# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-89.el10]
changelog:
  - redhat: add downstream SBAT for UKI addons (Emanuele Giuseppe Esposito) [RHEL-92881]
  - uki_addons: provide custom SBAT as input parameter (Emanuele Giuseppe Esposito) [RHEL-92881]
  - uki_addons: remove completely sbat/sbat.conf (Emanuele Giuseppe Esposito) [RHEL-92881]
  - redhat: create 'systemd-volatile-overlay' addon for UKI (Emanuele Giuseppe Esposito) [RHEL-92882]
  - vfio/pci: Align huge faults to order (Alex Williamson) [RHEL-89852]
  - cifs: Fix integer overflow while processing closetimeo mount option (CKI Backport Bot) [RHEL-87906] {CVE-2025-21962}
  - scsi: iscsi: Fix missing scsi_host_put() in error path (Chris Leech) [RHEL-90551]
  - scsi: qla4xxx: Constify 'struct bin_attribute' (Chris Leech) [RHEL-90551]
  - scsi: qedi: Constify 'struct bin_attribute' (Chris Leech) [RHEL-90551]
  - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (Chris Leech) [RHEL-90551]
  - net: fix geneve_opt length integer overflow (CKI Backport Bot) [RHEL-87978] {CVE-2025-22055}
  - tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-70101 RHEL-83227] {CVE-2025-21864}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-90.el10]
changelog:
  - gre: Fix again IPv6 link-local address generation. (Guillaume Nault) [RHEL-69103]
  - zram: fix NULL pointer in comp_algorithm_show() (Ming Lei) [RHEL-77764] {CVE-2024-53222}
  - HID: picoLCD: Replace check_fb in favor of struct fb_info.lcd_dev (Jocelyn Falempe) [RHEL-75959]
  - backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() (Jocelyn Falempe) [RHEL-75959]
  - fbdev: hyperv_fb: Allow graceful removal of framebuffer (Jocelyn Falempe) [RHEL-75959]
  - fbdev: hyperv_fb: Simplify hvfb_putmem (Jocelyn Falempe) [RHEL-75959]
  - fbdev: hyperv_fb: Fix hang in kdump kernel when on Hyper-V Gen 2 VMs (Jocelyn Falempe) [RHEL-75959]
  - fbdev: hyperv_fb: iounmap() the correct memory when removing a device (Jocelyn Falempe) [RHEL-75959]
  - fbdev: lcdcfb: Use backlight helper (Jocelyn Falempe) [RHEL-75959]
  - fbdev: vga16fb: fix orig_video_isVGA confusion (Jocelyn Falempe) [RHEL-75959]
  - fbdev: omapfb: Use syscon_regmap_lookup_by_phandle_args (Jocelyn Falempe) [RHEL-75959]
  - fbdev: omapfb: Use of_property_present() to test existence of DT property (Jocelyn Falempe) [RHEL-75959]
  - fbdev: sm501fb: Use str_enabled_disabled() helper in sm501fb_init_fb() (Jocelyn Falempe) [RHEL-75959]
  - fbdev: omap: use threaded IRQ for LCD DMA (Jocelyn Falempe) [RHEL-75959]
  - fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device() (Jocelyn Falempe) [RHEL-75959]
  - fbdev: efifb: Change the return value type to void (Jocelyn Falempe) [RHEL-75959]
  - fbdev: omapfb: Remove unused hdmi5_core_handle_irqs (Jocelyn Falempe) [RHEL-75959]
  - video: hdmi: Remove unused hdmi_infoframe_check (Jocelyn Falempe) [RHEL-75959]
  - fbdev: radeon: Use const 'struct bin_attribute' callbacks (Jocelyn Falempe) [RHEL-75959]
  - fbdev: udlfb: Use const 'struct bin_attribute' callback (Jocelyn Falempe) [RHEL-75959]
  - fbdev: Fix recursive dependencies wrt BACKLIGHT_CLASS_DEVICE (Jocelyn Falempe) [RHEL-75959]
  - fbdev: omapfb: Remove some deadcode (Jocelyn Falempe) [RHEL-75959]
  - fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() (Jocelyn Falempe) [RHEL-75959]
  - fbdev: omapfb: use new of_graph functions (Jocelyn Falempe) [RHEL-75959]
  - backlight: Remove notifier (Jocelyn Falempe) [RHEL-75959]
  - backlight: ktz8866: Fix module autoloading (Jocelyn Falempe) [RHEL-75959]
  - backlight: 88pm860x_bl: Simplify with scoped for each OF child loop (Jocelyn Falempe) [RHEL-75959]
  - backlight: lcd: Remove struct fb_videomode from set_mode callback (Jocelyn Falempe) [RHEL-75959]
  - backlight: lcd: Replace check_fb with controls_device (Jocelyn Falempe) [RHEL-75959]
  - fbdev: omap: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - fbdev: imxfb: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - fbdev: imxfb: Replace check_fb in favor of struct fb_info.lcd_dev (Jocelyn Falempe) [RHEL-75959]
  - fbdev: clps711x-fb: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - fbdev: clps711x-fb: Replace check_fb in favor of struct fb_info.lcd_dev (Jocelyn Falempe) [RHEL-75959]
  - backlight: tdo24m: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - backlight: platform_lcd: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - backlight: platform_lcd: Remove match_fb from struct plat_lcd_data (Jocelyn Falempe) [RHEL-75959]
  - backlight: platform_lcd: Remove include statement for <linux/backlight.h> (Jocelyn Falempe) [RHEL-75959]
  - backlight: otm3225a: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - backlight: ltv350qv: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - backlight: lms501kf03: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - backlight: lms501kf03: Remove unnecessary include of <linux/backlight.h> (Jocelyn Falempe) [RHEL-75959]
  - backlight: lms283gf05: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - backlight: l4f00242t03: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - backlight: jornada720_lcd: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - backlight: jornada720_lcd: Include <linux/io.h> for IOMEM() macro (Jocelyn Falempe) [RHEL-75959]
  - backlight: ili9320: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - backlight: ili922x: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - backlight: hx8357: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - backlight: corgi_lcd: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - backlight: lcd: Add LCD_POWER_ constants for power states (Jocelyn Falempe) [RHEL-75959]
  - backlight: lcd: Test against struct fb_info.lcd_dev (Jocelyn Falempe) [RHEL-75959]
  - backlight: lcd: Rearrange code in fb_notifier_callback() (Jocelyn Falempe) [RHEL-75959]
  - fbdev: sh_mobile_lcdc_fb: Use backlight power constants (Jocelyn Falempe) [RHEL-75959]
  - fbdev: rivafb: Use backlight power constants (Jocelyn Falempe) [RHEL-75959]
  - fbdev: radeonfb: Use backlight power constants (Jocelyn Falempe) [RHEL-75959]
  - fbdev: omapfb: Use backlight power constants (Jocelyn Falempe) [RHEL-75959]
  - fbdev: nvidiafb: Use backlight power constants (Jocelyn Falempe) [RHEL-75959]
  - fbdev: chipsfb: Use backlight power constants (Jocelyn Falempe) [RHEL-75959]
  - fbdev: atyfb: Use backlight power constants (Jocelyn Falempe) [RHEL-75959]
  - fbdev: aty128fb: Use backlight power constants (Jocelyn Falempe) [RHEL-75959]
  - fbdev: atmel_lcdfb: Use backlight power constants (Jocelyn Falempe) [RHEL-75959]
  - video: fbdev: mmp: switch to use spi_alloc_host() (Jocelyn Falempe) [RHEL-75959]
  - smb: client: don't retry IO on failed negprotos with soft mounts (Paulo Alcantara) [RHEL-85526]
  - acct: perform last write from workqueue (CKI Backport Bot) [RHEL-83184] {CVE-2025-21846}


author: Julio Faracco <jfaracco@redhat.com> [6.12.0-91.el10]
changelog:
  - loop: Add sanity check for read/write_iter (Ming Lei) [RHEL-83595]
  - fs: add kern_path_locked_negative() (Ming Lei) [RHEL-83595]
  - tools headers: Sync uapi/linux/fcntl.h with the kernel sources (Ming Lei) [RHEL-83595]
  - perf probe: Pick the correct dwarf die while adding probe points (Ming Lei) [RHEL-83595]
  - devtmpfs: don't use vfs_getattr_nosec to query i_mode (Ming Lei) [RHEL-83595]
  - VFS: add common error checks to lookup_one_qstr_excl() (Ming Lei) [RHEL-83595]
  - VFS: change kern_path_locked() and user_path_locked_at() to never return negative dentry (Ming Lei) [RHEL-83595]
  - fs: move the bdex_statx call to vfs_getattr_nosec (Ming Lei) [RHEL-83595]
  - libfs: kill empty_dir_getattr() (Ming Lei) [RHEL-83595]
  - fs: Simplify getattr interface function checking AT_GETATTR_NOSEC flag (Ming Lei) [RHEL-83595]
  - fs/stat.c: switch to CLASS(fd_raw) (Ming Lei) [RHEL-83595]
  - kill getname_statx_lookup_flags() (Ming Lei) [RHEL-83595]
  - io_statx_prep(): use getname_uflags() (Ming Lei) [RHEL-83595]
  - getname_maybe_null() - the third variant of pathname copy-in (Ming Lei) [RHEL-83595]
  - teach filename_lookup() to treat NULL filename as "" (Ming Lei) [RHEL-83595]
  - dm table: Fix W=1 build warning when mempool_needs_integrity is unused (Ming Lei) [RHEL-83595]
  - block: move blkdev_{get,put} _no_open prototypes out of blkdev.h (Ming Lei) [RHEL-83595]
  - block: never reduce ra_pages in blk_apply_bdi_limits (Ming Lei) [RHEL-83595]
  - block: integrity: Do not call set_page_dirty_lock() (Ming Lei) [RHEL-83595]
  - loop: stop using vfs_iter_{read,write} for buffered I/O (Ming Lei) [RHEL-83595]
  - loop: LOOP_SET_FD: send uevents for partitions (Ming Lei) [RHEL-83595]
  - loop: properly send KOBJ_CHANGED uevent for disk device (Ming Lei) [RHEL-83595]
  - loop: aio inherit the ioprio of original request (Ming Lei) [RHEL-83595]
  - block: fix resource leak in blk_register_queue() error path (Ming Lei) [RHEL-83595]
  - block: add SPDX header line to blk-throttle.h (Ming Lei) [RHEL-83595]
  - null_blk: Use strscpy() instead of strscpy_pad() in null_add_dev() (Ming Lei) [RHEL-83595]
  - block: add for_each_mp_bvec() (Ming Lei) [RHEL-83595]
  - block: don't grab elevator lock during queue initialization (Ming Lei) [RHEL-83595]
  - block: remove unused nseg parameter (Ming Lei) [RHEL-83595]
  - io_uring/rw: don't mask in f_iocb_flags (Ming Lei) [RHEL-83595]
  - docs: sysfs-block: Clarify integrity sysfs attributes (Ming Lei) [RHEL-83595]
  - block/blk-iocost: ensure 'ret' is set on error (Ming Lei) [RHEL-83595]
  - block: correct locking order for protecting blk-wbt parameters (Ming Lei) [RHEL-83595]
  - block: release q->elevator_lock in ioc_qos_write (Ming Lei) [RHEL-83595]
  - ublk: remove io_cmds list in ublk_queue (Ming Lei) [RHEL-83595]
  - blk-cgroup: improve policy registration error handling (Ming Lei) [RHEL-83595]
  - loop: move vfs_fsync() out of loop_update_dio() (Ming Lei) [RHEL-83595]
  - block: fix a comment in the queue_attrs[] array (Ming Lei) [RHEL-83595]
  - block: protect debugfs attribute method hctx_busy_show (Ming Lei) [RHEL-83595]
  - block: remove unnecessary goto labels in debugfs attribute read methods (Ming Lei) [RHEL-83595]
  - block: protect debugfs attrs using elevator_lock instead of sysfs_lock (Ming Lei) [RHEL-83595]
  - block: remove unused parameter 'q' parameter in __blk_rq_map_sg() (Ming Lei) [RHEL-83595]
  - block: fix adding folio to bio (Ming Lei) [RHEL-83595]
  - block: remove unused parameter (Ming Lei) [RHEL-83595]
  - badblocks: Fix a nonsense WARN_ON() which checks whether a u64 variable < 0 (Ming Lei) [RHEL-83595]
  - block: make sure ->nr_integrity_segments is cloned in blk_rq_prep_clone (Ming Lei) [RHEL-83595]
  - block: protect hctx attributes/params using q->elevator_lock (Ming Lei) [RHEL-83595]
  - block: protect read_ahead_kb using q->limits_lock (Ming Lei) [RHEL-83595]
  - block: protect wbt_lat_usec using q->elevator_lock (Ming Lei) [RHEL-83595]
  - block: protect nr_requests update using q->elevator_lock (Ming Lei) [RHEL-83595]
  - block: introduce a dedicated lock for protecting queue elevator updates (Ming Lei) [RHEL-83595]
  - block: remove q->sysfs_lock for attributes which don't need it (Ming Lei) [RHEL-83595]
  - block: move q->sysfs_lock and queue-freeze under show/store method (Ming Lei) [RHEL-83595]
  - block: acquire q->limits_lock while reading sysfs attributes (Ming Lei) [RHEL-83595]
  - badblocks: use sector_t instead of int to avoid truncation of badblocks length (Ming Lei) [RHEL-83595]
  - badblocks: return boolean from badblocks_set() and badblocks_clear() (Ming Lei) [RHEL-83595]
  - badblocks: fix missing bad blocks on retry in _badblocks_check() (Ming Lei) [RHEL-83595]
  - badblocks: fix merge issue when new badblocks align with pre+1 (Ming Lei) [RHEL-83595]
  - badblocks: try can_merge_front before overlap_front (Ming Lei) [RHEL-83595]
  - badblocks: fix the using of MAX_BADBLOCKS (Ming Lei) [RHEL-83595]
  - badblocks: return error if any badblock set fails (Ming Lei) [RHEL-83595]
  - badblocks: return error directly when setting badblocks exceeds 512 (Ming Lei) [RHEL-83595]
  - badblocks: attempt to merge adjacent badblocks during ack_all_badblocks (Ming Lei) [RHEL-83595]
  - badblocks: factor out a helper try_adjacent_combine (Ming Lei) [RHEL-83595]
  - badblocks: Fix error shift ops (Ming Lei) [RHEL-83595]
  - block: Correctly initialize BLK_INTEGRITY_NOGENERATE and BLK_INTEGRITY_NOVERIFY (Ming Lei) [RHEL-83595]
  - block: ensure correct integrity capability propagation in stacked devices (Ming Lei) [RHEL-83595]
  - blk-throttle: carry over directly (Ming Lei) [RHEL-83595]
  - blk-throttle: don't take carryover for prioritized processing of metadata (Ming Lei) [RHEL-83595]
  - blk-throttle: remove last_bytes_disp and last_ios_disp (Ming Lei) [RHEL-83595]
  - blk-throttle: fix lower bps rate by throtl_trim_slice() (Ming Lei) [RHEL-83595]
  - ublk: enforce ublks_max only for unprivileged devices (Ming Lei) [RHEL-83595]
  - loop: Remove struct loop_func_table (Ming Lei) [RHEL-83595]
  - ublk: add DMA alignment limit (Ming Lei) [RHEL-83595]
  - block: split struct bio_integrity_payload (Ming Lei) [RHEL-83595]
  - block: move the block layer auto-integrity code into a new file (Ming Lei) [RHEL-83595]
  - block: mark bounce buffering as incompatible with integrity (Ming Lei) [RHEL-83595]
  - null_blk: do partial IO for bad blocks (Ming Lei) [RHEL-83595]
  - null_blk: pass transfer size to null_handle_rq() (Ming Lei) [RHEL-83595]
  - null_blk: replace null_process_cmd() call in null_zone_write() (Ming Lei) [RHEL-83595]
  - null_blk: introduce badblocks_once parameter (Ming Lei) [RHEL-83595]
  - null_blk: generate null_blk configfs features string (Ming Lei) [RHEL-83595]
  - ublk: complete command synchronously on error (Ming Lei) [RHEL-83595]
  - blk-wbt: Cleanup a comment in wb_timer_fn (Ming Lei) [RHEL-83595]
  - blk-wbt: Fix some comments (Ming Lei) [RHEL-83595]
  - loop: take the file system minimum dio alignment into account (Ming Lei) [RHEL-83595]
  - loop: check in LO_FLAGS_DIRECT_IO in loop_default_blocksize (Ming Lei) [RHEL-83595]
  - loop: set LO_FLAGS_DIRECT_IO in loop_assign_backing_file (Ming Lei) [RHEL-83595]
  - loop: factor out a loop_assign_backing_file helper (Ming Lei) [RHEL-83595]
  - block: Remove commented out code (Ming Lei) [RHEL-83595]
  - Revert "driver: block: release the lo_work_lock before queue_work" (Ming Lei) [RHEL-83595]
  - block: refactor rq_qos_wait() (Ming Lei) [RHEL-83595]
  - block: introduce init_wait_func() (Ming Lei) [RHEL-83595]
  - loop: release the lo_work_lock before queue_work (Ming Lei) [RHEL-83595]
  - blk-crypto: add ioctls to create and prepare hardware-wrapped keys (Ming Lei) [RHEL-83595]
  - blk-crypto: show supported key types in sysfs (Ming Lei) [RHEL-83595]
  - blk-crypto: add basic hardware-wrapped key support (Ming Lei) [RHEL-83595]
  - scsi: ufs: crypto: Remove ufs_hba_variant_ops::program_key (Ming Lei) [RHEL-83595]
  - scsi: ufs: qcom: Convert to use UFSHCD_QUIRK_CUSTOM_CRYPTO_PROFILE (Ming Lei) [RHEL-83595]
  - scsi: ufs: crypto: Add ufs_hba_from_crypto_profile() (Ming Lei) [RHEL-83595]
  - scsi: ufs: qcom: Fix crypto key eviction (Ming Lei) [RHEL-83595]
  - mmc: sdhci-msm: convert to use custom crypto profile (Ming Lei) [RHEL-83595]
  - mmc: crypto: add mmc_from_crypto_profile() (Ming Lei) [RHEL-83595]
  - mmc: sdhci-msm: fix crypto key eviction (Ming Lei) [RHEL-83595]
  - block: Name the RQF flags enum (Ming Lei) [RHEL-83595]
  - block: fix conversion of GPT partition name to 7-bit (Ming Lei) [RHEL-83595]
  - ublk: set_params: properly check if parameters can be applied (Ming Lei) [RHEL-83595]
  - block: make bio_integrity_map_user() static inline (Ming Lei) [RHEL-83595]
  - scsi: add support for user-meta interface (Ming Lei) [RHEL-83595]
  - nvme: add support for passing on the application tag (Ming Lei) [RHEL-83595]
  - block: add support to pass user meta buffer (Ming Lei) [RHEL-83595]
  - block: introduce BIP_CHECK_GUARD/REFTAG/APPTAG bip_flags (Ming Lei) [RHEL-83595]
  - io_uring: introduce attributes for read/write and PI support (Ming Lei) [RHEL-83595]
  - fs: introduce IOCB_HAS_METADATA for metadata (Ming Lei) [RHEL-83595]
  - fs, iov_iter: define meta io descriptor (Ming Lei) [RHEL-83595]
  - block: modify bio_integrity_map_user to accept iov_iter as argument (Ming Lei) [RHEL-83595]
  - block: copy back bounce buffer to user-space correctly in case of split (Ming Lei) [RHEL-83595]
  - block: define set of integrity flags to be inherited by cloned bip (Ming Lei) [RHEL-83595]
  - MAINTAINERS: Update maintainers for crypto/marvell (Vladis Dronov) [RHEL-74336]
  - crypto: octeontx2 - suppress auth failure screaming due to negative tests (Vladis Dronov) [RHEL-74336]
  - crypto: octeontx2 - Remove unused otx2_cpt_print_uc_dbg_info (Vladis Dronov) [RHEL-74336]
  - crypto: drivers - Use str_enable_disable-like helpers [partial] (Vladis Dronov) [RHEL-74336]
  - perf test: Extra verbosity and hypervisor skip for tpebs test (Michael Petlan) [RHEL-82381]
  - cifs: Fix integer overflow while processing acdirmax mount option (Paulo Alcantara) [RHEL-87947] {CVE-2025-21963}
  - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (CKI Backport Bot) [RHEL-87556]
  - wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (CKI Backport Bot) [RHEL-93267] {CVE-2025-37943}
  - selftest/mm: va_high_addr_switch: add ppc64 support check (Chunyu Hu) [RHEL-87654]
  - net: ibmveth: make veth_pool_store stop hanging (Mamatha Inamdar) [RHEL-92996]
  - dm: fix copying after src array boundaries (Benjamin Marzinski) [RHEL-92762]
  - dm: add missing unlock on in dm_keyslot_evict() (Benjamin Marzinski) [RHEL-92762]
  - dm: always update the array size in realloc_argv on success (Benjamin Marzinski) [RHEL-92762]
  - dm-integrity: fix a warning on invalid table line (Benjamin Marzinski) [RHEL-92762]
  - dm-bufio: don't schedule in atomic context (Benjamin Marzinski) [RHEL-92762]
  - dm-ebs: fix prefetch-vs-suspend race (Benjamin Marzinski) [RHEL-92762]
  - dm-verity: fix prefetch-vs-suspend race (Benjamin Marzinski) [RHEL-92762]
  - dm-integrity: fix non-constant-time tag verification (Benjamin Marzinski) [RHEL-92762]
  - dm cache: support shrinking the origin device (Benjamin Marzinski) [RHEL-92762]
  - dm cache: prevent BUG_ON by blocking retries on failed device resumes (Benjamin Marzinski) [RHEL-92762]
  - dm: fix unconditional IO throttle caused by REQ_PREFLUSH (Benjamin Marzinski) [RHEL-92762]
  - dm-integrity: set ti->error on memory allocation failure (Benjamin Marzinski) [RHEL-92762]
  - xfrm: Support ESN context update to hardware for TX (CKI Backport Bot) [RHEL-86505]
  - redhat: configs: rhel: Enable CX231XX driver (Kate Hsuan) [RHEL-86822]
  - iomap: avoid avoid truncating 64-bit offset to 32 bits (Brian Foster) [RHEL-85399]
  - iomap: fix zero padding data issue in concurrent append writes (Brian Foster) [RHEL-85399]
  - iomap: pass byte granular end position to iomap_add_to_ioend (Brian Foster) [RHEL-85399]
  - iomap: elide flush from partial eof zero range (Brian Foster) [RHEL-85399]
  - iomap: lift zeroed mapping handling into iomap_zero_range() (Brian Foster) [RHEL-85399]
  - iomap: reset per-iter state on non-error iter advances (Brian Foster) [RHEL-85399]
  - iomap: warn on zero range of a post-eof folio (Brian Foster) [RHEL-85399]
  - iomap: drop an obsolete comment in iomap_dio_bio_iter (Brian Foster) [RHEL-85399]
  - iomap: add a merge boundary flag (Brian Foster) [RHEL-85399]
  - fs: iomap: Atomic write support (Brian Foster) [RHEL-85399]
  - fs: Export generic_atomic_write_valid() (Brian Foster) [RHEL-85399]


author: Julio Faracco <jfaracco@redhat.com> [6.12.0-92.el10]
changelog:
  - uki_addons: add 'fedora' SBAT suffix for UKI addons (Li Tian) [RHEL-93398]
  - perf python: Remove some unused macros (_PyUnicode_FromString(arg), etc) (Michael Petlan) [RHEL-77936]
  - redhat/kernel.spec: Remove /usr/share/perf-core from being installed (Michael Petlan) [RHEL-77936]
  - libapi: Add missing header with NAME_MAX define to io_dir.h (Michael Petlan) [RHEL-77936]
  - perf evsel: tp_format accessing improvements (Michael Petlan) [RHEL-77936]
  - perf/x86: Fix non-sampling (counting) events on certain x86 platforms (Michael Petlan) [RHEL-77936]
  - perf pmu: Handle memory failure in tool_pmu__new() (Michael Petlan) [RHEL-77936]
  - perf pmu: Dynamically allocate tool PMU (Michael Petlan) [RHEL-77936]
  - perf pmu: Switch to io_dir__readdir (Michael Petlan) [RHEL-77936]
  - tools lib api: Add io_dir an allocation free readdir alternative (Michael Petlan) [RHEL-77936]
  - perf pmu: Rename name matching for no suffix or wildcard variants (Michael Petlan) [RHEL-77936]
  - perf evsel: Reduce scanning core PMUs in is_hybrid (Michael Petlan) [RHEL-77936]
  - perf pmus: Restructure pmu_read_sysfs to scan fewer PMUs (Michael Petlan) [RHEL-77936]
  - perf stat: Fix find_stat for mixed legacy/non-legacy events (Michael Petlan) [RHEL-77936]
  - perf evsel: Add pmu_name helper (Michael Petlan) [RHEL-77936]
  - perf tests: Fix Tool PMU test segfault (Michael Petlan) [RHEL-77936]
  - perf tools: Add skip check in tool_pmu__event_to_str() (Michael Petlan) [RHEL-77936]
  - perf tools: Fix is_compat_mode build break in ppc64 (Michael Petlan) [RHEL-77936]
  - perf test: Fix Hwmon PMU test endianess issue (Michael Petlan) [RHEL-77936]
  - perf machine: Fixup kernel maps ends after adding extra maps (Michael Petlan) [RHEL-77936]
  - perf maps: Introduce map__set_kmap_maps() for kernel maps (Michael Petlan) [RHEL-77936]
  - perf x86/topdown: Fix topdown leader sampling test error on hybrid (Michael Petlan) [RHEL-77936]
  - perf test stat_all_pmu.sh: Correctly check 'perf stat' result (Michael Petlan) [RHEL-77936]
  - powerpc/perf: Fix ref-counting on the PMU 'vpa_pmu' (Michael Petlan) [RHEL-77936] {CVE-2025-22094}
  - tools headers: Sync uapi/asm-generic/socket.h with the kernel sources (Michael Petlan) [RHEL-77936]
  - tools: Unify top-level quiet infrastructure (Michael Petlan) [RHEL-77936]
  - perf cpumap: Fix die and cluster IDs (Michael Petlan) [RHEL-77936]
  - perf test: Skip syscall enum test if no landlock syscall (Michael Petlan) [RHEL-77936]
  - perf trace: Fix runtime error of index out of bounds (Michael Petlan) [RHEL-77936]
  - perf trace: Fix BPF loading failure (-E2BIG) (Michael Petlan) [RHEL-77936]
  - perf test: Update event_groups test to use instructions (Michael Petlan) [RHEL-77936]
  - perf bench: Fix undefined behavior in cmpworker() (Michael Petlan) [RHEL-77936]
  - perf annotate: Prefer passing evsel to evsel->core.idx (Michael Petlan) [RHEL-77936]
  - perf lock: Rename fields in lock_type_table (Michael Petlan) [RHEL-77936]
  - perf lock: Add percpu-rwsem for type filter (Michael Petlan) [RHEL-77936]
  - perf lock: Fix parse_lock_type which only retrieve one lock flag (Michael Petlan) [RHEL-77936]
  - perf lock: Fix return code for functions in __cmd_contention (Michael Petlan) [RHEL-77936]
  - perf hist: Fix width calculation in hpp__fmt() (Michael Petlan) [RHEL-77936]
  - perf hist: Fix bogus profiles when filters are enabled (Michael Petlan) [RHEL-77936]
  - perf hist: Deduplicate cmp/sort/collapse code (Michael Petlan) [RHEL-77936]
  - perf test: Improve verbose documentation (Michael Petlan) [RHEL-77936]
  - perf test: Add a runs-per-test flag (Michael Petlan) [RHEL-77936]
  - perf test: Send list output to stdout rather than stderr (Michael Petlan) [RHEL-77936]
  - perf test: Rename functions and variables for better clarity (Michael Petlan) [RHEL-77936]
  - perf tools: Expose quiet/verbose variables in Makefile.perf (Michael Petlan) [RHEL-77936]
  - perf config: Add a function to set one variable in .perfconfig (Michael Petlan) [RHEL-77936]
  - perf test perftool_testsuite: Return correct value for skipping (Michael Petlan) [RHEL-77936]
  - perf test perftool_testsuite: Add missing description (Michael Petlan) [RHEL-77936]
  - perf inject: Fix use without initialization of local variables (Michael Petlan) [RHEL-77936]
  - perf probe: Rename err label (Michael Petlan) [RHEL-77936]
  - perf record: Fix segfault with --off-cpu when debuginfo is not enabled (Michael Petlan) [RHEL-77936]
  - perf tests base_probe: Fix check for the count of existing probes in test_adding_kernel (Michael Petlan) [RHEL-77936]
  - perf MANIFEST: Add license files (Michael Petlan) [RHEL-77936]
  - perf test brstack: Speed up running test by using tr -s instead of xargs (Michael Petlan) [RHEL-77936]
  - perf tools mips: Fix mips syscall generation (Michael Petlan) [RHEL-77936]
  - perf tests arm_spe: Add test for discard mode (Michael Petlan) [RHEL-77936]
  - perf tools arm-spe: Don't allocate buffer or tracking event in discard mode (Michael Petlan) [RHEL-77936]
  - perf tools arm-spe: Pull out functions for aux buffer and tracking setup (Michael Petlan) [RHEL-77936]
  - perf report: Fix misleading help message about --demangle (Michael Petlan) [RHEL-77936]
  - perf ftrace: Fix display for range of the first bucket (Michael Petlan) [RHEL-77936]
  - perf ftrace: Check min/max latency only with bucket range (Michael Petlan) [RHEL-77936]
  - perf MANIFEST: Add arch/*/include/uapi/asm/bpf_perf_event.h to the perf tarball (Michael Petlan) [RHEL-77936]
  - perf vendor events arm64: Add FUJITSU-MONAKA PMU event (Michael Petlan) [RHEL-77936]
  - perf symbol-elf: Avoid a weak cxx_demangle_sym function (Michael Petlan) [RHEL-77936]
  - perf trace: Fix unaligned access for augmented args (Michael Petlan) [RHEL-77936]
  - perf test: Mark remaining probe tests as exclusive (Michael Petlan) [RHEL-77936]
  - perf tools: Remove dependency on libaudit (Michael Petlan) [RHEL-77936]
  - perf tools s390: Use generic syscall table scripts (Michael Petlan) [RHEL-77936]
  - perf tools powerpc: Use generic syscall table scripts (Michael Petlan) [RHEL-77936]
  - perf tools mips: Use generic syscall scripts (Michael Petlan) [RHEL-77936]
  - perf tools loongarch: Use syscall table (Michael Petlan) [RHEL-77936]
  - perf tools arm64: Use syscall table (Michael Petlan) [RHEL-77936]
  - perf tools parisc: Support syscall header (Michael Petlan) [RHEL-77936]
  - perf tools alpha: Support syscall header (Michael Petlan) [RHEL-77936]
  - perf tools x86: Use generic syscall scripts (Michael Petlan) [RHEL-77936]
  - perf tools xtensa: Support syscall header (Michael Petlan) [RHEL-77936]
  - perf tools sparc: Support syscall headers (Michael Petlan) [RHEL-77936]
  - perf tools sh: Support syscall headers (Michael Petlan) [RHEL-77936]
  - perf tools arm: Support syscall headers (Michael Petlan) [RHEL-77936]
  - perf tools csky: Support generic syscall headers (Michael Petlan) [RHEL-77936]
  - perf tools arc: Support generic syscall headers (Michael Petlan) [RHEL-77936]
  - perf tools: Create generic syscall table support (Michael Petlan) [RHEL-77936]
  - perf test cpumap: Avoid use-after-free following merge (Michael Petlan) [RHEL-77936]
  - perf llvm-add2line: Remove unused symbol_conf.h include (Michael Petlan) [RHEL-77936]
  - perf namespaces: Fixup the nsinfo__in_pidns() return type, its bool (Michael Petlan) [RHEL-77936]
  - perf jitdump: Fixup in_pidns member when java agent and 'perf record' are not in the same pidns (Michael Petlan) [RHEL-77936]
  - perf namespaces: Introduce nsinfo__set_in_pidns() (Michael Petlan) [RHEL-77936]
  - perf jitdump: Accept jitdump mmaps emitted from inside containers (Michael Petlan) [RHEL-77936]
  - perf machine: Don't ignore _etext when not a text symbol (Michael Petlan) [RHEL-77936]
  - perf maps: Fix display of kernel symbols (Michael Petlan) [RHEL-77936]
  - perf test: Update ftrace test to use --graph-opts (Michael Petlan) [RHEL-77936]
  - perf ftrace profile: Add --graph-opts option (Michael Petlan) [RHEL-77936]
  - perf ftrace: Display latency statistics at the end (Michael Petlan) [RHEL-77936]
  - perf evsel: Improve the evsel__open_strerror() for EBUSY (Michael Petlan) [RHEL-77936]
  - perf tests shell task_analyzer: Run this test exclusively (Michael Petlan) [RHEL-77936]
  - perf tests code-reading: Handle change in objdump output from binutils >= 2.41 on riscv (Michael Petlan) [RHEL-77936]
  - perf top: Don't complain about lack of vmlinux when not resolving some kernel samples (Michael Petlan) [RHEL-77936]
  - perf stat: Document and clarify outstate members (Michael Petlan) [RHEL-77936]
  - perf stat: Document and simplify interval timestamps (Michael Petlan) [RHEL-77936]
  - perf docs: Add documentation for --force-btf option (Michael Petlan) [RHEL-77936]
  - perf path: Remove unused is_executable_file() (Michael Petlan) [RHEL-77936]
  - perf values: Use evsel rather than evsel->idx (Michael Petlan) [RHEL-77936]
  - perf stream: Use evsel rather than evsel->idx (Michael Petlan) [RHEL-77936]
  - perf jevents: Provide better path information for broken JSON (Michael Petlan) [RHEL-77936]
  - perf lock contention: Handle slab objects in -L/--lock-filter option (Michael Petlan) [RHEL-77936]
  - perf lock contention: Resolve slab object name using BPF (Michael Petlan) [RHEL-77936]
  - perf lock contention: Run BPF slab cache iterator (Michael Petlan) [RHEL-77936]
  - perf lock contention: Add and use LCB_F_TYPE_MASK (Michael Petlan) [RHEL-77936]
  - perf script: Cache the output type (Michael Petlan) [RHEL-77936]
  - perf python: Correctly throw IndexError (Michael Petlan) [RHEL-77936]
  - perf python: Add __str__ and __repr__ functions to evsel (Michael Petlan) [RHEL-77936]
  - perf python: Add __str__ and __repr__ functions to evlist (Michael Petlan) [RHEL-77936]
  - perf python: Add parse_events function (Michael Petlan) [RHEL-77936]
  - perf build: Remove test library from python shared object (Michael Petlan) [RHEL-77936]
  - perf kwork: Make perf_kwork_add_work a callback (Michael Petlan) [RHEL-77936]
  - perf bench: Remove reference to cmd_inject (Michael Petlan) [RHEL-77936]
  - perf lock: Move common lock contention code to new file (Michael Petlan) [RHEL-77936]
  - perf env: Move arch errno function to only use in env (Michael Petlan) [RHEL-77936]
  - perf intel-pt: Remove stale build comment (Michael Petlan) [RHEL-77936]
  - perf x86: Define arch_fetch_insn in NO_AUXTRACE builds (Michael Petlan) [RHEL-77936]
  - perf script: Move perf_sample__sprintf_flags to trace-event-scripting.c (Michael Petlan) [RHEL-77936]
  - perf script: Move script_fetch_insn to trace-event-scripting.c (Michael Petlan) [RHEL-77936]
  - perf script: Move script_spec code to trace-event-scripting.c (Michael Petlan) [RHEL-77936]
  - perf stat: Move stat_config into config.c (Michael Petlan) [RHEL-77936]
  - perf script: Move find_scripts to browser/scripts.c (Michael Petlan) [RHEL-77936]
  - perf script: Use openat for directory iteration (Michael Petlan) [RHEL-77936]
  - perf kvm: Move functions used in util out of builtin (Michael Petlan) [RHEL-77936]
  - perf script: Move scripting_max_stack out of builtin (Michael Petlan) [RHEL-77936]
  - perf python: Remove unused #include (Michael Petlan) [RHEL-77936]
  - perf python: Constify variables and parameters (Michael Petlan) [RHEL-77936]
  - perf python: Remove python 2 scripting support (Michael Petlan) [RHEL-77936]
  - perf intel-pt: Add a test for pause / resume (Michael Petlan) [RHEL-77936]
  - perf intel-pt: Add documentation for pause / resume (Michael Petlan) [RHEL-77936]
  - perf intel-pt: Improve man page format (Michael Petlan) [RHEL-77936]
  - perf tools: Add missing_features for aux_start_paused, aux_pause, aux_resume (Michael Petlan) [RHEL-77936]
  - perf tools: Parse aux-action (Michael Petlan) [RHEL-77936]
  - perf tools: Add aux-action config term (Michael Petlan) [RHEL-77936]
  - perf tools: Add aux_start_paused, aux_pause and aux_resume (Michael Petlan) [RHEL-77936]
  - perf build: Minor improvement for linking libzstd (Michael Petlan) [RHEL-77936]
  - tools build: Add feature test for libelf with ZSTD (Michael Petlan) [RHEL-77936]
  - perf tools tests shell base_probe: Enhance print_overall_results to print summary information (Michael Petlan) [RHEL-77936]
  - perf tools arch powerpc: Add register mask for power11 PVR in extended regs (Michael Petlan) [RHEL-77936]
  - perf ftrace latency: Fix compiler error for clang 12 (Michael Petlan) [RHEL-77936]
  - tools build: Test for presence of libtraceevent and libtracefs in test-all.c (Michael Petlan) [RHEL-77936]
  - tools build feature: Don't set feature-libslang-include-subdir=1 if test-all.c builds (Michael Petlan) [RHEL-77936]
  - perf tests switch-tracking: Set this test to run exclusively (Michael Petlan) [RHEL-77936]
  - perf test: Introduce DEFINE_SUITE_EXCLUSIVE() (Michael Petlan) [RHEL-77936]
  - perf expr: Initialize is_test value in expr__ctx_new() (Michael Petlan) [RHEL-77936]
  - perf tests: Fix an incorrect type in append_script() (Michael Petlan) [RHEL-77936]
  - perf test: Remove duplicate word (Michael Petlan) [RHEL-77936]
  - perf string: Avoid undefined NULL+1 (Michael Petlan) [RHEL-77936]
  - perf vendor events arm64: Update N2/V2 events from source (Michael Petlan) [RHEL-77936]
  - perf tools: Avoid unaligned pointer operations (Michael Petlan) [RHEL-77936]
  - tools build feature: Don't set feature-libcap=1 if libcap-devel isn't available (Michael Petlan) [RHEL-77936]
  - tools build feature: Add some comments to explain the FEATURE_TESTS logic (Michael Petlan) [RHEL-77936]
  - perf bpf: Fix two memory leakages when calling perf_env__insert_bpf_prog_info() (Michael Petlan) [RHEL-77936]
  - perf header: Fix one memory leakage in process_bpf_prog_info() (Michael Petlan) [RHEL-77936]
  - perf header: Fix one memory leakage in process_bpf_btf() (Michael Petlan) [RHEL-77936]
  - perf jevents: Fix build issue in '*/' in event descriptions (Michael Petlan) [RHEL-77936]
  - perf test: Parse 'perf stat' Topdown events for aarch64 (Michael Petlan) [RHEL-77936]
  - perf probe: Replace unacceptable characters when generating event name (Michael Petlan) [RHEL-77936]
  - perf ftrace latency: Add --max-latency option (Michael Petlan) [RHEL-77936]
  - perf ftrace latency: Introduce --min-latency to narrow down into a latency range (Michael Petlan) [RHEL-77936]
  - perf ftrace latency: Introduce --bucket-range to ask for linear bucketing (Michael Petlan) [RHEL-77936]
  - perf ftrace latency: Pass ftrace pointer to histogram routines to pass more args (Michael Petlan) [RHEL-77936]
  - perf tests: Enable tests disabled due to tracepoint parsing (Michael Petlan) [RHEL-77936]
  - perf evsel: Allow evsel__newtp without libtraceevent (Michael Petlan) [RHEL-77936]
  - perf evsel: Add/use accessor for tp_format (Michael Petlan) [RHEL-77936]
  - perf trace-event: Always build trace-event-info.c (Michael Petlan) [RHEL-77936]
  - perf trace-event: Constify print arguments (Michael Petlan) [RHEL-77936]
  - tool api fs: Correctly encode errno for read/write open failures (Michael Petlan) [RHEL-77936]
  - perf env: Ensure failure broken topology file reads are always -1 encoded (Michael Petlan) [RHEL-77936]
  - perf btf: Make the sigtrap test helper to find a member by name widely available (Michael Petlan) [RHEL-77936]
  - perf arm-spe: Add support for SPE Data Source packet on AmpereOne (Michael Petlan) [RHEL-77936]
  - perf arm-spe: Prepare for adding data source packet implementations for other cores (Michael Petlan) [RHEL-77936]
  - perf cpumap: Add checking for reference counter (Michael Petlan) [RHEL-77936]
  - perf cpumap: Add more tests for CPU map merging (Michael Petlan) [RHEL-77936]
  - libperf cpumap: Refactor perf_cpu_map__merge() (Michael Petlan) [RHEL-77936]
  - perf config: Fix trival typo 'an' -> 'can' (Michael Petlan) [RHEL-77936]
  - perf script python: Improve physical mem type resolution (Michael Petlan) [RHEL-77936]
  - perf disasm: Return a proper error when not determining the file type (Michael Petlan) [RHEL-77936]
  - tools: Sync if_xdp.h uapi tooling header (Michael Petlan) [RHEL-77936]
  - perf docs: arm_spe: Document new discard mode (Michael Petlan) [RHEL-77936]
  - perf: arm_spe: Add format option for discard mode (Michael Petlan) [RHEL-77936]
  - perf: Switch back to struct platform_driver::remove() (Michael Petlan) [RHEL-77936]
  - perf/amd/ibs: Prevent leaking sensitive data to userspace (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Fix error handling in init_rapl_pmus() (Michael Petlan) [RHEL-77936]
  - perf/x86: Check data address for IBS software filter (Michael Petlan) [RHEL-77936]
  - perf/core: Fix perf_pmu_register() vs. perf_init_event() (Michael Petlan) [RHEL-77936]
  - perf/core: Fix pmus_lock vs. pmus_srcu ordering (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Add support for Intel Arrow Lake U (Michael Petlan) [RHEL-77936]
  - perf/x86/intel: Use better start period for frequency mode (Michael Petlan) [RHEL-77936]
  - perf/core: Fix low freq setting via IOC_PERIOD (Michael Petlan) [RHEL-77936]
  - perf/x86: Fix low freqency setting issue (Michael Petlan) [RHEL-77936]
  - perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (Michael Petlan) [RHEL-77936] {CVE-2025-21895}
  - perf/core: Add RCU read lock protection to perf_iterate_ctx() (Michael Petlan) [RHEL-77936] {CVE-2025-21889}
  - perf/x86/intel: Fix event constraints for LNC (Michael Petlan) [RHEL-77936]
  - perf/x86/intel: Ensure LBRs are disabled when a CPU is starting (Michael Petlan) [RHEL-77936]
  - perf/x86/intel: Fix ARCH_PERFMON_NUM_COUNTER_LEAF (Michael Petlan) [RHEL-77936]
  - perf/x86/intel: Clean up PEBS-via-PT on hybrid (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Fix the error checking order (Michael Petlan) [RHEL-77936]
  - perf: map pages in advance (Michael Petlan) [RHEL-77936]
  - perf/x86/intel/uncore: Support more units on Granite Rapids (Michael Petlan) [RHEL-77936]
  - perf/x86/intel/uncore: Clean up func_id (Michael Petlan) [RHEL-77936]
  - perf/x86/intel: Support RDPMC metrics clear mode (Michael Petlan) [RHEL-77936]
  - perf/x86: Relax privilege filter restriction on AMD IBS (Michael Petlan) [RHEL-77936]
  - perf/core: Export perf_exclude_event() (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Add core energy counter support for AMD CPUs (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Move the cntr_mask to rapl_pmus struct (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Remove the global variable rapl_msrs (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Modify the generic variable names to *_pkg* (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Add arguments to the init and cleanup functions (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Make rapl_model struct global (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Rename rapl_pmu variables (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Remove the cpu_to_rapl_pmu() function (Michael Petlan) [RHEL-77936]
  - x86/topology: Introduce topology_logical_core_id() (Michael Petlan) [RHEL-77936]
  - perf/x86/intel/ds: Simplify the PEBS records processing for adaptive PEBS (Michael Petlan) [RHEL-77936]
  - perf/x86/intel/ds: Factor out functions for PEBS records processing (Michael Petlan) [RHEL-77936]
  - perf/x86/intel/ds: Clarify adaptive PEBS processing (Michael Petlan) [RHEL-77936]
  - perf/core: Check sample_type in perf_sample_save_brstack (Michael Petlan) [RHEL-77936]
  - perf/core: Check sample_type in perf_sample_save_callchain (Michael Petlan) [RHEL-77936]
  - perf/core: Save raw sample data conditionally based on sample type (Michael Petlan) [RHEL-77936]
  - x86/cpu: Replace PEBS use of 'x86_cpu_desc' use with 'x86_cpu_id' (Michael Petlan) [RHEL-77936]
  - x86/cpu: Expose only stepping min/max interface (Michael Petlan) [RHEL-77936]
  - x86/cpu: Introduce new microcode matching helper (Michael Petlan) [RHEL-77936]
  - x86/cpu: Fix typo in x86_match_cpu()'s doc (Michael Petlan) [RHEL-77936]
  - redhat/spec: fix selftests dependencies (Gregory Bell) [RHEL-88228]


author: Julio Faracco <jfaracco@redhat.com> [6.12.0-93.el10]
changelog:
  - platform/x86/intel/pmt: allow user offset for PMT callbacks (José Expósito) [RHEL-85955]
  - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (José Expósito) [RHEL-85955]
  - jiffies: Define secs_to_jiffies() (José Expósito) [RHEL-85955]
  - ASoC: hdmi-codec: move no_capture_mute to struct hdmi_codec_pdata (José Expósito) [RHEL-85955]
  - ASoC: hdmi-codec: pass data to get_dai_id too (José Expósito) [RHEL-85955]
  - kthread: modify kernel-doc function name to match code (José Expósito) [RHEL-85955]
  - kthread: Fix return value on kzalloc() failure in kthread_affine_preferred() (José Expósito) [RHEL-85955]
  - rcu: Use kthread preferred affinity for RCU exp kworkers (José Expósito) [RHEL-85955]
  - treewide: Introduce kthread_run_worker[_on_cpu]() (José Expósito) [RHEL-85955]
  - kthread: Unify kthread_create_on_cpu() and kthread_create_worker_on_cpu() automatic format (José Expósito) [RHEL-85955]
  - rcu: Use kthread preferred affinity for RCU boost (José Expósito) [RHEL-85955]
  - kthread: Implement preferred affinity (José Expósito) [RHEL-85955]
  - mm: Create/affine kswapd to its preferred node (José Expósito) [RHEL-85955]
  - mm: Create/affine kcompactd to its preferred node (José Expósito) [RHEL-85955]
  - kthread: Default affine kthread to its preferred NUMA node (José Expósito) [RHEL-85955]
  - kthread: Make sure kthread hasn't started while binding it (José Expósito) [RHEL-85955]
  - sched,arm64: Handle CPU isolation on last resort fallback rq selection (José Expósito) [RHEL-85955]
  - arm64: Exclude nohz_full CPUs from 32bits el0 support (José Expósito) [RHEL-85955]
  - lib: test_objpool: Use kthread_run_on_cpu() (José Expósito) [RHEL-85955]
  - kallsyms: Use kthread_run_on_cpu() (José Expósito) [RHEL-85955]
  - soc/qman: test: Use kthread_run_on_cpu() (José Expósito) [RHEL-85955]
  - scsi: qedi: Use kthread_create_on_cpu() (José Expósito) [RHEL-85955]
  - scsi: bnx2i: Use kthread_create_on_cpu() (José Expósito) [RHEL-85955]
  - scsi: bnx2fc: Use kthread_create_on_cpu() (José Expósito) [RHEL-85955]
  - firmware: stratix10-svc: Use kthread_run_on_cpu() (José Expósito) [RHEL-85955]
  - arm/bL_switcher: Use kthread_run_on_cpu() (José Expósito) [RHEL-85955]
  - cgroup/dmem: Don't open-code css_for_each_descendant_pre (José Expósito) [RHEL-85955]
  - cgroup/rdma: Drop bogus PAGE_COUNTER select (José Expósito) [RHEL-85955]
  - doc/cgroup: Fix title underline length (José Expósito) [RHEL-85955]
  - drm/doc: Include new drm-compute documentation (José Expósito) [RHEL-85955]
  - cgroup/dmem: Fix parameters documentation (José Expósito) [RHEL-85955]
  - cgroup/dmem: Select PAGE_COUNTER (José Expósito) [RHEL-85955]
  - kernel/cgroup: Add "dmem" memory accounting cgroup (José Expósito) [RHEL-85955]
  - redhat/configs: Add new configs from drm 6.14 backport (José Expósito) [RHEL-85955]
  - media: uapi: Add MEDIA_BUS_FMT_RGB101010_1X7X5_{SPWG, JEIDA} (José Expósito) [RHEL-85955]
  - fbdev: Fix recursive dependencies wrt BACKLIGHT_CLASS_DEVICE (José Expósito) [RHEL-85955]
  - drm/xe: remove unused xe_pciids.h harder, add missing PCI ID (José Expósito) [RHEL-85955]
  - drm/xe: switch to common PCI ID macros (José Expósito) [RHEL-85955]
  - drm/xe/ptl: Add PTL platform definition (José Expósito) [RHEL-85955]
  - drm/intel/pciids: rename i915_pciids.h to just pciids.h (José Expósito) [RHEL-85955]
  - drm/i915/pciids: add PVC PCI ID macros (José Expósito) [RHEL-85955]
  - drm/i915/xe3lpd: reuse xe2lpd definition (José Expósito) [RHEL-85955]
  - drm/i915/pciids: separate ARL and MTL PCI IDs (José Expósito) [RHEL-85955]
  - drm/i915/pciids: use designated initializers in INTEL_VGA_DEVICE() (José Expósito) [RHEL-85955]
  - fs: port files to file_ref (José Expósito) [RHEL-85955]
  - fs: add file_ref (José Expósito) [RHEL-85955]
  - fs: protect backing files with rcu (José Expósito) [RHEL-85955]
  - redhat/configs: Add new configs from drm 6.13 backport (José Expósito) [RHEL-85955]
  - vmxnet3: unregister xdp rxq info in the reset path (CKI Backport Bot) [RHEL-92474]
  - ionic: add module eeprom channel data to ionic_if and ethtool (Mohammad Heib) [RHEL-88152]
  - ionic: support ethtool get_module_eeprom_by_page (Mohammad Heib) [RHEL-88152]
  - ionic: extend the QSFP module sprom for more pages (Mohammad Heib) [RHEL-88152]
  - ionic: use ee->offset when returning sprom data (Mohammad Heib) [RHEL-88152]
  - ionic: no double destroy workqueue (Mohammad Heib) [RHEL-88152]
  - ionic: Fix netdev notifier unregister on failure (Mohammad Heib) [RHEL-88152]
  - ionic: remove the unused nb_work (Mohammad Heib) [RHEL-88152]
  - ionic: add support for QSFP_PLUS_CMIS (Mohammad Heib) [RHEL-88152]
  - ionic: add speed defines for 200G and 400G (Mohammad Heib) [RHEL-88152]
  - ionic: Translate IONIC_RC_ENOSUPP to EOPNOTSUPP (Mohammad Heib) [RHEL-88152]
  - ionic: Use VLAN_ETH_HLEN when possible (Mohammad Heib) [RHEL-88152]
  - ionic: add asic codes to firmware interface file (Mohammad Heib) [RHEL-88152]
  - ext4: goto right label 'out_mmap_sem' in ext4_setattr() (Brian Foster) [RHEL-85400]
  - jbd2: flush filesystem device before updating tail sequence (Brian Foster) [RHEL-85400]
  - jbd2: increase IO priority for writing revoke records (Brian Foster) [RHEL-85400]
  - jbd2: Fix comment describing journal_init_common() (Brian Foster) [RHEL-85400]
  - ext4: prevent an infinite loop in the lazyinit thread (Brian Foster) [RHEL-85400]
  - ext4: use struct_size() to improve ext4_htree_store_dirent() (Brian Foster) [RHEL-85400]
  - ext4: annotate struct fname with __counted_by() (Brian Foster) [RHEL-85400]
  - ext4: use str_yes_no() helper function (Brian Foster) [RHEL-85400]
  - ext4: prevent delalloc to nodelalloc on remount (Brian Foster) [RHEL-85400]
  - jbd2: make b_frozen_data allocation always succeed (Brian Foster) [RHEL-85400]
  - ext4: cleanup variable name in ext4_fc_del() (Brian Foster) [RHEL-85400]
  - ext4: use string choices helpers (Brian Foster) [RHEL-85400]
  - jbd2: remove the 'success' parameter from the jbd2_do_replay() function (Brian Foster) [RHEL-85400]
  - jbd2: remove useless 'block_error' variable (Brian Foster) [RHEL-85400]
  - jbd2: factor out jbd2_do_replay() (Brian Foster) [RHEL-85400]
  - jbd2: refactor JBD2_COMMIT_BLOCK process in do_one_pass() (Brian Foster) [RHEL-85400]
  - jbd2: unified release of buffer_head in do_one_pass() (Brian Foster) [RHEL-85400]
  - jbd2: remove redundant judgments for check v1 checksum (Brian Foster) [RHEL-85400]
  - ext4: use ERR_CAST to return an error-valued pointer (Brian Foster) [RHEL-85400]
  - ext4: partial zero eof block on unaligned inode size extension (Brian Foster) [RHEL-85400]
  - ext4: disambiguate the return value of ext4_dio_write_end_io() (Brian Foster) [RHEL-85400]
  - ext4: pass write-hint for buffered IO (Brian Foster) [RHEL-85400]
  - ext4: fix race in buffer_head read fault injection (Brian Foster) [RHEL-85400]
  - ext4: don't pass full mapping flags to ext4_es_insert_extent() (Brian Foster) [RHEL-85400]
  - ext4: mark ctx_*_flags() with __maybe_unused (Brian Foster) [RHEL-85400]
  - ext4: return error on syncfs after shutdown (Brian Foster) [RHEL-85400]
  - fs: ext4: Don't use CMA for buffer_head (Brian Foster) [RHEL-85400]
  - ext4: simplify if condition (Brian Foster) [RHEL-85400]
  - ext4: fix FS_IOC_GETFSMAP handling (Brian Foster) [RHEL-85400]
  - ext4: WARN if a full dir leaf block has only one dentry (Brian Foster) [RHEL-85400]
  - ext4: show the default enabled prefetch_block_bitmaps option (Brian Foster) [RHEL-85400]
  - ext4: Do not fallback to buffered-io for DIO atomic write (Brian Foster) [RHEL-85400]
  - ext4: Support setting FMODE_CAN_ATOMIC_WRITE (Brian Foster) [RHEL-85400]
  - ext4: Check for atomic writes support in write iter (Brian Foster) [RHEL-85400]
  - ext4: Add statx support for atomic writes (Brian Foster) [RHEL-85400]
  - ext4: avoid remount errors with 'abort' mount option (Brian Foster) [RHEL-85400]
  - ext4: supress data-race warnings in ext4_free_inodes_{count,set}() (Brian Foster) [RHEL-85400]
  - ext4: Call ext4_journal_stop(handle) only once in ext4_dio_write_iter() (Brian Foster) [RHEL-85400]
  - module: Convert symbol namespace to string literal (Eder Zulian) [RHEL-78707]
  - iommu/vt-d: Fix possible circular locking dependency (Eder Zulian) [RHEL-78701]
  - iommu/amd: Fix header file (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Fix suspicious RCU usage (Eder Zulian) [RHEL-78701] {CVE-2025-21876}
  - iommu/vt-d: Remove device comparison in context_setup_pass_through_cb (Eder Zulian) [RHEL-78701]
  - iommu/amd: Preserve default DTE fields when updating Host Page Table Root (Eder Zulian) [RHEL-78701]
  - redhat/configs: Remove CONFIG_DMA_API_DEBUG_SG (Eder Zulian) [RHEL-78701]
  - powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW (Eder Zulian) [RHEL-78701] {CVE-2024-57999}
  - scatterlist: fix a typo (Eder Zulian) [RHEL-78701]
  - docs/core-api: swiotlb: fix typos (Eder Zulian) [RHEL-78701]
  - redhat/configs: enable ARM_SMMU_MMU_500_CPRE_ERRATA (Eder Zulian) [RHEL-78702]
  - redhat/configs: Enable CONFIG_ARM_SMMU_V3_IOMMUFD (Eder Zulian) [RHEL-78702]
  - iommu/vt-d: Make intel_iommu_drain_pasid_prq() cover faults for RID (Eder Zulian) [RHEL-78701]
  - iommu: Fix a spelling error (Eder Zulian) [RHEL-78701]
  - iommu/amd: Expicitly enable CNTRL.EPHEn bit in resume path (Eder Zulian) [RHEL-78701]
  - iommu: Fix potential memory leak in iopf_queue_remove_device() (Eder Zulian) [RHEL-78701] {CVE-2025-21770}
  - iommu/hyper-v: Don't assume cpu_possible_mask is dense (Eder Zulian) [RHEL-78701]
  - iommufd: Keep OBJ/IOCTL lists in an alphabetical order (Eder Zulian) [RHEL-78707]
  - iommufd: Deal with IOMMU_HWPT_FAULT_ID_VALID in iommufd core (Eder Zulian) [RHEL-78707]
  - iommufd/selftest: Remove domain_alloc_paging() (Eder Zulian) [RHEL-78707]
  - iommu/amd: Fully decode all combinations of alloc_paging_flags (Eder Zulian) [RHEL-78701]
  - iommu/amd: Move the nid to pdom_setup_pgtable() (Eder Zulian) [RHEL-78701]
  - iommu/amd: Change amd_iommu_pgtable to use enum protection_domain_mode (Eder Zulian) [RHEL-78701]
  - iommu/amd: Remove type argument from do_iommu_domain_alloc() and related (Eder Zulian) [RHEL-78701]
  - iommu/amd: Remove dev == NULL checks (Eder Zulian) [RHEL-78701]
  - iommu/amd: Remove domain_alloc() (Eder Zulian) [RHEL-78701]
  - iommu/amd: Remove unused amd_iommu_domain_update() (Eder Zulian) [RHEL-78701]
  - iommu/amd: remove return value of amd_iommu_detect (Eder Zulian) [RHEL-78701]
  - iommu/amd: Remove amd_iommu_apply_erratum_63() (Eder Zulian) [RHEL-75907]
  - iommu/amd: Lock DTE before updating the entry with WRITE_ONCE() (Eder Zulian) [RHEL-75907]
  - iommu/amd: Modify clear_dte_entry() to avoid in-place update (Eder Zulian) [RHEL-75907]
  - iommu/amd: Introduce helper function get_dte256() (Eder Zulian) [RHEL-75907]
  - iommu/amd: Modify set_dte_entry() to use 256-bit DTE helpers (Eder Zulian) [RHEL-75907]
  - iommu/amd: Introduce helper function to update 256-bit DTE (Eder Zulian) [RHEL-75907]
  - iommu/amd: Introduce struct ivhd_dte_flags to store persistent DTE flags (Eder Zulian) [RHEL-75907]
  - iommu/amd: Disable AMD IOMMU if CMPXCHG16B feature is not supported (Eder Zulian) [RHEL-75907]
  - iommu/amd: Misc ACPI IVRS debug info clean up (Eder Zulian) [RHEL-75907]
  - iommu/vt-d: Link cache tags of same iommu unit together (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Draining PRQ in sva unbind path when FPD bit set (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Remove iommu cap audit (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Remove domain_alloc_paging() (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (Eder Zulian) [RHEL-78701] {CVE-2025-21833}
  - iommu: Use str_enable_disable-like helpers (Eder Zulian) [RHEL-78701]
  - iommu: Remove the remove_dev_pasid op (Eder Zulian) [RHEL-78701]
  - iommu/amd: Make the blocked domain support PASID (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Make the blocked domain support PASID (Eder Zulian) [RHEL-78701]
  - iommu/arm-smmu-v3: Make the blocked domain support PASID (Eder Zulian) [RHEL-78701]
  - iommu: Detaching pasid by attaching to the blocked_domain (Eder Zulian) [RHEL-78701]
  - iommu: Consolidate the ops->remove_dev_pasid usage into a helper (Eder Zulian) [RHEL-78701]
  - iommu: Prevent pasid attach if no ops->remove_dev_pasid (Eder Zulian) [RHEL-78701]
  - iommu/arm-smmu-v3: Add missing #include of linux/string_choices.h (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu-v3: Use str_read_write helper w/ logs (Eder Zulian) [RHEL-78702]
  - iommu/io-pgtable-arm: Add way to debug pgtable walk (Eder Zulian) [RHEL-78702]
  - iommu/io-pgtable-arm: Re-use the pgtable walk for iova_to_phys (Eder Zulian) [RHEL-78702]
  - iommu/io-pgtable-arm: Make pgtable walker more generic (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu: Add ACTLR data and support for qcom_smmu_500 (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu: Introduce ACTLR custom prefetcher settings (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu: Add support for PRR bit setup (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu: Refactor qcom_smmu structure to include single pointer (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu: Re-enable context caching in smmu reset operation (Eder Zulian) [RHEL-78702]
  - iommu/tegra241-cmdqv: Read SMMU IDR1.CMDQS instead of hardcoding (Eder Zulian) [RHEL-78702]
  - iommu/io-pgtable-arm: Fix cfg reading in arm_lpae_concat_mandatory() (Eder Zulian) [RHEL-78702]
  - iommu/io-pgtable-arm: Add coverage for different OAS in selftest (Eder Zulian) [RHEL-78702]
  - iommu/io-pgtable-arm: Fix stage-2 concatenation with 16K (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu-v3: Remove domain_alloc_paging() (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu-v3: Make domain_alloc_paging_flags() directly determine the S1/S2 (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu-v3: Remove arm_smmu_domain_finalise() during attach (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu-v3: Document SVA interaction with new pagetable features (Eder Zulian) [RHEL-78702]
  - iommu: Manage driver probe deferral better (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu-v3: Clean up more on probe failure (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu: Retire probe deferral workaround (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu: Make instance lookup robust (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmuv3: Update comments about ATS and bypass (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu-v3: Log better event records (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu-v3: Introduce struct arm_smmu_event (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu-qcom: add sdm670 adreno iommu compatible (Eder Zulian) [RHEL-78702]
  - iommu/vt-d: Avoid draining PRQ in sva mm release path (Eder Zulian) [RHEL-78701]
  - iommu/amd: Add lockdep asserts for domain->dev_list (Eder Zulian) [RHEL-78701]
  - iommu/amd: Put list_add/del(dev_data) back under the domain->lock (Eder Zulian) [RHEL-78701]
  - iommu/arm-smmu-v3: Improve uAPI comment for IOMMU_HW_INFO_TYPE_ARM_SMMUV3 (Eder Zulian) [RHEL-78702]
  - iommufd/selftest: Cover IOMMU_FAULT_QUEUE_ALLOC in iommufd_fail_nth (Eder Zulian) [RHEL-78707]
  - iommufd: Fix typos in kernel-doc comments (Eder Zulian) [RHEL-78707]
  - dma-debug: fix physical address calculation for struct dma_debug_entry (Eder Zulian) [RHEL-78701]
  - iommu: Rename ops->domain_alloc_user() to domain_alloc_paging_flags() (Eder Zulian) [RHEL-78701]
  - iommu: Add ops->domain_alloc_nested() (Eder Zulian) [RHEL-78701]
  - iommu/amd: Improve amd_iommu_release_device() (Eder Zulian) [RHEL-78701]
  - iommu/amd: Add ops->release_domain (Eder Zulian) [RHEL-78701]
  - iommu/amd: Reorder attach device code (Eder Zulian) [RHEL-78701]
  - iommu/amd: Convert dev_data lock from spinlock to mutex (Eder Zulian) [RHEL-78701]
  - iommu/amd: Rearrange attach device code (Eder Zulian) [RHEL-78701]
  - iommu/amd: Reduce domain lock scope in attach device path (Eder Zulian) [RHEL-78701]
  - iommu/amd: Do not detach devices in domain free path (Eder Zulian) [RHEL-78701]
  - iommu/amd: Remove unused amd_iommus variable (Eder Zulian) [RHEL-78701]
  - iommu/amd: xarray to track protection_domain->iommu list (Eder Zulian) [RHEL-78701]
  - iommu/amd: Remove protection_domain.dev_cnt variable (Eder Zulian) [RHEL-78701]
  - iommu/amd: Use ida interface to manage protection domain ID (Eder Zulian) [RHEL-78701]
  - iommu/amd: Fix corruption when mapping large pages from 0 (Eder Zulian) [RHEL-78701]
  - iommu/amd: Do not try copy old DTE resume path (Eder Zulian) [RHEL-78701]
  - iommu/amd: Use atomic64_inc_return() in iommu.c (Eder Zulian) [RHEL-78701]
  - iommu: Make set_dev_pasid op support domain replacement (Eder Zulian) [RHEL-78701]
  - iommu/arm-smmu-v3: Make set_dev_pasid() op support replace (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Add set_dev_pasid callback for nested domain (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Make identity_domain_set_dev_pasid() to handle domain replacement (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Make intel_svm_set_dev_pasid() support domain replacement (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Limit intel_iommu_set_dev_pasid() for paging domain (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Make intel_iommu_set_dev_pasid() to handle domain replacement (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Add iommu_domain_did() to get did (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Consolidate the struct dev_pasid_info add/remove (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Add pasid replace helpers (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Refactor the pasid setup helpers (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Add a helper to flush cache for updating present pasid entry (Eder Zulian) [RHEL-78701]
  - iommu: Pass old domain to set_dev_pasid op (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Drain PRQs when domain removed from RID (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Drop pasid requirement for prq initialization (Eder Zulian) [RHEL-78701]
  - iommufd: Enable PRI when doing the iommufd_hwpt_alloc (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Move IOMMU_IOPF into INTEL_IOMMU (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Remove the pasid present check in prq_event_thread (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Separate page request queue from SVM (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Drop s1_pgtbl from dmar_domain (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Remove unused dmar_msi_read (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Increase buffer size for device name (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Use PCI_DEVID() macro (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Refine intel_iommu_domain_alloc_user() (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Refactor first_level_by_default() (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Remove domain_update_iommu_superpage() (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Remove domain_update_iommu_cap() (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Enhance compatibility check for paging domain attach (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Remove unused domain_alloc callback (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Add domain_alloc_paging support (Eder Zulian) [RHEL-78701]
  - iommu/iova: Fix typo 'adderss' (Eder Zulian) [RHEL-78701]
  - iommu: Restore iommu_flush_iotlb_all() (Eder Zulian) [RHEL-78701]
  - iommu: Fix prototype of iommu_paging_domain_alloc_flags() (Eder Zulian) [RHEL-78701]
  - iommu: Create __iommu_alloc_identity_domain() (Eder Zulian) [RHEL-78701]
  - iommu: Put domain allocation in __iommu_group_alloc_blocking_domain() (Eder Zulian) [RHEL-78701]
  - iommu/amd: Implement global identity domain (Eder Zulian) [RHEL-78701]
  - iommu/amd: Enhance amd_iommu_domain_alloc_user() (Eder Zulian) [RHEL-78701]
  - iommu/amd: Pass page table type as param to pdom_setup_pgtable() (Eder Zulian) [RHEL-78701]
  - iommu/amd: Separate page table setup from domain allocation (Eder Zulian) [RHEL-78701]
  - iommu/amd: Move V2 page table support check to early_amd_iommu_init() (Eder Zulian) [RHEL-78701]
  - iommu/amd: Add helper function to check GIOSUP/GTSUP (Eder Zulian) [RHEL-78701]
  - iommu/arm-smmu-v3: Enhance domain_alloc_user() to allocate PASID capable domain (Eder Zulian) [RHEL-78701]
  - iommu: Add new flag to explictly request PASID capable domain (Eder Zulian) [RHEL-78701]
  - iommu: Introduce iommu_paging_domain_alloc_flags() (Eder Zulian) [RHEL-78701]
  - iommu: Refactor __iommu_domain_alloc() (Eder Zulian) [RHEL-78701]
  - iommu: Remove iommu_domain_alloc() (Eder Zulian) [RHEL-78701]
  - drm/nouveau/tegra: Use iommu_paging_domain_alloc() (Eder Zulian) [RHEL-78701]
  - media: nvidia: tegra: Use iommu_paging_domain_alloc() (Eder Zulian) [RHEL-78701]
  - remoteproc: Use iommu_paging_domain_alloc() (Eder Zulian) [RHEL-78701]
  - iommu: Remove useless flush from iommu_create_device_direct_mappings() (Eder Zulian) [RHEL-78701]
  - iommu/sysfs: constify the class struct (Eder Zulian) [RHEL-78701]
  - iommu: Remove iommu_present() (Eder Zulian) [RHEL-78701]
  - iommu: Reorganize kerneldoc parameter names (Eder Zulian) [RHEL-78701]
  - iommu: Make bus_iommu_probe() static (Eder Zulian) [RHEL-78701]
  - iommu: Add a kdoc to iommu_unmap() (Eder Zulian) [RHEL-78701]
  - iommu/io-pgtable-arm: Remove split on unmap behavior (Eder Zulian) [RHEL-78701]
  - dt-bindings: arm-smmu: document QCS615 APPS SMMU (Eder Zulian) [RHEL-78701]
  - dt-bindings: iommu: arm,smmu: Add Qualcomm SAR2130P compatible (Eder Zulian) [RHEL-78701]
  - iommu/io-pgtable-arm: Add self test for the last page in the IAS (Eder Zulian) [RHEL-78701]
  - iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables (Eder Zulian) [RHEL-78701]
  - iommu/arm-smmu-v3: Import IOMMUFD module namespace (Eder Zulian) [RHEL-78707]
  - iommufd: IOMMU_IOAS_CHANGE_PROCESS selftest (Eder Zulian) [RHEL-78707]
  - iommufd: Add IOMMU_IOAS_CHANGE_PROCESS (Eder Zulian) [RHEL-78707]
  - iommufd: Lock all IOAS objects (Eder Zulian) [RHEL-78707]
  - iommufd: Export do_update_pinned (Eder Zulian) [RHEL-78707]
  - iommu/arm-smmu-v3: Support IOMMU_HWPT_INVALIDATE using a VIOMMU object (Eder Zulian) [RHEL-73584]
  - iommu/arm-smmu-v3: Allow ATS for IOMMU_DOMAIN_NESTED (Eder Zulian) [RHEL-73584]
  - iommu/arm-smmu-v3: Use S2FWB for NESTED domains (Eder Zulian) [RHEL-73584]
  - iommu/arm-smmu-v3: Support IOMMU_DOMAIN_NESTED (Eder Zulian) [RHEL-73584]
  - iommu/arm-smmu-v3: Support IOMMU_VIOMMU_ALLOC (Eder Zulian) [RHEL-73584]
  - iommu/arm-smmu-v3: Expose the arm_smmu_attach interface (Eder Zulian) [RHEL-73584]
  - iommu/arm-smmu-v3: Implement IOMMU_HWPT_ALLOC_NEST_PARENT (Eder Zulian) [RHEL-73584]
  - iommu/arm-smmu-v3: Support IOMMU_GET_HW_INFO via struct arm_smmu_hw_info (Eder Zulian) [RHEL-73584]
  - iommu/arm-smmu-v3: Report IOMMU_CAP_ENFORCE_CACHE_COHERENCY for CANWBS (Eder Zulian) [RHEL-73584]
  - ACPI/IORT: Support CANWBS memory access flag (Eder Zulian) [RHEL-73584]
  - ACPICA: IORT: Update for revision E.f (Eder Zulian) [RHEL-73584]
  - vfio: Remove VFIO_TYPE1_NESTING_IOMMU (Eder Zulian) [RHEL-73584]
  - Documentation: userspace-api: iommufd: Update vDEVICE (Eder Zulian) [RHEL-73591]
  - iommufd/selftest: Add vIOMMU coverage for IOMMU_HWPT_INVALIDATE ioctl (Eder Zulian) [RHEL-73591]
  - iommufd/selftest: Add IOMMU_TEST_OP_DEV_CHECK_CACHE test command (Eder Zulian) [RHEL-73591]
  - iommufd/selftest: Add mock_viommu_cache_invalidate (Eder Zulian) [RHEL-73591]
  - iommufd/viommu: Add iommufd_viommu_find_dev helper (Eder Zulian) [RHEL-73591]
  - iommu: Add iommu_copy_struct_from_full_user_array helper (Eder Zulian) [RHEL-73591]
  - iommufd: Allow hwpt_id to carry viommu_id for IOMMU_HWPT_INVALIDATE (Eder Zulian) [RHEL-73591]
  - iommu/viommu: Add cache_invalidate to iommufd_viommu_ops (Eder Zulian) [RHEL-73591]
  - iommufd/selftest: Add IOMMU_VDEVICE_ALLOC test coverage (Eder Zulian) [RHEL-73591]
  - iommufd/viommu: Add IOMMUFD_OBJ_VDEVICE and IOMMU_VDEVICE_ALLOC ioctl (Eder Zulian) [RHEL-73591]
  - Documentation: userspace-api: iommufd: Update vIOMMU (Eder Zulian) [RHEL-73589]
  - iommufd/selftest: Add IOMMU_VIOMMU_ALLOC test coverage (Eder Zulian) [RHEL-73589]
  - iommufd/selftest: Add IOMMU_VIOMMU_TYPE_SELFTEST (Eder Zulian) [RHEL-73589]
  - iommufd/selftest: Add refcount to mock_iommu_device (Eder Zulian) [RHEL-73589]
  - iommufd/selftest: Prepare for mock_viommu_alloc_domain_nested() (Eder Zulian) [RHEL-73589]
  - iommufd/selftest: Add container_of helpers (Eder Zulian) [RHEL-73589]
  - iommufd: Allow pt_id to carry viommu_id for IOMMU_HWPT_ALLOC (Eder Zulian) [RHEL-73589]
  - iommufd: Add alloc_domain_nested op to iommufd_viommu_ops (Eder Zulian) [RHEL-73589]
  - iommufd/viommu: Add IOMMU_VIOMMU_ALLOC ioctl (Eder Zulian) [RHEL-73589]
  - iommufd: Verify object in iommufd_object_finalize/abort() (Eder Zulian) [RHEL-73589]
  - iommufd: Introduce IOMMUFD_OBJ_VIOMMU and its related struct (Eder Zulian) [RHEL-73589]
  - iommufd: Move _iommufd_object_alloc helper to a sharable file (Eder Zulian) [RHEL-73589]
  - iommufd: Move struct iommufd_object to public iommufd header (Eder Zulian) [RHEL-73589]
  - iommufd: Allow fault reporting for non-PRI PCI devices (Eder Zulian) [RHEL-78707]
  - iommufd: Selftest coverage for IOMMU_IOAS_MAP_FILE (Eder Zulian) [RHEL-78707]
  - iommufd: File mappings for mdev (Eder Zulian) [RHEL-78707]
  - iommufd: Add IOMMU_IOAS_MAP_FILE (Eder Zulian) [RHEL-78707]
  - iommufd: pfn_reader for file mappings (Eder Zulian) [RHEL-78707]
  - iommufd: Folio subroutines (Eder Zulian) [RHEL-78707]
  - iommufd: pfn_reader local variables (Eder Zulian) [RHEL-78707]
  - iommufd: Generalize iopt_pages address (Eder Zulian) [RHEL-78707]
  - iommufd: Rename uptr in iopt_alloc_iova() (Eder Zulian) [RHEL-78707]
  - mm/gup: Add folio_add_pins() (Eder Zulian) [RHEL-78701]
  - Documentation: userspace-api: iommufd: Update HWPT_PAGING and HWPT_NESTED (Eder Zulian) [RHEL-78701]
  - dma-mapping: fix swapped dir/flags arguments to trace_dma_alloc_sgt_err (Eder Zulian) [RHEL-78701]
  - dma-mapping: drop unneeded includes from dma-mapping.h (Eder Zulian) [RHEL-78701]
  - dma-mapping: trace more error paths (Eder Zulian) [RHEL-78701]
  - dma-mapping: use trace_dma_alloc for dma_alloc* instead of using trace_dma_map (Eder Zulian) [RHEL-78701]
  - dma-mapping: trace dma_alloc/free direction (Eder Zulian) [RHEL-78701]
  - dma-mapping: use macros to define events in a class (Eder Zulian) [RHEL-78701]
  - dma-mapping: remove an outdated comment from dma-map-ops.h (Eder Zulian) [RHEL-78701]
  - dma-debug: remove DMA_API_DEBUG_SG (Eder Zulian) [RHEL-78701]
  - dma-debug: store a phys_addr_t in struct dma_debug_entry (Eder Zulian) [RHEL-78701]
  - dma-debug: fix a possible deadlock on radix_lock (Eder Zulian) [RHEL-78701] {CVE-2024-47143}
  - selftests/bpf: Add launch time request to xdp_hw_metadata (Felix Maurer) [RHEL-83555]
  - xsk: Add launch time hardware offload support to XDP Tx metadata (Felix Maurer) [RHEL-83555]
  - firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache) (Jaroslav Kysela) [RHEL-93495]
  - firmware: cs_dsp: Fix OOB memory read access in KUnit test (wmfw info) (Jaroslav Kysela) [RHEL-93495]
  - firmware: cs_dsp: Fix OOB memory read access in KUnit test (Jaroslav Kysela) [RHEL-93495]
  - s390/vfio-ap: Fix no AP queue sharing allowed message written to kernel log (Thomas Huth) [RHEL-85180]
  - KVM: s390: Don't use %pK through debug printing (Thomas Huth) [RHEL-85180]
  - KVM: s390: Don't use %pK through tracepoints (Thomas Huth) [RHEL-85180]
  - s390/vfio-ap: Notify userspace that guest's AP config changed when mdev removed (Thomas Huth) [RHEL-85180]
  - s390/vfio-ap: Signal eventfd when guest AP configuration is changed (Thomas Huth) [RHEL-85180]
  - s390/vfio-ccw: Make mdev_types not look like a fake flex array (Thomas Huth) [RHEL-85180]
  - s390/vfio-ap: Make mdev_types not look like a fake flex array (Thomas Huth) [RHEL-85180]
  - s390/vfio-ap: Fix indentation in vfio_ap_mdev_ioctl() (Thomas Huth) [RHEL-85180]
  - KVM: s390: vsie: stop using "struct page" for vsie page (Thomas Huth) [RHEL-85180]
  - KVM: s390: vsie: stop messing with page refcount (Thomas Huth) [RHEL-85180]
  - KVM: s390: vsie: stop using page->index (Thomas Huth) [RHEL-85180]
  - KVM: s390: vsie: fix some corner-cases when grabbing vsie pages (Thomas Huth) [RHEL-85180]
  - KVM: s390: Reject KVM_SET_GSI_ROUTING on ucontrol VMs (Thomas Huth) [RHEL-85180]
  - KVM: s390: Reject setting flic pfault attributes on ucontrol VMs (Thomas Huth) [RHEL-85180]
  - KVM: s390: Increase size of union sca_utility to four bytes (Thomas Huth) [RHEL-85180]
  - KVM: s390: Remove one byte cmpxchg() usage (Thomas Huth) [RHEL-85180]
  - KVM: s390: Use try_cmpxchg() instead of cmpxchg() loops (Thomas Huth) [RHEL-85180]
  - s390/vfio-ap: Remove gmap_convert_to_secure() from vfio_ap_ops (Thomas Huth) [RHEL-85180]
  - s390/vfio-ap: Switch over to sysfs_emit() (Thomas Huth) [RHEL-85180]
  - s390/mm: Convert pgste_val() into function (Thomas Huth) [RHEL-85180]
  - s390/mm: Convert pgprot_val() into function (Thomas Huth) [RHEL-85180]
  - s390/mm: Use pgprot_val() instead of open coding (Thomas Huth) [RHEL-85180]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-94.el10]
changelog:
  - qed: remove cast to pointers passed to kfree (John Meneghini) [RHEL-72644]
  - net: qed: make 'qed_ll2_ops_pass' as __maybe_unused (John Meneghini) [RHEL-72644]
  - net: qed: fix typos (John Meneghini) [RHEL-72644]
  - scsi: Constify struct pci_error_handlers (John Meneghini) [RHEL-72644]
  - scsi: qedf: Constify 'struct bin_attribute' (John Meneghini) [RHEL-72644]
  - scsi: Constify struct pci_device_id (John Meneghini) [RHEL-72644]
  - qed: fix possible uninit pointer read in qed_mcp_nvm_info_populate() (John Meneghini) [RHEL-72644]
  - net/qed: allow old cards not supporting "num_images" to work (John Meneghini) [RHEL-72644]
  - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (John Meneghini) [RHEL-72644]
  - scsi: qedf: Remove dead code (John Meneghini) [RHEL-72644]
  - net: qlogic: use ethtool string helpers (John Meneghini) [RHEL-72644]
  - tools/net/ynl: ethtool: fix crash when Hardware Clock info is missing (Hangbin Liu) [RHEL-78772]
  - crypto: iaa - Do not clobber req->base.data (Vladis Dronov) [RHEL-87766]
  - crypto: iaa - Move compression CRC into request object (Vladis Dronov) [RHEL-87766]
  - crypto: iaa - Test the correct request flag (Vladis Dronov) [RHEL-87766]
  - MAINTAINERS: Add Vinicius Gomes to MAINTAINERS for IAA Crypto (Vladis Dronov) [RHEL-87766]
  - crypto: iaa - Fix IAA disabling that occurs when sync_mode is set to 'async' (Vladis Dronov) [RHEL-87766]


author: Julien Rische <jrische@redhat.com> - 1.21.2-1
changelog:
  - New upstream version (1.21.2)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
    Resolves: rhbz#2229113
  - Make tests compatible with Python 3.12
    Resolves: rhbz#2224013


author: Julien Rische <jrische@redhat.com> - 1.21.2-3
changelog:
  - Fix double free in klist's show_ccache()
    Resolves: rhbz#2257301
  - Store krb5-tests files in architecture-specific directories
    Resolves: rhbz#2244601


author: Julien Rische <jrische@redhat.com> - 1.21.3-1
changelog:
  - New upstream version (1.21.3)
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45387 RHEL-45378
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-47284
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-47287
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-47285
  - Make TCP waiting time configurable
    Resolves: RHEL-47278


author: Julien Rische <jrische@redhat.com> - 1.21.3-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55427
  - Fix various issues detected by static analysis
    Resolves: RHEL-45165
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-56070


author: Julien Rische <jrische@redhat.com> - 1.21.3-6
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74373
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56058
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-71881


author: Julien Rische <jrische@redhat.com> - 1.21.3-8
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88705
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88047
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-74295


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-104
changelog:
  - resolves: RHEL-101759 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-103.el10)


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.7.7-1
changelog:
  - Rebase to version 3.7.7
  - Fixing SAST issues, accepted by upstream
  - Resolves: RHEL-39391 RHEL-67895


author: Karel Zak <kzak@redhat.com> - 2.40.2-3
changelog:
  - revert recent uuidd mode changes
  - rebase rhel specific patches
  - fix uuidd-tmpfiles.conf (upstream patch)
  - remove unused patches


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 2.69-1
changelog:
  - Update to 2.69 (with contribs from Yanko Kaneti <yaneti@declera.com>, and Andrew G. Morgan <morgan@kernel.org>)
  - Update license to SPDX (by Anderson Toshiyuki Sasaki <ansasaki@redhat.com>)
  - Make file lists more explicit to avoid accidental ABI changes (Dominik Mierzejewski <dominik@greysector.net>)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.69-4
changelog:
  - Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>)
  - Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.7.0-8
changelog:
  - Update license to SPDX format
  - spec file tidy/modernization
    - use modern cmake build and install
    - properly own include directories in the devel package
    - de-glob some files to follow packaging guidelines


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.10.2-1
changelog:
  - Update to version 0.10.2 ( resolves: rhbz#1880885 )
  - Revise specs per packaging guidelines for globs of soname


author: Jan Kolarik <jkolarik@redhat.com> - 0.1.20-1
changelog:
  - Update to 0.1.20
  - Fixes of xml parsing
  - Fix non-optimized builds by removing inline keyword
  - Use Py_hash_t instead of long


author: Pavol Žáčik <pzacik@redhat.com> - 0.6.5-3
changelog:
  - Patch bugs found by static analysis tools
  - Add %{name}-fix-handle-leaks-in-rdmsr-c.patch
  - Add %{name}-fix-cpuid_get_hypervisor.patch
  - Add %{name}-prevent-intel_fn11-array-overruns.patch


author: Pavol Žáčik <pzacik@redhat.com> - 0.7.0-1
changelog:
  - Rebase to 0.7.0
  - Begin building the package for aarch64
  - Add Python bindings as a subpackage (python3-libcpuid)


author: Petr Pisar <ppisar@redhat.com> - 0.73.1-2
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-32919)
  - Fix an invalid memory access when dropping an item in MergedTransaction
    class (RHEL-33541)


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.73.0-1
changelog:
  - Update to 0.73.0
  - filelists metadata loading on demand
  - deltarpm disabled on Fedora
  - conf: Introduce new optional_metadata_types option to load filelists on demand
  - goal: Method for detecting file dependency problems


author: Evan Goode <egoode@redhat.com> - 0.73.1-1
changelog:
  - Update to 0.73.1 (RHEL-38831)
  - Fix https://issues.redhat.com/browse/RHEL-27657 (RHEL-32935)
  - subject-py: Fix memory leak (RHEL-32924)
  - MergedTransaction: Calculate RPM difference between two same versions as
    no-op (RHEL-33541)
  - Onboard packit tests
  - Add virtual destructor to TransactionItem (RHEL-32943)


author: Pino Toscano <ptoscano@redhat.com> 1.30.2-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - feat: Create consumer cert & key owner by rhsm group (jhnidek@redhat.com)
  - feat: Add rhsm group during installation of subman RPM (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - docs: remove references to removed commands (jajerome@redhat.com)
  - feat: Remove auto-attach command (jhnidek@redhat.com)
  - feat: Eliminate command 'remove' from subscription-manager
    (jvlcek@redhat.com)
  - feat: Remove attach from bash completion script (jhnidek@redhat.com)
  - feat: Remove references on auto-attach in man page (jhnidek@redhat.com)
  - feat: Removed attach service (jhnidek@redhat.com)
  - feat: Removed D-Bus methods related to attach (jhnidek@redhat.com)
  - feat: Removed attach command and CLI option related to attach
    (jhnidek@redhat.com)
  - feat: Remove 'addons' subcommand(s) (mhorky@redhat.com)
  - feat: Removed command "redeem" from subscription-manager (jhnidek@redhat.com)
  - Update the correct man page file. (jvlcek@redhat.com)
  - docs: Change reverse proxy to proxy in man page (jvlcek@redhat.com)
  - test(ci): Improve container pre-test script (mhorky@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.3-1
changelog:
  - Card ID: CCT-731 - integration tests for DBus Register method
    (jstavel@redhat.com)
  - chore: Remove the --token authentication (pkoprda@redhat.com)
  - chore: Remove artifacts of import (stomsa@redhat.com)
  - chore: Remove artifacts of redeem (stomsa@redhat.com)
  - chore: Remove artifacts of remove (stomsa@redhat.com)
  - chore: Remove artifacts of autoheal (glutexo@icloud.com)
  - chore: Remove artifacts of --auto-attach (glutexo@icloud.com)
  - chore: Remove artifacts of attach (stomsa@redhat.com)
  - fix: Added missing python packages (jhnidek@redhat.com)
  - fix: Fixed integration tests (jhnidek@redhat.com)
  - chore: Remove auto-assign CI job (mhorky@redhat.com)
  - feat: Add initial support for tmt (jhnidek@redhat.com)
  - fix: Renamed integration-tests to cockpit-tests (jhnidek@redhat.com)
  - Feat CCT-965: Include timezone in the logs In `subscription-
    manager/src/rhsm/logutil.py`i: (mgrunwal@redhat.com)
  - feat: remove content access mode cache (jajerome@redhat.com)
  - feat: add GetEnvironments method to DBus register (ryanverdile@gmail.com)
  - feat: Added basic configuration for Packit (jhnidek@redhat.com)
  - fix: drop "autoattachinterval" from the rhsmcertd defaults
    (ptoscano@redhat.com)
  - feat/cct-875: Options -i and --cert-interval were removed from rhsmcertd
    command autocompletion Options -i and --cert-interval were removed from
    rhsmcertd command autocompletion. (mgrunwal@mgrunwal-
    thinkpadp1gen3.rmtcz.csb)
  - feat/cct-874: Autocompletion for option --servicelevel removed Autocompletion
    for option --servicelevel (sub-man register --servicelevel) was removed.
    (mgrunwal@mgrunwal-thinkpadp1gen3.rmtcz.csb)
  - fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
  - feat: Better automatic registration logging (mhorky@redhat.com)
  - refactor: Moved some definition of lists from list.py (jhnidek@redhat.com)
  - fix: Removed show_autosubscribe_output() method (jhnidek@redhat.com)
  - feat: Remove useless CLI options from list command (jhnidek@redhat.com)
  - fix: perform autoreg waiting when performing standard autoreg
    (ptoscano@redhat.com)
  - chore: move autoreg waiting code in own function (ptoscano@redhat.com)
  - feat: support registering specifying environments with activation keys
    (ryanverdile@gmail.com)
  - feat: Remove autoheal functionality from rhsmcertd (jvlcek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.4-1
changelog:
  - Revert "feat: Disable anonymous cloud registration temporarily"
    (ptoscano@redhat.com)
  - Revert "feat: forcefully switch automatic cloud registration to v1"
    (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Update translation files (noreply@weblate.org)
  - spec: respect the %{_sbindir} of the distro (ptoscano@redhat.com)
  - build: make it possible to customize the 'sbin' install dir
    (ptoscano@redhat.com)
  - fix: Restart rhsm service after installation (pkoprda@redhat.com)
  - Drop pam_console leftovers (ptoscano@redhat.com)
  - Stop using usermode (ptoscano@redhat.com)
  - fix: Do not upload profile from DNF, when it is disabled in conf
    (jhnidek@redhat.com)
  - rhsmcertd: use ISO 8601 timestamps for the log file (ptoscano@redhat.com)
  - rhsmcertd: refactor timestamp function (ptoscano@redhat.com)
  - ci: temporarily install 'which' on CentOS Stream 10 (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - ci: use official c10s container image (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - feat: Enable register with environment names and environment types
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.5-1
changelog:
  - fix: Disabling of content in D-Bus methods Register*() (jhnidek@redhat.com)
  - chore: logging.warn() -> logging.warning() (ptoscano@redhat.com)
  - Feat CCT-467: Add explanatory info about the source of overrides in repo-
    overrides command (mgrunwal@mgrunwal-thinkpadp1gen3.rmtcz.csb)
  - feat: Allow to call RegisterWithActivationKeys() with enable_content
    (jhnidek@redhat.com)
  - refactor: Small changes of _enable_content (jhnidek@redhat.com)
  - fix: It is possible to disable content using enable_content option
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.6-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Japanese) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - spec: Remove an unnecessary explicit dependency on json-c
    (debarshir@gnome.org)
  - spec: Require shared libraries with architecture-specific dependencies
    (debarshir@gnome.org)
  - Revert "ci: temporarily install 'which' on CentOS Stream 10"
    (ptoscano@redhat.com)
  - build: cockpit: fix installation of sub-man with newer Fedora
    (ptoscano@redhat.com)
  - spec: Require the base package with architecture-specific dependencies
    (debarshir@gnome.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - feat: drop the --ondate option of "status" (ptoscano@redhat.com)
  - feat: drop non-SCA support in status command (ptoscano@redhat.com)
  - tests: fix mocking of get_terminal_width() in TestColumnize
    (ptoscano@redhat.com)
  - feat: print compliance errors & syspurpose status only in entitlement mode
    (ptoscano@redhat.com)
  - feat: print "registered" as status when using SCA (ptoscano@redhat.com)
  - feat: print "not registered" on status when not registered
    (ptoscano@redhat.com)
  - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
  - refactor: move determination of content access mode in own method
    (ptoscano@redhat.com)
  - tests: move StubIdentity to stubs (ptoscano@redhat.com)
  - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
  - chore: move banner printing to its own function (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.7-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (noreply-mt-weblate-
    translation-memory@weblate.org)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Japanese) (mhorky@redhat.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - fix: Unit test should ignore locale, when generating test timestamp
    (jhnidek@redhat.com)
  - fix: Handle improperly closed connections (mhorky@redhat.com)
  - test: Added integration tests for activation keys (jstavel@redhat.com)
  - test: Integration tests for DBus Unregister call (jhnidek@redhat.com)
  - fix: Do not call removed bash script from tesh.sh (jhnidek@redhat.com)
  - spec: drop old libdnf-plugin-subscription-manager-debuginfo definition
    (ptoscano@redhat.com)
  - spec: switch from an own run_dir to _rundir (ptoscano@redhat.com)
  - spec: switch from python_sitelib to python3_sitelib (ptoscano@redhat.com)
  - spec: switch from python_sitearch to python3_sitearch (ptoscano@redhat.com)
  - spec: inline & drop rhsm_package_name (ptoscano@redhat.com)
  - spec: switch from __python to __python3 (ptoscano@redhat.com)
  - spec: inline & drop py_package_prefix (ptoscano@redhat.com)
  - spec: remove redundant check (ptoscano@redhat.com)
  - spec: deduplicate BuildRequires for use_dnf (ptoscano@redhat.com)
  - spec: drop old %post snippet for rhsmd (ptoscano@redhat.com)
  - spec: drop EL 8 bits (ptoscano@redhat.com)
  - ci: tweak the dependabot config for branches a bit (ptoscano@redhat.com)
  - feat: remove no more needed branding strings (ptoscano@redhat.com)
  - feat: drop ClassicCheck (ptoscano@redhat.com)
  - ci: track also active stable branches with dependabot for GitHub actions
    (ptoscano@redhat.com)
  - tests: update location of pytest-client-tools (ptoscano@redhat.com)
  - Handle URL params for AptRepoFiles (grigo@atix.de)
  - fix: Append two additional facts to the graylist (pkoprda@redhat.com)
  - refactor: Use class constant instead of variable graylist
    (pkoprda@redhat.com)
  - spec: Require subpackages from the same build as the base package
    (debarshir@gnome.org)
  - spec: Consolidate dependencies on the DNF & libdnf plugins in one place
    (debarshir@gnome.org)
  - spec: Fix grammar and spelling mistakes (debarshir@gnome.org)
  - build: use cmake pkg-config imported targets (ptoscano@redhat.com)
  - build: fix order of parameters for pkg_check_modules() (ptoscano@redhat.com)
  - build: drop manual setting of -std=c99 (ptoscano@redhat.com)
  - build: remove check for in source cmake builddir (ptoscano@redhat.com)
  - build: bump cmake required version to 3.20 (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.8-1
changelog:
  - fix: Enable content during auto-registration v2 (jhnidek@redhat.com)
  - CCT-1490: blackified repolib.py (jstavel@redhat.com)
  - CCT-1473: new url for local candlepin image, fixed register test (#3580)
    (jstavel@redhat.com)
  - fix: Create consumer cert & key, when chown failed (jhnidek@redhat.com)
  - Skip to load default plugins on suse/sles (suttner@atix.de)
  - CCT-739: tests for GetUuid method (jstavel@redhat.com)
  - feat: Added warning to dnf4 plugin about skewed clock (jhnidek@redhat.com)
  - CCT-1081 FEAT Remove unused classes and functions - including
    Conduits/Slots/Hooks for pre/post_subscribe Remove "pre_subscribe" and
    "post_subscribe" plugin slots by removing classes SubscriptionConduit and
    PostSubscriptionConduit. (mgrunwal@redhat.com)
  - Fix upload profile if rhsmcertd is not running at all (suttner@atix.de)
  - chore: Drop get_status_for_icon (mhorky@redhat.com)
  - chore: Remove getCompliance method from connection.py (mhorky@redhat.com)
  - chore: Clean up compliance status of ComplianceManager (mhorky@redhat.com)
  - chore: Hardcode SCA-relevant values to ComplianceManager (mhorky@redhat.com)
  - chore: Drop HTTP call to /consumers/{uuid}/compliance (mhorky@redhat.com)
  - feat: adding sourcery config (jmolet@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.9-1
changelog:
  - feat: Call random.seed() at begining of auto-register (jhnidek@redhat.com)
  - feat: Better control over auto-reg waiting game (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.10-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Spanish) (jsefler@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - fix: Wait random time before reaching IMDS server (jhnidek@redhat.com)
  - CCT-745: added properties for multi org environment (#3589)
    (jstavel@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.35-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Clean up tests using Cloud What detectors properly (mhorky@redhat.com)
  - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Typo fixes (ptoscano@redhat.com)
  - Avoid string puzzle (ptoscano@redhat.com)
  - Properly use ungettext for plural forms (ptoscano@redhat.com)
  - 2189664: cache: fix SyspurposeComplianceStatusCache on failed load
    (ptoscano@redhat.com)
  - dbus: don't catch exceptions in DomainSocketServer.run()
    (ptoscano@redhat.com)
  - cli: directly exit on InvalidCLIOptionError (ptoscano@redhat.com)
  - Revert "ENT-5549: Fix return code handling of CLI" (ptoscano@redhat.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - Update .git-blame-ignore-revs (mhorky@redhat.com)
  - Format code with black==23.3.0 (mhorky@redhat.com)
  - ENT-5535: Update black to version 23.3.0 (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.36-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ENT-5581: Update messaging around the "container mode" (mhorky@redhat.com)
  - Remove 'dbus' marker for pytest (mhorky@redhat.com)
  - Rewrite D-Bus tests to be testable without pytest-forked (mhorky@redhat.com)
  - Drop further ethtool dependency mentions (mhorky@redhat.com)
  - tests: fix test_file_monitor without pyinotify (ptoscano@redhat.com)
  - tests: switch from imp to importlib (ptoscano@redhat.com)
  - Fix the order of user env var checking for translations.
    (tkuratom@redhat.com)
  - 2215974: Collect network facts using 'ip' (mhorky@redhat.com)
  - ENT-5582: Remove container detection envvar overwrite (mhorky@redhat.com)
  - ENT-5603: Explicitly check for provided entitlement certificates
    (mhorky@redhat.com)
  - fix test case (chambrid@redhat.com)
  - Collect GCP Project information as cloud facts (chambrid@redhat.com)
  - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com)
  - ENT-5580: Disable the proper container detection (mhorky@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - 2093291: Make reading of cache file more reliable (jhnidek@redhat.com)
  - 2093291: Make code of DNF plugins testable (jhnidek@redhat.com)
  - spec: change subscription-manager dnf dep (ptoscano@redhat.com)
  - spec: update libdnf-plugin-subscription-manager deps (ptoscano@redhat.com)
  - tests: repair attach cases in SCA mode (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.37-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - 2225446: Hotfix of D-Bus policy (jhnidek@redhat.com)
  - TESTING: Update testing requirements (mhorky@redhat.com)
  - Use Fedora registry to pull container images (mhorky@redhat.com)
  - 2232316: dbus: check "force" again from the registration option
    (ptoscano@redhat.com)
  - dbus: run EntCertActionInvoker on PoolAttach (ptoscano@redhat.com)
  - ENT-5624: Properly translate error strings (mhorky@redhat.com)
  - Mock IOError for Insights fact collection tests (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.38-1
changelog:
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ENT-5603: Fix a typo in a comment (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.39-1
changelog:
  - tito: drop bz requirement (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)
  - RHEL-7206: Small change of message printed by dnf plugin (jhnidek@redhat.com)
  - CCT-118: Fix flake8 error E721 (mhorky@redhat.com)
  - Fix type hint in rhsm (mhorky@redhat.com)
  - Simplify autoregistration test setup (mhorky@redhat.com)
  - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com)
  - Fixed inappropriate logical expression (ataf@openrefactory.com)
  - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com)
  - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com)
  - RPM: Avoid needless runtime requirement on python3-setuptools
    (miro@hroncok.cz)
  - cli: normalize hostname in error message (ptoscano@redhat.com)
  - connection: normalize hostname in ConnectionOSErrorException
    (ptoscano@redhat.com)
  - Improved printing of addresses and URLs (jhnidek@redhat.com)
  - Use username and password from --proxy=URL (jhnidek@redhat.com)
  - Use parse_url() from utils.py for parsing URL, when --proxy is used.
    (jhnidek@redhat.com)
  - 2225403: Parse URL properly (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.40-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
    (mariocanfly@hotmail.com)
  - spec: Add missing GLib dependency when building without DNF
    (debarshir@gnome.org)
  - Remove deprecated `locale.*()` functions (mhorky@redhat.com)
  - Remove version constraint of pytest (mhorky@redhat.com)
  - RHEL-15110: RegisterServer is stopped, when not needed (jhnidek@redhat.com)
  - RHEL-15110: Fix issue with registration using gsd-subman (jhnidek@redhat.com)
  - Fix an error in debug logging of cloud-what (mhorky@redhat.com)
  - ci: bump actions/upload-artifact from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Improve debug logging to make it faster to understand (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.0-1
changelog:
  - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - chore: Format register.py (mhorky@redhat.com)
  - feat: Require SCA for registration (mhorky@redhat.com)
  - doc: Update install and testing guide (stomsa@redhat.com)
  - Fixed spec file to list packages twice (suttner@atix.de)
  - code review comments fixes - update metadata and test. (chambrid@redhat.com)
  - feat: Disable anonymous cloud registration temporarily (mhorky@redhat.com)
  - Collect Azure VM Name and Resource Group Name as a cloud fact.
    (chambrid@redhat.com)
  - fix: Improve wording in redhat.repo template (glutexo@icloud.com)
  - Remove commands moved to syspurpose (glutexo@icloud.com)
  - doc: drop references to "activate" (ptoscano@redhat.com)
  - feat: Remove import command (zpetrace@redhat.com)
  - fix: make SyspurposeComplianceStatusCache.get_overall_status() always usable
    (ptoscano@redhat.com)
  - fix: Change order of checks (jhnidek@redhat.com)
  - fix: Cache shouldn't try to get data from server without UUID
    (jhnidek@redhat.com)
  - feat: Add option to run smoke tests with fake IMDS servers.
    (jhnidek@redhat.com)
  - fix: Hide subscription management "errors" in container mode
    (mhorky@redhat.com)
  - feat(ci): Update testing matrix (mhorky@redhat.com)
  - fix(test): Properly stop method mock (mhorky@redhat.com)
  - feat: Azure: added extended location and type of location fact
    (jhnidek@redhat.com)
  - fix: Update version of Azure metadata (jhnidek@redhat.com)
  - feat: Added Azure location to facts (jhnidek@redhat.com)
  - feat: Added zone GCP fact (jhnidek@redhat.com)
  - feat: Added more AWS cloud facts (jhnidek@redhat.com)
  - fix: Change type hint according returned value. (jhnidek@redhat.com)
  - feat: Add warning message about release version to dnf plugin
    (jhnidek@redhat.com)
  - Bump black from 23.3.0 to 24.3.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Format code with black==24.3.0 (ptoscano@redhat.com)
  - Fix memory leaks in test-productdb.c (jhnidek@redhat.com)
  - Fix memory leaks in productdb.c (jhnidek@redhat.com)
  - fix: Function prototype without declaration is deprecated
    (jhnidek@redhat.com)
  - Removed unused includes of .h files (jhnidek@redhat.com)
  - libdnf: switch from g_error_free() to g_clear_error() in tests
    (ptoscano@redhat.com)
  - libdnf: do not build test code in plugin (ptoscano@redhat.com)
  - Change handling of deprecated `datetime.datetime.utcnow()`
    (mhorky@redhat.com)
  - CCT-66: Update identity reporting in DNF plugin during autoregistration
    (mhorky@redhat.com)
  - Remove automatic registration delay for rhsmcertd (mhorky@redhat.com)
  - Remove API endpoint for automatic cloud registration v1 (mhorky@redhat.com)
  - CCT-67: Use automatic registration v2 (mhorky@redhat.com)
  - IdentityUpdateAction: Improve logging for updating identity certificates
    (mhorky@redhat.com)
  - Identity: Add method to extract current owner (mhorky@redhat.com)
  - rhsmcertd: Define exit codes (mhorky@redhat.com)
  - rhsmcertd: Use module-level logger (mhorky@redhat.com)
  - Add AnonymousCertificateManager (mhorky@redhat.com)
  - Add CloudTokenCache for Candlepin JWT (mhorky@redhat.com)
  - Implement API endpoints for Automatic registration v2 (mhorky@redhat.com)
  - Update documentation for one API call in connection.py (mhorky@redhat.com)
  - Fix type hint of RegisterService.register() (mhorky@redhat.com)
  - rhsmcertd: Drop D-Bus loop code (mhorky@redhat.com)
  - rhsmcertd: Add type hints (mhorky@redhat.com)
  - rhsmcertd: Remove forgotten old comment (mhorky@redhat.com)
  - Stop logging full lscpu output (mhorky@redhat.com)
  - Prevent double-logging of syspurpose cache log statement (mhorky@redhat.com)
  - Update the log message containing response time statistics
    (mhorky@redhat.com)
  - CCT-266: Update TLS flags (mhorky@redhat.com)


author: Pavol Žáčik <pzacik@redhat.com> - 2.1.12-13
changelog:
  - Update license identifiers to SPDX in subpackages
  - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta1-1
changelog:
  - Resolves: RHEL-40253 - Rebase SSSD for RHEL 10-beta
  - Resolves: RHEL-29303 - Issue discovered by static analyzer.
  - Resolves: RHEL-11181 - sssd[4022110]: gencache_init: Failed to create directory: //.cache/samba - Permission denied
  - Resolves: RHEL-4986 - [RFE] sssd use systemd-sysusers
  - Resolves: RHEL-4974 - sssd status shows error "krb5_kt_start_seq_get failed: Permission denied" when running as unprivileged user 'sssd'


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta2-1
changelog:
  - Resolves: RHEL-40253 - Rebase SSSD for RHEL 10-beta
  - Resolves: RHEL-43259 - sudo does not work any more with krb ticket


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta2-2
changelog:
  - Resolves: RHEL-51891 - [RHEL-10]logrotate.service fails to start because /var/log/sssd has insecure permission
  - Resolves: RHEL-52400 - SYSDB: remove index on dataExpireTimestamp [rhel-10]
  - Resolves: RHEL-50243 - Please install sssd-polkit-rules by default


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0-1
changelog:
  - Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
  - Resolves: RHEL-56701 - sss_ssh_knownhosts is breaking ansible-pull
  - Resolves: RHEL-55993 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-3
changelog:
  - Disable enumeration support for IPA and AD providers.
    Deprecation was announced in F39 release notes:
    https://docs.fedoraproject.org/en-US/fedora/latest/release-notes/sysadmin/Security/#_support_for_the_enumeration_feature_has_been_deprecated_for_ad_and_ipa_backends
    This is a backport of upstream patch:
    https://github.com/SSSD/sssd/commit/9240bca7dcc28371ae5dce31c01e85d28409cd04


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.1-1
changelog:
  - Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
  - Resolves: RHEL-4984 - Mismatch between input and parsed domain name when default_domain_suffix is set.
  - Resolves: RHEL-65848 - sssd password authentication broken in sssd-2.10.0~beta2-2 and later
  - Resolves: RHEL-67669 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option
  - Resolves: RHEL-68421 - sssd ldap_child process segfaults when krb5.conf is invalid [rhel-10]
  - Resolves: RHEL-66935 - Avoid log flooding in case an app keeps making invalid `getservbyport(0, ...)` request
  - Resolves: RHEL-65736 - ipa: sudo commands doesn't check threshold correctly
  - Resolves: RHEL-68319 - Please deprecate/remove ad_allow_remote_domain_local_groups


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Dmitry Belyavskiy - 0.10.1-1
changelog:
  - Rebase to 0.10.1 version (CVE-2024-36405)
    Resolves: RHEL-40699
  - Use dlopen for OpenSSL algos implementation
    Resolves: RHEL-46598
  - Correct license naming
    Resolves: RHEL-45265


author: José Expósito <jexposit@redhat.com> - 0.16-13
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29742


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Jan Kolarik <jkolarik@redhat.com> - 1.15.2-1
changelog:
  - Update to 1.15.2
  - Fixes and optimizations in header files
  - Fix lr_gpg_list_keys function when keys are empty
  - Update PGP test vectors
  - Fix CMake warnings
  - Bump glib version


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - lr_gpg_check_signature: Forward PGP error messages from RPM
  - PGP: fix: Support importing binary public keys in librpm backend
  - PGP: Enable creating a UID directory for GnuGP agent socket in /run/gnupg/user
  - PGP: Set a default creation SELinux labels on GnuPG directories


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1 (RHEL-38831)
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (RHEL-35699)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Petr Pisar <ppisar@redhat.com> - 1.18.0-2
changelog:
  - Use librpmio instead of gpgme for handling PGP keys (RHEL-47106)
  - Fix a memory leak in select_next_target() (RHEL-35699)


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-14
changelog:
  - Improve a documentation (RHEL-38831)
  - Refactor parse_entitlement_data() (RHEL-32365)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-37866)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - libselinux-3.7-3
  - restorecon: Include <selinux/label.h>
  - Fix integer comparison issues when compiling for 32-bit


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-3
changelog:
  - restorecon: Include <selinux/label.h> (RHEL-53852)
  - Fix integer comparison issues when compiling for 32-bit


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - setexecfilecon: Remove useless rc check (RHEL-35586)
  - matchpathcon: RESOURCE_LEAK: Variable "con" (RHEL-35584)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Kate Hsuan <hpa@redhat.com> - 1.0.28-1
changelog:
  - Update to the upstream version 1.0.28
  - Update to the upstream version 1.0.28
  - Fix automake-1.17 issue since the release was based on automake-1.17


author: David King <dking@redhat.com> - 2.12.5-6
changelog:
  - Fix CVE-2025-6021 (RHEL-96495)
  - Fix CVE-2025-49794 (RHEL-96395)
  - Fix CVE-2025-49795 (RHEL-96408)
  - Fix CVE-2025-49796 (RHEL-96421)


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 18.1.8-1
changelog:
  - Update to LLVM 18.1.2 (RHEL-28056)
  - Remove llvm17 compat package (RHEL-30890)
  - Workaround for GFX11.5 export priority (RHEL-49746)


author: Nikita Popov <npopov@redhat.com> - 19.1.7-1
changelog:
  - Update to LLVM 19.1.7 (RHEL-57456)
  - Remove llvm18 compat package (RHEL-57457)
  - Remove generated html content from llvm-doc subpackage (RHEL-58900)
  - Enable LLVM_ENABLE_ZSTD=ON (RHEL-70325)


author: Martin Osvald <mosvald@redhat.com> - 2.1.1-1
changelog:
  - New version 2.1.1 (rhbz#2250290)
  - Fix incorrect upstream URL and SourceX (rhbz#2249526)
  - SPDX migration


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: DJ Delorie <dj@redhat.com> - 1:4.4.1-3
changelog:
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Lianbo Jiang <lijiang@redhat.com> - 1.7.5-11
changelog:
  - Fix failure of hugetlb pages exclusion on Linux 6.9 and later
  - Fix wrong exclusion of Slab pages on Linux 6.10-rc1 and later


author: Xiao Ni <xni@redhat.com> - 4.4-1
changelog:
  - Update to mdadm 4.4 and latest upstream
  - Resolves: RHEL-86676, RHEL-72803, RHEL-88793, RHEL-88791


author: Jaroslav Rohel <jrohel@redhat.com> - 3.9.0-1
changelog:
  - Update to 3.9.0
  - Add leaves command - List installed packages not required by other installed packages


author: Evan Goode <egoode@redhat.com> - 3.10.1-1
changelog:
  - Update to 3.10.1
  - Correct spelling of summary
  - Print more helpful error message when reinstalling non-installed pkg
    Resolves: RHEL-53430


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Lukáš Zaoral <lzaoral@redhat.com> - 7.2-1
changelog:
  - Update to 7.2 (rhbz#2161916)
  - Do not use %{_bindir}/* and %{_mandir}/* as suggested by the packaging
    guidelines.


author: Lukáš Zaoral <lzaoral@redhat.com> - 8.0-1
changelog:
  - rebase to latest upstream version (RHEL-35944)
  - remove `nano-default-editor` from the specfile (RHEL-30790)


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.63.20160912git
changelog:
  - Resolves: #2114821 - The output of `route -A inet6` does not display properly when the 'Use' column output is over 6 digits


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.64.20160912git
changelog:
  - Resolves: #2077846 - net-tools utilities display incorrect statistics for interfaces with 15-character names


author: Vit Mojzis <vmojzis@redhat.com> - 0.30.0-21
changelog:
  - Improve "help/usage" message (RHEL-38477)
  - libnetlabel: fix a header file guard typo
  - netlabel-config: Fix IPv4/IPv6 addresses parsing in nlbl_reset_unlbl()
  - netlabel: Update man page to clarify SELinux labeling
  - tests: add a basic CALIPSO pass through test
  - doc: fix a typo in the netlabel-config man page


author: Pavel Reichl <preichl@redhat.com> - 0.4.2-3
changelog:
  - Actually change License from BSD to LGPL, based on content of COPYING file
  - Convert License tag to SPDX format


author: Kevin Fenzi <kevin@scrye.com> - 1.0.7-1
changelog:
  - Update to 1.0.7. Fixes rhbz#2155658
  - Build the package with setuptools instead of distutils. Fixes: rhbz#2154872


author: Phil Sutter <psutter@redhat.com> - 1:1.0.9-1
changelog:
  - Fix devel sub-package description
  - Utilize pyproject-rpm-macros for the python sub-package
  - new version 1.0.9


author: Phil Sutter <psutter@redhat.com> [1.1.1-1.el10]
changelog:
  - monitor: Recognize flowtable add/del events (Phil Sutter) [RHEL-65346]
  - tests: py: Fix for storing payload into missing file (Phil Sutter) [RHEL-65346]
  - json: Support typeof in set and map types (Phil Sutter) [RHEL-65346]
  - json: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - doc: extend description of fib expression (Phil Sutter) [RHEL-65346]
  - tests: monitor: fix up test case breakage (Phil Sutter) [RHEL-65346]
  - src: fix extended netlink error reporting with large set elements (Phil Sutter) [RHEL-65346]
  - rule: netlink attribute offset is uint32_t for struct nlerr_loc (Phil Sutter) [RHEL-65346]
  - mnl: update cmd_add_loc() to take struct nlmsghdr (Phil Sutter) [RHEL-65346]
  - mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc() (Phil Sutter) [RHEL-65346]
  - src: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - libnftables-json: fix raw payload expression documentation (Phil Sutter) [RHEL-65346]
  - tests: shell: fix spurious dump failure in vmap timeout test (Phil Sutter) [RHEL-65346]
  - Rebase onto version 1.1.1 (Phil Sutter) [RHEL-65346]


author: Phil Sutter <psutter@redhat.com> [1.1.1-5.el10]
changelog:
  - src: add conntrack information to trace monitor mode (Phil Sutter) [RHEL-102994]
  - src: split monitor trace code into new trace.c (Phil Sutter) [RHEL-102994]


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.5-42.20150602git
changelog:
  - recognize the -m option
  - modernize the specfile
      - use recommended systemd macros
      - fix manual pages installation
      - sort file list and BuildRequires
      - use modern make macros
      - simplify %install section


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.1-4
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.8-2.D20220919gitb041f6d
changelog:
  - Update to the latest git, expecially:
    - Update to Unicode 15.0 (upstream #272)
    - [[:punct:]] behavoir change (upsteam #268)


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - 3.23.0
     * EP11: Add support for FIPS-session mode
     * Updates to harden against RSA timing attacks
     * Bug fixes


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-58996, update to 3.24.0
  - Resolves: RHEL-39004, provide opencryptoki CCA Token also on x86_64 and ppc64le
  - Resolves: RHEL-43675, openCryptoki cca token RSA OAEP v2.1 support
  - Resolves: RHEL-43674, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-43676, openCryptoki cca token SHA3 support
  - Resolves: RHEL-24036, support protected keys for extractable keys


author: Than Ngo <than@redhat.com> - 3.24.0-5
changelog:
  - Use systemd-sysusers
  - Modifie the unit file to change file ownership
  - opencryptoki doesn't work in image mode
    Resolves: RHEL-77146


author: Than Ngo <than@redhat.com> - 3.24.0-7
changelog:
  - Resolves: RHEL-80632, tokens are deleted on reboot
  - Related: RHEL-77146, opencryptoki doesn't work in image mode


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-85376, ep11 token: PKCS #11 3.0 - support SHA3
  - Resolves: RHEL-90589, CCA token: basic support of AES-GCM
  - Resolves: RHEL-72964, cca token support cipher keys
  - Resolves: RHEL-72968, Support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-73343, Upgrade openCryptoki to latest version
  - Resolves: RHEL-75144, p11kmip: a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75761, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85374, cca token: Support ECDH to derive AES keys


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73343, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77146, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104598


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-1
changelog:
  - Rebase to version 2.6.7 (rhbz#2261163)
  - Use systemd-sysusers for ldap user and group (rhbz#2173965)
  - Fix compiler errors (rhbz#2261427)
  - Replace License with SPDX identifier


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-2
changelog:
  - Remove libslapi from the main package (RHEL-35581)
  - Add "servers" conditional which includes libslapi


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71052)
  - Avoid SSL context cleanup during library destruction (RHEL-68424)


author: Veronika Hanulikova <vhanulik@redhat.com> - 0.26.1-1
changelog:
  - Rebase to new upstream release (RHEL-71523)
  - Separate OpenSC into libraries and binaries (RHEL-73314)


author: Zoltan Fridrich <zfridric@redhat.com> - 9.6p1-1.3
changelog:
  - Correctly audit hostname and IP address (RHEL-22316)
  - Make default key sizes configurable in sshd-keygen (RHEL-26454)


author: Zoltan Fridrich <zfridric@redhat.com> - 9.6p1-1.5
changelog:
  - Build OpenSSH without ENGINE API
    Resolves: RHEL-45507
  - Remove pam_ssh_agent_auth subpackage
    Resolves: RHEL-45002


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.8p1-2.0
changelog:
  - Temporary disabling self-test
    Related: RHEL-42635
  - Change ssh-keygen defaults in FIPS mode
    Resolves: RHEL-37324
  - Use FIPS-compatible API for key derivation RHEL-10
    Resolves: RHEL-43592


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.8p1-3
changelog:
  - sshd doesn't propose to enter password again when a non-existing user is specified
    Resolves: RHEL-11981
  - Reenabling self-test on rpm build
    Related: RHEL-42635


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.8p1-5
changelog:
  - Restore GSS connectivity when no hostkeys are present
    Related: RHEL-42635
  - Add missing gsskeyex authentication method
    Related: RHEL-42635
  - "publickey-hostbound@openssh.com" extension makes no sense with GSS
    Related: RHEL-42635


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-5
changelog:
  - Fix regression of Match directive processing
    Resolves: RHEL-76317
  - Avoid linking issues for openssl logging
    Related: RHEL-63190


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-6
changelog:
  - Fix regression of Match directive processing
    Related: RHEL-76317
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465, CVE-2025-26466).
    Resolves: RHEL-78699
    Resolves: RHEL-78943


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-8
changelog:
  - OpenSSH should not use its own implementation of MLKEM
    Resolves: RHEL-58252
  - Correct processing of Compression directive
    Resolves: RHEL-68346
  - Supress systemd warning
    Resolves: RHEL-84816


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-9
changelog:
  - CVE-2025-32728: Fix logic error in DisableForwarding option
    Resolves: RHEL-86819
  - Provide better error for non-supported private keys
    Resolves: RHEL-68124
  - Ignore bad hostkeys in known_hosts file
    Resolves: RHEL-83644


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-1
changelog:
  - Update to OpenSSH 9.9p1
    Resolves: RHEL-60564
  - Separate ssh-keysign to a dedicated package
    Resolves: RHEL-62112
  - Use FIPS KEX defaults in FIPS mode
    Resolves: RHEL-58986


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-2
changelog:
  - Resolve memory management issues after rebase
    Related: RHEL-60564
  - Add extra help information on ssh early failure
    Resolves: RHEL-62718


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-3
changelog:
  - Extra help information should not be printed if stderr is not a TTY
    Resolves: RHEL-63061
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-63190


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-7
changelog:
  - Disallow SHA1 at SECLEVEL2 in OpenSSL
    Resolves: RHEL-39962
  - SHA-1 signature shouldn't work in normal mode
    Resolves: RHEL-36677


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-10
changelog:
  - Use PBMAC1 by default when creating PKCS#12 files in FIPS mode
    Related: RHEL-36659
  - Support key encapsulation/decapsulation in openssl pkeyutl command
    Resolves: RHEL-54156
  - Fix typo in the patch numeration
    Related: RHEL-41261
  - Enable KTLS, temporary disable KTLS tests
    Related: RHEL-47335
  - Speedup SSL_add_{file,dir}_cert_subjects_to_stack
    Resolves: RHEL-54232
  - Resolve SAST package scan results
    Resolves: RHEL-37561


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-15
changelog:
  - Fix providers no_cache behavior
    Resolves: RHEL-71903
  - Fix pkcs12 command line segfault
    Resolves: RHEL-70878
  - Print key exchange group for hybrid PQC
    Resolves: RHEL-66163
  - Ensure correct fips.so checksum calculation
    Resolves: RHEL-73170
  - Locally configured providers should not interfere with openssl build-time tests
    Resolves: RHEL-76182
  - Load system default cipher string from crypto-policies configuration file
    include /etc/crypto-policies/back-ends/opensslcnf.config and remove
    /etc/crypto-policies/back-ends/openssl.config.
    Resolves: RHEL-71132


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-16
changelog:
  - Fix timing side-channel in ECDSA signature computation (CVE-2024-13176)
    Resolves: RHEL-70879
  - Load system default cipher string from crypto-policies configuration file
    should ignore errors.
    Related: RHEL-71132
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76754
  - Fix segfault on printing the temp key from s_client when connection is not established
    Resolves: RHEL-79045


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
changelog:
  - Rebasing OpenSSL to 3.5
    Resolves: RHEL-80811
    Resolves: RHEL-57022
    Resolves: RHEL-24098
    Resolves: RHEL-24097
    Resolves: RHEL-86865


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-3
changelog:
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-88908
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-88911
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-88913
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-88906
  - Enable sslkeylog support
    Resolves: RHEL-90853
  - Fix UEFI builds
    Resolves: RHEL-89137


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Fix regressions caused by rebase to OpenSSL 3.5
    Related: RHEL-80811
  - Fix UEFI builds on double function definitions
    Resolves: RHEL-93168


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-5
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80811
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-94614


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.1-1
changelog:
  - Rebasing to OpenSSL 3.5.1
    Resolves: RHEL-90350
    Resolves: RHEL-95613
    Resolves: RHEL-97796
    Resolves: RHEL-99353
    Resolves: RHEL-100168


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80811


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-101548
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-105010


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-2
changelog:
  - Fix static analyzer detected issues. Resolves: RHEL-36475
  - pam_env: fixes for NULL environment variables


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-6
changelog:
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-65223


author: Brian C. Lane <bcl@redhat.com> - 3.5-11
changelog:
  - parted: Fix ending sector location when using kibi IEC suffix (bcl)
  - tests: Fix formatting and snprintf warnings in tests. (bcl)
  - ui: Add checks for prompt being NULL (bcl)
  - strlist: Handle realloc error in wchar_to_str (bcl)
  - libparted: Fix potential NULL dereference in ped_disk_next_partition (bcl)
  - filesys: Check for null from close_fn (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.5.28-1
changelog:
  - Upstream 3.5.28 Alpha release
  - Dropped all patches included in new upstream release
  - Bumped minor version on libparted.so and libparted-fs-resize.so


author: Brian C. Lane <bcl@redhat.com> - 3.6-7
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73220
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73220
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73220
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73220


author: Michal Hlavinka <mhlavink@redhat.com> - 3.9.0-4
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Michal Hlavinka <mhlavink@redhat.com> - 3.13.0-1
changelog:
  - updated to 3.13, adds support for cxl1.1 device link status information (#RHEL-29153)
  - add riscv64 build support (#RHEL-40383)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.2-503
changelog:
  - 5.38.2 bump (see <https://metacpan.org/release/PEVANS/perl-5.38.2/view/pod/perldelta.pod>
    or release notes


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-509
changelog:
  - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod)
  - Subpackage Term-Table
  - Subpackage Test-Suite2


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-512
changelog:
  - Resolves: RHEL-75798
  - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>)
  - Add config.over to make build od perl reproducible
  - Removed unnecessary conversion
  - Add new systemtap-sdt-dtrace to build deps


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.2-513
changelog:
  - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>)
  - Resolves: RHEL-87186


author: Paul Howarth <paul@city-fan.org> - 1.92-7
changelog:
  - Update test suite to handle potential unavailability of sha1 algorithm
    https://github.com/radiator-software/p5-net-ssleay/pull/433
  - Avoid deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list


author: Christian Glombek <cglombek@redhat.com> - 123-2
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Jan Rybar <jrybar@redhat.com> - 125-4
changelog:
  - changing log level via dbus is now restricted to root
  - backport of https://github.com/polkit-org/polkit/commit/5a4ba7dfdcc3f
  - Resolves: RHEL-90807


author: Jan Rybar <jrybar@redhat.com> - 0.1-26
changelog:
  - use build macros, on behalf of original author Tom Stellard (tstellar)
  - Pagure doesn't allow one-click rebase, AFAIK


author: Jan Rybar <jrybar@redhat.com> - 6.6.4-17
changelog:
  - migrate to autosetup; convert specfile script to a patch
  - FORTIFY_SOURCE_3 detected a buffer overflow
  - Resolves: bz#2190057


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-3
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-54012)
  - Fix potential use of uninitialized pgp struct (RHEL-54013)
  - Fix memory leak in rpmsign(8) (RHEL-37564)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-4
changelog:
  - Remove hardcoded GPG references from signing error messages
  - Support switching between GnuPG and Sequoia for package signing (RHEL-56363)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-9
changelog:
  - Revert the gnupg/sequoia sub-packages, too much headache
  - Ship sequoia-signing enablement macros as documentation instead
  - Generate binary signatures with Sequoia too


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-10
changelog:
  - Report unsafe symlinks during installation as a specific case (RHEL-73186)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-54386)
  - Rebuild for ima-evm-utils 1.6 soname bump (RHEL-65378)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-11
changelog:
  - Fix possible package corruption on --delsign/resign/addsign (RHEL-69518)
  - Fix regression on build-id generation from compressed ELF (RHEL-54000)
  - Fix root relocation regression (RHEL-56613)
  - Update sequoia macros for sq 1.0 (RHEL-56363)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-18
changelog:
  - Add support for multiple OpenPGP signatures per package (RHEL-100571)
  - Add support for OpenPGP v6 signature pre-salting (RHEL-100571)
  - Add support for PQC algorithms from RFC-9580 (RHEL-100571)
  - Add --list and --erase commands to rpmkeys(8) (RHEL-105421)
  - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023)


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.2-4
changelog:
  - Disable/remove neverallow options in sediff.
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Security fix for CVE-2024-9287 and CVE-2024-12254
  Resolves: RHEL-64877, RHEL-70450


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-90555


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98060, RHEL-98047, RHEL-97813, RHEL-98062, RHEL-98180


author: Stephen Gallagher <sgallagh@redhat.com> - 1:0.4-0.54.b47
changelog:
  - Fixes for -WError=implicit-function-declaration on RHEL
  - Reinstates the dump headers without compiling the implementations


author: Vladis Dronov <vdronov@redhat.com> - 6.17-2
changelog:
  - Add Intel CET IBT instrumentation to assembly code
  - Update to the upstream v6.17 @ ac43f912 (RHEL-36771)


author: Jonathan Wright <jonathan@almalinux.org> - 3.3.0-6.alma.1
changelog:
  - Fix for CVE-2024-12084
  - Fix for CVE-2024-12085
  - Fix for CVE-2024-12086
  - Fix for CVE-2024-12087
  - Fix for CVE-2024-12088
  - Fix for CVE-2024-12747


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-1
changelog:
  - New version 3.4.1
  - Resolves: RHEL-70151 - Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling
  - Resolves: RHEL-70159 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70203 - rsync server leaks arbitrary client files
  - Resolves: RHEL-72500 - Path traversal vulnerability in rsync
  - Resolves: RHEL-72501 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71658 - Race Condition in rsync Handling Symbolic Links
  - Resolves: RHEL-71293 - Build rsync with --with-rrsync


author: Paolo Bonzini <pbonzini@redhat.com> - 4.9-1
changelog:
  - Rebase to 4.9
  - Update downstream patches
  - Resolves: rhbz#2140486
  - Remove change to gnulib tests, they pass anyway
  - Install valgrind and langpacks to increase test coverage


author: Tomas Bzatek <tbzatek@redhat.com> - 1.48-7
changelog:
  - udev rules: avoid spurious warning for non-SCSI devices (RHEL-40861,RHEL-54607)
  - Install missing 00-scsi-sg3_config.rules
  - Fix file references to other udev rules


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.14.0-5
changelog:
  - passwd: Provide binary from this package. Enable libpam and
    disable account-tools-setuid. Provide passwd PAM service file.
    Resolves: #2233275
  - passwd: provide --stdin option


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-1
changelog:
  - Rebase to version 4.15.0
  - getdef: avoid spurious error messages about unknown configuration options


author: Milan Crha <mcrha@redhat.com> - 2.3-6
changelog:
  - Co-own /usr/share/gettext and /usr/share/gettext/its
  - Related to rhbz#2280150
  - Resolves: RHEL-38682 (Backport Fedora 40 changes)


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.45.0-1
changelog:
  - Updated to version 3.45.0 (https://sqlite.org/releaselog/3_45_0.html)
  - List versioned soname in files, preventing unnoticed soname bumps
  - Disable func4 tests for i686 arch due to failing float<->int conversions


author: Bruno Wolff III <bruno@wolff.to> - 4.6-1
changelog:
  - 4.6 release
  - PR #231 was merged
  - See https://github.com/plougher/squashfs-tools/blob/master/CHANGES


author: Bruno Wolff III <bruno@wolff.to> - 4.6.1-1
changelog:
  - Phillip is now doing two tags per release and we can
  - use the one that works better with forgemeta
  - There are a few fixes after the 4.6 release. I think only
  - one applies to Fedora because of the build options we use.
  - It was not something that affects image builds.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-5
changelog:
  - Fix incorrect syscall name reporting in restart_syscall() on attach when
    PTRACE_GET_SYSCALL_INFO is in use (RHEL-65108).
  - Update net-yy-inet* and linkat--secontext_mismatch tests.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-6
changelog:
  - Avoid failures of creat.gen test on kernels that include commit
    v6.11-rc1~242^2~19 ("fs: don't block i_writecount during exec").


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.9.14-1.p3
changelog:
  - Rebase to 1.9.14p3
  - sudo-1_9_14p2 is available Resolves: rhbz#2175672
  - sudo fails to build with Python 3.12: FAILED: testcase
    check_example_group_plugin_is_able_to_debug() Resolves: rhbz#2186412


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-5.p5
changelog:
  - RHEL 10.0 ERRATUM
  - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
    positive(s) Resolves: RHEL-44436
  - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864


author: Alejandro López <allopez@redhat.com> - 1.9.15-9.p5
changelog:
  - RHEL 10.1 ERRATUM
  - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009
  - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022


author: systemd maintenance team <systemd-maint@redhat.com> - 256-6
changelog:
  - doc: add downstream CONTRIBUTING document (RHEL-40924)
  - ci: allow `policy` as rhel-only keyword (RHEL-40924)
  -  ci: run mkosi test only for Fedora and CentOS Stream (RHEL-40924)
  - taint: remove unused variable `usr_sbin` (RHEL-40924)
  - packit: drop the libarchive workaround (RHEL-40924)
  - packit: drop the dependency on python3-zstd (RHEL-40924)
  - coredump: by default process and store core files up to 1GiB (RHEL-46778)
  - don't ship systemd-ssh-generator harder (RHEL-40924)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-8
changelog:
  - Avoid /tmp being mounted as tmpfs without the user's will (RHEL-40924)
  - unit: don't add Requires for tmp.mount (RHEL-40924)
  - units: add [Install] section to tmp.mount (RHEL-40924)
  - units: don't enable tmp.mount statically in local-fs.target (RHEL-40924)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-12
changelog:
  - netif-naming-scheme: add rhel-9.5 scheme (RHEL-44416)
  - udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT (RHEL-44416)
  - man/net-naming-scheme: add missing period (RHEL-44416)
  - Revert "packit: drop the dependency on python3-zstd" (RHEL-36636)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-13
changelog:
  - systemctl: do not try to acquire triggering units for template units (RHEL-55132)
  - core/unit: add one assertion for u->manager (RHEL-55734)
  - core/service: destroy runtime data when Type=oneshot services exit (RHEL-55734)
  - cgroup-util: Ignore kernel threads in cg_kill_items() (RHEL-55746)
  - cgroup-util: Don't try to open pidfd for kernel threads (RHEL-55746)
  - cgroup-util: fix typo (RHEL-55746)
  - netif-naming-scheme: rename rhel-10.0 to rhel-10.0.beta (RHEL-55728)
  - net-naming-scheme: disable NAMING_FIRMWARE_NODE_SUN (RHEL-55728)
  - net-naming-scheme: remove NAMING_FIRMWARE_NODE_SUN from 9.5 (RHEL-55728)
  - make systemd-ukify subpackage arch dependent (RHEL-52634)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-14
changelog:
  - Revert "cgroup-util: Don't try to open pidfd for kernel threads" (RHEL-52634)
  - ukify: Skip test on architectures without UEFI (RHEL-52634)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-15
changelog:
  - ci: rename beta branch to match dist-git name (RHEL-57603)
  - udev: Handle PTP device symlink properly on udev action 'change' (RHEL-59871)
  - Fix detection of TDX confidential VM on Azure platform (RHEL-56144)
  - confidential-virt: split caching of CVM detection into separate method (RHEL-56144)
  - confidential-virt: add detection for s390x target (RHEL-56144)
  - man/systemd-detect-virt: fix row spanning for VM header (RHEL-56144)
  - man/systemd-detect-virt: list known CVM technologies (RHEL-56144)


author: Jan Macku <jamacku@redhat.com> - 257-3
changelog:
  - udev/net_id: introduce naming scheme for RHEL-9.6 (RHEL-44417)
  - Rebase to new upstream stable release v257.2 (RHEL-71409)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-4
changelog:
  - ci: use ubuntu 22:04 for deploy of man pages (RHEL-57603)
  - tree-wide: Fix python formatting (RHEL-57603)
  - ci: fix Packit (RHEL-57603)
  - ci: drop testing farm test (RHEL-57603)
  - dbus: stash the subscriber list when we disconenct from the bus (RHEL-73780)
  - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-73780)
  - shared/bus-util: move bus_message_read_id128() to bus-message-util (RHEL-73780)
  - shared/bus-util: move bus_message_hash_ops to bus-message-util (RHEL-73780)
  - shared/bus-util: move string set append/get funcs to bus-message-util and bus-get-properties, respectively (RHEL-73780)
  - shared/serialize: make input params const (RHEL-73780)
  - shared/serialize: introduce serialize_id128() (RHEL-73780)
  - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-73780)
  - core/manager: use FOREACH_ARRAY at one more place (RHEL-73780)
  - core/manager: drop duplicate bus track deserialization (RHEL-73780)
  - bus-util: introduce bus_get_instance_id() (RHEL-73780)
  - core: serialize API bus id and validate before deserializing bus tracks (RHEL-73780)
  - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-73780)
  - shared/bus-util: add missing `set.h` include (RHEL-73780)
  - udevadm-test: add missing oom check (RHEL-75774)
  - udev-rules: replace 'type *func()' -> 'type* func()' (RHEL-75774)
  - udev-rules: do not change maximum log level when running in test mode (RHEL-75774)
  - udevadm-test: introduce -v/--verbose option to show verbose log messages (RHEL-75774)
  - udev-rules: show original token string in log_event_error() and friends (RHEL-75774)
  - udev-rules: logs result of format substitution (RHEL-75774)
  - udev-rules: add more trace logs for string match (RHEL-75774)
  - udev-rules: introduce udev_replace_chars_and_log() (RHEL-75774)
  - udev-rules: ignore whole command result if it is too long and does not contain newline (RHEL-75774)
  - udev-rules: update log messages (RHEL-75774)
  - udev-rules: add trace logs for GOTO and parent conditions (RHEL-75774)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-8
changelog:
  - Rebase to new upstream stable release v257.3 (RHEL-71409)
  - udev: introduce several features to make debugging rules easier (RHEL-75774)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-10
changelog:
  - resolved: pick up new DNSSEC KSC from 2024 (RHEL-77718)
  - test_ukify: Skip on riscv64 (RHEL-85854)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-11
changelog:
  - fuzz-journal-remote: use ASSERT_OK() and friends (RHEL-79976)
  - logs-show: skip journal entry with an invalid timestamp (RHEL-79976)
  - man: mention that rhel-9.0 net naming scheme is the same as v251 (RHEL-87179)
  - backlight: Drop support for actual_brightness (RHEL-86713)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-12
changelog:
  - mkosi: use C10S repo for building RPMs (RHEL-79976)
  - test: adapt TEST-22 to the downstream --purge behavior (RHEL-79976)
  - mkosi: reconfigure the CI for CentOS Stream 10 (RHEL-79976)
  - test: skip tests for components not shipped in RHEL 10 (RHEL-79976)
  - ci: add a unique identifier to each GH Actions job (RHEL-79976)
  - test: limit logging when running TEST-21-DFUZZER (RHEL-79976)
  - man: mention RHEL documentation in systemctl's man page (RHEL-97762)
  - ukify: switch from zstd to zstandard (RHEL-97625)
  - ukify: fix zboot parsing with zstd (RHEL-97625)
  - ukify: if the specified kernel is not a valid PE file try to decompress it (RHEL-97625)
  - ukify: fix version detection for aarch64 zboot kernels with gzip or lzma compression (RHEL-97625)
  - ukify: when decompressing kernel before signing, call verify on decompressed file (RHEL-97625)
  - udev/net_id: introduce naming scheme for RHEL-10.1 (RHEL-44419)
  - udev/net_id: introduce naming scheme for RHEL-9.7 (RHEL-44419)
  - sd-event: drop inotify event from buffer when no event source is triggered (RHEL-104555)
  - test: add test case for issue #38265 (RHEL-104555)
  - tree-wide: check more log message format in log_struct() and friends (RHEL-106260)
  - core: output log cycle path in one log message, not many (RHEL-106260)
  - core: make log cycle messages recognizable via message IDs (RHEL-106260)
  - core: change ordering cycle log message log levels (RHEL-106260)
  - core: cast log_oom() got void (RHEL-106260)
  - core: when removing a job from a transaction, include in structured log message which (RHEL-106260)
  - catalog: add entries for the order cycle log messages (RHEL-106260)
  - flush_ports: flush POSIX message queues properly (RHEL-100553)
  - Add --entry-type=type1|type2 option to kernel-install. (RHEL-103354)
  - kernel-install: regroup options in help meesage (RHEL-103354)
  - kernel-install: do not mix || and && (RHEL-103354)
  - man/kernel-install: mention --entry-type= option in the man page (RHEL-103354)
  - bootspec: rename boot_entry_type_to_string() to boot_entry_type_description_to_string() (RHEL-103354)
  - bootspec: include 'UKI' in descriptive name for type #2 (RHEL-103354)
  - bootspec: rename BootEntryType values (RHEL-103354)
  - bootspec: rename boot_entry_source_to_string() to boot_entry_source_description_to_string() (RHEL-103354)
  - bootspec: boot_entry_source_to_json_string() to boot_entry_source_to_string() (RHEL-103354)
  - 90-uki-copy.install: Skip removing UKI related when BOOT_ENTRY_TYPE=type1 (RHEL-103354)
  - hwdb: add front button support for MSI Claw 7 AI+ A2VM (RHEL-72701)
  - hwdb: add accel orientation and location for the BMAX Y14 (RHEL-72701)
  - hwdb.d: add support for Akoya P15645 (RHEL-72701)
  - hwdb.d: add ANP09 Intel n100 tablet sensor configuration (#36390) (RHEL-72701)
  - hwdb: add axis range corrections for the Lenovo Yoga Slim 7 14ARE05 (RHEL-72701)
  - hwdb: add GOLD WARRIOR SIM PhoenixRC 10411R (RHEL-72701)
  - hwdb: add Code Mercenaries Hard- und Software GmbH Virtual RC USB (RHEL-72701)
  - hwdb: Add accel orientation quirk for the GPD Pocket 4 (RHEL-72701)
  - hwdb: add rotation profile matrix for Rog Ally X (2024) (#36591) (RHEL-72701)
  - hwdb: fix backspace not working on HP Pavilion laptop (#36777) (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO NB02 devices (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO InfinityFlex 14 Gen1 (RHEL-72701)
  - hwdb: add G-Mode key support (#37175) (RHEL-72701)
  - Add emulated release to G-Mode key (RHEL-72701)
  - hwdb: keyboard: Add Alienware special keys (RHEL-72701)
  - hwdb: add bladeRF SDR devices (RHEL-72701)
  - hwdb: append ID_SOFTWARE_RADIO to hwdb parser (RHEL-72701)
  - hwdb.d: reword and simplify boilerplate texts (RHEL-72701)
  - hwdb.d: update/expand boilerplate on various hwdb files (RHEL-72701)
  - hwdb: say that settings can be also set to 0 (RHEL-72701)
  - hwdb: add Analog Devices PLUTO SDR (RHEL-72701)
  -  hwdb: append ID_MM_DEVICE_IGNORE to hwdb parser (RHEL-72701)
  - hwdb: run "update-hwdb" (RHEL-72701)
  - hwdb: run "update-hwdb-autosuspend" (RHEL-72701)
  - hwdb: add missing PLUTO SDR vendor name (RHEL-72701)
  - hwdb: add Ettus Research SDR devices (RHEL-72701)
  - hwdb: add RTL-SDR devices (RHEL-72701)
  - hwdb: merge entries for Ettus Research B200 (RHEL-72701)
  - hwdb: make Saitek PLC Pro Flight Rudder Pedals a joystick (#37601) (RHEL-72701)
  - hwdb: fix touchpad for ASUS X1504ZA (#37696) (RHEL-72701)
  - hwdb: add support for Loupedeck devices (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Mic Toggle (RHEL-72701)
  - hwdb: Added Beacn and TC-Helicon Audio controllers (#37798) (RHEL-72701)
  - hwdb: Add support for Lenovo IdeaPad Slim 5 series (RHEL-72701)
  - hwdb: Add hwbd definitions for maker tools (RHEL-72701)
  - hwdb: Add accel orientation quirk for the Microtech e-tab Pro (RHEL-72701)
  - hwdb: add 70-maker-tools.hwdb to meson.build (RHEL-72701)
  - hwdb: fix typo in 70-maker-tools.hwdb (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - Fix Positivo K116J search key and www shortcut (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Nitro Sense Toggle (RHEL-72701)
  - hwdb: several cleanups (RHEL-72701)
  - hwdb: disable Asus ROG keyboards sending poweroff (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - hwdb: update autosuspend rules (RHEL-72701)
  - hwdb: set touchpad resolution for ThinkPad T14 Gen2a (RHEL-72701)
  - Revert "hwdb: disable Asus ROG keyboards sending poweroff" (RHEL-72701)
  - hwdb: Add launch emoji keyboard mapping for Asus M1607KA (RHEL-72701)
  - Enable KEY_PERFORMANCE key present on Linux 6.17 (RHEL-72701)
  - hwdb: add HP 150 Wired Mouse (#37341) (RHEL-72701)


author: Jan Macku <jamacku@redhat.com> - 257-1
changelog:
  - Rebase to new upstream release v257 (RHEL-71409)
  - netif-naming-scheme: introduce rhel-10.0 scheme (RHEL-44417)


author: Jakub Martisko <jamartis@redhat.com> - 6.0-65
changelog:
  - Fix: Unzip Fails on Large Zip Files
  - Use the patch from Debian dealing with this
  Resolves: RHEL-45993


author: Jakub Martisko <jamartis@redhat.com> - 6.0-67
changelog:
  - zipinfo: remove the extra %c that caused invalid reads
  - zipinfo: fix the whitespaces in the output
  - Zipbombs: Port Another patch, orinally made by Mark Adler
  - https://github.com/madler/unzip/commit/af0d07f95809653b669d88aa0f424c6d5aa48ba0
    Resolves: RHEL-59972
    Resolves: RHEL-6286


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.076-2
changelog:
  - enable building without GPM support - build with GPM in Fedora
  - 2262371 - gvim: symbol lookup error: gvim: undefined symbol: g_once_init_enter_pointer


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1:2.10-8
changelog:
  - Backport WPA3 support for Broadcom devices. Fixes: rhbz#2226569
  - Enable parsing of IPv6 addresses in RADIUS configuration (#2095296)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.10-10
changelog:
  - Fix package configuration/add missing patches to avoid regressions when
    upgrading from rhel-9 (RHEL-43250)
  - Backport P2P fixc causing nmci failures (RHEL-17701)
  - Disable OpenSSL ENGINE API (RHEL-33750)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.10-10
changelog:
  - Fix package configuration/add missing patches to avoid regressions when
    upgrading from rhel-9 (RHEL-43250)
  - Backport P2P fix causing nmci failures (RHEL-17701)
  - Disable OpenSSL ENGINE API (RHEL-33750)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.11-1
changelog:
  - Update to version 2.11 (RHEL-59010)
  - backport fix for known regression on brcmfmac (rhbz#2302577)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.11-4
changelog:
  - Use pkcs11 provider to resolve PKCS11 URIs (RHEL-86951)
  - De-clutter syslog from CTRL-EVENT-SIGNAL-CHANGE messages (RHEL-71344)


author: Jakub Martisko <jamartis@redhat.com> - 3.0-42
changelog:
  - Use C implementation of some functions instead of asm
  - Fix the missing compiler/linker flags
  - Minor spec clean up
  Resolves: RHEL-33526


