-186630]
  - crypto: hisilicon - support querying the capability register (Thomas Huth) [RHEL-186630]
  - crypto: asymmetric_keys - Remove unused functions (Thomas Huth) [RHEL-186630]
  - crypto: starfive - remove unneeded crypto_engine_stop() call (Thomas Huth) [RHEL-186630]
  - crypto: api - move crypto_simd_disabled_for_test to lib (Thomas Huth) [RHEL-186630]
  - crypto: cavium - Fix the if condition to exit loop after timeout (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - remove unneeded RETs (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - remove unneeded FRAME_BEGIN and FRAME_END (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - take advantage of block-aligned len (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - optimize partial block handling using SSE4.1 (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - improve assembly function prototypes (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - optimize length block preparation using SSE4.1 (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - don't bother with special code for aligned data (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - eliminate some indirect calls (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - remove no-op init and exit functions (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - access 32-bit arguments as 32-bit (Thomas Huth) [RHEL-186630]
  - crypto: crc32c - Provide crc32c-arch driver for accelerated library code (Thomas Huth) [RHEL-186630]
  - crypto: crc32 - Provide crc32-arch driver for accelerated library code (Thomas Huth) [RHEL-186630]
  - crypto: nx - Fix invalid wait context during kexec reboot (Thomas Huth) [RHEL-186630]
  - crypto: nx - Rename devdata_mutex to devdata_spinlock (Thomas Huth) [RHEL-186630]
  - crypto: ecdsa - Update Kconfig help text for NIST P521 (Thomas Huth) [RHEL-186630]
  - crypto: sig - Fix oops on KEYCTL_PKEY_QUERY for RSA keys (Thomas Huth) [RHEL-186630]
  - s390/crypto: Switch over to sysfs_emit() (Thomas Huth) [RHEL-186630]
  - crypto: crypto4xx - use devm in probe (Thomas Huth) [RHEL-186630]
  - crypto: crypto4xx - avoid explicit resource (Thomas Huth) [RHEL-186630]
  - crypto: cesa - use devm_platform_get_and_ioremap_resource (Thomas Huth) [RHEL-186630]
  - crypto: cesa - remove irq_set_affinity_hint (Thomas Huth) [RHEL-186630]
  - crypto: cesa - use enabled variants for clk_get (Thomas Huth) [RHEL-186630]
  - crypto: cesa - add COMPILE_TEST (Thomas Huth) [RHEL-186630]
  - crypto: doc - Fix akcipher title reference (Thomas Huth) [RHEL-186630]
  - crypto: x86/cast5 - Remove unused cast5_ctr_16way (Thomas Huth) [RHEL-186630]
  - crypto: hisilicon/qm - fix the coding specifications issue (Thomas Huth) [RHEL-186630]
  - crypto: drivers - Correct multiple typos in comments (Thomas Huth) [RHEL-186630]
  - crypto: ccree - Fix typo in comment (Thomas Huth) [RHEL-186630]
  - crypto: atmel - Drop explicit initialization of struct i2c_device_id::driver_data to 0 (Thomas Huth) [RHEL-186630]
  - crypto: caam - Slightly simplify platform_device() (Thomas Huth) [RHEL-186630]
  - crypto: caam - Fix the pointer passed to caam_qi_shutdown() (Thomas Huth) [RHEL-186630]
  - crypto: hisilicon/hpre - enable all clusters clock gating (Thomas Huth) [RHEL-186630]
  - crypto: mxs-dcp - Fix AES-CBC with hardware-bound keys (Thomas Huth) [RHEL-186630]
  - crypto: amlogic - Remove redundant assignment and error messages (Thomas Huth) [RHEL-186630]
  - crypto: ecrdsa - Fix signature size calculation (Thomas Huth) [RHEL-186630]
  - crypto: ecdsa - Support P1363 signature decoding (Thomas Huth) [RHEL-186630]
  - crypto: ecdsa - Move X9.62 signature size calculation into template (Thomas Huth) [RHEL-186630]
  - crypto: sig - Rename crypto_sig_maxsize() to crypto_sig_keysize() (Thomas Huth) [RHEL-186630]
  - crypto: ecdsa - Move X9.62 signature decoding into template (Thomas Huth) [RHEL-186630]
  - ASN.1: Clean up include statements in public headers (Thomas Huth) [RHEL-186630]
  - crypto: ecdsa - Avoid signed integer overflow on signature decoding (Thomas Huth) [RHEL-186630]
  - crypto: sig - Move crypto_sig_*() API calls to include file (Thomas Huth) [RHEL-186630]
  - redhat: Disable signing ALG again after code has been reworked (Thomas Huth) [RHEL-186630]
  - crypto: akcipher - Drop sign/verify operations (Thomas Huth) [RHEL-186630]
  - crypto: drivers - Drop sign/verify operations (Thomas Huth) [RHEL-186630]
  - crypto: virtio - Drop sign/verify operations (Thomas Huth) [RHEL-186630]
  - crypto: rsassa-pkcs1 - Avoid copying hash prefix (Thomas Huth) [RHEL-186630]
  - crypto: rsassa-pkcs1 - Harden digest length verification (Thomas Huth) [RHEL-186630]
  - crypto: rsassa-pkcs1 - Migrate to sig_alg backend (Thomas Huth) [RHEL-186630]
  - crypto: rsa-pkcs1pad - Deduplicate set_{pub,priv}_key callbacks (Thomas Huth) [RHEL-186630]
  - crypto: ecrdsa - Migrate to sig_alg backend (Thomas Huth) [RHEL-186630]
  - crypto: ecdsa - Migrate to sig_alg backend (Thomas Huth) [RHEL-186630]
  - crypto: sig - Introduce sig_alg backend (Thomas Huth) [RHEL-186630]
  - crypto: ecdsa - Drop unused test vector elements (Thomas Huth) [RHEL-186630]
  - crypto: testmgr: Include <linux/prandom.h> instead of <linux/random.h> (Thomas Huth) [RHEL-186630]
  - IB/IPoIB: ndo_set_rx_mode_async conversion (Michal Schmidt) [RHEL-186369]
  - selftests: net: use ip commands instead of teamd in team rx_mode test (Michal Schmidt) [RHEL-186369]
  - selftests: net: add team_bridge_macvlan rx_mode test (Michal Schmidt) [RHEL-186369]
  - net: warn ops-locked drivers still using ndo_set_rx_mode (Michal Schmidt) [RHEL-186369]
  - netkit: convert to ndo_set_rx_mode_async (Michal Schmidt) [RHEL-186369]
  - dummy: convert to ndo_set_rx_mode_async (Michal Schmidt) [RHEL-186369]
  - netdevsim: convert to ndo_set_rx_mode_async (Michal Schmidt) [RHEL-186369]
  - iavf: convert to ndo_set_rx_mode_async (Michal Schmidt) [RHEL-186369]
  - bnxt: use snapshot in bnxt_cfg_rx_mode (Michal Schmidt) [RHEL-186369]
  - bnxt: convert to ndo_set_rx_mode_async (Michal Schmidt) [RHEL-186369]
  - mlx5: convert to ndo_set_rx_mode_async (Michal Schmidt) [RHEL-186369]
  - net/mlx5e: Allow set_rx_mode on uplink representor (Michal Schmidt) [RHEL-186369]
  - net: move promiscuity handling into netdev_rx_mode_work (Michal Schmidt) [RHEL-186369]
  - net: cache snapshot entries for ndo_set_rx_mode_async (Michal Schmidt) [RHEL-186369]
  - net: introduce ndo_set_rx_mode_async and netdev_rx_mode_work (Michal Schmidt) [RHEL-186369]
  - net: add address list snapshot and reconciliation infrastructure (Michal Schmidt) [RHEL-186369]
  - selftests: net: validate team flags propagation (Michal Schmidt) [RHEL-186369]
  - Revert "fs: don't block i_writecount during exec" (Abhi Das) [RHEL-159585]
  - lib/Kconfig.debug: fix BOOTPARAM_HUNG_TASK_PANIC comment (Luiz Capitulino) [RHEL-146067]
  - powerpc/watchdog: add support for hardlockup_sys_info sysctl (Luiz Capitulino) [RHEL-146067]
  - hung_task: explicitly report I/O wait state in log output (Luiz Capitulino) [RHEL-146067]
  - hung_task: increment the global counter immediately (Luiz Capitulino) [RHEL-146067]
  - hung_task: enable runtime reset of hung_task_detect_count (Luiz Capitulino) [RHEL-146067]
  - hung_task: refactor detection logic and atomicise detection count (Luiz Capitulino) [RHEL-146067]
  - sysctl: add SYSCTL_{USER_TO_KERN,KERN_TO_USER} macros (Luiz Capitulino) [RHEL-146067]
  - sys_info: add a default kernel sys_info mask (Luiz Capitulino) [RHEL-146067]
  - watchdog: add sys_info sysctls to dump sys info on system lockup (Luiz Capitulino) [RHEL-146067]
  - hung_task: add hung_task_sys_info sysctl to dump sys info on task-hung (Luiz Capitulino) [RHEL-146067]
  - panic: sys_info: align constant definition names with parameters (Luiz Capitulino) [RHEL-146067]
  - kernel/hung_task: unexport sysctl_hung_task_timeout_secs (Luiz Capitulino) [RHEL-146067]
  - redhat/configs: update CONFIG_BOOTPARAM_HUNG_TASK_PANIC (Luiz Capitulino) [RHEL-146067]
  - hung_task: panic when there are more than N hung tasks at the same time (Luiz Capitulino) [RHEL-146067]
  - hung_task: fix warnings caused by unaligned lock pointers (Luiz Capitulino) [RHEL-146067]
  - hung_task: dump blocker task if it is not hung (Luiz Capitulino) [RHEL-146067]
  - hung_task: extend hung task blocker tracking to rwsems (Luiz Capitulino) [RHEL-146067]
  - locking/rwsem: make owner helpers globally available (Luiz Capitulino) [RHEL-146067]
  - hung_task: show the blocker task if the task is hung on semaphore (Luiz Capitulino) [RHEL-146067]
  - hung_task: replace blocker_mutex with encoded blocker (Luiz Capitulino) [RHEL-146067]
  - redhat/configs: add new hung task configs (Luiz Capitulino) [RHEL-146067]
  - samples: add hung_task detector mutex blocking sample (Luiz Capitulino) [RHEL-146067]
  - hung_task: show the blocker task if the task is hung on mutex (Luiz Capitulino) [RHEL-146067]
  - hung_task: add docs for hung_task_detect_count (Luiz Capitulino) [RHEL-146067]
  - hung_task: add detect count for hung tasks (Luiz Capitulino) [RHEL-146067]
  - wifi: ath11k: fix warning when unbinding (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-171410 RHEL-180129] {CVE-2026-46125}
  - wifi: mac80211: drop stray 'static' from fast-RX rx_result (Jose Ignacio Tornos Martinez) [RHEL-171410 RHEL-180059] {CVE-2026-46152}
  - wifi: mac80211: use safe list iteration in radar detect work (Jose Ignacio Tornos Martinez) [RHEL-171410 RHEL-180023] {CVE-2026-46166}
  - wifi: ath12k: prepare REO update element only for primary link (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rt2x00: allocate anchor with rt2x00dev (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: fix error unwind on arch_init() failure in PCI probe (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: fix peer_id usage in normal RX path (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: restrict LMR feedback check to TB and non-TB ranging (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath10k: snoc: select POWER_SEQUENCING (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: nl80211: fix UHR capability validation (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - net: rfkill: prevent unlimited numbers of rfkill events from being created (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-31670}
  - wifi: rt2x00usb: fix devres lifetime (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-31672}
  - wifi: brcmfmac: validate bsscfg indices in IF events (Jose Ignacio Tornos Martinez) [RHEL-171410 RHEL-173865] {CVE-2026-43110}
  - wifi: brcmsmac: Fix dma_free_coherent() size (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-31661}
  - wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-31779}
  - wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-31780}
  - wifi: ath12k: Pass the correct value of each TID during a stop AMPDU session (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: correctly set wifi generation data (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mvm: don't send a 6E related command when not supported (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-43325}
  - wifi: iwlwifi: mld: Fix MLO scan timing (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-23444}
  - wifi: mac80211: fix NULL deref in mesh_matches_local() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-23396}
  - wifi: mac80211: check tdls flag in ieee80211_tdls_oper (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-43052}
  - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-31548}
  - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-31551}
  - mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-31394}
  - wifi: mac80211: use jiffies_delta_to_msecs() for sta_info inactive times (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: remove keys after disabling beaconing (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211_hwsim: fully initialise PMSR capabilities (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-23315}
  - wifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-23363}
  - wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-23325}
  - wifi: mac80211: fix missing ieee80211_eml_params member initialization (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: fix station lookup failure when disconnecting from AP (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: use correct pdev id when requesting firmware stats (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-23279}
  - wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-23246}
  - wifi: mac80211: set default WMM parameters on all links (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mwifiex: Fix dev_alloc_name() return value check (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: brcmfmac: Fix potential kernel oops when probe fails (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-43144}
  - wifi: radiotap: reject radiotap with unknown bits (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-23367}
  - wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-23336}
  - wifi: cfg80211: wext: fix IGTK key ID off-by-one (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [wireless] (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [wireless] (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - Convert 'alloc_flex' family to use the new default GFP_KERNEL argument [wireless] (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [wireless] (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [wireless] (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: brcmsmac: phy: Remove unreachable error handling code (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - net: remove unnecessary module_init/exit functions [wireless] (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: Add eMLSR/eMLMR action frame parsing support (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: add initial UHR support (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: add initial UHR support (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ieee80211: add some initial UHR definitions (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: use wiphy_hrtimer_work for CAC timeout (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: correct ieee80211-{s1g/eht}.h include guard comments (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: clear stale link mapping of ahvif->links_map (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add support TX hardware queue stats (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add support RX PDEV stats (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Fix index decrement when array_len is zero (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: support OBSS PD configuration for AP mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: add WMI support for spatial reuse parameter configuration (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - dt-bindings: net: wireless: ath11k-pci: deprecate 'firmware-name' property (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: add usecase firmware handling based on device compatible (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath10k: sdio: add missing lock protection in ath10k_sdio_fw_crashed_dump() (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath10k: fix lock protection in ath10k_wmi_event_peer_sta_ps_state_chg() (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath10k: snoc: support powering on the device via pwrseq (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: pci: warn if SPS OCP happens for RTL8922DE (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: pci: restore LDO setting after device resume (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: set MU group membership and position to registers (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: wow: disable interrupt before swapping FW for 8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: debug: tweak Wi-Fi 7 SER L0/L1 simulation methods (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: debug: rename mac/ctrl error to L0/L1 error (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: regd: update regulatory map to R73-R54 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: pci: validate release report content before using for RTL8922DE (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-43176}
  - wifi: rtw89: get designated link to replace link instance 0 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: 8922a: configure FW version for SIM_SER_L0L1_BY_HALT_H2C (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: add PHY C2H event dummy handler for func 1-7 and 2-10 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: correct content of DACK H2C command (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: rfk: update RFK report format of IQK, DACK and TXGAPK (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: rfk: add to print debug log of CIM3K (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: rfk: add firmware command to do CIM3K (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: rfk: add to print debug log of TX IQK (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: rfk: add firmware command to do TX IQK (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: use u64_stats_t with u64_stats_sync properly (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: treat deprecated INDOOR_SP_AP_OLD control value as LPI mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rsi: sdio: Migrate to use sdio specific shutdown function (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - sdio: Provide a bustype shutdown function (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw88: sdio: Migrate to use sdio specific shutdown function (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: nl80211/cfg80211: support operating as RSTA in PMSR FTM request (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: nl80211/cfg80211: add negotiated burst period to FTM result (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: nl80211/cfg80211: clarify periodic FTM parameters for non-EDCA based ranging (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: nl80211/cfg80211: add new FTM capabilities (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: 8922a: add digital compensation for 2GHz (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: set force MBA duration to 0 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: clear DTOP disable excluding CID7090 variant for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: update TSSI flow for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: add firmware element of digital TX power compensation (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: update edcca log parsing for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: add H2C command to send detail RX gain and link parameters for PS mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: handle C2H event for PS mode report (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: add chip_ops to calculate RX gain from efuse to support PS mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: debug: Fix memory leak in __print_txpwr_map() (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: Add default ID 28de:2432 for RTL8832CU (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fix unable to receive probe responses under MLO connection (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: fix incorrect power limit by mac_id (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: refine initial flow of BB wrapper (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: write BB wrapper registers with flush (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: update BB wrapper RFSI (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: update bb wrapper TPU init (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: abstract BB wrap registers to share initial flow (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: extend register to read history 2 of PHY env_monitor (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: abstract start address and EHT of PHY status bitmap (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: add ops rtw89_phy_gen_be_v1 for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: add {read,write}_rf_v3 for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: clear global interrupt right after power-on (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw88: add WQ_PERCPU to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: rename struct iwl_mcc_allowed_ap_type_cmd::offset_map (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mvm: Remove link_id from time_events (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: change cluster_id type to u8 array (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: support V13 of iwl_lari_config_change_cmd (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: split bios_value_u32 to separate the header (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: uefi: cache the DSM functions (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: acpi: cache the DSM functions (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mvm: Cleanup MLO code (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: move iwl_get_lari_config_bitmap to the op_mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: move lari helper functions to the op_mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: prevent EMLSR when NAN is active (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: add an helper to update an EMLSR blocker (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: Fix primary link selection logic (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: cfg: remove iwl_be221_name (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: fix chandef start calculation (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: remove unused variable in d3.c (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: fw: api: add HE type for UHR ELR (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: cfg: move the MODULE_FIRMWARE to the per-rf file (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: fix HE SIG-B MCS/DCM/compression (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: fw: api: add UHR data definitions (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: add UHR TLC mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: adjust LINK context NPCA API (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: refactor AP power type setting (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: fix 22000 series SMEM parsing (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-43172}
  - wifi: iwlwifi: mld: support TLC command version 6 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: trigger a dump upon notification if needed (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: fw: fix documentation reference for ap_type field (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mvm: check the validity of noa_len (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mvm: Remove few redundant 6 GHz scan chan params (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: Remove wrong channel flags in scan cmd (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: decode VHT information for sniffer (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: Advertise support for multicast RX registration (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: Support changing NAN configuration (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: Extend the NAN configuration (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: Declare support for NAN capabilities (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: Handle rate selection for NAN interface (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: Add support for NAN (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: mark iface work SKBs as consumed (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: remove RX_DROP (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: nl80211: ignore cluster id after NAN started (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: cleanup cluster_id when stopping NAN (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: limit NAN func management APIs to offloaded DE (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: stop NAN and P2P in cfg80211_leave (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: allow only one NAN interface, also in multi radio (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: enable QCC2072 support (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: fix PCIE_LOCAL_REG_QRTR_NODE_ID definition for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: send peer meta data version to firmware (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: limit number of channels per WMI command (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: handle REO status ring for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: handle REO CMD ring for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: add hardware ops support for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: add HAL descriptor and ops for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: support downloading auxiliary ucode image for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: support LPASS_SHARED target memory type (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: add hardware parameters for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: add hardware registers for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: fix mac phy capability parsing (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: refactor 320 MHz bandwidth support parsing (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: fix preferred hardware mode calculation (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: refactor REO status ring handling (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: refactor REO CMD ring handling (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: refactor PCI window register access (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: move .max_tx_ring to struct ath11k_hw_hal_params (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: Register handler for CFR capture event (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: Register DBR event handler for CFR data (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - MAINTAINERS: add RELAY entry (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: Register relayfs entries for CFR dump (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: Add support unassociated client CFR (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: Register debugfs for CFR configuration (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: Add initialization and deinitialization sequence for CFR module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: do WoW offloads only on primary link (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: clean up on error in ath12k_dp_setup() (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: remove redundant pci_set_drvdata() call (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: fix comment typo in monitor mode handling (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: Fix failure to connect to a 6 GHz AP (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath9k: add OF dependency to AHB (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath9k: fix kernel-doc warnings in common-debug.h (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath9k: debug.h: fix kernel-doc bad lines and struct ath_tx_stats (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: pci: consider RTL8922D in PCI common flow (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: consider RTL8922D in MAC common flow (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: correct page number for CSI response (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: align CUSTID defined by firmware (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: disable EHT protocol by chip capabilities (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: support EHT GI/LTF setting (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: wow: add reason codes for disassociation in WoWLAN mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: pci: validate sequence number of TX release report (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-43213}
  - wifi: mac80211: add support for encryption/decryption of (Re)Association frames (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: add support for EPPKE authentication protocol in non-AP STA mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: Check for MLE before appending in Authentication frame (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: allow key installation before association (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: nl80211: Add support for EPP peer indication (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: add support for key configuration before association (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: add feature flag for (re)association frame encryption (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: add support for EPPKE Authentication Protocol (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: don't apply HT flags to S1G channels (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: Add support for D-Link VR Air Bridge (DWA-F18) (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: Add support for MSI AX1800 Nano (GUAX18N) (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: set EDCCA configurations for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: add an entry to enable MAC function in preinit (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: separate functions of CMAC power and function enable (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: configure DMA_STOP1 by predefined mask (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: define preload_init for generations (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: update WP quota for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: update MPDU quota according to chip DLE definition (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: set quota 13 for PLE SNRPT (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: add dle_mem and ple_{min,max}_qt quota for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: remove unnecessary return from rtw89_fwdl_secure_idmem_share_mode() (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: coex: update coex software control for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: coex: update scoreboard value according to power state for two BT (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: coex: make coex scoreboard as chip info (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: remove width argument from ieee80211_parse_bitrates (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211_hwsim: remove NAN by default (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: improve station iteration ergonomics (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: improve interface iteration ergonomics (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: include S1G_NO_PRIMARY flag when sending channel (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: unexport ieee80211_get_bssid() (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: don't send an unused argument to ieee80211_check_combinations (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: set RACK bit every 4 H2C command for WiFi 6 chips only (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: consider hardware AID for firmware elements (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: add CMAC H2C command for punctured for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: add CMAC H2C command for TX time for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: add CMAC H2C command for TX AMPDU for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: add CMAC H2C command for association for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: add CMAC H2C command to initialize default value for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: add DMAC v3 H2C command for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: update query RXDESC v3 for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: update TXWD v3 for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mwifiex: Allocate dev name earlier for interface workqueue name (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: Fix use_for flag update on BSS refresh (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: brcmfmac: rename function that frees vif (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: brcmfmac: fix/add kernel-doc comments (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: Update csa_finalize to use link_id (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: add cfg80211_stop_link() for per-link teardown (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: 8852b: refine hardware parameters for RFE type 5 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fix potential zero beacon interval in beacon tracking (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-43267}
  - wifi: rtw89: rfk: update rtw89_fw_h2c_rf_pre_ntfy_mcc format (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: change WITH_RFK_PRE_NOTIFY to be a FW feature group (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: refine mis-ordered entries in FW feature table (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: 8922a: tweak RFK_PRE_NOTIFY FW feature configuration to align handling (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: introduce helper for disabling FW feature configuration (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: change FW feature map to a BITMAP (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: pre-handle RF calibration on link when needed (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: rfk: add rtw89_fw_h2c_rf_pre_ntfy_mcc for new WiFi 7 firmware (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: rfk: update RFK pre info V2 for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: enhance connection stability when triggering beacon loss (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: regd: 6 GHz power type marks default when inactive (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: 8922a: configure FW version for SCAN_OFFLOAD_EXTRA_OP feature (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: refine TX nulldata judgement when scan with 2 OP channels (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: add default quirks as features to chip_info (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: read chip ID for RTL8922D variants (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: efuse: read hardware version from efuse for WiFi 7 chips (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: define TX/RX aggregation and MPDU capability per chip (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: wow: abstract DMA check register for RTL8922DE (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: wow: add WOW_CAM update function for 8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: wow: change type of WoWLAN pattern mask to __le32 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: wow: use struct style to fill WOW CAM H2C command (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2025-71234}
  - wifi: rtw88: Fix inadvertent sharing of struct ieee80211_supported_band data (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2025-71273}
  - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2025-71229}
  - wifi: rtw88: Increase the RX gain before scanning (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mcc: reset probe counter when receiving beacon (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: setting TBTT AGG number when mac port initialization (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: warn unexpected polling value of XTAL SI (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: refine C2H reg event polling timeout for LPS (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: debug: support SER L0/L1 simulation via halt H2C (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: debug: add ser_counters dbgfs (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: ser: L1 skip polling status if FW runs event mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: ser: enable error IMR after recovering from L1 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: reset power state before switching to power on (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mlo: fix incorrect link address in management frames (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mlo: fix missing TX null-data 1 during link switch (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: 8852b: increase beacon loss to 6 seconds (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtlwifi: fix typo 'received' in comment (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: 8852au: add support for TP TX30U Plus (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: add WQ_PERCPU to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw88: rtw8821cu: Add ID for Mercusys MU6H (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2025-71297}
  - wifi: rtw88: fix DTIM period handling when conf->dtim_period is zero (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Merge branch 'ath12k-ng' into ath-next (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Skip DP peer creation for scan vdev (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: move firmware stats request outside of atomic context (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: add the missing RCU lock in ath12k_dp_tx_free_txbuf() (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Remove Wi-Fi 7 header dependencies from common ath12k module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move MSDU END TLV processing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move MU user processing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move remaining SIG TLV parsing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move EHT SIG processing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HE SIG processing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HT/VHT SIG processing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move TX monitor functionality to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move RX status TLV parsing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move MPDU pop functionality to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move monitor status processing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move monitor ring processing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Replace lock/unlock with guard() (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Use dp objects in performance critical paths (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Build all the files in wifi7 directory into ath12k_wifi7.ko (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Remove arch-specific HAL dependencies from common DP (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move ath12k_dp_rx_get_peer_id API to Wi-Fi 7 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move ath12k_dp_rx_frags_cleanup API to Wi-Fi 7 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Remove the wifi7 header inclusions in common code (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move ieee80211_ops callback to the arch specific module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add helper to free DP link peer (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move DP specific link stats to DP link peer (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move DP device stats to ath12k_dp (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add callbacks in arch_ops for rx APIs (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add lockdep warn for RCU (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Use ath12k_dp_peer in per packet Tx & Rx paths (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Attach and detach ath12k_dp_link_peer to ath12k_dp_peer (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Define ath12k_dp_peer structure & APIs for create & delete (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add hash table for ath12k_dp_link_peer (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move ath12k_dp_link_peer list from ath12k_base to ath12k_dp (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add hash table for ath12k_link_sta in ath12k_base (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Rename ath12k_peer to ath12k_dp_link_peer (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move DP related functions from peer.c to dp_peer.c file (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Drop hal_ prefix from hardware register names (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Rename hal_ops to ops (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Remove the unused ring inits in wcn (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Segregate the common and wifi7 specific structures (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HAL Cookie Conversion and RBM related APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HAL REO and Rx buf related APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HAL Tx, REO and link idle setup related APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HAL CE status and set link desc addr APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HAL CE desc related APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HAL SRNG shadow config and get ring id APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HAL CE setup and SRNG related APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Use hal handle instead of ab handle (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add direct HAL pointer in ath12k_dp (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move hal_params and regs to hal from hw (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move wbm_rbm_map to hw specific hal files (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Initialize hal_ops through hal_init (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Initialize desc_size through hal_init (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move srng config and hal_ops to hw specific hal files (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Rearrange PPDU radio stats (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Refactor data path pdev struct (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Refactor ath12k_vif structure (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add framework for hardware specific DP interrupt handler (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add framework for hardware specific ieee80211_ops registration (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Rearrange DP fields in ath12k_hw_group struct (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Support arch-specific DP device allocation (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Convert ath12k_dp member in ath12k_base to pointer (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Change the API prefixes to ath12k_wifi7 in tx/rx (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Remove hal_rx_ops and merge into hal_ops (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add new infra for the rx path (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move hal_rx_ops callbacks to hal_ops (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Replace ops with direct calls for rxdma ring mask (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: unify HAL ops naming across chips (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move the hal APIs to hardware specific files (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Remove non-compact TLV support from QCN (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HTT specific code from dp.c to newly introduced files (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HTT Tx specific code to newly introduced files (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HTT Rx specific code to newly introduced files (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HTT code in dp.h to newly introduced files (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move ath12k_dp_tx and related APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move arch specific tx APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move arch specific rx tid and related functions to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move arch specific REO functions to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Separate arch specific part of RX APIs (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move srng processing to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move regular msdu processing functions to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move rx error and defrag functions to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move rxdma ring config functions to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move rx_desc.h file to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move hal_desc.h file to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move Rx error related functions to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HAL Rx wrapper APIs to dp_rx.h (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move hal_rx.h file to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move hal_tx.h file to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move hal_tx and hal_rx to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Remove HAL define dependencies from shared AHB code (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Remove HAL defines from shared PCI code (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Rename ath12k_* symbols to ath12k_wifi7_* for clarity (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Modularize driver into common and Wi-Fi 7 specific components (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move hw_init invocation to target-specific probe (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move Wi-Fi 7 specific init routines to dedicated file (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Restructure ahb.c into common and Wi-Fi 7 specific modules (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Rename ahb_hif_ops to reflect generic usage (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Rename hw.c to Wi-Fi 7 specific implementation file (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move Wi-Fi 7 MHI configuration to dedicated file (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move Wi-Fi 7 WMI configuration to dedicated file (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move Copy Engine configuration to Wi-Fi 7 specific file (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Restructure PCI code to common and Wi-Fi 7 specific logic (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - spinlock: extend guard with spinlock_bh variants (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - config: wifi: disable new unsupported configuration options (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - perf metrics: Make common stalled metrics conditional on having the event (Trevor Allison) [RHEL-140195]
  - perf stat: Fix crash on arm64 (Trevor Allison) [RHEL-140195]
  - tools build: Correct link flags for libopenssl (Trevor Allison) [RHEL-140195]
  - perf test parse-metric: Ensure aggregate counts appear to have run (Trevor Allison) [RHEL-140195]
  - perf/x86: Move event pointer setup earlier in x86_pmu_enable() (Trevor Allison) [RHEL-140195] {CVE-2026-23435}
  - perf metricgroup: Fix metricgroup__has_metric_or_groups() (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Fix and clean up intel_pmu_drain_arch_pebs() type use (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Optimize PEBS extended config (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Check PEBS dyn_constraints (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Add a check for dynamic constraints (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Add counter group support for arch-PEBS (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Setup PEBS data configuration and enable legacy groups (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Update dyn_constraint base on PEBS event precise level (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Allocate arch-PEBS buffer and initialize PEBS_BASE MSR (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Process arch-PEBS records or record fragments (Trevor Allison) [RHEL-140195]
  - perf record: Make logs more readable for event open failures (Trevor Allison) [RHEL-140195]
  - tools headers UAPI: sync sound/asound.h with kernel (Trevor Allison) [RHEL-140195]
  - tools headers UAPI: sync linux/vhost.h with kernel (Trevor Allison) [RHEL-140195]
  - tools headers UAPI: sync asm/cpufeatures.h with kernel (Trevor Allison) [RHEL-140195]
  - tools headers UAPI: sync linux/perf_event.h with kernel (Trevor Allison) [RHEL-140195]
  - tools headers UAPI: sync linux/neighbour.h with kernel (Trevor Allison) [RHEL-140195]
  - tools headers UAPI: sync linux/kvm.h with kernel (Trevor Allison) [RHEL-140195]
  - tools headers UAPI: sync linux/if_addr.h with kernel (Trevor Allison) [RHEL-140195]
  - tools headers UAPI: sync drm/drm.h with kernel (Trevor Allison) [RHEL-140195]
  - perf tools: Add the legacy-cache.json to .gitignore (Trevor Allison) [RHEL-140195]
  - Revert "perf tool_pmu: More accurately set the cpus for tool events" (Trevor Allison) [RHEL-140195]
  - perf jevents: Handle deleted JSONS in out of source builds (Trevor Allison) [RHEL-140195]
  - perf metricgroup: Don't early exit if no CPUID table exists (Trevor Allison) [RHEL-140195]
  - perf stat-shadow: In prepare_metric fix guard on reading NULL perf_stat_evsel (Trevor Allison) [RHEL-140195]
  - perf tests kallsyms: Fix missed map__put() (Trevor Allison) [RHEL-140195]
  - perf test: Fix test perf evlist for z/VM s390x (Trevor Allison) [RHEL-140195]
  - perf test: Fix test case perf evlist tests for s390x (Trevor Allison) [RHEL-140195]
  - perf parse-events: Fix evsel allocation failure (Trevor Allison) [RHEL-140195]
  - tools build: Fix the common set of features test wrt libopenssl (Trevor Allison) [RHEL-140195]
  - perf tests top: Make the test exclusive (Trevor Allison) [RHEL-140195]
  - perf tests kvm: Avoid leaving perf.data.guest file around (Trevor Allison) [RHEL-140195]
  - perf symbol: Fix ENOENT case for filename__read_build_id (Trevor Allison) [RHEL-140195]
  - perf tools: Disable BPF skeleton if no libopenssl found (Trevor Allison) [RHEL-140195]
  - tools/build: Add a feature test for libopenssl (Trevor Allison) [RHEL-140195]
  - libperf: Use 'extern' in LIBPERF_API visibility macro (Trevor Allison) [RHEL-140195]
  - perf stat: Improve handling of termination by signal (Trevor Allison) [RHEL-140195]
  - perf tests stat: Add test for error for an offline CPU (Trevor Allison) [RHEL-140195]
  - perf test kvm: Add some basic perf kvm test coverage (Trevor Allison) [RHEL-140195]
  - perf tests evlist: Add basic evlist test (Trevor Allison) [RHEL-140195]
  - perf tests script dlfilter: Add a dlfilter test (Trevor Allison) [RHEL-140195]
  - perf tests kallsyms: Add basic kallsyms test (Trevor Allison) [RHEL-140195]
  - perf tests timechart: Add a perf timechart test (Trevor Allison) [RHEL-140195]
  - perf tests top: Add basic perf top coverage test (Trevor Allison) [RHEL-140195]
  - perf tests c2c: Add a basic c2c (Trevor Allison) [RHEL-140195]
  - perf c2c: Clean up some defensive gets and make asan clean (Trevor Allison) [RHEL-140195]
  - perf timechart: Add record support for output perf.data path (Trevor Allison) [RHEL-140195]
  - perf vendor events intel: Update sierraforest events from 1.12 to 1.13 (Trevor Allison) [RHEL-140195]
  - perf vendor events intel: Update pantherlake events from 1.00 to 1.02 (Trevor Allison) [RHEL-140195]
  - perf vendor events intel: Update meteorlake events from 1.17 to 1.18 (Trevor Allison) [RHEL-140195]
  - perf vendor events intel: Update lunarlake events from 1.18 to 1.19 (Trevor Allison) [RHEL-140195]
  - perf vendor events intel: Update icelakex events from 1.28 to 1.30 (Trevor Allison) [RHEL-140195]
  - perf vendor events intel: Update graniterapids events from 1.15 to 1.16 (Trevor Allison) [RHEL-140195]
  - perf vendor events intel: Update cascadelakex metric units (Trevor Allison) [RHEL-140195]
  - perf vendor events intel: Update arrowlake events from 1.13 to 1.14 (Trevor Allison) [RHEL-140195]
  - perf vendor events intel: Update alderlake events from 1.34 to 1.35 (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Add CPU variants supporting common data source packet (Trevor Allison) [RHEL-140195]
  - perf auxtrace: Include sys/types.h for pid_t (Trevor Allison) [RHEL-140195]
  - perf test: Add kallsyms split test (Trevor Allison) [RHEL-140195]
  - perf tools: Use machine->root_dir to find /proc/kallsyms (Trevor Allison) [RHEL-140195]
  - perf tools: Fallback to initial kernel map properly (Trevor Allison) [RHEL-140195]
  - perf jevents: Skip optional metrics in metric group list (Trevor Allison) [RHEL-140195]
  - perf jevents: Drop duplicate pending metrics (Trevor Allison) [RHEL-140195]
  - perf jevents: Move json encoding to its own functions (Trevor Allison) [RHEL-140195]
  - perf jevents: Add threshold expressions to Metric (Trevor Allison) [RHEL-140195]
  - perf jevents: Term list fix in event parsing (Trevor Allison) [RHEL-140195]
  - perf jevents: Support parsing negative exponents (Trevor Allison) [RHEL-140195]
  - perf jevents: Allow metric groups not to be named (Trevor Allison) [RHEL-140195]
  - perf jevents: Add descriptions to metricgroup abstraction (Trevor Allison) [RHEL-140195]
  - perf jevents: Update metric constraint support (Trevor Allison) [RHEL-140195]
  - perf jevents: Allow multiple metricgroups.json files (Trevor Allison) [RHEL-140195]
  - perf ilist: Be tolerant of reading a metric on the wrong CPU (Trevor Allison) [RHEL-140195]
  - perf python: Correct copying of metric_leader in an evsel (Trevor Allison) [RHEL-140195]
  - perf test: Add python JIT dump test (Trevor Allison) [RHEL-140195]
  - perf test: Fix hybrid testing of event fallback test (Trevor Allison) [RHEL-140195]
  - perf tools: Remove a trailing newline in the event terms (Trevor Allison) [RHEL-140195]
  - perf trace: Skip internal syscall arguments (Trevor Allison) [RHEL-140195]
  - perf tools: Don't read build-ids from non-regular files (Trevor Allison) [RHEL-140195]
  - perf vendor events riscv: add T-HEAD C920V2 JSON support (Trevor Allison) [RHEL-140195]
  - perf pmu: fix duplicate conditional statement (Trevor Allison) [RHEL-140195]
  - perf docs: arm-spe: Document new SPE filtering features (Trevor Allison) [RHEL-140195]
  - perf tools: Add support for perf_event_attr::config4 (Trevor Allison) [RHEL-140195]
  - perf: replace strcpy() with strncpy() in util/jitdump.c (Trevor Allison) [RHEL-140195]
  - perf list: Support filtering in JSON output (Trevor Allison) [RHEL-140195]
  - perf list: Share print state with JSON output (Trevor Allison) [RHEL-140195]
  - perf list: Print matching PMU events for --unit (Trevor Allison) [RHEL-140195]
  - perf test all metrics: Fully ignore Default metric failures (Trevor Allison) [RHEL-140195]
  - perf evsel: Skip store_evsel_ids for non-perf-event PMUs (Trevor Allison) [RHEL-140195]
  - perf pmu: Add PMU kind to simplify differentiating (Trevor Allison) [RHEL-140195]
  - perf header: Switch "cpu" for find_core_pmu in caps feature writing (Trevor Allison) [RHEL-140195]
  - perf test maps: Additional maps__fixup_overlap_and_insert tests (Trevor Allison) [RHEL-140195]
  - perf maps: Avoid RC_CHK use after free (Trevor Allison) [RHEL-140195]
  - perf stat: Read tool events last (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Synthesize memory samples for SIMD operations (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Expose SIMD information in other operations (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Report GCS in record (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Report memset and memcpy in records (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Report associated info for SVE / SME operations (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Report extended memory operations in records (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Report MTE allocation tag in record (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Report register access in record (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Introduce data processing macro for SVE operations (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Consolidate operation types (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Remove unused operation types (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Decode SME data processing packet (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Decode ASE and FP fields in other operation (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Rename SPE_OP_PKT_IS_OTHER_SVE_OP macro (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Decode GCS operation (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Unify operation naming (Trevor Allison) [RHEL-140195]
  - perf tool_pmu: More accurately set the cpus for tool events (Trevor Allison) [RHEL-140195]
  - perf stat: Reduce scope of walltime_nsecs_stats (Trevor Allison) [RHEL-140195]
  - perf stat: Reduce scope of ru_stats (Trevor Allison) [RHEL-140195]
  - perf stat-shadow: Read tool events directly (Trevor Allison) [RHEL-140195]
  - perf tool_pmu: Use old_count when computing count values for time events (Trevor Allison) [RHEL-140195]
  - perf pmu: perf_cpu_map__new_int to avoid parsing a string (Trevor Allison) [RHEL-140195]
  - libperf cpumap: Reduce allocations and sorting in intersect (Trevor Allison) [RHEL-140195]
  - perf stat: Display metric-only for 0 counters (Trevor Allison) [RHEL-140195]
  - perf test: Don't fail if user rdpmc returns 0 when disabled (Trevor Allison) [RHEL-140195]
  - perf parse-events: Add debug logging to perf_event (Trevor Allison) [RHEL-140195]
  - perf test: Be tolerant of missing json metric none value (Trevor Allison) [RHEL-140195]
  - perf sample: Fix the wrong format specifier (Trevor Allison) [RHEL-140195]
  - perf script: Fix build by removing unused evsel_script() (Trevor Allison) [RHEL-140195]
  - perf vendor metrics s390: Avoid has_event(INSTRUCTIONS) (Trevor Allison) [RHEL-140195]
  - perf auxtrace: Remove errno.h from auxtrace.h and fix transitive dependencies (Trevor Allison) [RHEL-140195]
  - tool build: Remove __get_cpuid feature test (Trevor Allison) [RHEL-140195]
  - perf build: Don't add NO_AUXTRACE if missing feature-get_cpuid (Trevor Allison) [RHEL-140195]
  - perf intel-pt: Use the perf provided "cpuid.h" (Trevor Allison) [RHEL-140195]
  - perf test: Add a perf event fallback test (Trevor Allison) [RHEL-140195]
  - perf stat: Align metric output without events (Trevor Allison) [RHEL-140195]
  - perf tool_pmu: Make core_wide and target_cpu json events (Trevor Allison) [RHEL-140195]
  - perf test stat csv: Update test expectations and events (Trevor Allison) [RHEL-140195]
  - perf test stat: Update test expectations and events (Trevor Allison) [RHEL-140195]
  - perf test stat: Update shadow test to use metrics (Trevor Allison) [RHEL-140195]
  - perf test metrics: Update all metrics for possibly failing default metrics (Trevor Allison) [RHEL-140195]
  - perf test stat: Update std_output testing metric expectations (Trevor Allison) [RHEL-140195]
  - perf test stat: Ignore failures in Default[234] metricgroups (Trevor Allison) [RHEL-140195]
  - perf test stat+json: Improve metric-only testing (Trevor Allison) [RHEL-140195]
  - perf stat: Remove "unit" workarounds for metric-only (Trevor Allison) [RHEL-140195]
  - perf stat: Sort default events/metrics (Trevor Allison) [RHEL-140195]
  - perf stat: Fix default metricgroup display on hybrid (Trevor Allison) [RHEL-140195]
  - perf stat: Remove hard coded shadow metrics (Trevor Allison) [RHEL-140195]
  - perf script: Change metric format to use json metrics (Trevor Allison) [RHEL-140195]
  - perf stat: Add detail -d,-dd,-ddd metrics (Trevor Allison) [RHEL-140195]
  - perf jevents: Add metric DefaultShowEvents (Trevor Allison) [RHEL-140195]
  - perf jevents: Add set of common metrics based on default ones (Trevor Allison) [RHEL-140195]
  - perf expr: Add #target_cpu literal (Trevor Allison) [RHEL-140195]
  - perf metricgroup: Add care to picking the evsel for displaying a metric (Trevor Allison) [RHEL-140195]
  - perf symbol: Remove unneeded semicolon (Trevor Allison) [RHEL-140195]
  - perf test: Add test that command line period overrides sysfs/json values (Trevor Allison) [RHEL-140195]
  - perf pmu: Make pmu_alias_terms weak again (Trevor Allison) [RHEL-140195]
  - perf tool: Add a delegate_tool that just delegates actions to another tool (Trevor Allison) [RHEL-140195]
  - perf tool: Add the perf_tool argument to all callbacks (Trevor Allison) [RHEL-140195]
  - perf vendor events arm64:: Add i.MX94 DDR Performance Monitor metrics (Trevor Allison) [RHEL-140195]
  - perf stat: Add ScaleUnit to {cpu,task}-clock JSON description (Trevor Allison) [RHEL-140195]
  - perf record: Make sure to update build-ID cache (Trevor Allison) [RHEL-140195]
  - perf jevents: Make all tables static (Trevor Allison) [RHEL-140195]
  - perf metricgroup: When copy metrics copy default information (Trevor Allison) [RHEL-140195]
  - perf metricgroup: Missed free on error path (Trevor Allison) [RHEL-140195]
  - perf evsel: Remove unused metric_events variable (Trevor Allison) [RHEL-140195]
  - perf tools: Cache counter names for raw samples on s390 (Trevor Allison) [RHEL-140195]
  - perf trace: Increase syscall handler map size to 1024 (Trevor Allison) [RHEL-140195]
  - perf test workload: Add thread count argument to thloop (Trevor Allison) [RHEL-140195]
  - perf auxtrace: Add auxtrace_synth_id_range_start() helper (Trevor Allison) [RHEL-140195]
  - perf stat: Add/fix bperf cgroup max events workarounds (Trevor Allison) [RHEL-140195]
  - perf cs-etm: Mute enumeration value warning (Trevor Allison) [RHEL-140195]
  - tools: arm64: Add Cortex-A720AE definitions (Trevor Allison) [RHEL-140195]
  - perf annotate: Fix Clang build by adding block in switch case (Trevor Allison) [RHEL-140195]
  - perf annotate: Invalidate register states for untracked instructions (Trevor Allison) [RHEL-140195]
  - perf annotate: Save pointer offset in stack state (Trevor Allison) [RHEL-140195]
  - perf annotate: Track arithmetic instructions on pointers (Trevor Allison) [RHEL-140195]
  - perf annotate: Track address registers via TSR_KIND_POINTER (Trevor Allison) [RHEL-140195]
  - perf annotate: Skip annotating data types to lea instructions (Trevor Allison) [RHEL-140195]
  - perf annotate: Fix build with NO_SLANG=1 (Trevor Allison) [RHEL-140195]
  - perf jevents: Suppress circular dependency warnings (Trevor Allison) [RHEL-140195]
  - perf jevents: Remove unused makefile variable (Trevor Allison) [RHEL-140195]
  - perf jevents: Fix build when there are other json files in the tree (Trevor Allison) [RHEL-140195]
  - perf c2c annotate: Start from the contention line (Trevor Allison) [RHEL-140195]
  - perf c2c: Add annotation support to perf c2c report (Trevor Allison) [RHEL-140195]
  - perf stat bperf cgroup: Increase MAX_EVENTS from 32 to 1024 (Trevor Allison) [RHEL-140195]
  - perf ilist: Add PMU information to metrics (Trevor Allison) [RHEL-140195]
  - perf python: Add PMU argument to parse_metrics (Trevor Allison) [RHEL-140195]
  - perf ilist: Don't display deprecated events (Trevor Allison) [RHEL-140195]
  - perf trace: Don't synthesize mmaps unless callchains are enabled (Trevor Allison) [RHEL-140195]
  - perf test parse-events: Add evsel test helper (Trevor Allison) [RHEL-140195]
  - perf test parse-events: Add evlist test helper (Trevor Allison) [RHEL-140195]
  - perf test: Clean up test_..config helpers (Trevor Allison) [RHEL-140195]
  - perf test: Switch cycles event to cpu-cycles (Trevor Allison) [RHEL-140195]
  - perf test parse-events: Remove cpu PMU requirement (Trevor Allison) [RHEL-140195]
  - perf test parse-events: Without a PMU use cpu-cycles rather than cycles (Trevor Allison) [RHEL-140195]
  - perf test parse-events: Use evsel__match for legacy events (Trevor Allison) [RHEL-140195]
  - perf evsel: Improvements to __evsel__match (Trevor Allison) [RHEL-140195]
  - perf evlist: Avoid scanning all PMUs for evlist__new_default (Trevor Allison) [RHEL-140195]
  - perf top: Use evlist__new_default when no events specified (Trevor Allison) [RHEL-140195]
  - perf record: Use evlist__new_default when no events specified (Trevor Allison) [RHEL-140195]
  - perf parse-events: Remove hard coded legacy hardware and cache parsing (Trevor Allison) [RHEL-140195]
  - perf print-events: Remove print_symbol_events (Trevor Allison) [RHEL-140195]
  - perf print-events: Remove print_hwcache_events (Trevor Allison) [RHEL-140195]
  - perf jevents: Add legacy-hardware and legacy-cache json (Trevor Allison) [RHEL-140195]
  - perf pmu: Add and use legacy_terms in alias information (Trevor Allison) [RHEL-140195]
  - perf jevents: Add legacy json terms and default_core event table helper (Trevor Allison) [RHEL-140195]
  - perf parse-events: Add terms for legacy hardware and cache config values (Trevor Allison) [RHEL-140195]
  - perf pmu: Factor term parsing into a perf_event_attr into a helper (Trevor Allison) [RHEL-140195]
  - perf pmu: Use fd rather than FILE from new_alias (Trevor Allison) [RHEL-140195]
  - perf parse-events: Remove unused FILE input argument to scanner (Trevor Allison) [RHEL-140195]
  - perf pmu: Don't eagerly parse event terms (Trevor Allison) [RHEL-140195]
  - perf jevents: Support copying the source json files to OUTPUT (Trevor Allison) [RHEL-140195]
  - perf record: Skip don't fail for events that don't open (Trevor Allison) [RHEL-140195]
  - perf stat: Avoid wildcarding PMUs for default events (Trevor Allison) [RHEL-140195]
  - perf perf_api_probe: Avoid scanning all PMUs, try software PMU first (Trevor Allison) [RHEL-140195]
  - perf build python: Don't leave a.out file when building with clang (Trevor Allison) [RHEL-140195]
  - perf stat: Additional verbose details for <not supported> events (Trevor Allison) [RHEL-140195]
  - perf tests: use strdup() in "Object code reading" (Trevor Allison) [RHEL-140195]
  - perf: sched: Fix perf crash with new is_user_task() helper (Trevor Allison) [RHEL-140195] {CVE-2026-23159}
  - perf/x86/intel: Do not enable BTS for guests (Trevor Allison) [RHEL-140195]
  - perf: Fix refcount warning on event->mmap_count increment (Trevor Allison) [RHEL-140195] {CVE-2026-23127}
  - perf: Ensure swevent hrtimer is properly destroyed (Trevor Allison) [RHEL-140195] {CVE-2026-23014}
  - perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common() (Trevor Allison) [RHEL-140195]
  - perf/core: Fix missing read event generation on task exit (Trevor Allison) [RHEL-140195]
  - perf/x86/amd/uncore: Fix the return value of amd_uncore_df_event_init() on error (Trevor Allison) [RHEL-140195]
  - perf/uprobes: Remove <space><Tab> whitespace noise (Trevor Allison) [RHEL-140195]
  - perf: arm_spe: Add support for filtering on data source (Trevor Allison) [RHEL-140195]
  - perf: Add perf_event_attr::config4 (Trevor Allison) [RHEL-140195]
  - perf/x86/intel/ds: Factor out PEBS group processing code to functions (Trevor Allison) [RHEL-140195]
  - perf/x86/intel/ds: Factor out PEBS record processing code to functions (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Initialize architectural PEBS (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Correct large PEBS flag check (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Replace x86_pmu.drain_pebs calling with static call (Trevor Allison) [RHEL-140195]
  - perf/x86: Fix NULL event access and potential PEBS record loss (Trevor Allison) [RHEL-140195] {CVE-2025-68375}
  - perf/x86: Remove redundant is_x86_event() prototype (Trevor Allison) [RHEL-140195]
  - perf/x86/intel/cstate: Remove PC3 support from LunarLake (Trevor Allison) [RHEL-140195]


