# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-247.el10]
changelog:
  - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180047] {CVE-2026-46155}
  - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180047]
  - nvme-fc: Do not cancel requests in io target before it is initialized (Utkarsh Singh) [RHEL-178259]
  - tg3: Fix race for querying speed/duplex (Thomas Walsh) [RHEL-182561]
  - EDAC/amd64: Add support for AMD family 1Ah-based newer models (Joel Savitz) [RHEL-100950]
  - EDAC/mc_sysfs: Increase legacy channel support to 16 (Joel Savitz) [RHEL-100950]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [gve] (Michal Schmidt) [RHEL-178516]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [gve] (Michal Schmidt) [RHEL-178516]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [gve] (Michal Schmidt) [RHEL-178516]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [gve] (Michal Schmidt) [RHEL-178516]
  - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-178516]
  - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-178516]
  - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-178516]
  - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-178516]
  - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-178516]
  - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-178516]
  - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-178516]
  - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-178516] {CVE-2026-23386}
  - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-178516]
  - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-178516] {CVE-2026-23262}
  - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-178516]
  - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-178516]
  - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-178516] {CVE-2025-71156}
  - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-178516]
  - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-178516]
  - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-178516]
  - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-178516]
  - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-178516]
  - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-178516]
  - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-178516]
  - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-178516]
  - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-178516]
  - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-178516]
  - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-178516] {CVE-2025-40298}
  - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-178516] {CVE-2025-40299}
  - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-178516]
  - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-178516]
  - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-178516] {CVE-2025-38735}
  - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-178516]
  - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-178516]
  - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-178516]
  - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-178516]
  - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-178516]
  - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-178516]
  - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-178516]
  - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-178516]
  - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-178516]
  - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-178516]
  - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-178516]
  - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-178516]
  - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-178516]
  - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-178516]
  - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-178516]
  - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-178516]
  - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-178516]
  - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-178516]
  - gve: Add initial PTP device support (Michal Schmidt) [RHEL-178516]
  - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-178516]
  - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-178516]
  - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-178516] {CVE-2025-38122}
  - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-178516]
  - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-178516]
  - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-178516]
  - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-178516]
  - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-178516]
  - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-178516]
  - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-178516]
  - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-178516]
  - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-178516]
  - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-178516]
  - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-178516]
  - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-178516]
  - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-178516]
  - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-178516]
  - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-178516]
  - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-178516] {CVE-2024-57933}
  - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-178516] {CVE-2024-57932}
  - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-178516]
  - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-178516]
  - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-178516]
  - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-178516]
  - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-178516]
  - gve: add support for basic queue stats (Michal Schmidt) [RHEL-178516]
  - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-178516]
  - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-178516]
  - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-178516]
  - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-178516]
  - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180077] {CVE-2026-46150}
  - sched: idle: Make skipping governor callbacks more consistent (Mark Langsdorf) [RHEL-176383]
  - cpuidle: menu: Remove single state handling (Mark Langsdorf) [RHEL-176383]
  - cpuidle: teo: Remove single state handling (Mark Langsdorf) [RHEL-176383]
  - cpuidle: haltpoll: Remove single state handling (Mark Langsdorf) [RHEL-176383]
  - cpuidle: Skip governor when only one idle state is available (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Refine intercepts-based idle state lookup (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Adjust the classification of wakeup events (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Refine tick_intercepts vs total events check (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Avoid fake intercepts produced by tick (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Avoid selecting states with zero-size bins (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: menu: Always check timers with tick stopped (Mark Langsdorf) [RHEL-176383]
  - cpuidle: zynq: Switch Michal Simek's email to new one (Mark Langsdorf) [RHEL-176383]
  - cpuidle: menu: Remove incorrect unlikely() annotation (Mark Langsdorf) [RHEL-176383]
  - cpuidle: tegra: Export tegra_cpuidle_pcie_irqs_in_use() (Mark Langsdorf) [RHEL-176383]
  - cpuidle: big_little: Simplify with of_machine_device_match() (Mark Langsdorf) [RHEL-176383]
  - cpuidle: Warn instead of bailing out if target residency check fails (Mark Langsdorf) [RHEL-176383]
  - cpuidle: Update header inclusion (Mark Langsdorf) [RHEL-176383]
  - cpuidle: Respect the CPU system wakeup QoS limit for cpuidle (Mark Langsdorf) [RHEL-176383]
  - sched: idle: Respect the CPU system wakeup QoS limit for s2idle (Mark Langsdorf) [RHEL-176383]
  - pmdomain: Respect the CPU system wakeup QoS limit for s2idle (Mark Langsdorf) [RHEL-176383]
  - PM: QoS: Introduce a CPU system wakeup QoS limit (Mark Langsdorf) [RHEL-176383]
  - redhat/configs: enable CONFIG_PM_QOS_CPU_SYSTEM_WAKEUP (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Add missing space to the description (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Simplify intercepts-based state lookup (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Fix tick_intercepts handling in teo_update() (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Rework the handling of tick wakeups (Mark Langsdorf) [RHEL-176383]
  - cpuidle: psci: Replace deprecated strcpy in psci_idle_init_cpu (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Decay metrics below DECAY_SHIFT threshold (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Use s64 consistently in teo_update() (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Drop redundant function parameter (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Drop misguided target residency check (Mark Langsdorf) [RHEL-176383]
  - cpuidle: teo: Use this_cpu_ptr() where possible (Mark Langsdorf) [RHEL-176383]
  - cpuidle: Add sanity check for exit latency and target residency (Mark Langsdorf) [RHEL-176383]
  - cpuidle: riscv-sbi: Replace deprecated strcpy in sbi_cpuidle_init_cpu (Mark Langsdorf) [RHEL-176383]
  - Revert "cpuidle: menu: Avoid discarding useful information" (Mark Langsdorf) [RHEL-176383]
  - cpuidle: Fail cpuidle device registration if there is one already (Mark Langsdorf) [RHEL-176383]
  - cpuidle: sysfs: Use sysfs_emit()/sysfs_emit_at() instead of sprintf()/scnprintf() (Mark Langsdorf) [RHEL-176383]
  - cpuidle: qcom-spm: drop unnecessary initialisations (Mark Langsdorf) [RHEL-176383]
  - cpuidle: qcom-spm: fix device and OF node leaks at probe (Mark Langsdorf) [RHEL-176383]
  - cpuidle: riscv-sbi: Drop redundant sync_state support (Mark Langsdorf) [RHEL-176383]
  - cpuidle: riscv-sbi: Opt-out from genpd's common ->sync_state() support (Mark Langsdorf) [RHEL-176383]
  - dt-bindings: arm: qcom,ids: add SoC ID for IPQ5424/IPQ5404 (Mark Langsdorf) [RHEL-176381]
  - arm64: topology: Fix false warning in counters_read_on_cpu() for same-CPU reads (Mark Langsdorf) [RHEL-176381]
  - cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path (Mark Langsdorf) [RHEL-176381]
  - cpufreq: conservative: Reset requested_freq on limits change (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Don't skip cpufreq_frequency_table_cpuinfo() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: s5pv210: Simplify with scoped for each OF child loop (Mark Langsdorf) [RHEL-176381]
  - cpufreq: ondemand: Simplify idle cputime granularity test (Mark Langsdorf) [RHEL-176381]
  - cpufreq: userspace: make scaling_setspeed return the actual requested frequency (Mark Langsdorf) [RHEL-176381]
  - cpufreq: scmi: Fix device_node reference leak in scmi_cpu_domain_id() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: ti-cpufreq: add support for AM62L3 SoC (Mark Langsdorf) [RHEL-176381]
  - cpufreq: dt-platdev: Add ti,am62l3 to blocklist (Mark Langsdorf) [RHEL-176381]
  - cpufreq: scmi: correct SCMI explanation (Mark Langsdorf) [RHEL-176381]
  - cpufreq: dt-platdev: Block the driver from probing on more QC platforms (Mark Langsdorf) [RHEL-176381]
  - cpufreq: CPPC: Update FIE arch_freq_scale in ticks for non-PCC regs (Mark Langsdorf) [RHEL-176381]
  - cpufreq: CPPC: Factor out cppc_fie_kworker_init() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: qcom-nvmem: add sentinel to qcom_cpufreq_ipq806x_match_list (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Add Tegra186 and Tegra194 to cpufreq-dt-platdev blocklist (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Add new helper function returning cpufreq policy (Mark Langsdorf) [RHEL-176381]
  - cpufreq: dt-platdev: Fix creating device on OPPv1 platforms (Mark Langsdorf) [RHEL-176381]
  - cpufreq: cpufreq_boost_trigger_state() optimization (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Return -EOPNOTSUPP if no policy supports boost (Mark Langsdorf) [RHEL-176381]
  - cpufreq: sun50i: Simplify with of_machine_device_match() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek: Simplify with of_machine_get_match_data() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: dt-platdev: Simplify with of_machine_get_match_data() (Mark Langsdorf) [RHEL-176381]
  - of: Add of_machine_get_match() helper (Mark Langsdorf) [RHEL-176381]
  - of: Add wrappers to match root node with OF device ID tables (Mark Langsdorf) [RHEL-176381]
  - cpufreq: qcom-nvmem: fix compilation warning for qcom_cpufreq_ipq806x_match_list (Mark Langsdorf) [RHEL-176381]
  - cpufreq: ACPI: Replace udelay() with usleep_range() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: tegra194: add WQ_PERCPU to alloc_workqueue users (Mark Langsdorf) [RHEL-176381]
  - cpufreq: qcom-nvmem: add compatible fallback for ipq806x for no SMEM (Mark Langsdorf) [RHEL-176381]
  - cpufreq: CPPC: Don't warn if FIE init fails to read counters (Mark Langsdorf) [RHEL-176381]
  - cpufreq: nforce2: fix reference count leak in nforce2 (Mark Langsdorf) [RHEL-176381]
  - cpufreq: tegra186: add OPP support and set bandwidth (Mark Langsdorf) [RHEL-176381]
  - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist (Mark Langsdorf) [RHEL-176381]
  - cpufreq: s5pv210: fix refcount leak (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Replace deprecated strcpy() in cpufreq_unregister_governor() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: preserve freq_table_sorted across suspend/hibernate (Mark Langsdorf) [RHEL-176381]
  - cpufreq: tegra186: Initialize all cores to max frequencies (Mark Langsdorf) [RHEL-176381]
  - cpufreq: tegra186: Set target frequency for all cpus in policy (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek: fix device leak on probe failure (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Replace pointer subtraction with iteration macro (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Add defensive check during driver registration (Mark Langsdorf) [RHEL-176381]
  - cpufreq: ACPI: Use on_each_cpu_mask() in drv_write() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: conservative: Replace sscanf() with kstrtouint() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: core: Rearrange variable declarations involving __free() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Use int type to store negative error codes (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Drop redundant freq_table parameter (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek: avoid redundant conditions (Mark Langsdorf) [RHEL-176381]
  - cpufreq: tegra186: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176381]
  - cpufreq: s5pv210: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176381]
  - cpufreq: CPPC: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176381]
  - cpufreq: brcmstb-avs: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176381]
  - cpufreq: use strlen() for governor name comparison (Mark Langsdorf) [RHEL-176381]
  - cpufreq: simplify setpolicy/target check in driver verification (Mark Langsdorf) [RHEL-176381]
  - cpufreq: ti: Allow all silicon revisions to support OPPs (Mark Langsdorf) [RHEL-176381]
  - cpufreq: ti: Support more speed grades on AM62Px SoC (Mark Langsdorf) [RHEL-176381]
  - cpufreq: ti: Add support for AM62D2 (Mark Langsdorf) [RHEL-176381]
  - cpufreq: dt-platdev: Blacklist ti,am62d2 SoC (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek-hw: don't use error path on NULL fdvfs (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Avoid calling get_governor() for first policy (Mark Langsdorf) [RHEL-176381]
  - cpufreq: qcom-nvmem: Enable cpufreq for ipq5424 (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Remove unused parameter in cppc_perf_from_fbctrs() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: armada-37xx: use max() to calculate target_vm (Mark Langsdorf) [RHEL-176381]
  - cpufreq: airoha: Add support for AN7583 SoC (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek-hw: Add support for MT8196 (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek-hw: Separate per-domain and per-instance data (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek-hw: Refactor match data into struct (Mark Langsdorf) [RHEL-176381]
  - cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: armada-8k: make both cpu masks static (Mark Langsdorf) [RHEL-176381]
  - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-171990]
  - selftests: net: add bridge STP mode selection test (Mohammad Heib) [RHEL-171990]
  - docs: net: bridge: document stp_mode attribute (Mohammad Heib) [RHEL-171990]
  - net: bridge: add stp_mode attribute for STP mode selection (Mohammad Heib) [RHEL-171990]
  - selftests: net: bridge_vlan_mcast: wait for h1 before querier check (Mohammad Heib) [RHEL-171990]
  - bridge: guard local VLAN-0 FDB helpers against NULL vlan group (Mohammad Heib) [RHEL-171990]
  - bridge: mrp: reject zero test interval to avoid OOM panic (Mohammad Heib) [RHEL-171990]
  - bridge: br_nd_send: validate ND option lengths (Mohammad Heib) [RHEL-171990]
  - bridge: br_nd_send: linearize skb before parsing ND options (Mohammad Heib) [RHEL-171990]
  - bridge: No DEV_PATH_BR_VLAN_UNTAG_HW for dsa foreign (Mohammad Heib) [RHEL-171990]
  - bridge: cfm: Fix race condition in peer_mep deletion (Mohammad Heib) [RHEL-171990]
  - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled (Mohammad Heib) [RHEL-171990]
  - selftests: net: Add bridge VLAN range grouping tests (Mohammad Heib) [RHEL-171990]
  - bridge: Check relevant per-VLAN options in VLAN range grouping (Mohammad Heib) [RHEL-171990]
  - selftests: forwarding: bridge_mdb_max: add tests for mdb_n_entries warning (Mohammad Heib) [RHEL-171990]
  - net: bridge: mcast: always update mdb_n_entries for vlan contexts (Mohammad Heib) [RHEL-171990]
  - net: bridge: use sysfs_emit instead of sprintf (Mohammad Heib) [RHEL-171990]
  - net: bridge: fix static key check (Mohammad Heib) [RHEL-171990]
  - net: bridge: mcast: fix memcpy with u64_stats (Mohammad Heib) [RHEL-171990]
  - u64_stats: Introduce u64_stats_copy() (Mohammad Heib) [RHEL-171990]
  - bus: mhi: ep: Use bus callbacks for .probe() and .remove() (Jose Ignacio Tornos Martinez) [RHEL-171362]
  - bus: mhi: host: Use bus callbacks for .probe() and .remove() (Jose Ignacio Tornos Martinez) [RHEL-171362]
  - bus: mhi: host: Drop the auto_queue support (Jose Ignacio Tornos Martinez) [RHEL-171362]
  - net: qrtr: Drop the MHI auto_queue feature for IPCR DL channels (Jose Ignacio Tornos Martinez) [RHEL-171362]
  - mhi: host: Add support for loading dual ELF image format (Jose Ignacio Tornos Martinez) [RHEL-171362]
  - net: ethtool: pass genl_info to the ethnl parse_request operation (Mohammad Heib) [RHEL-167299]
  - selftests: rss_drv: Add RSS indirection table resize tests (Mohammad Heib) [RHEL-167299]
  - docs: networking: mention that RSS table should be 4x the queue count (Mohammad Heib) [RHEL-167299]
  - selftests: drv-net: rss: validate min RSS table size (Mohammad Heib) [RHEL-167299]
  - ethtool: Add RSS indirection table resize helpers (Mohammad Heib) [RHEL-167299]
  - ethtool: Track user-provided RSS indirection table size (Mohammad Heib) [RHEL-167299]
  - net: ethtool: re-order local includes (Mohammad Heib) [RHEL-167299]
  - net: ethtool: add ethtool COALESCE_RX_CQE_FRAMES/NSECS (Mohammad Heib) [RHEL-167299]
  - ynl: ethtool: remove duplicated unspec entry (Mohammad Heib) [RHEL-167299]
  - net: ethtool: Update doc for tunable (Mohammad Heib) [RHEL-167299]
  - net: ethtool: Track pause storm events (Mohammad Heib) [RHEL-167299]
  - net: rss: fix reporting RXH_XFRM_NO_CHANGE as input_xfrm for contexts (Mohammad Heib) [RHEL-167299]
  - ethtool: remove ETHTOOL_GRXRINGS fallback through get_rxnfc (Mohammad Heib) [RHEL-167299]
  - net: ethtool: Add support for 80Gbps speed (Mohammad Heib) [RHEL-167299]
  - ethtool: uapi: Use UAPI definition of INT_MAX (Mohammad Heib) [RHEL-167299]
  - uapi: add INT_MAX and INT_MIN constants (Mohammad Heib) [RHEL-167299]
  - ethtool: Clarify len/n_stats fields in/out semantics (Mohammad Heib) [RHEL-167299]
  - net: ethtool: Introduce ETHTOOL_LINK_MEDIUM_* values (Mohammad Heib) [RHEL-167299]
  - ethtool: Avoid overflowing userspace buffer on stats query (Mohammad Heib) [RHEL-167299]
  - ethtool: fix incorrect kernel-doc style comment in ethtool.h (Mohammad Heib) [RHEL-167299]
  - ethtool: netlink: add ETHTOOL_MSG_MSE_GET and wire up PHY MSE access (Mohammad Heib) [RHEL-167299]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-248.el10]
changelog:
  - ipv4: account for fraggap on the paged allocation path (Íñigo Huguet) [RHEL-191369]
  - ipv6: account for fraggap on the paged allocation path (Íñigo Huguet) [RHEL-191369] {CVE-2026-53362}
  - net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Sabrina Dubroca) [RHEL-192922]
  - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177855] {CVE-2026-46323}
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-178627] {CVE-2026-43503}
  - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176055] {CVE-2026-46300}
  - Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref (David Marlin) [RHEL-184635]
  - Bluetooth: MGMT: Fix backward compatibility with userspace (David Marlin) [RHEL-184635]
  - Bluetooth: SCO: Fix data-race on sco_pi fields in sco_connect (David Marlin) [RHEL-184635]
  - Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls (David Marlin) [RHEL-184635]
  - Bluetooth: ISO: Fix a use-after-free of the hci_conn pointer (David Marlin) [RHEL-184635]
  - Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync (David Marlin) [RHEL-184635]
  - Bluetooth: fix memory leak in error path of hci_alloc_dev() (David Marlin) [RHEL-184635]
  - Bluetooth: bnep: reject short frames before parsing (David Marlin) [RHEL-184635]
  - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (David Marlin) [RHEL-184635]
  - Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig (David Marlin) [RHEL-184635]
  - Bluetooth: RFCOMM: validate skb length in MCC handlers (David Marlin) [RHEL-184635]
  - Bluetooth: MGMT: validate advertising TLV before type checks (David Marlin) [RHEL-184635]
  - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (David Marlin) [RHEL-184635]
  - Bluetooth: hci_sync: Reset device counters in hci_dev_close_sync() (David Marlin) [RHEL-184635]
  - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (David Marlin) [RHEL-184635]
  - Bluetooth: hci_core: Rework hci_dev_do_reset() to use hci_sync functions (David Marlin) [RHEL-184635]
  - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (David Marlin) [RHEL-184635]
  - Bluetooth: ISO: fix UAF in iso_recv_frame (David Marlin) [RHEL-184635]
  - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (David Marlin) [RHEL-184635]
  - Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success (David Marlin) [RHEL-184635]
  - Bluetooth: hci_qca: Use 100 ms SSR delay for rampatch and NVM loading (David Marlin) [RHEL-184635]
  - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (David Marlin) [RHEL-184635]
  - Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt() (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Allow firmware re-download when version matches (David Marlin) [RHEL-184635]
  - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (David Marlin) [RHEL-184635]
  - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-184635]
  - Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn (David Marlin) [RHEL-184635]
  - Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate() (David Marlin) [RHEL-184635]
  - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (David Marlin) [RHEL-184635]
  - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (David Marlin) [RHEL-184635]
  - Bluetooth: MGMT: validate Add Extended Advertising Data length (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: fix urb->setup_packet leak in error paths (David Marlin) [RHEL-184635]
  - Bluetooth: ISO: drop ISO_END frames received without prior ISO_START (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: Fix incorrect MAC access programming (David Marlin) [RHEL-184635]
  - Bluetooth: hci_sync: Fix not setting mask for HCI_EVT_LE_ALL_REMOTE_FEATURES_COMPLETE (David Marlin) [RHEL-184635]
  - Bluetooth: bnep: Fix UAF read of dev->name (David Marlin) [RHEL-184635]
  - Bluetooth: hci_qca: Convert timeout from jiffies to ms (David Marlin) [RHEL-184635]
  - Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: accept too short WMT FUNC_CTRL events (David Marlin) [RHEL-184635]
  - Bluetooth: serialize accept_q access (David Marlin) [RHEL-184635]
  - Bluetooth: HIDP: serialise l2cap_unregister_user via hidp_session_sem (David Marlin) [RHEL-184635]
  - Bluetooth: hci_event: fix memset typo (David Marlin) [RHEL-184635]
  - Bluetooth: RFCOMM: pull credit byte with skb_pull_data() (David Marlin) [RHEL-184635]
  - Bluetooth: virtio_bt: validate rx pkt_type header length (David Marlin) [RHEL-184635]
  - Bluetooth: virtio_bt: clamp rx length before skb_put (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: validate WMT event SKB length before struct access (David Marlin) [RHEL-184635]
  - Bluetooth: ISO: Fix data-race on iso_pi(sk) in socket and HCI event paths (David Marlin) [RHEL-184635]
  - Bluetooth: ISO: Fix data-race on dst in iso_sock_connect() (David Marlin) [RHEL-184635]
  - Bluetooth: hci_uart: Fix NULL deref in recv callbacks when priv is uninitialized (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: treat boot stage bit 12 as warning (David Marlin) [RHEL-184635]
  - Bluetooth: SCO: hold sk properly in sco_conn_ready (David Marlin) [RHEL-184635]
  - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (David Marlin) [RHEL-184635]
  - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (David Marlin) [RHEL-184635]
  - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() (David Marlin) [RHEL-184635]
  - Bluetooth: l2cap: defer conn param update to avoid conn->lock/hdev->lock inversion (David Marlin) [RHEL-184635]
  - Bluetooth: l2cap: fix MPS check in l2cap_ecred_reconf_req (David Marlin) [RHEL-184635]
  - Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension handling (David Marlin) [RHEL-184635]
  - Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt (David Marlin) [RHEL-184635]
  - Bluetooth: hci_conn: fix potential UAF in create_big_sync (David Marlin) [RHEL-184635]
  - Bluetooth: SCO: fix sleeping under spinlock in sco_conn_ready (David Marlin) [RHEL-184635]
  - Bluetooth: hci_qca: Fix missing wakeup during SSR memdump handling (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: use strscpy to copy plain strings (David Marlin) [RHEL-184635]
  - Bluetooth: SCO: check for codecs->num_codecs == 1 before assigning to sco_pi(sk)->codec (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: Align shared DMA memory to 128 bytes (David Marlin) [RHEL-184635]
  - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (David Marlin) [RHEL-184635]
  - Bluetooth: hci_ll: Enable BROKEN_ENHANCED_SETUP_SYNC_CONN for WL183x (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: MediaTek MT7922: Add VID 0489 & PID e11d (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: hide unused btmtk_mt6639_devs[] array (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add MT7927 ID for ASUS X870E / ProArt X870E-Creator (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add MT7927 ID for TP-Link Archer TBE550E (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add MT7927 ID for MSI X870E Ace Max (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add MT7927 ID for Gigabyte Z790 AORUS MASTER X (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add MT7927 ID for Lenovo Legion Pro 7 16ARX9 (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add MT7927 ID for ASUS ROG Crosshair X870E Hero (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: fix ISO interface setup for single alt setting (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: Add MT6639 (MT7927) Bluetooth support (David Marlin) [RHEL-184635]
  - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: refactor endpoint lookup (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: refactor endpoint lookup (David Marlin) [RHEL-184635]
  - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (David Marlin) [RHEL-184635]
  - Bluetooth: hci_sync: make hci_cmd_sync_run_once return -EEXIST if exists (David Marlin) [RHEL-184635]
  - Bluetooth: hci_qca: disable power control for WCN7850 when bt_en is not defined (David Marlin) [RHEL-184635]
  - bluetooth: btusb: Fix whitespace in btusb.c (David Marlin) [RHEL-184635]
  - Bluetooth: qca: enable pwrseq support for WCN39xx devices (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pci: Fix btintel_pcie_read_hwexp code style (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: Add device id of Scorpious2, Nova Lake-PCD-S (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: Add device id of Scorpius Peak2, Nova Lake-PCD-H (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: Add support for exception dump for ScP2F (David Marlin) [RHEL-184635]
  - Bluetooth: btintel: Add support for Scorpious Peak2F support (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: Add support for exception dump for ScP2 (David Marlin) [RHEL-184635]
  - Bluetooth: btintel: Add DSBR support for ScP2 onwards (David Marlin) [RHEL-184635]
  - Bluetooth: btintel: Add support for Scorpious Peak2 support (David Marlin) [RHEL-184635]
  - Bluetooth: btintel: Replace CNVi id with hardware variant (David Marlin) [RHEL-184635]
  - Bluetooth: btintel: Add support for hybrid signature for ScP2 onwards (David Marlin) [RHEL-184635]
  - Bluetooth: L2CAP: CoC: Disconnect if received packet size exceeds MPS (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: add MT7902 SDIO support (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add new VID/PID 0e8d/1ede for MT7902 (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add new VID/PID 13d3/3596 for MT7902 (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add new VID/PID 13d3/3594 for MT7902 (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add new VID/PID 13d3/3580 for MT7902 (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add new VID/PID 13d3/3579 for MT7902 (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: add MT7902 MCU support (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: Use struct_size to improve hci_drv_read_info (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add Lite-On 04ca:3807 for MediaTek MT7921 (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: Replace snprintf("%s") with strscpy (David Marlin) [RHEL-184635]
  - Bluetooth: hci_qca: Fix BT not getting powered-off on rmmod (David Marlin) [RHEL-184635]
  - Bluetooth: hci_qca: Fix confusing shutdown() and power_off() naming (David Marlin) [RHEL-184635]
  - Bluetooth: btbcm: Add entry for BCM4343A2 UART Bluetooth (David Marlin) [RHEL-184635]
  - Bluetooth: qca: Refactor code on the basis of chipset names (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: Add reset mechanism if downloading firmware failed (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: add status check in mt79xx firmware setup (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: improve mt79xx firmware setup retry flow (David Marlin) [RHEL-184635]
  - Bluetooth: btbcm: remove done label in btbcm_patchram (David Marlin) [RHEL-184635]
  - Bluetooth: hci_core: Rate limit the logging of invalid ISO handle (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: MT7922: Add VID/PID 0489/e174 (David Marlin) [RHEL-184635]
  - klp-build: Fix patch cleanup on interrupt (Yannick Cote) [RHEL-152194]
  - selftests/livepatch: add test for module function patching (Yannick Cote) [RHEL-152194]
  - livepatch/klp-build: report patch validation fuzz (Yannick Cote) [RHEL-152194]
  - livepatch/klp-build: add terminal color output (Yannick Cote) [RHEL-152194]
  - livepatch/klp-build: provide friendlier error messages (Yannick Cote) [RHEL-152194]
  - livepatch/klp-build: improve short-circuit validation (Yannick Cote) [RHEL-152194]
  - livepatch/klp-build: fix shellcheck complaints (Yannick Cote) [RHEL-152194]
  - livepatch/klp-build: add Makefile with check target (Yannick Cote) [RHEL-152194]
  - livepatch/klp-build: add grep-override function (Yannick Cote) [RHEL-152194]
  - livepatch/klp-build: switch to GNU patch and recountdiff (Yannick Cote) [RHEL-152194]
  - livepatch/klp-build: support patches that add/remove files (Yannick Cote) [RHEL-152194]
  - selftests: livepatch: test-ftrace: livepatch a traced function (Yannick Cote) [RHEL-152194]
  - crypto: asymmetric_keys - Remove unused key_being_used_for[] (Thomas Huth) [RHEL-186630]
  - crypto: skcipher - call cond_resched() directly (Thomas Huth) [RHEL-186630]
  - crypto: skcipher - optimize initializing skcipher_walk fields (Thomas Huth) [RHEL-186630]
  - crypto: skcipher - clean up initialization of skcipher_walk::flags (Thomas Huth) [RHEL-186630]
  - crypto: skcipher - fold skcipher_walk_skcipher() into skcipher_walk_virt() (Thomas Huth) [RHEL-186630]
  - crypto: skcipher - remove redundant check for SKCIPHER_WALK_SLOW (Thomas Huth) [RHEL-186630]
  - crypto: skcipher - remove redundant clamping to page size (Thomas Huth) [RHEL-186630]
  - crypto: skcipher - remove unnecessary page alignment of bounce buffer (Thomas Huth) [RHEL-186630]
  - crypto: skcipher - document skcipher_walk_done() and rename some vars (Thomas Huth) [RHEL-186630]
  - crypto: omap - switch from scatter_walk to plain offset (Thomas Huth) [RHEL-186630]
  - crypto: powerpc/p10-aes-gcm - simplify handling of linear associated data (Thomas Huth) [RHEL-186630]
  - crypto: bcm - Drop unused setting of local 'ptr' variable (Thomas Huth) [RHEL-186630]
  - crypto: hisilicon/qm - support new function communication (Thomas Huth) [RHEL-186630]
  - crypto: proc - Use str_yes_no() and str_no_yes() helpers (Thomas Huth) [RHEL-186630]
  - crypto: ahash - make hash walk functions private to ahash.c (Thomas Huth) [RHEL-186630]
  - redhat: Remove CONFIG_CRYPTO_KEYWRAP setting (Thomas Huth) [RHEL-186630]
  - crypto: keywrap - remove unused keywrap algorithm (Thomas Huth) [RHEL-186630]
  - crypto: fips - Use str_enabled_disabled() helper in fips_enable() (Thomas Huth) [RHEL-186630]
  - crypto: lib/aesgcm - Reduce stack usage in libaesgcm_init (Thomas Huth) [RHEL-186630]
  - crypto: x86/aes-xts - additional optimizations (Thomas Huth) [RHEL-186630]
  - crypto: x86/aes-xts - more code size optimizations (Thomas Huth) [RHEL-186630]
  - crypto: x86/aes-xts - change len parameter to int (Thomas Huth) [RHEL-186630]
  - crypto: x86/aes-xts - improve some comments (Thomas Huth) [RHEL-186630]
  - crypto: x86/aes-xts - make the register aliases per-function (Thomas Huth) [RHEL-186630]
  - crypto: x86/aes-xts - use .irp when useful (Thomas Huth) [RHEL-186630]
  - crypto: x86/aes-gcm - tune better for AMD CPUs (Thomas Huth) [RHEL-186630]
  - crypto: x86/aes-gcm - code size optimization (Thomas Huth) [RHEL-186630]
  - crypto: lib/gf128mul - Remove some bbe deadcode (Thomas Huth) [RHEL-186630]
  - crypto: keywrap - remove assignment of 0 to cra_alignmask (Thomas Huth) [RHEL-186630]
  - crypto: aegis - remove assignments of 0 to cra_alignmask (Thomas Huth) [RHEL-186630]
  - crypto: x86 - remove assignments of 0 to cra_alignmask (Thomas Huth) [RHEL-186630]
  - crypto: seed - stop using cra_alignmask (Thomas Huth) [RHEL-186630]
  - crypto: khazad - stop using cra_alignmask (Thomas Huth) [RHEL-186630]
  - crypto: tea - stop using cra_alignmask (Thomas Huth) [RHEL-186630]
  - crypto: aria - stop using cra_alignmask (Thomas Huth) [RHEL-186630]
  - crypto: anubis - stop using cra_alignmask (Thomas Huth) [RHEL-186630]
  - crypto: skcipher - remove support for physical address walks (Thomas Huth) [RHEL-186630]
  - crypto: n2 - remove Niagara2 SPU driver (Thomas Huth) [RHEL-186630]
  - crypto: sig - Set maskset to CRYPTO_ALG_TYPE_MASK (Thomas Huth) [RHEL-186630]
  - crypto: caam - use JobR's space to access page 0 regs (Thomas Huth) [RHEL-186630]
  - crypto: api - Call crypto_schedule_test outside of mutex (Thomas Huth) [RHEL-186630]
  - crypto: api - Fix boot-up self-test race (Thomas Huth) [RHEL-186630]
  - lib/crc32: drop leading underscores from __crc32c_le_base (Thomas Huth) [RHEL-186630]
  - crypto: hisilicon/debugfs - fix the struct pointer incorrectly offset problem (Thomas Huth) [RHEL-186630]
  - crypto: rsassa-pkcs1 - Copy source data for SG list (Thomas Huth) [RHEL-186630]
  - s390/ap: Replace xchg() with WRITE_ONCE() (Thomas Huth) [RHEL-186630]
  - crypto: marvell/cesa - fix uninit value for struct mv_cesa_op_ctx (Thomas Huth) [RHEL-186630]
  - crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() (Thomas Huth) [RHEL-186630]
  - crypto: aesni - Move back to module_init (Thomas Huth) [RHEL-186630]
  - crypto: lib/mpi - Export mpi_set_bit (Thomas Huth) [RHEL-186630]
  - crypto: arm/crct10dif - Implement plain NEON variant (Thomas Huth) [RHEL-186630]
  - crypto: arm/crct10dif - Macroify PMULL asm code (Thomas Huth) [RHEL-186630]
  - crypto: arm/crct10dif - Use existing mov_l macro instead of __adrl (Thomas Huth) [RHEL-186630]
  - crypto: bcm - add error check in the ahash_hmac_init function (Thomas Huth) [RHEL-186630]
  - crypto: caam - add error check to caam_rsa_set_priv_key_form (Thomas Huth) [RHEL-186630]
  - crypto: inside-secure - Fix the return value of safexcel_xcbcmac_cra_init() (Thomas Huth) [RHEL-186630]
  - crypto: rsassa-pkcs1 - Reinstate support for legacy protocols (Thomas Huth) [RHEL-186630]
  - crypto: hisilicon/qm - disable same error report before resetting (Thomas Huth) [RHEL-186630]
  - crypto: hisilicon - support querying the capability register (Thomas Huth) [RHEL-186630]
  - crypto: asymmetric_keys - Remove unused functions (Thomas Huth) [RHEL-186630]
  - crypto: starfive - remove unneeded crypto_engine_stop() call (Thomas Huth) [RHEL-186630]
  - crypto: api - move crypto_simd_disabled_for_test to lib (Thomas Huth) [RHEL-186630]
  - crypto: cavium - Fix the if condition to exit loop after timeout (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - remove unneeded RETs (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - remove unneeded FRAME_BEGIN and FRAME_END (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - take advantage of block-aligned len (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - optimize partial block handling using SSE4.1 (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - improve assembly function prototypes (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - optimize length block preparation using SSE4.1 (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - don't bother with special code for aligned data (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - eliminate some indirect calls (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - remove no-op init and exit functions (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - access 32-bit arguments as 32-bit (Thomas Huth) [RHEL-186630]
  - crypto: crc32c - Provide crc32c-arch driver for accelerated library code (Thomas Huth) [RHEL-186630]
  - crypto: crc32 - Provide crc32-arch driver for accelerated library code (Thomas Huth) [RHEL-186630]
  - crypto: nx - Fix invalid wait context during kexec reboot (Thomas Huth) [RHEL-186630]
  - crypto: nx - Rename devdata_mutex to devdata_spinlock (Thomas Huth) [RHEL-186630]
  - crypto: ecdsa - Update Kconfig help text for NIST P521 (Thomas Huth) [RHEL-186630]
  - crypto: sig - Fix oops on KEYCTL_PKEY_QUERY for RSA keys (Thomas Huth) [RHEL-186630]
  - s390/crypto: Switch over to sysfs_emit() (Thomas Huth) [RHEL-186630]
  - crypto: crypto4xx - use devm in probe (Thomas Huth) [RHEL-186630]
  - crypto: crypto4xx - avoid explicit resource (Thomas Huth) [RHEL-186630]
  - crypto: cesa - use devm_platform_get_and_ioremap_resource (Thomas Huth) [RHEL-186630]
  - crypto: cesa - remove irq_set_affinity_hint (Thomas Huth) [RHEL-186630]
  - crypto: cesa - use enabled variants for clk_get (Thomas Huth) [RHEL-186630]
  - crypto: cesa - add COMPILE_TEST (Thomas Huth) [RHEL-186630]
  - crypto: doc - Fix akcipher title reference (Thomas Huth) [RHEL-186630]
  - crypto: x86/cast5 - Remove unused cast5_ctr_16way (Thomas Huth) [RHEL-186630]
  - crypto: hisilicon/qm - fix the coding specifications issue (Thomas Huth) [RHEL-186630]
  - crypto: drivers - Correct multiple typos in comments (Thomas Huth) [RHEL-186630]
  - crypto: ccree - Fix typo in comment (Thomas Huth) [RHEL-186630]
  - crypto: atmel - Drop explicit initialization of struct i2c_device_id::driver_data to 0 (Thomas Huth) [RHEL-186630]
  - crypto: caam - Slightly simplify platform_device() (Thomas Huth) [RHEL-186630]
  - crypto: caam - Fix the pointer passed to caam_qi_shutdown() (Thomas Huth) [RHEL-186630]
  - crypto: hisilicon/hpre - enable all clusters clock gating (Thomas Huth) [RHEL-186630]
  - crypto: mxs-dcp - Fix AES-CBC with hardware-bound keys (Thomas Huth) [RHEL-186630]
  - crypto: amlogic - Remove redundant assignment and error messages (Thomas Huth) [RHEL-186630]
  - crypto: ecrdsa - Fix signature size calculation (Thomas Huth) [RHEL-186630]
  - crypto: ecdsa - Support P1363 signature decoding (Thomas Huth) [RHEL-186630]
  - crypto: ecdsa - Move X9.62 signature size calculation into template (Thomas Huth) [RHEL-186630]
  - crypto: sig - Rename crypto_sig_maxsize() to crypto_sig_keysize() (Thomas Huth) [RHEL-186630]
  - crypto: ecdsa - Move X9.62 signature decoding into template (Thomas Huth) [RHEL-186630]
  - ASN.1: Clean up include statements in public headers (Thomas Huth) [RHEL-186630]
  - crypto: ecdsa - Avoid signed integer overflow on signature decoding (Thomas Huth) [RHEL-186630]
  - crypto: sig - Move crypto_sig_*() API calls to include file (Thomas Huth) [RHEL-186630]
  - redhat: Disable signing ALG again after code has been reworked (Thomas Huth) [RHEL-186630]
  - crypto: akcipher - Drop sign/verify operations (Thomas Huth) [RHEL-186630]
  - crypto: drivers - Drop sign/verify operations (Thomas Huth) [RHEL-186630]
  - crypto: virtio - Drop sign/verify operations (Thomas Huth) [RHEL-186630]
  - crypto: rsassa-pkcs1 - Avoid copying hash prefix (Thomas Huth) [RHEL-186630]
  - crypto: rsassa-pkcs1 - Harden digest length verification (Thomas Huth) [RHEL-186630]
  - crypto: rsassa-pkcs1 - Migrate to sig_alg backend (Thomas Huth) [RHEL-186630]
  - crypto: rsa-pkcs1pad - Deduplicate set_{pub,priv}_key callbacks (Thomas Huth) [RHEL-186630]
  - crypto: ecrdsa - Migrate to sig_alg backend (Thomas Huth) [RHEL-186630]
  - crypto: ecdsa - Migrate to sig_alg backend (Thomas Huth) [RHEL-186630]
  - crypto: sig - Introduce sig_alg backend (Thomas Huth) [RHEL-186630]
  - crypto: ecdsa - Drop unused test vector elements (Thomas Huth) [RHEL-186630]
  - crypto: testmgr: Include <linux/prandom.h> instead of <linux/random.h> (Thomas Huth) [RHEL-186630]
  - IB/IPoIB: ndo_set_rx_mode_async conversion (Michal Schmidt) [RHEL-186369]
  - selftests: net: use ip commands instead of teamd in team rx_mode test (Michal Schmidt) [RHEL-186369]
  - selftests: net: add team_bridge_macvlan rx_mode test (Michal Schmidt) [RHEL-186369]
  - net: warn ops-locked drivers still using ndo_set_rx_mode (Michal Schmidt) [RHEL-186369]
  - netkit: convert to ndo_set_rx_mode_async (Michal Schmidt) [RHEL-186369]
  - dummy: convert to ndo_set_rx_mode_async (Michal Schmidt) [RHEL-186369]
  - netdevsim: convert to ndo_set_rx_mode_async (Michal Schmidt) [RHEL-186369]
  - iavf: convert to ndo_set_rx_mode_async (Michal Schmidt) [RHEL-186369]
  - bnxt: use snapshot in bnxt_cfg_rx_mode (Michal Schmidt) [RHEL-186369]
  - bnxt: convert to ndo_set_rx_mode_async (Michal Schmidt) [RHEL-186369]
  - mlx5: convert to ndo_set_rx_mode_async (Michal Schmidt) [RHEL-186369]
  - net/mlx5e: Allow set_rx_mode on uplink representor (Michal Schmidt) [RHEL-186369]
  - net: move promiscuity handling into netdev_rx_mode_work (Michal Schmidt) [RHEL-186369]
  - net: cache snapshot entries for ndo_set_rx_mode_async (Michal Schmidt) [RHEL-186369]
  - net: introduce ndo_set_rx_mode_async and netdev_rx_mode_work (Michal Schmidt) [RHEL-186369]
  - net: add address list snapshot and reconciliation infrastructure (Michal Schmidt) [RHEL-186369]
  - selftests: net: validate team flags propagation (Michal Schmidt) [RHEL-186369]
  - Revert "fs: don't block i_writecount during exec" (Abhi Das) [RHEL-159585]
  - lib/Kconfig.debug: fix BOOTPARAM_HUNG_TASK_PANIC comment (Luiz Capitulino) [RHEL-146067]
  - powerpc/watchdog: add support for hardlockup_sys_info sysctl (Luiz Capitulino) [RHEL-146067]
  - hung_task: explicitly report I/O wait state in log output (Luiz Capitulino) [RHEL-146067]
  - hung_task: increment the global counter immediately (Luiz Capitulino) [RHEL-146067]
  - hung_task: enable runtime reset of hung_task_detect_count (Luiz Capitulino) [RHEL-146067]
  - hung_task: refactor detection logic and atomicise detection count (Luiz Capitulino) [RHEL-146067]
  - sysctl: add SYSCTL_{USER_TO_KERN,KERN_TO_USER} macros (Luiz Capitulino) [RHEL-146067]
  - sys_info: add a default kernel sys_info mask (Luiz Capitulino) [RHEL-146067]
  - watchdog: add sys_info sysctls to dump sys info on system lockup (Luiz Capitulino) [RHEL-146067]
  - hung_task: add hung_task_sys_info sysctl to dump sys info on task-hung (Luiz Capitulino) [RHEL-146067]
  - panic: sys_info: align constant definition names with parameters (Luiz Capitulino) [RHEL-146067]
  - kernel/hung_task: unexport sysctl_hung_task_timeout_secs (Luiz Capitulino) [RHEL-146067]
  - redhat/configs: update CONFIG_BOOTPARAM_HUNG_TASK_PANIC (Luiz Capitulino) [RHEL-146067]
  - hung_task: panic when there are more than N hung tasks at the same time (Luiz Capitulino) [RHEL-146067]
  - hung_task: fix warnings caused by unaligned lock pointers (Luiz Capitulino) [RHEL-146067]
  - hung_task: dump blocker task if it is not hung (Luiz Capitulino) [RHEL-146067]
  - hung_task: extend hung task blocker tracking to rwsems (Luiz Capitulino) [RHEL-146067]
  - locking/rwsem: make owner helpers globally available (Luiz Capitulino) [RHEL-146067]
  - hung_task: show the blocker task if the task is hung on semaphore (Luiz Capitulino) [RHEL-146067]
  - hung_task: replace blocker_mutex with encoded blocker (Luiz Capitulino) [RHEL-146067]
  - redhat/configs: add new hung task configs (Luiz Capitulino) [RHEL-146067]
  - samples: add hung_task detector mutex blocking sample (Luiz Capitulino) [RHEL-146067]
  - hung_task: show the blocker task if the task is hung on mutex (Luiz Capitulino) [RHEL-146067]
  - hung_task: add docs for hung_task_detect_count (Luiz Capitulino) [RHEL-146067]
  - hung_task: add detect count for hung tasks (Luiz Capitulino) [RHEL-146067]
  - wifi: ath11k: fix warning when unbinding (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-171410 RHEL-180129] {CVE-2026-46125}
  - wifi: mac80211: drop stray 'static' from fast-RX rx_result (Jose Ignacio Tornos Martinez) [RHEL-171410 RHEL-180059] {CVE-2026-46152}
  - wifi: mac80211: use safe list iteration in radar detect work (Jose Ignacio Tornos Martinez) [RHEL-171410 RHEL-180023] {CVE-2026-46166}
  - wifi: ath12k: prepare REO update element only for primary link (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rt2x00: allocate anchor with rt2x00dev (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: fix error unwind on arch_init() failure in PCI probe (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: fix peer_id usage in normal RX path (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: restrict LMR feedback check to TB and non-TB ranging (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath10k: snoc: select POWER_SEQUENCING (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: nl80211: fix UHR capability validation (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - net: rfkill: prevent unlimited numbers of rfkill events from being created (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-31670}
  - wifi: rt2x00usb: fix devres lifetime (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-31672}
  - wifi: brcmfmac: validate bsscfg indices in IF events (Jose Ignacio Tornos Martinez) [RHEL-171410 RHEL-173865] {CVE-2026-43110}
  - wifi: brcmsmac: Fix dma_free_coherent() size (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-31661}
  - wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-31779}
  - wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-31780}
  - wifi: ath12k: Pass the correct value of each TID during a stop AMPDU session (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: correctly set wifi generation data (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mvm: don't send a 6E related command when not supported (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-43325}
  - wifi: iwlwifi: mld: Fix MLO scan timing (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-23444}
  - wifi: mac80211: fix NULL deref in mesh_matches_local() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-23396}
  - wifi: mac80211: check tdls flag in ieee80211_tdls_oper (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-43052}
  - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-31548}
  - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-31551}
  - mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-31394}
  - wifi: mac80211: use jiffies_delta_to_msecs() for sta_info inactive times (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: remove keys after disabling beaconing (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211_hwsim: fully initialise PMSR capabilities (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-23315}
  - wifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-23363}
  - wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-23325}
  - wifi: mac80211: fix missing ieee80211_eml_params member initialization (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: fix station lookup failure when disconnecting from AP (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: use correct pdev id when requesting firmware stats (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-23279}
  - wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-23246}
  - wifi: mac80211: set default WMM parameters on all links (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mwifiex: Fix dev_alloc_name() return value check (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: brcmfmac: Fix potential kernel oops when probe fails (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-43144}
  - wifi: radiotap: reject radiotap with unknown bits (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-23367}
  - wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-23336}
  - wifi: cfg80211: wext: fix IGTK key ID off-by-one (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [wireless] (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [wireless] (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - Convert 'alloc_flex' family to use the new default GFP_KERNEL argument [wireless] (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [wireless] (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [wireless] (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: brcmsmac: phy: Remove unreachable error handling code (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - net: remove unnecessary module_init/exit functions [wireless] (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: Add eMLSR/eMLMR action frame parsing support (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: add initial UHR support (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: add initial UHR support (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ieee80211: add some initial UHR definitions (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: use wiphy_hrtimer_work for CAC timeout (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: correct ieee80211-{s1g/eht}.h include guard comments (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: clear stale link mapping of ahvif->links_map (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add support TX hardware queue stats (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add support RX PDEV stats (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Fix index decrement when array_len is zero (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: support OBSS PD configuration for AP mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: add WMI support for spatial reuse parameter configuration (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - dt-bindings: net: wireless: ath11k-pci: deprecate 'firmware-name' property (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: add usecase firmware handling based on device compatible (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath10k: sdio: add missing lock protection in ath10k_sdio_fw_crashed_dump() (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath10k: fix lock protection in ath10k_wmi_event_peer_sta_ps_state_chg() (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath10k: snoc: support powering on the device via pwrseq (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: pci: warn if SPS OCP happens for RTL8922DE (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: pci: restore LDO setting after device resume (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: set MU group membership and position to registers (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: wow: disable interrupt before swapping FW for 8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: debug: tweak Wi-Fi 7 SER L0/L1 simulation methods (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: debug: rename mac/ctrl error to L0/L1 error (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: regd: update regulatory map to R73-R54 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: pci: validate release report content before using for RTL8922DE (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-43176}
  - wifi: rtw89: get designated link to replace link instance 0 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: 8922a: configure FW version for SIM_SER_L0L1_BY_HALT_H2C (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: add PHY C2H event dummy handler for func 1-7 and 2-10 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: correct content of DACK H2C command (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: rfk: update RFK report format of IQK, DACK and TXGAPK (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: rfk: add to print debug log of CIM3K (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: rfk: add firmware command to do CIM3K (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: rfk: add to print debug log of TX IQK (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: rfk: add firmware command to do TX IQK (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: use u64_stats_t with u64_stats_sync properly (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: treat deprecated INDOOR_SP_AP_OLD control value as LPI mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rsi: sdio: Migrate to use sdio specific shutdown function (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - sdio: Provide a bustype shutdown function (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw88: sdio: Migrate to use sdio specific shutdown function (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: nl80211/cfg80211: support operating as RSTA in PMSR FTM request (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: nl80211/cfg80211: add negotiated burst period to FTM result (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: nl80211/cfg80211: clarify periodic FTM parameters for non-EDCA based ranging (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: nl80211/cfg80211: add new FTM capabilities (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: 8922a: add digital compensation for 2GHz (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: set force MBA duration to 0 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: clear DTOP disable excluding CID7090 variant for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: update TSSI flow for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: add firmware element of digital TX power compensation (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: update edcca log parsing for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: add H2C command to send detail RX gain and link parameters for PS mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: handle C2H event for PS mode report (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: add chip_ops to calculate RX gain from efuse to support PS mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: debug: Fix memory leak in __print_txpwr_map() (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: Add default ID 28de:2432 for RTL8832CU (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fix unable to receive probe responses under MLO connection (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: fix incorrect power limit by mac_id (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: refine initial flow of BB wrapper (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: write BB wrapper registers with flush (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: update BB wrapper RFSI (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: update bb wrapper TPU init (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: abstract BB wrap registers to share initial flow (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: extend register to read history 2 of PHY env_monitor (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: abstract start address and EHT of PHY status bitmap (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: add ops rtw89_phy_gen_be_v1 for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: add {read,write}_rf_v3 for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: clear global interrupt right after power-on (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw88: add WQ_PERCPU to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: rename struct iwl_mcc_allowed_ap_type_cmd::offset_map (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mvm: Remove link_id from time_events (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: change cluster_id type to u8 array (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: support V13 of iwl_lari_config_change_cmd (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: split bios_value_u32 to separate the header (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: uefi: cache the DSM functions (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: acpi: cache the DSM functions (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mvm: Cleanup MLO code (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: move iwl_get_lari_config_bitmap to the op_mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: move lari helper functions to the op_mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: prevent EMLSR when NAN is active (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: add an helper to update an EMLSR blocker (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: Fix primary link selection logic (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: cfg: remove iwl_be221_name (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: fix chandef start calculation (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: remove unused variable in d3.c (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: fw: api: add HE type for UHR ELR (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: cfg: move the MODULE_FIRMWARE to the per-rf file (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: fix HE SIG-B MCS/DCM/compression (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: fw: api: add UHR data definitions (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: add UHR TLC mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: adjust LINK context NPCA API (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: refactor AP power type setting (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: fix 22000 series SMEM parsing (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-43172}
  - wifi: iwlwifi: mld: support TLC command version 6 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: trigger a dump upon notification if needed (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: fw: fix documentation reference for ap_type field (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mvm: check the validity of noa_len (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mvm: Remove few redundant 6 GHz scan chan params (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: Remove wrong channel flags in scan cmd (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: decode VHT information for sniffer (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: Advertise support for multicast RX registration (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: Support changing NAN configuration (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: Extend the NAN configuration (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: Declare support for NAN capabilities (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: Handle rate selection for NAN interface (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: Add support for NAN (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: mark iface work SKBs as consumed (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: remove RX_DROP (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: nl80211: ignore cluster id after NAN started (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: cleanup cluster_id when stopping NAN (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: limit NAN func management APIs to offloaded DE (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: stop NAN and P2P in cfg80211_leave (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: allow only one NAN interface, also in multi radio (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: enable QCC2072 support (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: fix PCIE_LOCAL_REG_QRTR_NODE_ID definition for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: send peer meta data version to firmware (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: limit number of channels per WMI command (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: handle REO status ring for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: handle REO CMD ring for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: add hardware ops support for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: add HAL descriptor and ops for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: support downloading auxiliary ucode image for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: support LPASS_SHARED target memory type (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: add hardware parameters for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: add hardware registers for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: fix mac phy capability parsing (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: refactor 320 MHz bandwidth support parsing (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: fix preferred hardware mode calculation (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: refactor REO status ring handling (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: refactor REO CMD ring handling (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: refactor PCI window register access (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: move .max_tx_ring to struct ath11k_hw_hal_params (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: Register handler for CFR capture event (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: Register DBR event handler for CFR data (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - MAINTAINERS: add RELAY entry (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: Register relayfs entries for CFR dump (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: Add support unassociated client CFR (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: Register debugfs for CFR configuration (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: Add initialization and deinitialization sequence for CFR module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: do WoW offloads only on primary link (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: clean up on error in ath12k_dp_setup() (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: remove redundant pci_set_drvdata() call (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: fix comment typo in monitor mode handling (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: Fix failure to connect to a 6 GHz AP (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath9k: add OF dependency to AHB (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath9k: fix kernel-doc warnings in common-debug.h (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath9k: debug.h: fix kernel-doc bad lines and struct ath_tx_stats (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: pci: consider RTL8922D in PCI common flow (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: consider RTL8922D in MAC common flow (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: correct page number for CSI response (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: align CUSTID defined by firmware (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: disable EHT protocol by chip capabilities (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: support EHT GI/LTF setting (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: wow: add reason codes for disassociation in WoWLAN mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: pci: validate sequence number of TX release report (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-43213}
  - wifi: mac80211: add support for encryption/decryption of (Re)Association frames (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: add support for EPPKE authentication protocol in non-AP STA mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: Check for MLE before appending in Authentication frame (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: allow key installation before association (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: nl80211: Add support for EPP peer indication (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: add support for key configuration before association (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: add feature flag for (re)association frame encryption (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: add support for EPPKE Authentication Protocol (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: don't apply HT flags to S1G channels (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: Add support for D-Link VR Air Bridge (DWA-F18) (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: Add support for MSI AX1800 Nano (GUAX18N) (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: set EDCCA configurations for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: add an entry to enable MAC function in preinit (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: separate functions of CMAC power and function enable (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: configure DMA_STOP1 by predefined mask (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: define preload_init for generations (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: update WP quota for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: update MPDU quota according to chip DLE definition (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: set quota 13 for PLE SNRPT (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: add dle_mem and ple_{min,max}_qt quota for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: remove unnecessary return from rtw89_fwdl_secure_idmem_share_mode() (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: coex: update coex software control for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: coex: update scoreboard value according to power state for two BT (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: coex: make coex scoreboard as chip info (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: remove width argument from ieee80211_parse_bitrates (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211_hwsim: remove NAN by default (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: improve station iteration ergonomics (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: improve interface iteration ergonomics (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: include S1G_NO_PRIMARY flag when sending channel (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: unexport ieee80211_get_bssid() (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: don't send an unused argument to ieee80211_check_combinations (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: set RACK bit every 4 H2C command for WiFi 6 chips only (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: consider hardware AID for firmware elements (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: add CMAC H2C command for punctured for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: add CMAC H2C command for TX time for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: add CMAC H2C command for TX AMPDU for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: add CMAC H2C command for association for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: add CMAC H2C command to initialize default value for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: add DMAC v3 H2C command for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: update query RXDESC v3 for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: update TXWD v3 for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mwifiex: Allocate dev name earlier for interface workqueue name (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: Fix use_for flag update on BSS refresh (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: brcmfmac: rename function that frees vif (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: brcmfmac: fix/add kernel-doc comments (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: Update csa_finalize to use link_id (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: add cfg80211_stop_link() for per-link teardown (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: 8852b: refine hardware parameters for RFE type 5 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fix potential zero beacon interval in beacon tracking (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-43267}
  - wifi: rtw89: rfk: update rtw89_fw_h2c_rf_pre_ntfy_mcc format (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: change WITH_RFK_PRE_NOTIFY to be a FW feature group (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: refine mis-ordered entries in FW feature table (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: 8922a: tweak RFK_PRE_NOTIFY FW feature configuration to align handling (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: introduce helper for disabling FW feature configuration (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: change FW feature map to a BITMAP (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: pre-handle RF calibration on link when needed (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: rfk: add rtw89_fw_h2c_rf_pre_ntfy_mcc for new WiFi 7 firmware (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: rfk: update RFK pre info V2 for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: enhance connection stability when triggering beacon loss (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: regd: 6 GHz power type marks default when inactive (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: 8922a: configure FW version for SCAN_OFFLOAD_EXTRA_OP feature (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: refine TX nulldata judgement when scan with 2 OP channels (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: add default quirks as features to chip_info (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: read chip ID for RTL8922D variants (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: efuse: read hardware version from efuse for WiFi 7 chips (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: define TX/RX aggregation and MPDU capability per chip (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: wow: abstract DMA check register for RTL8922DE (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: wow: add WOW_CAM update function for 8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: wow: change type of WoWLAN pattern mask to __le32 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: wow: use struct style to fill WOW CAM H2C command (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2025-71234}
  - wifi: rtw88: Fix inadvertent sharing of struct ieee80211_supported_band data (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2025-71273}
  - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2025-71229}
  - wifi: rtw88: Increase the RX gain before scanning (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mcc: reset probe counter when receiving beacon (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: setting TBTT AGG number when mac port initialization (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: warn unexpected polling value of XTAL SI (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: refine C2H reg event polling timeout for LPS (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: debug: support SER L0/L1 simulation via halt H2C (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: debug: add ser_counters dbgfs (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: ser: L1 skip polling status if FW runs event mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: ser: enable error IMR after recovering from L1 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: reset power state before switching to power on (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mlo: fix incorrect link address in management frames (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mlo: fix missing TX null-data 1 during link switch (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: 8852b: increase beacon loss to 6 seconds (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtlwifi: fix typo 'received' in comment (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: 8852au: add support for TP TX30U Plus (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: add WQ_PERCPU to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw88: rtw8821cu: Add ID for Mercusys MU6H (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2025-71297}
  - wifi: rtw88: fix DTIM period handling when conf->dtim_period is zero (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Merge branch 'ath12k-ng' into ath-next (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Skip DP peer creation for scan vdev (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: move firmware stats request outside of atomic context (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: add the missing RCU lock in ath12k_dp_tx_free_txbuf() (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Remove Wi-Fi 7 header dependencies from common ath12k module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move MSDU END TLV processing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move MU user processing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move remaining SIG TLV parsing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move EHT SIG processing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HE SIG processing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HT/VHT SIG processing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move TX monitor functionality to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move RX status TLV parsing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move MPDU pop functionality to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move monitor status processing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move monitor ring processing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Replace lock/unlock with guard() (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Use dp objects in performance critical paths (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Build all the files in wifi7 directory into ath12k_wifi7.ko (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Remove arch-specific HAL dependencies from common DP (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move ath12k_dp_rx_get_peer_id API to Wi-Fi 7 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move ath12k_dp_rx_frags_cleanup API to Wi-Fi 7 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Remove the wifi7 header inclusions in common code (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move ieee80211_ops callback to the arch specific module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add helper to free DP link peer (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move DP specific link stats to DP link peer (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move DP device stats to ath12k_dp (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add callbacks in arch_ops for rx APIs (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add lockdep warn for RCU (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Use ath12k_dp_peer in per packet Tx & Rx paths (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Attach and detach ath12k_dp_link_peer to ath12k_dp_peer (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Define ath12k_dp_peer structure & APIs for create & delete (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add hash table for ath12k_dp_link_peer (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move ath12k_dp_link_peer list from ath12k_base to ath12k_dp (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add hash table for ath12k_link_sta in ath12k_base (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Rename ath12k_peer to ath12k_dp_link_peer (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move DP related functions from peer.c to dp_peer.c file (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Drop hal_ prefix from hardware register names (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Rename hal_ops to ops (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Remove the unused ring inits in wcn (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Segregate the common and wifi7 specific structures (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HAL Cookie Conversion and RBM related APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HAL REO and Rx buf related APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HAL Tx, REO and link idle setup related APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HAL CE status and set link desc addr APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HAL CE desc related APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HAL SRNG shadow config and get ring id APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HAL CE setup and SRNG related APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Use hal handle instead of ab handle (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add direct HAL pointer in ath12k_dp (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move hal_params and regs to hal from hw (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move wbm_rbm_map to hw specific hal files (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Initialize hal_ops through hal_init (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Initialize desc_size through hal_init (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move srng config and hal_ops to hw specific hal files (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Rearrange PPDU radio stats (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Refactor data path pdev struct (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Refactor ath12k_vif structure (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add framework for hardware specific DP interrupt handler (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add framework for hardware specific ieee80211_ops registration (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Rearrange DP fields in ath12k_hw_group struct (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Support arch-specific DP device allocation (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Convert ath12k_dp member in ath12k_base to pointer (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Change the API prefixes to ath12k_wifi7 in tx/rx (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Remove hal_rx_ops and merge into hal_ops (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add new infra for the rx path (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move hal_rx_ops callbacks to hal_ops (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Replace ops with direct calls for rxdma ring mask (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: unify HAL ops naming across chips (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move the hal APIs to hardware specific files (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Remove non-compact TLV support from QCN (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HTT specific code from dp.c to newly introduced files (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HTT Tx specific code to newly introduced files (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HTT Rx specific code to newly introduced files (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HTT code in dp.h to newly introduced files (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move ath12k_dp_tx and related APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move arch specific tx APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move arch specific rx tid and related functions to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move arch specific REO functions to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Separate arch specific part of RX APIs (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move srng processing to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move regular msdu processing functions to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move rx error and defrag functions to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move rxdma ring config functions to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move rx_desc.h file to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move hal_desc.h file to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move Rx error related functions to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HAL Rx wrapper APIs to dp_rx.h (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move hal_rx.h file to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move hal_tx.h file to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move hal_tx and hal_rx to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Remove HAL define dependencies from shared AHB code (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Remove HAL defines from shared PCI code (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Rename ath12k_* symbols to ath12k_wifi7_* for clarity (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Modularize driver into common and Wi-Fi 7 specific components (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move hw_init invocation to target-specific probe (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move Wi-Fi 7 specific init routines to dedicated file (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Restructure ahb.c into common and Wi-Fi 7 specific modules (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Rename ahb_hif_ops to reflect generic usage (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Rename hw.c to Wi-Fi 7 specific implementation file (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move Wi-Fi 7 MHI configuration to dedicated file (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move Wi-Fi 7 WMI configuration to dedicated file (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move Copy Engine configuration to Wi-Fi 7 specific file (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Restructure PCI code to common and Wi-Fi 7 specific logic (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - spinlock: extend guard with spinlock_bh variants (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - config: wifi: disable new unsupported configuration options (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - perf metrics: Make common stalled metrics conditional on having the event (Trevor Allison) [RHEL-140195]
  - perf stat: Fix crash on arm64 (Trevor Allison) [RHEL-140195]
  - tools build: Correct link flags for libopenssl (Trevor Allison) [RHEL-140195]
  - perf test parse-metric: Ensure aggregate counts appear to have run (Trevor Allison) [RHEL-140195]
  - perf/x86: Move event pointer setup earlier in x86_pmu_enable() (Trevor Allison) [RHEL-140195] {CVE-2026-23435}
  - perf metricgroup: Fix metricgroup__has_metric_or_groups() (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Fix and clean up intel_pmu_drain_arch_pebs() type use (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Optimize PEBS extended config (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Check PEBS dyn_constraints (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Add a check for dynamic constraints (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Add counter group support for arch-PEBS (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Setup PEBS data configuration and enable legacy groups (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Update dyn_constraint base on PEBS event precise level (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Allocate arch-PEBS buffer and initialize PEBS_BASE MSR (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Process arch-PEBS records or record fragments (Trevor Allison) [RHEL-140195]
  - perf record: Make logs more readable for event open failures (Trevor Allison) [RHEL-140195]
  - tools headers UAPI: sync sound/asound.h with kernel (Trevor Allison) [RHEL-140195]
  - tools headers UAPI: sync linux/vhost.h with kernel (Trevor Allison) [RHEL-140195]
  - tools headers UAPI: sync asm/cpufeatures.h with kernel (Trevor Allison) [RHEL-140195]
  - tools headers UAPI: sync linux/perf_event.h with kernel (Trevor Allison) [RHEL-140195]
  - tools headers UAPI: sync linux/neighbour.h with kernel (Trevor Allison) [RHEL-140195]
  - tools headers UAPI: sync linux/kvm.h with kernel (Trevor Allison) [RHEL-140195]
  - tools headers UAPI: sync linux/if_addr.h with kernel (Trevor Allison) [RHEL-140195]
  - tools headers UAPI: sync drm/drm.h with kernel (Trevor Allison) [RHEL-140195]
  - perf tools: Add the legacy-cache.json to .gitignore (Trevor Allison) [RHEL-140195]
  - Revert "perf tool_pmu: More accurately set the cpus for tool events" (Trevor Allison) [RHEL-140195]
  - perf jevents: Handle deleted JSONS in out of source builds (Trevor Allison) [RHEL-140195]
  - perf metricgroup: Don't early exit if no CPUID table exists (Trevor Allison) [RHEL-140195]
  - perf stat-shadow: In prepare_metric fix guard on reading NULL perf_stat_evsel (Trevor Allison) [RHEL-140195]
  - perf tests kallsyms: Fix missed map__put() (Trevor Allison) [RHEL-140195]
  - perf test: Fix test perf evlist for z/VM s390x (Trevor Allison) [RHEL-140195]
  - perf test: Fix test case perf evlist tests for s390x (Trevor Allison) [RHEL-140195]
  - perf parse-events: Fix evsel allocation failure (Trevor Allison) [RHEL-140195]
  - tools build: Fix the common set of features test wrt libopenssl (Trevor Allison) [RHEL-140195]
  - perf tests top: Make the test exclusive (Trevor Allison) [RHEL-140195]
  - perf tests kvm: Avoid leaving perf.data.guest file around (Trevor Allison) [RHEL-140195]
  - perf symbol: Fix ENOENT case for filename__read_build_id (Trevor Allison) [RHEL-140195]
  - perf tools: Disable BPF skeleton if no libopenssl found (Trevor Allison) [RHEL-140195]
  - tools/build: Add a feature test for libopenssl (Trevor Allison) [RHEL-140195]
  - libperf: Use 'extern' in LIBPERF_API visibility macro (Trevor Allison) [RHEL-140195]
  - perf stat: Improve handling of termination by signal (Trevor Allison) [RHEL-140195]
  - perf tests stat: Add test for error for an offline CPU (Trevor Allison) [RHEL-140195]
  - perf test kvm: Add some basic perf kvm test coverage (Trevor Allison) [RHEL-140195]
  - perf tests evlist: Add basic evlist test (Trevor Allison) [RHEL-140195]
  - perf tests script dlfilter: Add a dlfilter test (Trevor Allison) [RHEL-140195]
  - perf tests kallsyms: Add basic kallsyms test (Trevor Allison) [RHEL-140195]
  - perf tests timechart: Add a perf timechart test (Trevor Allison) [RHEL-140195]
  - perf tests top: Add basic perf top coverage test (Trevor Allison) [RHEL-140195]
  - perf tests c2c: Add a basic c2c (Trevor Allison) [RHEL-140195]
  - perf c2c: Clean up some defensive gets and make asan clean (Trevor Allison) [RHEL-140195]
  - perf timechart: Add record support for output perf.data path (Trevor Allison) [RHEL-140195]
  - perf vendor events intel: Update sierraforest events from 1.12 to 1.13 (Trevor Allison) [RHEL-140195]
  - perf vendor events intel: Update pantherlake events from 1.00 to 1.02 (Trevor Allison) [RHEL-140195]
  - perf vendor events intel: Update meteorlake events from 1.17 to 1.18 (Trevor Allison) [RHEL-140195]
  - perf vendor events intel: Update lunarlake events from 1.18 to 1.19 (Trevor Allison) [RHEL-140195]
  - perf vendor events intel: Update icelakex events from 1.28 to 1.30 (Trevor Allison) [RHEL-140195]
  - perf vendor events intel: Update graniterapids events from 1.15 to 1.16 (Trevor Allison) [RHEL-140195]
  - perf vendor events intel: Update cascadelakex metric units (Trevor Allison) [RHEL-140195]
  - perf vendor events intel: Update arrowlake events from 1.13 to 1.14 (Trevor Allison) [RHEL-140195]
  - perf vendor events intel: Update alderlake events from 1.34 to 1.35 (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Add CPU variants supporting common data source packet (Trevor Allison) [RHEL-140195]
  - perf auxtrace: Include sys/types.h for pid_t (Trevor Allison) [RHEL-140195]
  - perf test: Add kallsyms split test (Trevor Allison) [RHEL-140195]
  - perf tools: Use machine->root_dir to find /proc/kallsyms (Trevor Allison) [RHEL-140195]
  - perf tools: Fallback to initial kernel map properly (Trevor Allison) [RHEL-140195]
  - perf jevents: Skip optional metrics in metric group list (Trevor Allison) [RHEL-140195]
  - perf jevents: Drop duplicate pending metrics (Trevor Allison) [RHEL-140195]
  - perf jevents: Move json encoding to its own functions (Trevor Allison) [RHEL-140195]
  - perf jevents: Add threshold expressions to Metric (Trevor Allison) [RHEL-140195]
  - perf jevents: Term list fix in event parsing (Trevor Allison) [RHEL-140195]
  - perf jevents: Support parsing negative exponents (Trevor Allison) [RHEL-140195]
  - perf jevents: Allow metric groups not to be named (Trevor Allison) [RHEL-140195]
  - perf jevents: Add descriptions to metricgroup abstraction (Trevor Allison) [RHEL-140195]
  - perf jevents: Update metric constraint support (Trevor Allison) [RHEL-140195]
  - perf jevents: Allow multiple metricgroups.json files (Trevor Allison) [RHEL-140195]
  - perf ilist: Be tolerant of reading a metric on the wrong CPU (Trevor Allison) [RHEL-140195]
  - perf python: Correct copying of metric_leader in an evsel (Trevor Allison) [RHEL-140195]
  - perf test: Add python JIT dump test (Trevor Allison) [RHEL-140195]
  - perf test: Fix hybrid testing of event fallback test (Trevor Allison) [RHEL-140195]
  - perf tools: Remove a trailing newline in the event terms (Trevor Allison) [RHEL-140195]
  - perf trace: Skip internal syscall arguments (Trevor Allison) [RHEL-140195]
  - perf tools: Don't read build-ids from non-regular files (Trevor Allison) [RHEL-140195]
  - perf vendor events riscv: add T-HEAD C920V2 JSON support (Trevor Allison) [RHEL-140195]
  - perf pmu: fix duplicate conditional statement (Trevor Allison) [RHEL-140195]
  - perf docs: arm-spe: Document new SPE filtering features (Trevor Allison) [RHEL-140195]
  - perf tools: Add support for perf_event_attr::config4 (Trevor Allison) [RHEL-140195]
  - perf: replace strcpy() with strncpy() in util/jitdump.c (Trevor Allison) [RHEL-140195]
  - perf list: Support filtering in JSON output (Trevor Allison) [RHEL-140195]
  - perf list: Share print state with JSON output (Trevor Allison) [RHEL-140195]
  - perf list: Print matching PMU events for --unit (Trevor Allison) [RHEL-140195]
  - perf test all metrics: Fully ignore Default metric failures (Trevor Allison) [RHEL-140195]
  - perf evsel: Skip store_evsel_ids for non-perf-event PMUs (Trevor Allison) [RHEL-140195]
  - perf pmu: Add PMU kind to simplify differentiating (Trevor Allison) [RHEL-140195]
  - perf header: Switch "cpu" for find_core_pmu in caps feature writing (Trevor Allison) [RHEL-140195]
  - perf test maps: Additional maps__fixup_overlap_and_insert tests (Trevor Allison) [RHEL-140195]
  - perf maps: Avoid RC_CHK use after free (Trevor Allison) [RHEL-140195]
  - perf stat: Read tool events last (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Synthesize memory samples for SIMD operations (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Expose SIMD information in other operations (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Report GCS in record (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Report memset and memcpy in records (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Report associated info for SVE / SME operations (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Report extended memory operations in records (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Report MTE allocation tag in record (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Report register access in record (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Introduce data processing macro for SVE operations (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Consolidate operation types (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Remove unused operation types (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Decode SME data processing packet (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Decode ASE and FP fields in other operation (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Rename SPE_OP_PKT_IS_OTHER_SVE_OP macro (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Decode GCS operation (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Unify operation naming (Trevor Allison) [RHEL-140195]
  - perf tool_pmu: More accurately set the cpus for tool events (Trevor Allison) [RHEL-140195]
  - perf stat: Reduce scope of walltime_nsecs_stats (Trevor Allison) [RHEL-140195]
  - perf stat: Reduce scope of ru_stats (Trevor Allison) [RHEL-140195]
  - perf stat-shadow: Read tool events directly (Trevor Allison) [RHEL-140195]
  - perf tool_pmu: Use old_count when computing count values for time events (Trevor Allison) [RHEL-140195]
  - perf pmu: perf_cpu_map__new_int to avoid parsing a string (Trevor Allison) [RHEL-140195]
  - libperf cpumap: Reduce allocations and sorting in intersect (Trevor Allison) [RHEL-140195]
  - perf stat: Display metric-only for 0 counters (Trevor Allison) [RHEL-140195]
  - perf test: Don't fail if user rdpmc returns 0 when disabled (Trevor Allison) [RHEL-140195]
  - perf parse-events: Add debug logging to perf_event (Trevor Allison) [RHEL-140195]
  - perf test: Be tolerant of missing json metric none value (Trevor Allison) [RHEL-140195]
  - perf sample: Fix the wrong format specifier (Trevor Allison) [RHEL-140195]
  - perf script: Fix build by removing unused evsel_script() (Trevor Allison) [RHEL-140195]
  - perf vendor metrics s390: Avoid has_event(INSTRUCTIONS) (Trevor Allison) [RHEL-140195]
  - perf auxtrace: Remove errno.h from auxtrace.h and fix transitive dependencies (Trevor Allison) [RHEL-140195]
  - tool build: Remove __get_cpuid feature test (Trevor Allison) [RHEL-140195]
  - perf build: Don't add NO_AUXTRACE if missing feature-get_cpuid (Trevor Allison) [RHEL-140195]
  - perf intel-pt: Use the perf provided "cpuid.h" (Trevor Allison) [RHEL-140195]
  - perf test: Add a perf event fallback test (Trevor Allison) [RHEL-140195]
  - perf stat: Align metric output without events (Trevor Allison) [RHEL-140195]
  - perf tool_pmu: Make core_wide and target_cpu json events (Trevor Allison) [RHEL-140195]
  - perf test stat csv: Update test expectations and events (Trevor Allison) [RHEL-140195]
  - perf test stat: Update test expectations and events (Trevor Allison) [RHEL-140195]
  - perf test stat: Update shadow test to use metrics (Trevor Allison) [RHEL-140195]
  - perf test metrics: Update all metrics for possibly failing default metrics (Trevor Allison) [RHEL-140195]
  - perf test stat: Update std_output testing metric expectations (Trevor Allison) [RHEL-140195]
  - perf test stat: Ignore failures in Default[234] metricgroups (Trevor Allison) [RHEL-140195]
  - perf test stat+json: Improve metric-only testing (Trevor Allison) [RHEL-140195]
  - perf stat: Remove "unit" workarounds for metric-only (Trevor Allison) [RHEL-140195]
  - perf stat: Sort default events/metrics (Trevor Allison) [RHEL-140195]
  - perf stat: Fix default metricgroup display on hybrid (Trevor Allison) [RHEL-140195]
  - perf stat: Remove hard coded shadow metrics (Trevor Allison) [RHEL-140195]
  - perf script: Change metric format to use json metrics (Trevor Allison) [RHEL-140195]
  - perf stat: Add detail -d,-dd,-ddd metrics (Trevor Allison) [RHEL-140195]
  - perf jevents: Add metric DefaultShowEvents (Trevor Allison) [RHEL-140195]
  - perf jevents: Add set of common metrics based on default ones (Trevor Allison) [RHEL-140195]
  - perf expr: Add #target_cpu literal (Trevor Allison) [RHEL-140195]
  - perf metricgroup: Add care to picking the evsel for displaying a metric (Trevor Allison) [RHEL-140195]
  - perf symbol: Remove unneeded semicolon (Trevor Allison) [RHEL-140195]
  - perf test: Add test that command line period overrides sysfs/json values (Trevor Allison) [RHEL-140195]
  - perf pmu: Make pmu_alias_terms weak again (Trevor Allison) [RHEL-140195]
  - perf tool: Add a delegate_tool that just delegates actions to another tool (Trevor Allison) [RHEL-140195]
  - perf tool: Add the perf_tool argument to all callbacks (Trevor Allison) [RHEL-140195]
  - perf vendor events arm64:: Add i.MX94 DDR Performance Monitor metrics (Trevor Allison) [RHEL-140195]
  - perf stat: Add ScaleUnit to {cpu,task}-clock JSON description (Trevor Allison) [RHEL-140195]
  - perf record: Make sure to update build-ID cache (Trevor Allison) [RHEL-140195]
  - perf jevents: Make all tables static (Trevor Allison) [RHEL-140195]
  - perf metricgroup: When copy metrics copy default information (Trevor Allison) [RHEL-140195]
  - perf metricgroup: Missed free on error path (Trevor Allison) [RHEL-140195]
  - perf evsel: Remove unused metric_events variable (Trevor Allison) [RHEL-140195]
  - perf tools: Cache counter names for raw samples on s390 (Trevor Allison) [RHEL-140195]
  - perf trace: Increase syscall handler map size to 1024 (Trevor Allison) [RHEL-140195]
  - perf test workload: Add thread count argument to thloop (Trevor Allison) [RHEL-140195]
  - perf auxtrace: Add auxtrace_synth_id_range_start() helper (Trevor Allison) [RHEL-140195]
  - perf stat: Add/fix bperf cgroup max events workarounds (Trevor Allison) [RHEL-140195]
  - perf cs-etm: Mute enumeration value warning (Trevor Allison) [RHEL-140195]
  - tools: arm64: Add Cortex-A720AE definitions (Trevor Allison) [RHEL-140195]
  - perf annotate: Fix Clang build by adding block in switch case (Trevor Allison) [RHEL-140195]
  - perf annotate: Invalidate register states for untracked instructions (Trevor Allison) [RHEL-140195]
  - perf annotate: Save pointer offset in stack state (Trevor Allison) [RHEL-140195]
  - perf annotate: Track arithmetic instructions on pointers (Trevor Allison) [RHEL-140195]
  - perf annotate: Track address registers via TSR_KIND_POINTER (Trevor Allison) [RHEL-140195]
  - perf annotate: Skip annotating data types to lea instructions (Trevor Allison) [RHEL-140195]
  - perf annotate: Fix build with NO_SLANG=1 (Trevor Allison) [RHEL-140195]
  - perf jevents: Suppress circular dependency warnings (Trevor Allison) [RHEL-140195]
  - perf jevents: Remove unused makefile variable (Trevor Allison) [RHEL-140195]
  - perf jevents: Fix build when there are other json files in the tree (Trevor Allison) [RHEL-140195]
  - perf c2c annotate: Start from the contention line (Trevor Allison) [RHEL-140195]
  - perf c2c: Add annotation support to perf c2c report (Trevor Allison) [RHEL-140195]
  - perf stat bperf cgroup: Increase MAX_EVENTS from 32 to 1024 (Trevor Allison) [RHEL-140195]
  - perf ilist: Add PMU information to metrics (Trevor Allison) [RHEL-140195]
  - perf python: Add PMU argument to parse_metrics (Trevor Allison) [RHEL-140195]
  - perf ilist: Don't display deprecated events (Trevor Allison) [RHEL-140195]
  - perf trace: Don't synthesize mmaps unless callchains are enabled (Trevor Allison) [RHEL-140195]
  - perf test parse-events: Add evsel test helper (Trevor Allison) [RHEL-140195]
  - perf test parse-events: Add evlist test helper (Trevor Allison) [RHEL-140195]
  - perf test: Clean up test_..config helpers (Trevor Allison) [RHEL-140195]
  - perf test: Switch cycles event to cpu-cycles (Trevor Allison) [RHEL-140195]
  - perf test parse-events: Remove cpu PMU requirement (Trevor Allison) [RHEL-140195]
  - perf test parse-events: Without a PMU use cpu-cycles rather than cycles (Trevor Allison) [RHEL-140195]
  - perf test parse-events: Use evsel__match for legacy events (Trevor Allison) [RHEL-140195]
  - perf evsel: Improvements to __evsel__match (Trevor Allison) [RHEL-140195]
  - perf evlist: Avoid scanning all PMUs for evlist__new_default (Trevor Allison) [RHEL-140195]
  - perf top: Use evlist__new_default when no events specified (Trevor Allison) [RHEL-140195]
  - perf record: Use evlist__new_default when no events specified (Trevor Allison) [RHEL-140195]
  - perf parse-events: Remove hard coded legacy hardware and cache parsing (Trevor Allison) [RHEL-140195]
  - perf print-events: Remove print_symbol_events (Trevor Allison) [RHEL-140195]
  - perf print-events: Remove print_hwcache_events (Trevor Allison) [RHEL-140195]
  - perf jevents: Add legacy-hardware and legacy-cache json (Trevor Allison) [RHEL-140195]
  - perf pmu: Add and use legacy_terms in alias information (Trevor Allison) [RHEL-140195]
  - perf jevents: Add legacy json terms and default_core event table helper (Trevor Allison) [RHEL-140195]
  - perf parse-events: Add terms for legacy hardware and cache config values (Trevor Allison) [RHEL-140195]
  - perf pmu: Factor term parsing into a perf_event_attr into a helper (Trevor Allison) [RHEL-140195]
  - perf pmu: Use fd rather than FILE from new_alias (Trevor Allison) [RHEL-140195]
  - perf parse-events: Remove unused FILE input argument to scanner (Trevor Allison) [RHEL-140195]
  - perf pmu: Don't eagerly parse event terms (Trevor Allison) [RHEL-140195]
  - perf jevents: Support copying the source json files to OUTPUT (Trevor Allison) [RHEL-140195]
  - perf record: Skip don't fail for events that don't open (Trevor Allison) [RHEL-140195]
  - perf stat: Avoid wildcarding PMUs for default events (Trevor Allison) [RHEL-140195]
  - perf perf_api_probe: Avoid scanning all PMUs, try software PMU first (Trevor Allison) [RHEL-140195]
  - perf build python: Don't leave a.out file when building with clang (Trevor Allison) [RHEL-140195]
  - perf stat: Additional verbose details for <not supported> events (Trevor Allison) [RHEL-140195]
  - perf tests: use strdup() in "Object code reading" (Trevor Allison) [RHEL-140195]
  - perf: sched: Fix perf crash with new is_user_task() helper (Trevor Allison) [RHEL-140195] {CVE-2026-23159}
  - perf/x86/intel: Do not enable BTS for guests (Trevor Allison) [RHEL-140195]
  - perf: Fix refcount warning on event->mmap_count increment (Trevor Allison) [RHEL-140195] {CVE-2026-23127}
  - perf: Ensure swevent hrtimer is properly destroyed (Trevor Allison) [RHEL-140195] {CVE-2026-23014}
  - perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common() (Trevor Allison) [RHEL-140195]
  - perf/core: Fix missing read event generation on task exit (Trevor Allison) [RHEL-140195]
  - perf/x86/amd/uncore: Fix the return value of amd_uncore_df_event_init() on error (Trevor Allison) [RHEL-140195]
  - perf/uprobes: Remove <space><Tab> whitespace noise (Trevor Allison) [RHEL-140195]
  - perf: arm_spe: Add support for filtering on data source (Trevor Allison) [RHEL-140195]
  - perf: Add perf_event_attr::config4 (Trevor Allison) [RHEL-140195]
  - perf/x86/intel/ds: Factor out PEBS group processing code to functions (Trevor Allison) [RHEL-140195]
  - perf/x86/intel/ds: Factor out PEBS record processing code to functions (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Initialize architectural PEBS (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Correct large PEBS flag check (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Replace x86_pmu.drain_pebs calling with static call (Trevor Allison) [RHEL-140195]
  - perf/x86: Fix NULL event access and potential PEBS record loss (Trevor Allison) [RHEL-140195] {CVE-2025-68375}
  - perf/x86: Remove redundant is_x86_event() prototype (Trevor Allison) [RHEL-140195]
  - perf/x86/intel/cstate: Remove PC3 support from LunarLake (Trevor Allison) [RHEL-140195]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-199.el10]
changelog:
  - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (Maurizio Lombardi) [RHEL-106984]
  - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (Maurizio Lombardi) [RHEL-106984]
  - s390/drivers: Remove unnecessary include <linux/export.h> (Mete Durlu) [RHEL-99994]
  - scsi: zfcp: Simplify workqueue allocation (Mete Durlu) [RHEL-99994]
  - s390/zfcp: Remove outdated email address (Mete Durlu) [RHEL-99994]
  - redhat/configs: rename CONFIG_QCOM_QFPROM to CONFIG_NVMEM_QCOM_QFPROM (Eric Chanudet) [RHEL-144943]
  - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144337] {CVE-2026-22998}
  - redhat: add usbio kmod placement rule (Jan Stancek) [RHEL-139637]
  - net: ipv4: convert ip_rcv_options to drop reasons (Antoine Tenart) [RHEL-139232]
  - net: ipv4: simplify drop reason handling in ip_rcv_finish_core (Antoine Tenart) [RHEL-139232]
  - net: ipv4: make udp_v4_early_demux explicitly return drop reason (Antoine Tenart) [RHEL-139232]
  - tcp: prefer sk_skb_reason_drop() (Antoine Tenart) [RHEL-139232]
  - net/sched: Add precise drop reason for pfifo_fast queue overflows (Antoine Tenart) [RHEL-139232]
  - net: track pfmemalloc drops via SKB_DROP_REASON_PFMEMALLOC (Antoine Tenart) [RHEL-139232]
  - net: arp: use kfree_skb_reason() in arp_rcv() (Antoine Tenart) [RHEL-139232]
  - can: add drop reasons in CAN protocols receive path (Antoine Tenart) [RHEL-139232]
  - can: add drop reasons in the receive path of AF_CAN (Antoine Tenart) [RHEL-139232]
  - net: neigh: use kfree_skb_reason() in neigh_resolve_output() and neigh_connected_output() (Antoine Tenart) [RHEL-139232]
  - net: flush_backlog() small changes (Antoine Tenart) [RHEL-139232]
  - drm/amdkfd: Fix improper NULL termination of queue restore SMI event string (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/display: Fix DP no audio issue (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/pm: force send pcie parmater on navi1x (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/pm: fix wrong pcie parameter on navi1x (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/display: shrink struct members (Anusha Srivatsa) [RHEL-142315]
  - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] (Anusha Srivatsa) [RHEL-142315]
  - drm/tidss: Fix enable/disable order (Anusha Srivatsa) [RHEL-142315]
  - drm/atomic-helper: Export and namespace some functions (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu: Fix query for VPE block_type and ip_count (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/display: Apply e4479aecf658 to dml (Anusha Srivatsa) [RHEL-142315]
  - Revert "drm/atomic-helper: Re-order bridge chain pre-enable and post-disable" (Anusha Srivatsa) [RHEL-142315]
  - nouveau: don't attempt fwsec on sb on newer platforms. (Anusha Srivatsa) [RHEL-142315]
  - drm/imagination: Disallow exporting of PM/FW protected objects (Anusha Srivatsa) [RHEL-142315]
  - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb (Anusha Srivatsa) [RHEL-142315]
  - drm/pagemap, drm/xe: Ensure that the devmem allocation is idle before use (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/svm: Fix a debug printout (Anusha Srivatsa) [RHEL-142315]
  - drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Drop preempt-fences when destroying imported dma-bufs. (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Use usleep_range for accurate long-running workload timeslicing (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Adjust long-running workload timeslices to reasonable values (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/eustall: Disallow 0 EU stall property values (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/oa: Disallow 0 OA property values (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/bo: Don't include the CCS metadata in the dma-buf sg-table (Anusha Srivatsa) [RHEL-142315]
  - drm: Fix object leak in DRM_IOCTL_GEM_CHANGE_HANDLE (Anusha Srivatsa) [RHEL-142315]
  - drm/mgag200: Fix big-endian support (Anusha Srivatsa) [RHEL-142315]
  - drm/ttm: Avoid NULL pointer deref for evicted BOs (Anusha Srivatsa) [RHEL-142315]
  - drm/i915: Fix format string truncation warning (Anusha Srivatsa) [RHEL-142315]
  - drm/amdkfd: Trap handler support for expert scheduling mode (Anusha Srivatsa) [RHEL-142315]
  - drm/amdkfd: bump minimum vgpr size for gfx1151 (Anusha Srivatsa) [RHEL-142315]
  - drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace (Anusha Srivatsa) [RHEL-142315]
  - drm/nouveau/gsp: Allocate fwsec-sb at boot (Anusha Srivatsa) [RHEL-142315]
  - drm/bridge: ti-sn65dsi83: ignore PLL_UNLOCK errors (Anusha Srivatsa) [RHEL-142315]
  - drm/amd: Fix unbind/rebind for VCN 4.0.5 (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl() (Anusha Srivatsa) [RHEL-142315]
  - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() (Anusha Srivatsa) [RHEL-142315]
  - drm/buddy: Separate clear and dirty free block trees (Anusha Srivatsa) [RHEL-142315]
  - drm/buddy: Optimize free block management with RB tree (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu/sdma6: Update SDMA 6.0.3 FW version to include UMQ protected-fence fix (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu: Forward VMID reservation errors (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu/gmc12: add amdgpu_vm_handle_fault() handling (Anusha Srivatsa) [RHEL-142315]
  - Revert "drm/amd: Skip power ungate during suspend for VPE" (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/guc: READ/WRITE_ONCE g2h_fence->done (Anusha Srivatsa) [RHEL-142315]
  - drm/gem-shmem: Fix the MODULE_LICENSE() string (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu: don't attach the tlb fence for SI (Anusha Srivatsa) [RHEL-142315]
  - drm/displayid: add quirk to ignore DisplayID checksum errors (Anusha Srivatsa) [RHEL-142315]
  - drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct drm_edid_ident (Anusha Srivatsa) [RHEL-142315]
  - drm: nova: depend on CONFIG_64BIT (Anusha Srivatsa) [RHEL-142315]
  - drm/displayid: pass iter to drm_find_displayid_extension() (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/display: Fix scratch registers offsets for DCN351 (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/display: Fix scratch registers offsets for DCN35 (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() (Anusha Srivatsa) [RHEL-142315]
  - Revert "drm/amd/display: Fix pbn to kbps Conversion" (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/oa: Always set OAG_OAGLBCTXCTRL_COUNTER_RESUME (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/oa: Limit num_syncs to prevent oversized allocations (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Limit num_syncs to prevent oversized allocations (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu: fix a job->pasid access race in gpu recovery (Anusha Srivatsa) [RHEL-142315]
  - drm/panel: sony-td4353-jdi: Enable prepare_prev_first (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Restore engine registers before restarting schedulers after GT reset (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Increase TDF timeout (Anusha Srivatsa) [RHEL-142315]
  - drm/me/gsc: mei interrupt top half should be in irq disabled context (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: fix drm_gpusvm_init() arguments (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Apply Wa_14020316580 in xe_gt_idle_enable_pg() (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Fix freq kobject leak on sysfs_create_files failure (Anusha Srivatsa) [RHEL-142315]
  - drm/tests: Handle EDEADLK in set_up_atomic_state() (Anusha Srivatsa) [RHEL-142315]
  - drm/tests: Handle EDEADLK in drm_test_check_valid_clones() (Anusha Srivatsa) [RHEL-142315]
  - drm/tests: hdmi: Handle drm_kunit_helper_enable_crtc_connector() returning EDEADLK (Anusha Srivatsa) [RHEL-142315]
  - drm/i915/fbdev: Hold runtime PM ref during fbdev BO creation (Anusha Srivatsa) [RHEL-142315]
  - drm/{i915, xe}/fbdev: deduplicate struct drm_mode_fb_cmd2 init (Anusha Srivatsa) [RHEL-142315]
  - drm/{i915, xe}/fbdev: pass struct drm_device to intel_fbdev_fb_alloc() (Anusha Srivatsa) [RHEL-142315]
  - drm/i915/fbdev: make intel_framebuffer_create() error return handling explicit (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/fbdev: use the same 64-byte stride alignment as i915 (Anusha Srivatsa) [RHEL-142315]
  - drm/amdkfd: Use huge page size to check split svm range alignment (Anusha Srivatsa) [RHEL-142315]
  - drm/nouveau: fix circular dep oops from vendored i2c encoder (Anusha Srivatsa) [RHEL-142315]
  - drm/nouveau: refactor deprecated strcpy (Anusha Srivatsa) [RHEL-142315]
  - drm/plane: Fix IS_ERR() vs NULL check in drm_plane_create_hotspot_properties() (Anusha Srivatsa) [RHEL-142315]
  - drm/panel: novatek-nt35560: avoid on-stack device structure (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Prevent potential UAF in group creation (Anusha Srivatsa) [RHEL-142315]
  - drm/amdkfd: assign AID to uuid in topology for SPX mode (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Avoid adding of kernel BOs to extobj list (Anusha Srivatsa) [RHEL-142315]
  - drm/nouveau: restrict the flush page to a 32-bit address (Anusha Srivatsa) [RHEL-142315]
  - drm/tidss: Move OLDI mode validation to OLDI bridge mode_valid hook (Anusha Srivatsa) [RHEL-142315]
  - drm/tidss: Remove max_pclk_khz and min_pclk_khz from tidss display features (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Fix potential memleak of vma structure (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Fix UAF on kernel BO VA nodes (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Fix race with suspend during unplug (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Fix UAF race between device unplug and FW event processing (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Fix group_free_queue() for partially initialized queues (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Handle errors returned by drm_sched_entity_init() (Anusha Srivatsa) [RHEL-142315]
  - drm/imagination: Fix reference to devm_platform_get_and_ioremap_resource() (Anusha Srivatsa) [RHEL-142315]
  - accel/ivpu: Fix race condition when unbinding BOs (Anusha Srivatsa) [RHEL-142315]
  - drm: nova: select NOVA_CORE (Anusha Srivatsa) [RHEL-142315]
  - accel/ivpu: Remove skip of dma unmap for imported buffers (Anusha Srivatsa) [RHEL-142315]
  - drm/rcar-du: dsi: Fix missing parameter in RXSETR_...EN macros (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu/userq: fix SDMA and compute validation (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu: add userq object va track helpers (Anusha Srivatsa) [RHEL-142315]
  - accel/ivpu: Fix race condition when mapping dmabuf (Anusha Srivatsa) [RHEL-142315]
  - drm: atmel-hlcdc: fix atmel_xlcdc_plane_setup_scaler() (Anusha Srivatsa) [RHEL-142315]
  - drm/vgem-fence: Fix potential deadlock on release (Anusha Srivatsa) [RHEL-142315]
  - accel/ivpu: Fix DCT active percent format (Anusha Srivatsa) [RHEL-142315]
  - accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context() (Anusha Srivatsa) [RHEL-142315]
  - accel/ivpu: Rework bind/unbind of imported buffers (Anusha Srivatsa) [RHEL-142315]
  - drm/panel: visionox-rm69299: Don't clear all mode flags (Anusha Srivatsa) [RHEL-142315]
  - drm/panel: visionox-rm69299: Fix clock frequency for SHIFT6mq (Anusha Srivatsa) [RHEL-142315]
  - accel/ivpu: Ensure rpm_runtime_put in case of engine reset/resume fail (Anusha Srivatsa) [RHEL-142315]
  - lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-138056]
  - lib/freader: support reading more than 2 folios (Waiman Long) [RHEL-138056]
  - lib: move freader into buildid.h (Waiman Long) [RHEL-138056]
  - sfc: fix potential memory leak in efx_mae_process_mport() (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - sfc: replace min/max nesting with clamp() (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - PCI/ERR: Remove remnants of .link_reset() callback (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - sfc: unfix not-a-typo in comment (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - net: Fix typos [sfc] (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - sfc: falcon: refactor and document ef4_ethtool_get_rxfh_fields (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - sfc: siena: eliminate xdp_rxq_info_valid using XDP base API (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - sfc: eliminate xdp_rxq_info_valid using XDP base API (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138021] {CVE-2025-38415}
  - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138021] {CVE-2025-38415}
  - erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137980] {CVE-2025-38172}
  - perf/x86/intel/cstate: Add Clearwater Forest support (Michael Petlan) [RHEL-45066]
  - cpuidle: governors: menu: Select polling state in some more cases (Mark Langsdorf) [RHEL-120323]
  - cpuidle: governors: menu: Rearrange main loop in menu_select() (Mark Langsdorf) [RHEL-120323]
  - cpuidle: governors: menu: Avoid selecting states with too much latency (Mark Langsdorf) [RHEL-120323]
  - cpuidle: governors: menu: Avoid using invalid recent intervals data (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Fix cpuhotplug routine with PREEMPT_RT=y (Mark Langsdorf) [RHEL-120323]
  - cpuidle: dt: fix opencoded for_each_cpu() in idle_state_valid() (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Drop redundant sync_state support (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Opt-out from genpd's common ->sync_state() support (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Fix uninitialized variable in dt_idle_state_present() (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Avoid initializing faux device if no DT idle states are present (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Correct the domain-idlestate statistics in debugfs (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Move the per CPU variable domain_state to a struct (Mark Langsdorf) [RHEL-120323]
  - pmdomain: core: Add genpd helper to correct the usage/rejected counters (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Transition to the faux device interface (Mark Langsdorf) [RHEL-120323]
  - cpuidle: menu: Optimize bucket assignment when next_timer_ns equals KTIME_MAX (Mark Langsdorf) [RHEL-120323]
  - cpuidle: teo: Fix typos in two comments (Mark Langsdorf) [RHEL-120323]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-200.el10]
changelog:
  - nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference (Ming Lei) [RHEL-143329]
  - iommufd/selftest: Add missing kconfig for DMA_SHARED_BUFFER (Cédric Le Goater) [RHEL-111742]
  - iommufd: Fix building without dmabuf (Cédric Le Goater) [RHEL-111742]
  - iommu/arm-smmu-v3-iommufd: Allow attaching nested domain for GBPA cases (Cédric Le Goater) [RHEL-111742]
  - iommufd/selftest: Add some tests for the dmabuf flow (Cédric Le Goater) [RHEL-111742]
  - iommufd: Accept a DMABUF through IOMMU_IOAS_MAP_FILE (Cédric Le Goater) [RHEL-111742]
  - iommufd: Have iopt_map_file_pages convert the fd to a file (Cédric Le Goater) [RHEL-111742]
  - iommufd: Have pfn_reader process DMABUF iopt_pages (Cédric Le Goater) [RHEL-111742]
  - iommufd: Allow MMIO pages in a batch (Cédric Le Goater) [RHEL-111742]
  - iommufd: Allow a DMABUF to be revoked (Cédric Le Goater) [RHEL-111742]
  - iommufd: Do not map/unmap revoked DMABUFs (Cédric Le Goater) [RHEL-111742]
  - iommufd: Add DMABUF to iopt_pages (Cédric Le Goater) [RHEL-111742]
  - vfio/pci: Add vfio_pci_dma_buf_iommufd_map() (Cédric Le Goater) [RHEL-111742]
  - module: Provide EXPORT_SYMBOL_GPL_FOR_MODULES() helper (Cédric Le Goater) [RHEL-111742]
  - dma-direct: Fix missing sg_dma_len assignment in P2PDMA bus mappings (Cédric Le Goater) [RHEL-132423]
  - vfio/pds: Fix memory leak in pds_vfio_dirty_enable() (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Disable qword access to the VGA region (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Disable qword access to the PCI ROM bar (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Add vfio_pci_device_init_perf_test (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Eliminate INVALID_IOVA (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Split libvfio.h into separate header files (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Move vfio_selftests_*() helpers into libvfio.c (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Rename vfio_util.h to libvfio.h (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Stop passing device for IOMMU operations (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Move IOVA allocator into iova_allocator.c (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Move IOMMU library code into iommu.c (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Rename struct vfio_dma_region to dma_region (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Upgrade driver logging to dev_err() (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Prefix logs with device BDF where relevant (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Eliminate overly chatty logging (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Support multiple devices in the same container/iommufd (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Introduce struct iommu (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Rename struct vfio_iommu_mode to iommu_mode (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Allow passing multiple BDFs on the command line (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Split run.sh into separate scripts (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Move run.sh into scripts directory (Cédric Le Goater) [RHEL-132423]
  - vfio/nvgrace-gpu: wait for the GPU mem to be ready (Cédric Le Goater) [RHEL-132423]
  - vfio/nvgrace-gpu: Inform devmem unmapped after reset (Cédric Le Goater) [RHEL-132423]
  - vfio/nvgrace-gpu: split the code to wait for GPU ready (Cédric Le Goater) [RHEL-132423]
  - vfio: use vfio_pci_core_setup_barmap to map bar in mmap (Cédric Le Goater) [RHEL-132423]
  - vfio/nvgrace-gpu: Add support for huge pfnmap (Cédric Le Goater) [RHEL-132423]
  - vfio: refactor vfio_pci_mmap_huge_fault function (Cédric Le Goater) [RHEL-132423]
  - dma-buf: fix integer overflow in fill_sg_entry() for buffers >= 8GiB (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Use RCU for error/request triggers to avoid circular locking (Cédric Le Goater) [RHEL-132423]
  - vfio/nvgrace: Support get_dmabuf_phys (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Add dma-buf export support for MMIO regions (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Enable peer-to-peer DMA transactions by default (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Share the core device pointer while invoking feature functions (Cédric Le Goater) [RHEL-132423]
  - vfio: Export vfio device get and put registration helpers (Cédric Le Goater) [RHEL-132423]
  - dma-buf: provide phys_vec to scatter-gather mapping routine (Cédric Le Goater) [RHEL-132423]
  - PCI/P2PDMA: Document DMABUF model (Cédric Le Goater) [RHEL-132423]
  - PCI/P2PDMA: Provide an access to pci_p2pdma_map_type() function (Cédric Le Goater) [RHEL-132423]
  - PCI/P2PDMA: Refactor to separate core P2P functionality from memory allocation (Cédric Le Goater) [RHEL-132423]
  - PCI/P2PDMA: Simplify bus address mapping API (Cédric Le Goater) [RHEL-132423]
  - PCI/P2PDMA: Separate the mmap() support from the core logic (Cédric Le Goater) [RHEL-132423]
  - vfio: Remove the get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio: Move the remaining drivers to get_region_info_caps (Cédric Le Goater) [RHEL-132423]
  - vfio/platform: Convert to get_region_info_caps (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Convert all PCI drivers to get_region_info_caps (Cédric Le Goater) [RHEL-132423]
  - vfio/ccw: Convert to get_region_info_caps (Cédric Le Goater) [RHEL-132423]
  - vfio/gvt: Convert to get_region_info_caps (Cédric Le Goater) [RHEL-132423]
  - vfio/mbochs: Convert mbochs to use vfio_info_add_capability() (Cédric Le Goater) [RHEL-132423]
  - vfio: Add get_region_info_caps op (Cédric Le Goater) [RHEL-132423]
  - vfio: Require drivers to implement get_region_info (Cédric Le Goater) [RHEL-132423]
  - vfio/gvt: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/ccw: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/cdx: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/fsl: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/platform: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/mbochs: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/mdpy: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/mtty: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Fill in the missing get_region_info ops (Cédric Le Goater) [RHEL-132423]
  - vfio/nvgrace: Convert to the get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/virtio: Convert to the get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/hisi: Convert to the get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - hisi_acc_vfio_pci: Add .match_token_uuid callback in hisi_acc_vfio_pci_migrn_ops (Cédric Le Goater) [RHEL-132423]
  - vfio: Fix ksize arg while copying user struct in vfio_df_ioctl_bind_iommufd() (Cédric Le Goater) [RHEL-132423]
  - hisi_acc_vfio_pci: adapt to new migration configuration (Cédric Le Goater) [RHEL-132423]
  - crypto: hisilicon - qm updates BAR configuration (Cédric Le Goater) [RHEL-132423]
  - vfio/mtty: Fix spelling typo in samples/vfio-mdev (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Store libvfio build outputs in $(OUTPUT)/libvfio (Cédric Le Goater) [RHEL-132423]
  - iommu/dma: add missing support for DMA_ATTR_MMIO for dma_iova_unlink() (Cédric Le Goater) [RHEL-116969]
  - kmsan: fix kmsan_handle_dma() to avoid false positives (Cédric Le Goater) [RHEL-116969]
  - kmsan: fix missed kmsan_handle_dma() signature conversion (Cédric Le Goater) [RHEL-116969]
  - mm/hmm: properly take MMIO path (Cédric Le Goater) [RHEL-116969]
  - mm/hmm: migrate to physical address-based DMA mapping API (Cédric Le Goater) [RHEL-116969]
  - dma-mapping: export new dma_*map_phys() interface (Cédric Le Goater) [RHEL-116969]
  - dma-mapping: implement DMA_ATTR_MMIO for dma_(un)map_page_attrs() (Cédric Le Goater) [RHEL-116969]
  - kmsan: convert kmsan_handle_dma to use physical addresses (Cédric Le Goater) [RHEL-116969]
  - dma-mapping: convert dma_direct_*map_page to be phys_addr_t based (Cédric Le Goater) [RHEL-116969]
  - iommu/dma: implement DMA_ATTR_MMIO for iommu_dma_(un)map_phys() (Cédric Le Goater) [RHEL-116969]
  - iommu/dma: rename iommu_dma_*map_page to iommu_dma_*map_phys (Cédric Le Goater) [RHEL-116969]
  - dma-mapping: rename trace_dma_*map_page to trace_dma_*map_phys (Cédric Le Goater) [RHEL-116969]
  - dma-debug: refactor to use physical addresses for page mapping (Cédric Le Goater) [RHEL-116969]
  - iommu/dma: implement DMA_ATTR_MMIO for dma_iova_link(). (Cédric Le Goater) [RHEL-116969]
  - dma-mapping: introduce new DMA attribute to indicate MMIO memory (Cédric Le Goater) [RHEL-116969]
  - objtool: Support Clang AUTOFDO .cold functions (Joe Lawrence) [RHEL-114919]
  - objtool: Fix skip_alt_group() for non-alternative STAC/CLAC (Joe Lawrence) [RHEL-114919]
  - objtool/LoongArch: Get table size correctly if LTO is enabled (Joe Lawrence) [RHEL-114919]
  - objtool/klp: Only enable --checksum when needed (partial) (Joe Lawrence) [RHEL-114916]
  - objtool: Set minimum xxhash version to 0.8 (Joe Lawrence) [RHEL-114916]
  - objtool/klp: Add the debian-based package name of xxhash to the hint (Joe Lawrence) [RHEL-114916]
  - Revert "objtool: Warn on functions with ambiguous -ffunction-sections section names" (Joe Lawrence) [RHEL-114916]
  - kbuild: Check for functions with ambiguous -ffunction-sections section names (Joe Lawrence) [RHEL-114916]
  - objtool: Warn on functions with ambiguous -ffunction-sections section names (Joe Lawrence) [RHEL-114916]
  - tty: synclink_gt: Fix namespace collision and startup() section placement with -ffunction-sections (Joe Lawrence) [RHEL-114916]
  - tty: amiserial: Fix namespace collision and startup() section placement with -ffunction-sections (Joe Lawrence) [RHEL-114916]
  - media: atomisp: gc2235: Fix namespace collision and startup() section placement with -ffunction-sections (Joe Lawrence) [RHEL-114916]
  - serial: icom: Fix namespace collision and startup() section placement with -ffunction-sections (Joe Lawrence) [RHEL-114916]
  - drivers/xen/xenbus: Fix namespace collision and split() section placement with AutoFDO (Joe Lawrence) [RHEL-114916]
  - media: atomisp: Fix namespace collision and startup() section placement with -ffunction-sections (Joe Lawrence) [RHEL-114916]
  - vmlinux.lds: Fix TEXT_MAIN to include .text.start and friends (Joe Lawrence) [RHEL-114916]
  - vmlinux.lds: Exclude .text.startup and .text.exit from TEXT_MAIN (Joe Lawrence) [RHEL-114916]
  - tools/objtool: Copy the __cleanup unused variable fix for older clang (Joe Lawrence) [RHEL-114916]
  - livepatch: Introduce source code helpers for livepatch modules (Joe Lawrence) [RHEL-114916]
  - livepatch/klp-build: Add --show-first-changed option to show function divergence (Joe Lawrence) [RHEL-114916]
  - livepatch/klp-build: Add --debug option to show cloning decisions (Joe Lawrence) [RHEL-114916]
  - livepatch/klp-build: Introduce klp-build script for generating livepatch modules (Joe Lawrence) [RHEL-114916]
  - livepatch/klp-build: Add stub init code for livepatch modules (Joe Lawrence) [RHEL-114916]
  - livepatch/klp-build: Introduce fix-patch-lines script to avoid __LINE__ diff noise (Joe Lawrence) [RHEL-114916]
  - kbuild,objtool: Defer objtool validation step for CONFIG_KLP_BUILD (Joe Lawrence) [RHEL-114916]
  - livepatch: Add CONFIG_KLP_BUILD (Joe Lawrence) [RHEL-114916]
  - objtool: Add base objtool support for livepatch modules (Joe Lawrence) [RHEL-114916]
  - objtool: Refactor prefix symbol creation code (Joe Lawrence) [RHEL-114916]
  - objtool/klp: Add post-link subcommand to finalize livepatch modules (Joe Lawrence) [RHEL-114916]
  - objtool/klp: Add --debug option to show cloning decisions (Joe Lawrence) [RHEL-114916]
  - objtool/klp: Introduce klp diff subcommand for diffing object files (Joe Lawrence) [RHEL-114916]
  - objtool/klp: Add --debug-checksum=<funcs> to show per-instruction checksums (Joe Lawrence) [RHEL-114916]
  - objtool/klp: Add --checksum option to generate per-function checksums (Joe Lawrence) [RHEL-114916]
  - objtool: Unify STACK_FRAME_NON_STANDARD entry sizes (Joe Lawrence) [RHEL-114916]
  - x86/asm: Annotate special section entries (Joe Lawrence) [RHEL-114916]
  - x86/bug: Add ARCH_WARN_ASM macro for BUG/WARN asm code sharing with Rust (Joe Lawrence) [RHEL-114916]
  - objtool: Add ANNOTATE_DATA_SPECIAL (Joe Lawrence) [RHEL-114916]
  - objtool: Move ANNOTATE* macros to annotate.h (Joe Lawrence) [RHEL-114916]
  - objtool: Add annotype() helper (Joe Lawrence) [RHEL-114916]
  - objtool: Add elf_create_file() (Joe Lawrence) [RHEL-114916]
  - objtool: Add elf_create_reloc() and elf_init_reloc() (Joe Lawrence) [RHEL-114916]
  - objtool: Add elf_create_data() (Joe Lawrence) [RHEL-114916]
  - objtool: Generalize elf_create_section() (Joe Lawrence) [RHEL-114916]
  - objtool: Generalize elf_create_symbol() (Joe Lawrence) [RHEL-114916]
  - objtool: Simplify special symbol handling in elf_update_symbol() (Joe Lawrence) [RHEL-114916]
  - objtool: Refactor add_jump_destinations() (Joe Lawrence) [RHEL-114916]
  - objtool: Reindent check_options[] (Joe Lawrence) [RHEL-114916]
  - objtool: Resurrect --backup option (Joe Lawrence) [RHEL-114916]
  - objtool: Rename --Werror to --werror (Joe Lawrence) [RHEL-114916]
  - objtool: Avoid emptying lists for duplicate sections (Joe Lawrence) [RHEL-114916]
  - objtool: Simplify reloc offset calculation in unwind_read_hints() (Joe Lawrence) [RHEL-114916]
  - objtool: Mark prefix functions (Joe Lawrence) [RHEL-114916]
  - objtool: Fix weak symbol hole detection for .cold functions (Joe Lawrence) [RHEL-114916]
  - objtool: Mark .cold subfunctions (Joe Lawrence) [RHEL-114916]
  - objtool: Add section/symbol type helpers (Joe Lawrence) [RHEL-114916]
  - objtool: Convert elf iterator macros to use 'struct elf' (Joe Lawrence) [RHEL-114916]
  - objtool: Fix failure when being compiled on x32 system (Joe Lawrence) [RHEL-114916]
  - objtool: Add action to check for absence of absolute relocations (Joe Lawrence) [RHEL-114916]
  - objtool: Remove .parainstructions reference (Joe Lawrence) [RHEL-114916]
  - objtool: Clean up compiler flag usage (Joe Lawrence) [RHEL-114916]
  - objtool: Const string cleanup (Joe Lawrence) [RHEL-114916]
  - objtool: Check for missing annotation entries in read_annotate() (Joe Lawrence) [RHEL-114916]
  - objtool: Fix "unexpected end of section" warning for alternatives (Joe Lawrence) [RHEL-114916]
  - objtool: Fix __pa_symbol() relocation handling (Joe Lawrence) [RHEL-114916]
  - objtool: Fix x86 addend calculation (Joe Lawrence) [RHEL-114916]
  - objtool: Fix weak symbol detection (Joe Lawrence) [RHEL-114916]
  - objtool: Fix interval tree insertion for zero-length symbols (Joe Lawrence) [RHEL-114916]
  - objtool: Add empty symbols to the symbol tree again (Joe Lawrence) [RHEL-114916]
  - objtool: Remove error handling boilerplate (Joe Lawrence) [RHEL-114916]
  - objtool: Fix standalone --hacks=jump_label (Joe Lawrence) [RHEL-114916]
  - objtool: Propagate elf_truncate_section() error in elf_write() (Joe Lawrence) [RHEL-114916]
  - objtool: Fix broken error handling in read_symbols() (Joe Lawrence) [RHEL-114916]
  - objtool: Make find_symbol_containing() less arbitrary (Joe Lawrence) [RHEL-114916]
  - interval_tree: Sync interval_tree_generic.h with tools (Joe Lawrence) [RHEL-114916]
  - x86/alternative: Refactor INT3 call emulation selftest (Joe Lawrence) [RHEL-114916]
  - modpost: Ignore unresolved section bounds symbols (Joe Lawrence) [RHEL-114916]
  - kbuild: Remove 'kmod_' prefix from __KBUILD_MODNAME (Joe Lawrence) [RHEL-114916]
  - elfnote: Change ELFNOTE() to use __UNIQUE_ID() (Joe Lawrence) [RHEL-114916]
  - compiler.h: Make addressable symbols less of an eyesore (Joe Lawrence) [RHEL-114916]
  - compiler: Tweak __UNIQUE_ID() naming (Joe Lawrence) [RHEL-114916]
  - x86/kprobes: Remove STACK_FRAME_NON_STANDARD annotation (Joe Lawrence) [RHEL-114916]
  - x86/module: Improve relocation error messages (Joe Lawrence) [RHEL-114916]
  - vmlinux.lds: Unify TEXT_MAIN, DATA_MAIN, and related macros (Joe Lawrence) [RHEL-114916]
  - s390/vmlinux.lds.S: Prevent thunk functions from getting placed with normal text (Joe Lawrence) [RHEL-114916]
  - vmlinux.lds: Include .data.rel[.local] into .data section (Joe Lawrence) [RHEL-114916]
  - HID: intel-ish-hid: Fix -Wcast-function-type-strict in devm_ishtp_alloc_workqueue() (Tony Camuso) [RHEL-135993]
  - HID: intel-ish-hid: ipc: Separate hibernate callbacks in dev_pm_ops (Tony Camuso) [RHEL-135993]
  - HID: intel-ish-hid: Use IPC RESET instead of void message in ish_wakeup() (Tony Camuso) [RHEL-135993]
  - HID: intel-ish-hid: ipc: Always schedule FW reset work on RESET_NOTIFY/ACK (Tony Camuso) [RHEL-135993]
  - HID: intel-ish-ipc: Reset clients state on resume from D3 (Tony Camuso) [RHEL-135993]
  - HID: intel-ishtp-hid: Clear suspended flag only after connected on resume (Tony Camuso) [RHEL-135993]
  - HID: intel-ish-hid: Add ishtp_get_connection_state() interface (Tony Camuso) [RHEL-135993]
  - HID: intel-ish-hid: Use dedicated unbound workqueues to prevent resume blocking (Tony Camuso) [RHEL-135993]
  - HID: intel-ish-ipc: Remove redundant ready check after timeout function (Tony Camuso) [RHEL-135993]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-201.el10]
changelog:
  - vfio: Prevent from pinned DMABUF importers to attach to VFIO DMABUF (Cédric Le Goater) [RHEL-144911]
  - r8152: Advertise software timestamp information. (Jose Ignacio Tornos Martinez) [RHEL-124653]
  - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143197] {CVE-2025-68800}
  - RDMA/efa: Remove possible negative shift (Kamal Heib) [RHEL-140846]
  - RDMA/efa: Extend admin timeout error print (Kamal Heib) [RHEL-140846]
  - RDMA/efa: Add Network HW statistics counters (Kamal Heib) [RHEL-140846]
  - io_uring/io-wq: fix incorrect io_wq_for_each_worker() termination logic (Jeff Moyer) [RHEL-140845]
  - io_uring/rw: cast rw->flags assignment to rwf_t (Jeff Moyer) [RHEL-140845]
  - io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-140845]
  - io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-140845]
  - io_uring: fix filename leak in __io_openat_prep() (Jeff Moyer) [RHEL-140845]
  - io_uring: fix nr_segs calculation in io_import_kbuf (Jeff Moyer) [RHEL-140845]
  - io_uring: fix min_wait wakeups for SQPOLL (Jeff Moyer) [RHEL-140845]
  - io_uring/kbuf: use READ_ONCE() for userspace-mapped memory (Jeff Moyer) [RHEL-140845]
  - io_uring/rsrc: fix lost entries after cloned range (Jeff Moyer) [RHEL-140845]
  - io_uring/poll: correctly handle io_poll_add() return value on update (Jeff Moyer) [RHEL-140845]
  - io_uring/rsrc: don't use blk_rq_nr_phys_segments() as number of bvecs (Jeff Moyer) [RHEL-140845]
  - io_uring/rw: ensure allocated iovec gets cleared for early failure (Jeff Moyer) [RHEL-140845]
  - io_uring: fix regbuf vector size truncation (Jeff Moyer) [RHEL-140845]
  - io_uring: use WRITE_ONCE for user shared memory (Jeff Moyer) [RHEL-140845]
  - io_uring: fix types for region size calulation (Jeff Moyer) [RHEL-140845]
  - io_uring: correct __must_hold annotation in io_install_fixed_file (Jeff Moyer) [RHEL-140845]
  - io_uring/sqpoll: be smarter on when to update the stime usage (Jeff Moyer) [RHEL-140845]
  - io_uring/sqpoll: switch away from getrusage() for CPU accounting (Jeff Moyer) [RHEL-140845]
  - io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-140845]
  - io_uring/fdinfo: get rid of dumping credentials (Jeff Moyer) [RHEL-140845]
  - io_uring/fdinfo: only compile if CONFIG_PROC_FS is set (Jeff Moyer) [RHEL-140845]
  - io_uring: fix incorrect unlikely() usage in io_waitid_prep() (Jeff Moyer) [RHEL-140845]
  - io_uring: protect mem region deregistration (Jeff Moyer) [RHEL-140845]
  - Revert "io_uring/rw: drop -EOPNOTSUPP check in __io_complete_rw_common()" (Jeff Moyer) [RHEL-140845]
  - io_uring: fix incorrect io_kiocb reference in io_link_skb (Jeff Moyer) [RHEL-140845]
  - io_uring/msg_ring: kill alloc_cache for io_kiocb allocations (Jeff Moyer) [RHEL-140845]
  - io_uring: include dying ring in task_work "should cancel" state (Jeff Moyer) [RHEL-140845]
  - fs: add a FMODE_ flag to indicate IOCB_HAS_METADATA availability (Jeff Moyer) [RHEL-140845]
  - io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-140845]
  - io_uring: export io_[un]account_mem (Jeff Moyer) [RHEL-140845]
  - io_uring: don't use int for ABI (Jeff Moyer) [RHEL-140845]
  - tools headers UAPI: sync linux/stat.h linux/fs.h with tools (Olga Kornievskaia) [RHEL-134733]
  - NFS: Fix size read races in truncate, fallocate and copy offload (Olga Kornievskaia) [RHEL-134733]
  - NFS/localio: Deal with page bases that are > PAGE_SIZE (Olga Kornievskaia) [RHEL-134733]
  - NFS/localio: Stop further I/O upon hitting an error (Olga Kornievskaia) [RHEL-134733]
  - pnfs/blocklayout: Fix memory leak in bl_parse_scsi() (Olga Kornievskaia) [RHEL-134733]
  - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Fix a deadlock involving nfs_release_folio() (Olga Kornievskaia) [RHEL-134733]
  - pNFS: Fix a deadlock when returning a delegation during open() (Olga Kornievskaia) [RHEL-134733]
  - nfsd: Drop the client reference in client_states_open() (Olga Kornievskaia) [RHEL-134733]
  - nfsd: fix nfsd_file reference leak in nfsd4_add_rdaccess_to_wrdeleg() (Olga Kornievskaia) [RHEL-134733]
  - lockd: fix vfs_test_lock() calls (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Clear TIME_DELEG in the suppattr_exclcreat bitmap (Olga Kornievskaia) [RHEL-134733]
  - nfsd: fix memory leak in nfsd_create_serv error paths (Olga Kornievskaia) [RHEL-134733]
  - net/handshake: restore destructor on submit failure (Olga Kornievskaia) [RHEL-134733]
  - nfsd: Mark variable __maybe_unused to avoid W=1 build break (Olga Kornievskaia) [RHEL-134733]
  - svcrdma: bound check rq_pages index in inline path (Olga Kornievskaia) [RHEL-134733]
  - svcrdma: return 0 on success from svc_rdma_copy_inline_range (Olga Kornievskaia) [RHEL-134733]
  - svcrdma: use rc_pageoff for memcpy byte offset (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (Olga Kornievskaia) [RHEL-134733]
  - net/handshake: duplicate handshake cancellations leak socket (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: fix regression due to out-of-order __put_cred (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: remove 61 byte hole from needless ____cacheline_aligned (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: remove alignment size checking in nfs_is_local_dio_possible (Olga Kornievskaia) [RHEL-134733]
  - NFS: Fix inheritance of the block sizes when automounting (Olga Kornievskaia) [RHEL-134733]
  - NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (Olga Kornievskaia) [RHEL-134733] {CVE-2025-68764}
  - Revert "nfs: ignore SB_RDONLY when mounting nfs" (Olga Kornievskaia) [RHEL-134733]
  - Revert "nfs: clear SB_RDONLY before getting superblock" (Olga Kornievskaia) [RHEL-134733]
  - Revert "nfs: ignore SB_RDONLY when remounting nfs" (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (Olga Kornievskaia) [RHEL-134733] {CVE-2025-68349}
  - NFSv4.1: protect destroying and nullifying bc_serv structure (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: new helper function for stopping backchannel server (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: cleanup common code in backchannel request (Olga Kornievskaia) [RHEL-134733]
  - NFSv4.1: pass transport for callback shutdown (Olga Kornievskaia) [RHEL-134733]
  - NFSv4: ensure the open stateid seqid doesn't go backwards (Olga Kornievskaia) [RHEL-134733]
  - NFS: Initialise verifiers for visible dentries in _nfs4_open_and_get_state (Olga Kornievskaia) [RHEL-134733]
  - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Initialise verifiers for visible dentries in readdir and lookup (Olga Kornievskaia) [RHEL-134733]
  - NFS: Avoid changing nlink when file removes and attribute updates race (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Make FILE_SYNC WRITEs comply with spec (Olga Kornievskaia) [RHEL-134733]
  - NFSD: use correct reservation type in nfsd4_scsi_fence_client (Olga Kornievskaia) [RHEL-134733]
  - NFSD: don't start nfsd if sv_permsocks is empty (Olga Kornievskaia) [RHEL-134733]
  - lockd: don't allow locking on reexported NFSv2/3 (Olga Kornievskaia) [RHEL-134733]
  - NFSD/blocklayout: Extract extent mapping from proc_layoutget (Olga Kornievskaia) [RHEL-134733]
  - NFSD/blocklayout: Fix minlength check in proc_layoutget (Olga Kornievskaia) [RHEL-134733]
  - svcrdma: Release transport resources synchronously (Olga Kornievskaia) [RHEL-134733]
  - net/handshake: Fix memory leak in tls_handshake_accept() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Fix LTP test failures when timestamps are delegated (Olga Kornievskaia) [RHEL-134733] {CVE-2025-68242}
  - NFSv4: Fix an incorrect parameter when calling nfs4_call_sync() (Olga Kornievskaia) [RHEL-134733]
  - NFS: sysfs: fix leak when nfs_client kobject add fails (Olga Kornievskaia) [RHEL-134733]
  - NFSv2/v3: Fix error handling in nfs_atomic_open_v23() (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: do not issue misaligned DIO out-of-order (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: Ensure DIO WRITE's IO on stable storage upon completion (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: backfill missing partial read support for misaligned DIO (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: add refcounting for each iocb IO associated with NFS pgio header (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: remove unecessary ENOTBLK handling in DIO WRITE support (Olga Kornievskaia) [RHEL-134733]
  - NFS: Check the TLS certificate fields in nfs_match_client() (Olga Kornievskaia) [RHEL-134733] {CVE-2025-68243}
  - pnfs: Set transport security policy to RPC_XPRTSEC_NONE unless using TLS (Olga Kornievskaia) [RHEL-134733]
  - pnfs: Fix TLS logic in _nfs4_pnfs_v4_ds_connect() (Olga Kornievskaia) [RHEL-134733]
  - pnfs: Fix TLS logic in _nfs4_pnfs_v3_ds_connect() (Olga Kornievskaia) [RHEL-134733]
  - Revert "SUNRPC: Make RPCSEC_GSS_KRB5 select CRYPTO instead of depending on it" (Olga Kornievskaia) [RHEL-134733]
  - nfsd: ensure SEQUENCE replay sends a valid reply. (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Never cache a COMPOUND when the SEQUENCE operation fails (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Skip close replay processing if XDR encoding fails (Olga Kornievskaia) [RHEL-134733]
  - NFSD: free copynotify stateid in nfs4_free_ol_stateid() (Olga Kornievskaia) [RHEL-134733] {CVE-2025-40273}
  - nfsd: add missing FATTR4_WORD2_CLONE_BLKSIZE from supported attributes (Olga Kornievskaia) [RHEL-134733]
  - nfsd: fix refcount leak in nfsd_set_fh_dentry() (Olga Kornievskaia) [RHEL-134733] {CVE-2025-40212}
  - nfsd: Avoid strlen conflict in nfsd4_encode_components_esc() (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Fix crash in nfsd4_read_release() (Olga Kornievskaia) [RHEL-134733] {CVE-2025-40324}
  - NFS4: Fix state renewals missing after boot (Olga Kornievskaia) [RHEL-134733]
  - NFS: check if suid/sgid was cleared after a write as needed (Olga Kornievskaia) [RHEL-134733]
  - NFS4: Apply delay_retrans to async operations (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: fix to allocate mirror->dss before use (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Define a proc_layoutcommit for the FlexFiles layout type (Olga Kornievskaia) [RHEL-134733] {CVE-2025-40087}
  - nfsd: discard nfserr_dropit (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: Make RPCSEC_GSS_KRB5 select CRYPTO instead of depending on it (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Add io_cache_{read,write} controls to debugfs (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Do the grace period check in ->proc_layoutget (Olga Kornievskaia) [RHEL-134733]
  - nfsd: delete unnecessary NULL check in __fh_verify() (Olga Kornievskaia) [RHEL-134733]
  - NFS: add basic STATX_DIOALIGN and STATX_DIO_READ_ALIGN support (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: add tracepoints for misaligned DIO READ and WRITE support (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: add proper O_DIRECT support for READ and WRITE (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: refactor iocb initialization (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: refactor iocb and iov_iter_bvec initialization (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: avoid issuing misaligned IO using O_DIRECT (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: make trace_nfs_local_open_fh more useful (Olga Kornievskaia) [RHEL-134733]
  - NFSD: filecache: add STATX_DIOALIGN and STATX_DIO_READ_ALIGN support (Olga Kornievskaia) [RHEL-134733]
  - fs: add STATX_DIO_READ_ALIGN (Olga Kornievskaia) [RHEL-134733]
  - fs: reformat the statx definition (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: unexport rpc_malloc() and rpc_free() (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Add support for striped layouts (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Update layout stats & error paths for striped layouts (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Write path updates for striped layouts (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Commit path updates for striped layouts (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Read path updates for striped layouts (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Update low level helper functions to be DS stripe aware. (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Add data structure support for striped layouts (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Use ds_commit_idx when marking a write commit (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Remove cred local variable dependency (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Disallow layoutget during grace period (Olga Kornievskaia) [RHEL-134733]
  - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing (Olga Kornievskaia) [RHEL-134733] {CVE-2025-68185}
  - fs: add RWF_DONTCACHE iocb and FOP_DONTCACHE file_operations flag (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: Update gssx_accept_sec_context() to use xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: Update svcxdr_init_decode() to call xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Update the flexfilelayout driver to use xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Update the filelayout to use xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Update the blocklayout to use xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Update listxattr to use xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Update getacl to use xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Update readdir to use a scratch folio (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: Introduce xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: Remove redundant __GFP_NOWARN (Olga Kornievskaia) [RHEL-134733]
  - nfs: remove NFS_WBACK_BUSY() (Olga Kornievskaia) [RHEL-134733]
  - NFSv4.1: fix mount hang after CREATE_SESSION failure (Olga Kornievskaia) [RHEL-134733]
  - NFSv4.1: fix backchannel max_resp_sz verification check (Olga Kornievskaia) [RHEL-134733]
  - NFSv4: fix "prefered"->"preferred" (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: add a Kconfig option to redirect dfprintk() output to trace buffer (Olga Kornievskaia) [RHEL-134733]
  - redhat/configs: Add CONFIG_SUNRPC_DEBUG_TRACE (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: remove dfprintk_cont() and dfprintk_rcu_cont() (Olga Kornievskaia) [RHEL-134733]
  - nfs: cleanup tracepoint declarations (Olga Kornievskaia) [RHEL-134733]
  - nfs: add tracepoints to nfs_writepages() (Olga Kornievskaia) [RHEL-134733]
  - nfs: more in-depth tracing of writepage events (Olga Kornievskaia) [RHEL-134733]
  - nfs: new tracepoints around write handling (Olga Kornievskaia) [RHEL-134733]
  - nfs: add tracepoints to nfs_file_read() and nfs_file_write() (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: fix "occurence"->"occurrence" (Olga Kornievskaia) [RHEL-134733]
  - nfsd: Don't force CRYPTO_LIB_SHA256 to be built-in (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Reduce DRC bucket size (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Delay adding new entries to LRU (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: Move the svc_rpcb_cleanup() call sites (Olga Kornievskaia) [RHEL-134733]
  - NFS: Remove rpcbind cleanup for NFSv4.0 callback (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Drop redundant conversion to bool (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: eliminate return pointer in svc_tcp_sendmsg() (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: fix pr_notice in svc_tcp_sendto() to show correct length (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul() (Olga Kornievskaia) [RHEL-134733]
  - nfsd: Eliminate an allocation in nfs4_make_rec_clidname() (Olga Kornievskaia) [RHEL-134733]
  - nfsd: Replace open-coded conversion of bytes to hex (Olga Kornievskaia) [RHEL-134733]
  - lockd: Remove space before newline (Olga Kornievskaia) [RHEL-134733]
  - nfsd: fix timestamp updates in CB_GETATTR (Olga Kornievskaia) [RHEL-134733]
  - nfsd: fix SETATTR updates for delegated timestamps (Olga Kornievskaia) [RHEL-134733]
  - nfsd: track original timestamps in nfs4_delegation (Olga Kornievskaia) [RHEL-134733]
  - nfsd: use ATTR_CTIME_SET for delegated ctime updates (Olga Kornievskaia) [RHEL-134733]
  - vfs: add ATTR_CTIME_SET flag (Olga Kornievskaia) [RHEL-134733]
  - nfsd: ignore ATTR_DELEG when checking ia_valid before notify_change() (Olga Kornievskaia) [RHEL-134733]
  - nfsd: fix assignment of ia_ctime.tv_nsec on delegated mtime update (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Fix last write offset handling in layoutcommit (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Implement large extent array support in pNFS (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Minor cleanup in layoutcommit decoding (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Minor cleanup in layoutcommit processing (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Rework encoding and decoding of nfsd4_deviceid (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: Change ret code of xdr_stream_decode_opaque_fixed (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: delay pc_release callback until after the reply is sent (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Move the fh_getattr() helper (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Relocate the fh_want_write() and fh_drop_write() helpers (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: fix null pointer dereference on zero-length checksum (Olga Kornievskaia) [RHEL-134733] {CVE-2025-40129}
  - nfsctl: symlink has no business bumping link count of parent directory (Olga Kornievskaia) [RHEL-134733]
  - slightly simplify nfs_atomic_open() (Olga Kornievskaia) [RHEL-134733]
  - simplify nfs_atomic_open_v23() (Olga Kornievskaia) [RHEL-134733]
  - check_export(): constify path argument (Olga Kornievskaia) [RHEL-134733]
  - rqst_exp_get_by_name(): constify path argument (Olga Kornievskaia) [RHEL-134733]
  - nfs: constify path argument of __vfs_getattr() (Olga Kornievskaia) [RHEL-134733]
  - ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (Guillaume Nault) [RHEL-133462]
  - inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule() (Guillaume Nault) [RHEL-133462]
  - inet: Avoid ehash lookup race in inet_ehash_insert() (Guillaume Nault) [RHEL-133462]
  - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() (Guillaume Nault) [RHEL-133462]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-202.el10]
changelog:
  - net: bridge: annotate data-races around fdb->{updated,used} (Mohammad Heib) [RHEL-123945]
  - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress (Mohammad Heib) [RHEL-123945]
  - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct (Mohammad Heib) [RHEL-123945]
  - net: bridge: fix MST static key usage (Mohammad Heib) [RHEL-123945]
  - net: bridge: fix use-after-free due to MST port state bypass (Mohammad Heib) [RHEL-123945]
  - selftests: bridge_mdb: Add a test for MDB flush on snooping disable (Mohammad Heib) [RHEL-123945]
  - net: bridge: Flush multicast groups when snooping is disabled (Mohammad Heib) [RHEL-123945]
  - net: bridge: use common function to compute the features (Mohammad Heib) [RHEL-123945]
  - net: add a common function to compute features for upper devices (Mohammad Heib) [RHEL-123945]
  - net: bridge: correct debug message function name in br_fill_ifinfo (Mohammad Heib) [RHEL-123945]
  - bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu() (Mohammad Heib) [RHEL-123945]
  - selftests: bridge_fdb_local_vlan_0: Test FDB vs. NET_ADDR_SET behavior (Mohammad Heib) [RHEL-123945]
  - net: bridge: Install FDB for bridge MAC on VLAN 0 (Mohammad Heib) [RHEL-123945]
  - selftests: forwarding: Add test for BR_BOOLOPT_FDB_LOCAL_VLAN_0 (Mohammad Heib) [RHEL-123945]
  - selftests: net: lib.sh: Don't defer failed commands (Mohammad Heib) [RHEL-123945]
  - selftests: defer: Introduce DEFER_PAUSE_ON_FAIL (Mohammad Heib) [RHEL-123945]
  - selftests: defer: Allow spaces in arguments of deferred commands (Mohammad Heib) [RHEL-123945]
  - net: bridge: Introduce UAPI for BR_BOOLOPT_FDB_LOCAL_VLAN_0 (Mohammad Heib) [RHEL-123945]
  - net: bridge: BROPT_FDB_LOCAL_VLAN_0: Skip local FDBs on VLAN creation (Mohammad Heib) [RHEL-123945]
  - net: bridge: BROPT_FDB_LOCAL_VLAN_0: On bridge changeaddr, skip per-VLAN FDBs (Mohammad Heib) [RHEL-123945]
  - net: bridge: BROPT_FDB_LOCAL_VLAN_0: On port changeaddr, skip per-VLAN FDBs (Mohammad Heib) [RHEL-123945]
  - net: bridge: BROPT_FDB_LOCAL_VLAN_0: Look up FDB on VLAN 0 on miss (Mohammad Heib) [RHEL-123945]
  - net: bridge: Introduce BROPT_FDB_LOCAL_VLAN_0 (Mohammad Heib) [RHEL-123945]
  - net: bridge: Bounce invalid boolopts (Mohammad Heib) [RHEL-123945]
  - net: bridge: remove unused argument of br_multicast_query_expired() (Mohammad Heib) [RHEL-123945]
  - net: bridge: fix soft lockup in br_multicast_query_expired() (Mohammad Heib) [RHEL-123945]
  - selftests: net: Test bridge backup port when port is administratively down (Mohammad Heib) [RHEL-123945]
  - bridge: Redirect to backup port when port is administratively down (Mohammad Heib) [RHEL-123945]
  - selftests: net: bridge_vlan_aware: test untagged/8021p-tagged with and without PVID (Mohammad Heib) [RHEL-123945]
  - redhat: export FLAVOR (George Jacob) [RHEL-109549]
  - redhat: export only selected variables (George Jacob) [RHEL-109549]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-203.el10]
changelog:
  - nouveau/gsp: fix suspend/resume regression on r570 firmware (José Expósito) [RHEL-141658]
  - nouveau: add a third state to the fini handler. (José Expósito) [RHEL-141658]
  - nouveau/gsp: use rpc sequence numbers properly. (José Expósito) [RHEL-141658]
  - redhat/dracut-virt.conf: omit drm drivers in UKI initrd (Li Tian) [RHEL-146125]
  - scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147285]
  - dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-129484]
  - dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-140641]
  - dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-140641]
  - dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-140641]
  - mei: me: add wildcat lake P DID (Steve Best) [RHEL-95680]
  - redhat/configs: ftrace: enable FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-105766]
  - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-127414]
  - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-127414]
  - cpufreq: scmi: Account for malformed DT in scmi_dev_used_by_cpus() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Initialize cpufreq-based invariance before subsys (Mark Langsdorf) [RHEL-120319]
  - cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag (Mark Langsdorf) [RHEL-120319]
  - PM: cpufreq: powernv/tracing: Move powernv_throttle trace event (Mark Langsdorf) [RHEL-120319]
  - drivers: cpufreq: add Tegra114 support (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Exit governor when failed to start old governor (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Move the check of cpufreq_driver->get into cpufreq_verify_current_freq() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Init policy->rwsem before it may be possibly used (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Initialize cpufreq-based frequency-invariance later (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Remove duplicate check in __cpufreq_offline() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs (Mark Langsdorf) [RHEL-120319]
  - cpufreq: tegra124: Allow building as a module (Mark Langsdorf) [RHEL-120319]
  - cpufreq: dt: Add register helper (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Export disable_cpufreq() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: brcmstb-avs: Fully open-code compatible for grepping (Mark Langsdorf) [RHEL-120319]
  - cpufreq: apple: drop default ARCH_APPLE in Kconfig (Mark Langsdorf) [RHEL-120319]
  - cpufreq: userspace: set CPUFREQ_GOV_STRICT_TARGET flag (Mark Langsdorf) [RHEL-120319]
  - cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: CPPC: Do not return a value from populate_efficiency_class() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: CPPC: Remove cpu_data_list (Mark Langsdorf) [RHEL-120319]
  - cpufreq: CPPC: Add support for autonomous selection (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Update sscanf() to kstrtouint() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Replace magic number (Mark Langsdorf) [RHEL-120319]
  - cpufreq: scmi: Skip SCMI devices that aren't used by the CPUs (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Add Rust-based cpufreq-dt driver (Mark Langsdorf) [RHEL-120319]
  - cpufreq: drop redundant cpus_read_lock() from store_local_boost() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Drop policy locking from cpufreq_policy_is_good_for_eas() (Mark Langsdorf) [RHEL-120319]
  - powernow: use pr_info_once (Mark Langsdorf) [RHEL-120319]
  - cpufreq/sched: Move cpufreq-specific EAS checks to cpufreq (Mark Langsdorf) [RHEL-120319]
  - cpufreq/sched: schedutil: Add helper for governor checks (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Force sync policy boost with global boost on sysfs update (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Preserve policy's boost state after resume (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Introduce policy_set_boost() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Don't unnecessarily call set_boost() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Drop unused cpufreq_get_policy() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Introduce cpufreq_policy_refresh() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Use __free() for policy reference counting cleanup (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Drop cpufreq_cpu_acquire() and cpufreq_cpu_release() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Use locking guard and __free() in cpufreq_update_policy() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Add and use cpufreq policy locking guards (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Split cpufreq_online() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Consolidate some code in cpufreq_online() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: intel_pstate: Rearrange max frequency updates handling code (Mark Langsdorf) [RHEL-120319]
  - cpufreq: airoha: modify CONFIG_OF dependency (Mark Langsdorf) [RHEL-120319]
  - cpufreq: airoha: Depends on OF (Mark Langsdorf) [RHEL-120319]
  - cpufreq: airoha: Add EN7581 CPUFreq SMCCC driver (Mark Langsdorf) [RHEL-120319]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-204.el10]
changelog:
  - netlink: avoid infinite retry looping in netlink_unicast() (Paolo Abeni) [RHEL-133487] {CVE-2025-38727}
  - netlink: make sure we allow at least one dump skb (Paolo Abeni) [RHEL-133487]
  - netlink: Fix rmem check in netlink_broadcast_deliver(). (Paolo Abeni) [RHEL-133487]
  - netlink: Fix wraparounds of sk->sk_rmem_alloc. (Paolo Abeni) [RHEL-133487]
  - genetlink: fix genl_bind() invoking bind() after -EPERM (Paolo Abeni) [RHEL-133487] {CVE-2025-39926}
  - nvme: add support for dynamic quirk configuration via module parameter (Maurizio Lombardi) [RHEL-126507]
  - nvme: expose active quirks in sysfs (Maurizio Lombardi) [RHEL-141683]
  - block: fix memory leak in __blkdev_issue_zero_pages (Ming Lei) [RHEL-137852]
  - virtio: clean up features qword/dword terms (Laurent Vivier) [RHEL-111004]
  - virtio-net: avoid unnecessary checksum calculation on guest RX (Laurent Vivier) [RHEL-111004]
  - virtio_net: fix alignment for virtio_net_hdr_v1_hash (Laurent Vivier) [RHEL-111004]
  - virtio-net: zero unused hash fields (Laurent Vivier) [RHEL-111004]
  - vhost/net: enable gso over UDP tunnel support. (Laurent Vivier) [RHEL-111004]
  - tun: enable gso over UDP tunnel support. (Laurent Vivier) [RHEL-111004]
  - virtio_net: enable gso over UDP tunnel support. (Laurent Vivier) [RHEL-111004]
  - net: implement virtio helpers to handle UDP GSO tunneling. (Laurent Vivier) [RHEL-111004]
  - virtio_net: add supports for extended offloads (Laurent Vivier) [RHEL-111004]
  - vhost-net: allow configuring extended features (Laurent Vivier) [RHEL-111004]
  - virtio_pci_modern: allow configuring extended features (Laurent Vivier) [RHEL-111004]
  - virtio: introduce extended features (Laurent Vivier) [RHEL-111004]
  - fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-142435]
  - tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-142435]
  - gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-142435]
  - netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-142435]
  - redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-142435]
  - xfs: set max_agbno to allow sparse alloc of last full inode chunk (CKI Backport Bot) [RHEL-141684]
  - redhat/configs: Enable CONFIG_PM_DEVFREQ for aarch64 (Nick Cao) [RHEL-140756]
  - mlxbf_gige: emit messages during open and probe failures (David Thompson) [RHEL-104014]
  - mlxbf_gige: return EPROBE_DEFER if PHY IRQ is not available (David Thompson) [RHEL-104014]
  - redhat/configs: enable ACPI_DEBUG on non-debug kernels (Mark Langsdorf) [RHEL-88729 RHEL-89376]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-205.el10]
changelog:
  - redhat/dracut-virt.conf: remove erroneous spaces in omit_dracutmodules (Li Tian)
  - configs: enable Freescale MXS DMA engine (Jiri Benc) [RHEL-148497]
  - smb: client: prevent races in ->query_interfaces() (Paulo Alcantara) [RHEL-148417]
  - smb: client: add proper locking around ses->iface_last_update (Paulo Alcantara) [RHEL-148417]
  - smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-148417]
  - cifs: Fix locking usage for tcon fields (Paulo Alcantara) [RHEL-148417]
  - cifs: Corrections to lock ordering notes (Paulo Alcantara) [RHEL-148417]
  - cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-148417]
  - cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-148417]
  - smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-148417]
  - smb/client: fix memory leak in SendReceive() (Paulo Alcantara) [RHEL-148417]
  - smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-148417]
  - netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-148417]
  - netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-148417]
  - netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-148417]
  - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-147942]
  - perf/x86/intel/cstate: Add Pantherlake support (Michael Petlan) [RHEL-74192]
  - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-144003]
  - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-144003]
  - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-144003]
  - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-144003]
  - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-144003]
  - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-144003]
  - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-144003]
  - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-144003]
  - Disable CET when calling tboot shutdown procedure. (Tony Camuso) [RHEL-109479]
  - docs: perf: Fujitsu: Fix htmldocs build warnings and errors (Mark Salter) [RHEL-132203]
  - arm64: proton-pack: Fix hard lockup when !MITIGATE_SPECTRE_BRANCH_HISTORY (Mark Salter) [RHEL-132203]
  - arm64: Reject modules with internal alternative callbacks (Mark Salter) [RHEL-132203]
  - arm64: Fail module loading if dynamic SCS patching fails (Mark Salter) [RHEL-132203]
  - arm64: proton-pack: Fix hard lockup due to print in scheduler context (Mark Salter) [RHEL-132203]
  - arm64: proton-pack: Drop print when !CONFIG_MITIGATE_SPECTRE_BRANCH_HISTORY (Mark Salter) [RHEL-132203]
  - arm64: acpi: Drop message logging SPCR default console (Mark Salter) [RHEL-132203]
  - Revert "ACPI: Suppress misleading SPCR console message when SPCR table is absent" (Mark Salter) [RHEL-132203]
  - arm64: Use load LSE atomics for the non-return per-CPU atomic operations (Mark Salter) [RHEL-132203]
  - arm64: mte: Do not warn if the page is already tagged in copy_highpage() (Mark Salter) [RHEL-132203]
  - arm64, mm: avoid always making PTE dirty in pte_mkwrite() (Mark Salter) [RHEL-132203]
  - arm64: enable Guarded Control Stacks (Mark Salter) [RHEL-132203]
  - arm64: Kconfig: Spell out "ARMv9.4" in menuconfig text (Mark Salter) [RHEL-132203]
  - arm64/fpsimd: simplify sme_setup() (Mark Salter) [RHEL-132203]
  - Enable Fujitsu Uncore PMU (Mark Salter) [RHEL-132203]
  - perf: Fujitsu: Add the Uncore PMU driver (Mark Salter) [RHEL-132203]
  - arm64: cpufeature: add Neoverse-V3AE to BBML2 allow list (Mark Salter) [RHEL-132203]
  - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-132203]
  - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-132203]
  - arm64: probes: Fix incorrect bl/blr address and register usage (Mark Salter) [RHEL-132203]
  - uprobes: uprobe_warn should use passed task (Mark Salter) [RHEL-132203]
  - arm64: Kconfig: Remove GCS restrictions on UPROBES (Mark Salter) [RHEL-132203]
  - arm64: uprobes: Add GCS support to uretprobes (Mark Salter) [RHEL-132203]
  - arm64: probes: Add GCS support to bl/blr/ret (Mark Salter) [RHEL-132203]
  - arm64: uaccess: Add additional userspace GCS accessors (Mark Salter) [RHEL-132203]
  - arm64: uaccess: Move existing GCS accessors definitions to gcs.h (Mark Salter) [RHEL-132203]
  - arm64: probes: Break ret out from bl/blr (Mark Salter) [RHEL-132203]
  - arm64: Remove tautological LLVM Kconfig conditions (Mark Salter) [RHEL-132203]
  - arm64/sme: Drop inaccurate documentation of streaming mode switches (Mark Salter) [RHEL-132203]
  - wifi: enable rtw8922ae (Jose Ignacio Tornos Martinez) [RHEL-111098]
  - wifi: rtw89: 8922a: set random mac if efuse contains zeroes (Jose Ignacio Tornos Martinez) [RHEL-111098]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-212.el10]
changelog:
  - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-150776]
  - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-150776]
  - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-150776]
  - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-150776]
  - redhat: bump RHEL_MINOR for 10.3 (Alexandra Hájková)
  - net: use NUMA drop counters for softnet_data.dropped (Guillaume Nault) [RHEL-145975]
  - inet: raw: add drop_counters to raw sockets (Guillaume Nault) [RHEL-145975]
  - udp: add drop_counters to udp socket (Guillaume Nault) [RHEL-145975]
  - net: add sk->sk_drop_counters (Guillaume Nault) [RHEL-145975]
  - net: add sk_drops_skbadd() helper (Guillaume Nault) [RHEL-145975]
  - net: add sk_drops_read(), sk_drops_inc() and sk_drops_reset() helpers (Guillaume Nault) [RHEL-145975]
  - NFSD: Fix permission check for read access to executable-only files (Scott Mayhew) [RHEL-135095]
  - fs/proc/task_mmu: fix PAGE_IS_PFNZERO detection for the huge zero folio (Audra Mitchell) [RHEL-97168]
  - configs: riscv: Enable StarFive and ESWIN drivers (Jennifer Berringer) [RHEL-129062]
  - riscv: Fix memory leak in module_frob_arch_sections() (Jennifer Berringer) [RHEL-129062]
  - reset: eswin: Add eic7700 reset driver (Jennifer Berringer) [RHEL-129062]
  - dt-bindings: reset: eswin: Documentation for eic7700 SoC (Jennifer Berringer) [RHEL-129062]
  - riscv: dts: eswin: add HiFive Premier P550 board device tree (Jennifer Berringer) [RHEL-129062]
  - riscv: dts: add initial support for EIC7700 SoC (Jennifer Berringer) [RHEL-129062]
  - dt-bindings: riscv: Add SiFive HiFive Premier P550 board (Jennifer Berringer) [RHEL-129062]
  - riscv: Add Kconfig option for ESWIN platforms (Jennifer Berringer) [RHEL-129062]
  - riscv: add Andes SoC family Kconfig support (Jennifer Berringer) [RHEL-129062]
  - pinctrl: eswin: Fix regulator error check and Kconfig dependency (Jennifer Berringer) [RHEL-129062]
  - pinctrl: eswin: Fix unsigned comparison to less than zero issue (Jennifer Berringer) [RHEL-129062]
  - pinctrl: eswin: Add EIC7700 pinctrl driver (Jennifer Berringer) [RHEL-129062]
  - riscv: module: Optimize PLT/GOT entry counting (Jennifer Berringer) [RHEL-129062]
  - riscv: module: Allocate PLT entries for R_RISCV_PLT32 (Jennifer Berringer) [RHEL-129062]
  - riscv: module: Fix out-of-bounds relocation access (Jennifer Berringer) [RHEL-129062] {CVE-2025-37975}
  - cache: sifive_ccache: Add ESWIN EIC7700 support (Jennifer Berringer) [RHEL-129062]


author: Julien Rische <jrische@redhat.com> - 1.21.3-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55427
  - Fix various issues detected by static analysis
    Resolves: RHEL-45165
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-56070


author: Julien Rische <jrische@redhat.com> - 1.21.3-6
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74373
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56058
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-71881


author: Julien Rische <jrische@redhat.com> - 1.21.3-8
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88705
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88047
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-74295


author: Julien Rische <jrische@redhat.com> - 1.21.3-9
changelog:
  - krad: packet ID fetched from uninitialized variable
    Resolves: RHEL-145356
  - Create sub-package for xrealmauthz KDC plugin
    Resolves: RHEL-145358
  - Improving kerberos ulog resize efficiency
    Resolves: RHEL-145397


author: Julien Rische <jrische@redhat.com> - 1.21.3-11
changelog:
  - Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
    Resolves: RHEL-171587 RHEL-171595


author: Julien Rische <jrische@redhat.com> - 1.21.3-1
changelog:
  - New upstream version (1.21.3)
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45387 RHEL-45378
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-47284
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-47287
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-47285
  - Make TCP waiting time configurable
    Resolves: RHEL-47278


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-100
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114545 - Update to version 4.23.4
  - resolves: RHEL-132338 - Fix Time Machine backup
  - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-100
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-138263 - Fix winbind group resolution
  - resolves: RHEL-141012 - Fix winbind crash


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.24.3-100
changelog:
  - Update to version 4.24.3
  - resolves: RHEL-156281 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
    various flaws
  - resolves: RHEL-161645 - CVE-2026-4480 samba: Samba: Remote Code Execution
    in printing
  - resolves: RHEL-170596 - CVE-2026-40170 samba: ngtcp2:
  - resolves: RHEL-177928 - CVE-2026-4408 samba: Remote Code Execution in
    SAMR
  - resolves: RHEL-166872 - build hardening with FORTIFY_SOURCE


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.7.7-1
changelog:
  - Rebase to version 3.7.7
  - Fixing SAST issues, accepted by upstream
  - Resolves: RHEL-39391 RHEL-67895


author: Karel Zak <kzak@redhat.com> - 2.40.2-14
changelog:
  - lscpu: Add NVIDIA Olympus arm64 core
  - libfdisk: improve collision reporting
  - libfdisk: (dos) ignore incomplete EBR for non-wholedisk
  - wall: always use utmp as fallback


author: Karel Zak <kzak@redhat.com> - 2.40.2-15
changelog:
  - mount: improve --all documentation
  - libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
  - libblkid: use snprintf() instead of sprintf()


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 2.69-1
changelog:
  - Update to 2.69 (with contribs from Yanko Kaneti <yaneti@declera.com>, and Andrew G. Morgan <morgan@kernel.org>)
  - Update license to SPDX (by Anderson Toshiyuki Sasaki <ansasaki@redhat.com>)
  - Make file lists more explicit to avoid accidental ABI changes (Dominik Mierzejewski <dominik@greysector.net>)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.69-4
changelog:
  - Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>)
  - Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.7.0-8
changelog:
  - Update license to SPDX format
  - spec file tidy/modernization
    - use modern cmake build and install
    - properly own include directories in the devel package
    - de-glob some files to follow packaging guidelines


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.10.2-1
changelog:
  - Update to version 0.10.2 ( resolves: rhbz#1880885 )
  - Revise specs per packaging guidelines for globs of soname


author: Jan Kolarik <jkolarik@redhat.com> - 0.1.20-1
changelog:
  - Update to 0.1.20
  - Fixes of xml parsing
  - Fix non-optimized builds by removing inline keyword
  - Use Py_hash_t instead of long


author: Pavol Žáčik <pzacik@redhat.com> - 0.6.5-3
changelog:
  - Patch bugs found by static analysis tools
  - Add %{name}-fix-handle-leaks-in-rdmsr-c.patch
  - Add %{name}-fix-cpuid_get_hypervisor.patch
  - Add %{name}-prevent-intel_fn11-array-overruns.patch


author: Pavol Žáčik <pzacik@redhat.com> - 0.7.0-1
changelog:
  - Rebase to 0.7.0
  - Begin building the package for aarch64
  - Add Python bindings as a subpackage (python3-libcpuid)


author: Ales Matej <amatej@redhat.com> - 0.73.1-14
changelog:
  - Mark all protected packages as user installed for all transactions (RHEL-128445)
  - Add `filterUnneededExtraUserinstalled` and Python version to the API
  - Describe all problems even when there are protected removals (RHEL-146507)
  - Clearer error for protected package broken dependencies


author: Pino Toscano <ptoscano@redhat.com> 1.30.4-1
changelog:
  - Revert "feat: Disable anonymous cloud registration temporarily"
    (ptoscano@redhat.com)
  - Revert "feat: forcefully switch automatic cloud registration to v1"
    (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Update translation files (noreply@weblate.org)
  - spec: respect the %{_sbindir} of the distro (ptoscano@redhat.com)
  - build: make it possible to customize the 'sbin' install dir
    (ptoscano@redhat.com)
  - fix: Restart rhsm service after installation (pkoprda@redhat.com)
  - Drop pam_console leftovers (ptoscano@redhat.com)
  - Stop using usermode (ptoscano@redhat.com)
  - fix: Do not upload profile from DNF, when it is disabled in conf
    (jhnidek@redhat.com)
  - rhsmcertd: use ISO 8601 timestamps for the log file (ptoscano@redhat.com)
  - rhsmcertd: refactor timestamp function (ptoscano@redhat.com)
  - ci: temporarily install 'which' on CentOS Stream 10 (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - ci: use official c10s container image (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - feat: Enable register with environment names and environment types
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.5-1
changelog:
  - fix: Disabling of content in D-Bus methods Register*() (jhnidek@redhat.com)
  - chore: logging.warn() -> logging.warning() (ptoscano@redhat.com)
  - Feat CCT-467: Add explanatory info about the source of overrides in repo-
    overrides command (mgrunwal@mgrunwal-thinkpadp1gen3.rmtcz.csb)
  - feat: Allow to call RegisterWithActivationKeys() with enable_content
    (jhnidek@redhat.com)
  - refactor: Small changes of _enable_content (jhnidek@redhat.com)
  - fix: It is possible to disable content using enable_content option
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.6-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Japanese) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - spec: Remove an unnecessary explicit dependency on json-c
    (debarshir@gnome.org)
  - spec: Require shared libraries with architecture-specific dependencies
    (debarshir@gnome.org)
  - Revert "ci: temporarily install 'which' on CentOS Stream 10"
    (ptoscano@redhat.com)
  - build: cockpit: fix installation of sub-man with newer Fedora
    (ptoscano@redhat.com)
  - spec: Require the base package with architecture-specific dependencies
    (debarshir@gnome.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - feat: drop the --ondate option of "status" (ptoscano@redhat.com)
  - feat: drop non-SCA support in status command (ptoscano@redhat.com)
  - tests: fix mocking of get_terminal_width() in TestColumnize
    (ptoscano@redhat.com)
  - feat: print compliance errors & syspurpose status only in entitlement mode
    (ptoscano@redhat.com)
  - feat: print "registered" as status when using SCA (ptoscano@redhat.com)
  - feat: print "not registered" on status when not registered
    (ptoscano@redhat.com)
  - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
  - refactor: move determination of content access mode in own method
    (ptoscano@redhat.com)
  - tests: move StubIdentity to stubs (ptoscano@redhat.com)
  - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
  - chore: move banner printing to its own function (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.7-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (noreply-mt-weblate-
    translation-memory@weblate.org)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Japanese) (mhorky@redhat.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - fix: Unit test should ignore locale, when generating test timestamp
    (jhnidek@redhat.com)
  - fix: Handle improperly closed connections (mhorky@redhat.com)
  - test: Added integration tests for activation keys (jstavel@redhat.com)
  - test: Integration tests for DBus Unregister call (jhnidek@redhat.com)
  - fix: Do not call removed bash script from tesh.sh (jhnidek@redhat.com)
  - spec: drop old libdnf-plugin-subscription-manager-debuginfo definition
    (ptoscano@redhat.com)
  - spec: switch from an own run_dir to _rundir (ptoscano@redhat.com)
  - spec: switch from python_sitelib to python3_sitelib (ptoscano@redhat.com)
  - spec: switch from python_sitearch to python3_sitearch (ptoscano@redhat.com)
  - spec: inline & drop rhsm_package_name (ptoscano@redhat.com)
  - spec: switch from __python to __python3 (ptoscano@redhat.com)
  - spec: inline & drop py_package_prefix (ptoscano@redhat.com)
  - spec: remove redundant check (ptoscano@redhat.com)
  - spec: deduplicate BuildRequires for use_dnf (ptoscano@redhat.com)
  - spec: drop old %post snippet for rhsmd (ptoscano@redhat.com)
  - spec: drop EL 8 bits (ptoscano@redhat.com)
  - ci: tweak the dependabot config for branches a bit (ptoscano@redhat.com)
  - feat: remove no more needed branding strings (ptoscano@redhat.com)
  - feat: drop ClassicCheck (ptoscano@redhat.com)
  - ci: track also active stable branches with dependabot for GitHub actions
    (ptoscano@redhat.com)
  - tests: update location of pytest-client-tools (ptoscano@redhat.com)
  - Handle URL params for AptRepoFiles (grigo@atix.de)
  - fix: Append two additional facts to the graylist (pkoprda@redhat.com)
  - refactor: Use class constant instead of variable graylist
    (pkoprda@redhat.com)
  - spec: Require subpackages from the same build as the base package
    (debarshir@gnome.org)
  - spec: Consolidate dependencies on the DNF & libdnf plugins in one place
    (debarshir@gnome.org)
  - spec: Fix grammar and spelling mistakes (debarshir@gnome.org)
  - build: use cmake pkg-config imported targets (ptoscano@redhat.com)
  - build: fix order of parameters for pkg_check_modules() (ptoscano@redhat.com)
  - build: drop manual setting of -std=c99 (ptoscano@redhat.com)
  - build: remove check for in source cmake builddir (ptoscano@redhat.com)
  - build: bump cmake required version to 3.20 (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.8-1
changelog:
  - fix: Enable content during auto-registration v2 (jhnidek@redhat.com)
  - CCT-1490: blackified repolib.py (jstavel@redhat.com)
  - CCT-1473: new url for local candlepin image, fixed register test (#3580)
    (jstavel@redhat.com)
  - fix: Create consumer cert & key, when chown failed (jhnidek@redhat.com)
  - Skip to load default plugins on suse/sles (suttner@atix.de)
  - CCT-739: tests for GetUuid method (jstavel@redhat.com)
  - feat: Added warning to dnf4 plugin about skewed clock (jhnidek@redhat.com)
  - CCT-1081 FEAT Remove unused classes and functions - including
    Conduits/Slots/Hooks for pre/post_subscribe Remove "pre_subscribe" and
    "post_subscribe" plugin slots by removing classes SubscriptionConduit and
    PostSubscriptionConduit. (mgrunwal@redhat.com)
  - Fix upload profile if rhsmcertd is not running at all (suttner@atix.de)
  - chore: Drop get_status_for_icon (mhorky@redhat.com)
  - chore: Remove getCompliance method from connection.py (mhorky@redhat.com)
  - chore: Clean up compliance status of ComplianceManager (mhorky@redhat.com)
  - chore: Hardcode SCA-relevant values to ComplianceManager (mhorky@redhat.com)
  - chore: Drop HTTP call to /consumers/{uuid}/compliance (mhorky@redhat.com)
  - feat: adding sourcery config (jmolet@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.9-1
changelog:
  - feat: Call random.seed() at begining of auto-register (jhnidek@redhat.com)
  - feat: Better control over auto-reg waiting game (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.10-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Spanish) (jsefler@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - fix: Wait random time before reaching IMDS server (jhnidek@redhat.com)
  - CCT-745: added properties for multi org environment (#3589)
    (jstavel@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.11-1
changelog:
  - fix: Do not send JSON document with empty signature (jhnidek@redhat.com)
  - Translated using Weblate (Czech) (pavel.borecki@gmail.com)
  - Translated using Weblate (Czech) (jhnidek@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Czech) (pavel.borecki@gmail.com)
  - Translated using Weblate (Czech) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Added translation using Weblate (Czech) (pavel.borecki@gmail.com)
  - chore: Make new black happy again (jhnidek@redhat.com)
  - chore: Increased log level of messages (jhnidek@redhat.com)
  - fix: Use IMDSv2 for signature first (jhnidek@redhat.com)
  - ci: bump actions/upload-artifact from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - chore: Removed getSyspurposeCompliance (jhnidek@redhat.com)
  - chore: Do not call candlepin from GetSyspurposeStatus (jhnidek@redhat.com)
  - chore: Removed SyspurposeComplianceStatusCache (jhnidek@redhat.com)
  - fix: Require findutils in .spec file (jhnidek@redhat.com)
  - feat: Try to cache candlepin server capabilities (jhnidek@redhat.com)
  - solved a conflict in utils.py (jstavel@redhat.com)
  - CCT-744: integration tests for DBus Config object (jstavel@redhat.com)
  - CCT-1029: tests for Register with environment option (jstavel@redhat.com)
  - chore: Small changes in integration-tests/test_syspurpose.py
    (jhnidek@redhat.com)
  - chore: Small fixes in test_register_get_orgs.py (jhnidek@redhat.com)
  - chore: Small fixes of integration-tests/test_register.py (jhnidek@redhat.com)
  - chore: Small tweaks of bash script of integration tests (jhnidek@redhat.com)
  - chore(doc): Improved README.md for integration tests (jhnidek@redhat.com)
  - CCT-743: rebased (jstavel@redhat.com)
  - CCT-1600: fix applied, unified settings.toml to use the same name of
    valid_fields.json (jstavel@redhat.com)
  - ci: bump actions/checkout from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CCT-742: integration tests for DBus Syspurpose object (jstavel@redhat.com)
  - CCT-1029: test for dbus method GetEnvironments (jstavel@redhat.com)
  - CCT-1097: added enable_content for registration tests (jstavel@redhat.com)
  - CCT-745: multi org credentials added (jstavel@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.12-1
changelog:
  - feat: Added more debug prints to cloud-what (jhnidek@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Added translation using Weblate (Finnish) (noreply-addon-
    languages@weblate.org)
  - Translated using Weblate (Czech) (jsefler@redhat.com)
  - fix(test): Fix unit tests of "sub-man status" (jhnidek@redhat.com)
  - RHEL-126153: Update GCP to Google Cloud in log messages (crag@redhat.com)
  - fix: Update user-facing GCP refrences to Google Cloud (crag@redhat.com)
  - ci: bump actions/upload-artifact from 5 to 6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Fix profile upload because of missing self.cp (suttner@atix.de)
  - feat: added signature type log in TLS handshake (macano@redhat.com)
  - feat: added internal method to get tls handshake info
    (manuelcanorojo@gmail.com)
  - fix: Print list of environments without --set/--list (jhnidek@redhat.com)
  - fix: Fix getting AWS IMDSv2 signature (jhnidek@redhat.com)
  - fix(test): Fix unit test of aws (jhnidek@redhat.com)
  - fix(ci): Fixed integration tests of syspurpose (jhnidek@redhat.com)
  - chore: Removed deprecated information from setup.py (jhnidek@redhat.com)
  - chore(ci): Specify permissions for Actions (mhorky@redhat.com)
  - feat: check if --set arg is empty when the environments module is called
    (manuelcanorojo@gmail.com)
  - docs: added missing gettext building dependency (manuelcanorojo@gmail.com)
  - docs: improved man content related to subscription-manager environment
    variables for proxy configuration (manuelcanorojo@gmail.com)
  - ci: bump actions/checkout from 5 to 6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Fix gobject python package name of sles (suttner@atix.de)
  - Fix SLES build on OBS (suttner@atix.de)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.13-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - chore: Make black-26.* happy again (./) (jhnidek@redhat.com)
  - chore: Update black to 26.3.1 in GitHub action yml file (jhnidek@redhat.com)
  - chore: Make black-26.* happy again (./integration-tests) (jhnidek@redhat.com)
  - chore: Make black-26.* happy again (./test) (jhnidek@redhat.com)
  - test: Fixed one unit test related to inotify (jhnidek@redhat.com)
  - chore: Make black-26.* happy again (./src) (jhnidek@redhat.com)
  - chore: style formatting fixes in rhsmcertd worker (jajerome@redhat.com)
  - fix: updated rhsmcertd to detect when auto-registration is terminated early
    (jajerome@redhat.com)
  - fix: updated rhsmcertd to detect when system is already registered
    (jajerome@redhat.com)
  - chore(deps): bump black from 24.3.0 to 26.3.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - chore(deps): bump black from 24.3.0 to 26.3.1 in /integration-tests
    (49699333+dependabot[bot]@users.noreply.github.com)
  - fix: allow system to be registered with broken insights-client
    (jlocash@redhat.com)
  - fix: skip package profile upload when disabled in config
    (jajerome@redhat.com)
  - fix(unit-tests): mock isdir so rhsm_debug tests are env agnostic
    (csnyder@redhat.com)
  - ci: bump actions/upload-artifact from 6 to 7
    (49699333+dependabot[bot]@users.noreply.github.com)
  - fix: Handle non-existence of /var/cache/cloud-what gracefully
    (jhnidek@redhat.com)
  - fix(unit-tests): Fixed unit tests for rhsm-debug (jhnidek@redhat.com)
  - feat: Add /var/cache/cloud-what/ to sos-report (jhnidek@redhat.com)


author: Jason Jerome <jajerome@redhat.com> 1.30.14-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Automatic commit of package [subscription-manager] release [1.30.13-1].
    (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.15-1
changelog:
  - chore: better definition of IP address of AWS IMDS (jhnidek@redhat.com)
  - Fix package upload during initial register (suttner@atix.de)
  - feat(pqc): update crypto capabilities from 'refresh' command
    (jlocash@redhat.com)
  - feat(pqc): update crypto capabilities from 'identity --regenerate' command
    (jlocash@redhat.com)
  - style: fix flake8 lint error (jlocash@redhat.com)
  - feat(pqc): update crypto capabilities in candlepin from rhsmcertd-worker
    (jlocash@redhat.com)
  - feat(pqc): implement cache for crypto capabilities (jlocash@redhat.com)
  - fix: Invalidate and update CurrentOwnerCache when owner change is detected
    (csnyder@redhat.com)
  - chore: Added more debug prints about closing connections (jhnidek@redhat.com)
  - fix: Set timeout before trying to close TLS connection (jhnidek@redhat.com)
  - fix(pqc): update warning to indicate fallback (jlocash@redhat.com)
  - fix(pqc): raise RuntimeError when get_signature_algorithms or
    get_public_key_algorithms throw (jlocash@redhat.com)
  - feat(pqc): print warning when setting invalid `certificate_algorithms` value
    (jlocash@redhat.com)
  - docs: Document `rhsm.certificate_algorithms` config option in rhsm.conf man
    pages (jlocash@redhat.com)
  - fix: drop __smoke_test__ and __main__ from pqc.py (jlocash@redhat.com)
  - style: fix linting error in connection.py (jlocash@redhat.com)
  - test: fix broken tests for registerConsumer (jlocash@redhat.com)
  - feat(pqc): Use C bindings to retrieve public-key and signature algorithms in
    pqc.py (jlocash@redhat.com)
  - feat: POC: Add support for PQC (jhnidek@redhat.com)
  - Remove cron RPM requirement on suse systems (suttner@atix.de)
  - test: Added C unit tests of _certificate.so (jhnidek@redhat.com)
  - feat: Added .pyi file for certificate.c (jhnidek@redhat.com)
  - chore: Not all .py* files should be ignored (jhnidek@redhat.com)
  - test: Created unit tests for certificate.c (jhnidek@redhat.com)
  - feat: Added 2 methods for listing crypto algorithms (jhnidek@redhat.com)


author: Pavol Žáčik <pzacik@redhat.com> - 2.1.12-13
changelog:
  - Update license identifiers to SPDX in subpackages
  - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Sumit Bose <sbose@redhat.com> - 2.12.0-1
changelog:
  - Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
  - Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
  - Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
  - Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
  - Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
  - Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
  - Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
  - Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
  - Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
  - Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  - Resolves: RHEL-72935 - sss_override does not work on AD UPN
  - Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
  - Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)


author: Tomas Halman <thalman@redhat.com> - 2.12.0-3
changelog:
  - Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
  - Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified


author: Sumit Bose <sbose@redhat.com> - 2.13.0-1
changelog:
  - Resolves: RHEL-167873 - CVE-2026-6245 sssd: out-of-bounds read in the sssd [rhel-10.3]
  - Resolves: RHEL-154156 - SSSD needs to add Plasma Login Manager to the PAM services whitelist for the AD provider
  - Resolves: RHEL-142964 - Poor performance of `BE_REQ_INITGROUPS` handling by 'sssd_be' (LDAP RFC2307, no nested groups)
  - Resolves: RHEL-138905 - [RFE] SSSD PAM: Support Microsoft AD PKINIT authentication indicator (ms-pkca) for pam_gssapi_indicators_map
  - Resolves: RHEL-123943 - Man page update: man sssd_krb5_localauth_plugin – Missing disable = an2ln
  - Resolves: RHEL-109754 - Performance impact with enumerate in SSSD > 2.7.3
  - Resolves: RHEL-108116 - Concurrent child processes trigger unnecessarily backtrace
  - Resolves: RHEL-5049 - Detect foreign security principals in AD group members and silently ignore them


author: Sumit Bose <sbose@redhat.com> - 2.13.1-1
changelog:
  - Resolves: RHEL-183331 Rebase SSSD for RHEL 10.3
  - Resolves: RHEL-178180 'sssctl analyze --help' shows incorrect command in usage field
  - Resolves: RHEL-173663 [Regression] Cannot log in to FreeIPA account with password immediately after boot
  - Resolves: RHEL-173660 SSSD 2.13 doesn't work in offline mode, generates plenty of Permission denied errors
  - Resolves: RHEL-172303 SSSD: LDAP backend ('sssd_be') initialization fails if DNS in unresponsive
  - Resolves: RHEL-151491 SSSD kerberos plugins export symbols which clash
  - Resolves: RHEL-133013 /etc/hosts containing an entry with a name and alias but no IPv4 address results in sssd_be crash
  - Resolves: RHEL-5054 Smart card reader with pinpad fails C_Login. (CKF_PROTECTED_AUTHENTICATION_PATH not handled correctly)


author: Madhuri Upadhye <mupadhye@redhat.com> - 2.13.1-2
changelog:
  - Resolves: RHEL-190529 CVE-2026-12610 sssd: Use-after-free crash in SSSD' 'sssd_pam' process
  - Resolves: RHEL-185008 Regression in IPA + Idp authentication with keycloak
  - Resolves: RHEL-111571 'sssctl config-check' does not work correctly for "Accessing AD with a MSA"
  - Resolves: RHEL-192054 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
  - Resolves: RHEL-192069 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-4
changelog:
  - nfsiostat: normalize the mountpoints passed in from the command line (RHEL-90562)
  - Remove /var/lib/nfs/v4recovery (RHEL-137935)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-5
changelog:
  - mountd: Minor refactor of get_rootfh() (RHEL-127093)
  - mountd: Separate lookup of the exported directory and the mount path (RHEL-127093)
  - support: Add a mini-library to extract and apply RPC credentials (RHEL-127093)
  - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127093)
  - Add requires for selinux-policy (RHEL-127093)
    Resolves: CVE-2025-12801


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-6
changelog:
  - nfsdctl: ignore ipv6 listener creation error (RHEL-71352)
  - nfsdclnts: fix display of stateids where the kernel doesn't provide the superblock (RHEL-151444)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-7
changelog:
  - nfsrahead: enable event-driven mountinfo monitoring and skip non-NFS devices (RHEL-158528)
  - nfsrahead: zero-initialise device_info struct (RHEL-158528)
  - nfsrahead: quieten misleading error for non-NFS block devices (RHEL-158528)


author: Phil Sutter <psutter@redhat.com> [1.3.0-2.el10]
changelog:
  - utils: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108860]
  - utils: Add helpers for interface name wildcards (Phil Sutter) [RHEL-108860]


author: Phil Sutter <psutter@redhat.com> [1.3.0-3.el10]
changelog:
  - src: Do not include userdata content in debug output (Phil Sutter) [RHEL-119650]
  - Revert "udata: Store u32 udata values in Big Endian" (Phil Sutter) [RHEL-119650]
  - udata: Store u32 udata values in Big Endian (Phil Sutter) [RHEL-119650]
  - data_reg: Support concatenated data (Phil Sutter) [RHEL-119650]
  - data_reg: Respect data byteorder when printing (Phil Sutter) [RHEL-119650]
  - Introduce nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-119650]
  - data_reg: Introduce struct nftnl_data_reg::sizes array (Phil Sutter) [RHEL-119650]
  - data_reg: Introduce struct nftnl_data_reg::byteorder field (Phil Sutter) [RHEL-119650]
  - expr: Pass byteorder to struct expr_ops::set callback (Phil Sutter) [RHEL-119650]
  - expr: data_reg: Avoid extra whitespace (Phil Sutter) [RHEL-119650]
  - set_elem: Review debug output (Phil Sutter) [RHEL-119650]


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: José Expósito <jexposit@redhat.com> - 0.16-13
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29742


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-9
changelog:
  - CVE-2025-64720: buffer overflow (RHEL-131432)
  - CVE-2025-65018: heap buffer overflow (RHEL-131445)
  - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133216)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-10
changelog:
  - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148832)
  - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146650)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-13
changelog:
  - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161334)


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1 (RHEL-38831)
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (RHEL-35699)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Petr Pisar <ppisar@redhat.com> - 1.18.0-2
changelog:
  - Use librpmio instead of gpgme for handling PGP keys (RHEL-47106)
  - Fix a memory leak in select_next_target() (RHEL-35699)


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-14
changelog:
  - Improve a documentation (RHEL-38831)
  - Refactor parse_entitlement_data() (RHEL-32365)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-37866)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Petr Písař <ppisar@redhat.com> - 0.7.33-3
changelog:
  - Fix a buffer overflow when copying SHA-384/512 checksum from a Debian
    repository (CVE-2026-9150) (RHEL-178263)


author: Petr Písař <ppisar@redhat.com> - 0.7.33-4
changelog:
  - Cope with integer overflow in data size arithmetics in repo_add_solv()
    (CVE-2026-9149) (RHEL-178267)


author: Pavol Žáčik <pzacik@redhat.com> - 0.12.0-1
changelog:
  - Rebase to 0.12.0
    Resolves: RHEL-133421, RHEL-70825, RHEL-130042
  - Add a Requires for crypto-policies instead of a Recommends
    Resolves: RHEL-139045


author: Kate Hsuan <hpa@redhat.com> - 1.0.28-1
changelog:
  - Update to the upstream version 1.0.28
  - Update to the upstream version 1.0.28
  - Fix automake-1.17 issue since the release was based on automake-1.17


author: David King <dking@redhat.com> - 2.12.5-6
changelog:
  - Fix CVE-2025-6021 (RHEL-96495)
  - Fix CVE-2025-49794 (RHEL-96395)
  - Fix CVE-2025-49795 (RHEL-96408)
  - Fix CVE-2025-49796 (RHEL-96421)


author: Martin Osvald <mosvald@redhat.com> - 2.1.1-1
changelog:
  - New version 2.1.1 (rhbz#2250290)
  - Fix incorrect upstream URL and SourceX (rhbz#2249526)
  - SPDX migration


author: Paul Evans <pevans@redhat.com> - 0.32-16
changelog:
  - lsscsi: Fixes for SBP (Firewire) host in transport_h_init() (RHEL-48228)
  - lsscsi: Change default output trailing space after each device entry (RHEL-70371)
  - lsscsi: Transport type FC and FCOE output inconsistencies (RHEL-155569)
  - lsscsi: Device name spacing before major:minor dev dev names exceeds 9 chars (RHEL-157252)


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: DJ Delorie <dj@redhat.com> - 1:4.4.1-3
changelog:
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Lianbo Jiang <lijiang@redhat.com> - 1.7.5-11
changelog:
  - Fix failure of hugetlb pages exclusion on Linux 6.9 and later
  - Fix wrong exclusion of Slab pages on Linux 6.10-rc1 and later


author: Xiao Ni <xni@redhat.com> - 4.4-1
changelog:
  - Update to mdadm 4.4 and latest upstream
  - Resolves: RHEL-86676, RHEL-72803, RHEL-88793, RHEL-88791


author: Evan Goode <egoode@redhat.com> - 3.10.1-1
changelog:
  - Update to 3.10.1
  - Correct spelling of summary
  - Print more helpful error message when reinstalling non-installed pkg
    Resolves: RHEL-53430


author: Leo Sandoval <lsandova@redhat.com> - 0.7.2-2
changelog:
  - Rebase several patches from upstream which:
    - Introduce --is-sb-enabled parameter and better return codes
    - Remove unused int_to_b64()
    - Show help on unsupported systems
  - Resolves: #RHEL-90836
  - Resolves: #RHEL-90839


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Lukáš Zaoral <lzaoral@redhat.com> - 8.0-1
changelog:
  - rebase to latest upstream version (RHEL-35944)
  - remove `nano-default-editor` from the specfile (RHEL-30790)


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.64.20160912git
changelog:
  - Resolves: #2077846 - net-tools utilities display incorrect statistics for interfaces with 15-character names


author: Vit Mojzis <vmojzis@redhat.com> - 0.30.0-21
changelog:
  - Improve "help/usage" message (RHEL-38477)
  - libnetlabel: fix a header file guard typo
  - netlabel-config: Fix IPv4/IPv6 addresses parsing in nlbl_reset_unlbl()
  - netlabel: Update man page to clarify SELinux labeling
  - tests: add a basic CALIPSO pass through test
  - doc: fix a typo in the netlabel-config man page


author: Pavel Reichl <preichl@redhat.com> - 0.4.2-3
changelog:
  - Actually change License from BSD to LGPL, based on content of COPYING file
  - Convert License tag to SPDX format


author: Phil Sutter <psutter@redhat.com> [1.1.1-5.el10]
changelog:
  - src: add conntrack information to trace monitor mode (Phil Sutter) [RHEL-102994]
  - src: split monitor trace code into new trace.c (Phil Sutter) [RHEL-102994]


author: Phil Sutter <psutter@redhat.com> [1.1.1-6.el10]
changelog:
  - Makefile: Fix for 'make CFLAGS=...' (Phil Sutter) [RHEL-108851]
  - table: Embed creating nft version into userdata (Phil Sutter) [RHEL-108851]
  - doc: nft.8: Minor NAT STATEMENTS section review (Phil Sutter) [RHEL-106743]
  - trace: Fix for memleak in trace_alloc_list() error path (Phil Sutter) [RHEL-111205]


author: Phil Sutter <psutter@redhat.com> [1.1.5-1.el10]
changelog:
  - doc: libnftables-json: Describe RULESET object (Phil Sutter) [RHEL-121194]
  - doc: don't suggest to disable GSO (Phil Sutter) [RHEL-121194]
  - build: don't install ancillary files without systemd service file (Phil Sutter) [RHEL-121194]
  - tests: shell: fix typo in vmap_timeout test script (Phil Sutter) [RHEL-121194]
  - tests: py: inet/osf.t: Fix element ordering in JSON equivalents (Phil Sutter) [RHEL-121194]
  - tests: py: any/ct.t.json.output: Drop leftover entry (Phil Sutter) [RHEL-121194]
  - tests: py: any/tcpopt.t.json: Fix JSON equivalent (Phil Sutter) [RHEL-121194]
  - optimize: Fix verdict expression comparison (Phil Sutter) [RHEL-121194]
  - datatype: Fix boolean type on Big Endian (Phil Sutter) [RHEL-121194]
  - src: parser_json: fix format string bugs (Phil Sutter) [RHEL-121194]
  - doc: fix tcpdump example (Phil Sutter) [RHEL-121194]
  - libnftables: do not re-add default include directory in include search path (Phil Sutter) [RHEL-121194]
  - monitor: Inform JSON printer when reporting an object delete event (Phil Sutter) [RHEL-121194]
  - tests: shell: skip two bitwise tests if multi-register support isn't available (Phil Sutter) [RHEL-121194]
  - tests: monitor: Fix regex collecting expected echo output (Phil Sutter) [RHEL-121194]
  - monitor: Quote device names in chain declarations, too (Phil Sutter) [RHEL-121194]
  - tools: gitignore nftables.service file (Phil Sutter) [RHEL-121194]
  - parser_bison: remove leftover utf-8 character in error (Phil Sutter) [RHEL-121194]
  - Rebase onto version 1.1.5 (Phil Sutter) [RHEL-121194]


author: Phil Sutter <psutter@redhat.com> [1.1.5-2.el10]
changelog:
  - spec: Require libnftnl >= 1.3.0-2 for NFTA_DEVICE_PREFIX handling (Phil Sutter) [RHEL-108861]
  - mnl: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108861]
  - tests: shell: Test ifname-based hooks (Phil Sutter) [RHEL-108861]
  - parser_bison: Accept ASTERISK_STRING in flowtable_expr_member (Phil Sutter) [RHEL-108861]
  - mnl: Support simple wildcards in netdev hooks (Phil Sutter) [RHEL-108861]


author: Phil Sutter <psutter@redhat.com> [1.1.5-3.el10]
changelog:
  - Update expected test suite results (Phil Sutter) [RHEL-121194]
  - tests: monitor: Fix for out-of-path call (Phil Sutter) [RHEL-121194]


author: Phil Sutter <psutter@redhat.com> [1.1.5-4.el10]
changelog:
  - spec: Require libnftnl-1.3.0-3 for nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-128553]
  - tests: py: Adjust payloads to changed userdata printing (Phil Sutter) [RHEL-128553]
  - tests: py: Update payload records (Phil Sutter) [RHEL-128553]
  - tests: py: objects.t: must use input, not output (Phil Sutter) [RHEL-128553]
  - tests: py: tools: Add regen_payloads.sh (Phil Sutter) [RHEL-128553]
  - netlink: Make use of nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-128553]
  - netlink: No need to reference array when passing as pointer (Phil Sutter) [RHEL-128553]
  - netlink: Introduce struct nft_data_linearize::sizes (Phil Sutter) [RHEL-128553]
  - netlink: Introduce struct nft_data_linearize::byteorder (Phil Sutter) [RHEL-128553]
  - expression: Set range expression 'len' field (Phil Sutter) [RHEL-128553]
  - intervals: Convert byte order implicitly (Phil Sutter) [RHEL-128553]
  - mergesort: Align concatenation sort order with Big Endian (Phil Sutter) [RHEL-128553]
  - mergesort: Fix sorting of string values (Phil Sutter) [RHEL-128553]
  - segtree: Fix range aggregation on Big Endian (Phil Sutter) [RHEL-128553]


author: Than Ngo <than@redhat.com> - 3.24.0-5
changelog:
  - Use systemd-sysusers
  - Modifie the unit file to change file ownership
  - opencryptoki doesn't work in image mode
    Resolves: RHEL-77146


author: Than Ngo <than@redhat.com> - 3.24.0-7
changelog:
  - Resolves: RHEL-80632, tokens are deleted on reboot
  - Related: RHEL-77146, opencryptoki doesn't work in image mode


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-85376, ep11 token: PKCS #11 3.0 - support SHA3
  - Resolves: RHEL-90589, CCA token: basic support of AES-GCM
  - Resolves: RHEL-72964, cca token support cipher keys
  - Resolves: RHEL-72968, Support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-73343, Upgrade openCryptoki to latest version
  - Resolves: RHEL-75144, p11kmip: a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75761, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85374, cca token: Support ECDH to derive AES keys


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73343, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77146, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104598


author: Than Ngo <than@redhat.com> - 3.26.0-1
changelog:
  - Resolves: RHEL-75138, ep11 token BLS support
  - Resolves: RHEL-85380, ep11 token: ML-KEM and ML-DSA support
  - Resolves: RHEL-85383, cca token: ML-KEM and ML-DSA support
  - Resolves: RHEL-100058, openCryptoki 3.26.0


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71052)
  - Avoid SSL context cleanup during library destruction (RHEL-68424)


author: Veronika Hanulikova <vhanulik@redhat.com> - 0.26.1-1
changelog:
  - Rebase to new upstream release (RHEL-71523)
  - Separate OpenSC into libraries and binaries (RHEL-73314)


author: Jakub Jelen <jjelen@redhat.com> - 0.27.1-1
changelog:
  - Rebase to OpenSC 0.27.1 fixing outstanding security reports and bring in new PQC features (RHEL-151598)


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-15
changelog:
  - Fix implicit destination path selection when source path ends with ".."
    Resolves: RHEL-118406
  - Canonicalize username when matching a user
    Resolves: RHEL-101440


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-17
changelog:
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-128399
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-128388


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-21
changelog:
  - Implement obtaining Kerberos tickets on behalf of user on SSH authentication
    Resolves: RHEL-92932


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-22
changelog:
  - Remove recommendation of p11-kit
    Resolves: RHEL-139070
  - Only the first value of MaxStartups, PerSourceNetBlockSize and IPQoS
    in sshd_config should count when defined multiple times
    Resolves: RHEL-150365
  - Fix mistracking of MaxStartups process exits in some situations
    Resolves: RHEL-121768
  - Fix GSSAPI authentication indicator issues found by AI
    Resolves: RHEL-154309
  - CVE-2026-3497: Fix information disclosure or denial of service due
    to uninitialized variables in gssapi-keyex
    Resolves: RHEL-155813


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-23
changelog:
  - Don't negotiate non-FIPS algorithms in ssh-keyscan key exchange in FIPS mode
    Resolves: RHEL-88565
  - Fix duplicate audit log entry when destroying ed25519 private keys
    Resolves: RHEL-46782
  - Fix typo in GSSAPIProxyS4U2Services
    Related: RHEL-92932


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-25
changelog:
  - Fix static analysis issues
    Resolves: RHEL-163365
  - Ssh should refuse connection when mlkem kex is specified in FIPS
    Resolves: RHEL-155178
  - CVE-2026-35385: Fix privilege escalation via scp legacy protocol
    when not in preserving file mode
    Resolves: RHEL-164740
  - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
    multiplexing sessions
    Resolves: RHEL-166239
  - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
    and HostbasedAcceptedAlgorithms with regard to ECDSA keys
    Resolves: RHEL-166223
  - CVE-2026-35414: Fix mishandling of authorized_keys principals option
    Resolves: RHEL-166191
  - CVE-2026-35386: Add validation rules to usernames and hostnames
    set for ProxyJump/-J on the commandline
    Resolves: RHEL-166207


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-26
changelog:
  - Improve keytab detection when obtaining Kerberos tickets on behalf of user on SSH authentication
    Related: RHEL-92932
  - Add missing NULL check for server key generation in ML-KEM hybrids
    Resolves: RHEL-168106


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-27
changelog:
  - CVE-2026-55653: Fix double free in openssh DH-GEX client path during
    FIPS known-group validation that leads to client-side denial of service
    Resolves: RHEL-185776
  - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator
    cleanup due to missing NULL terminator
    Resolves: RHEL-185831
  - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket
    pre-binding
    Resolves: RHEL-185848
  - CVE-2026-59996: Fix remote glob result of ".." causing files to be placed
    in unintended parent directories when scp performs remote-to-remote copy
    via the local host
    Resolves: RHEL-193172
  - CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange
    Resolves: RHEL-193015


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.1-1
changelog:
  - Rebasing to OpenSSL 3.5.1
    Resolves: RHEL-90350
    Resolves: RHEL-95613
    Resolves: RHEL-97796
    Resolves: RHEL-99353
    Resolves: RHEL-100168


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80811


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-101548
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-105010


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-4
changelog:
  - Make openssl speed test signatures without errors
    Resolves: RHEL-95182
  - Build tests in check and without LTO
    Resolves: RHEL-111634


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-5
changelog:
  - Fix globally disabled LTO
    Related: RHEL-111634
  - Initialize reserved and unused memory in aes-s390x.pl
    Resolves: RHEL-107479


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.5-1
changelog:
  - Rebase to OpenSSL 3.5.5
    Resolves: RHEL-122599
    Resolves: RHEL-141987
    Resolves: RHEL-142009
    Resolves: RHEL-142022
    Resolves: RHEL-142026
    Resolves: RHEL-142030
    Resolves: RHEL-142034
    Resolves: RHEL-142038
    Resolves: RHEL-142042
    Resolves: RHEL-142046
    Resolves: RHEL-142050
    Resolves: RHEL-142054


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.7-1
changelog:
  - Rebase to OpenSSL 3.5.7
    Resolves: RHEL-179698
    Resolves: RHEL-179694
    Resolves: RHEL-179690
    Resolves: RHEL-179686
    Resolves: RHEL-179673
    Resolves: RHEL-179659
    Resolves: RHEL-179624
    Resolves: RHEL-179554
    Resolves: RHEL-179549
    Resolves: RHEL-179546
    Resolves: RHEL-179541
    Resolves: RHEL-179538
    Resolves: RHEL-179279
    Resolves: RHEL-179271


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-2
changelog:
  - Fix static analyzer detected issues. Resolves: RHEL-36475
  - pam_env: fixes for NULL environment variables


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-6
changelog:
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-65223


author: Brian C. Lane <bcl@redhat.com> - 3.5-11
changelog:
  - parted: Fix ending sector location when using kibi IEC suffix (bcl)
  - tests: Fix formatting and snprintf warnings in tests. (bcl)
  - ui: Add checks for prompt being NULL (bcl)
  - strlist: Handle realloc error in wchar_to_str (bcl)
  - libparted: Fix potential NULL dereference in ped_disk_next_partition (bcl)
  - filesys: Check for null from close_fn (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.5.28-1
changelog:
  - Upstream 3.5.28 Alpha release
  - Dropped all patches included in new upstream release
  - Bumped minor version on libparted.so and libparted-fs-resize.so


author: Brian C. Lane <bcl@redhat.com> - 3.6-7
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73220
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73220
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73220
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73220


author: Michal Hlavinka <mhlavink@redhat.com> - 3.13.0-1
changelog:
  - updated to 3.13, adds support for cxl1.1 device link status information (#RHEL-29153)
  - add riscv64 build support (#RHEL-40383)


author: Vit Mojzis <vmojzis@redhat.com> - 3.9-2
changelog:
  - semanage: Reset active value when deleting boolean customizations (RHEL-111421)
  - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505)


author: Jan Rybar <jrybar@redhat.com> - 125-4
changelog:
  - changing log level via dbus is now restricted to root
  - backport of https://github.com/polkit-org/polkit/commit/5a4ba7dfdcc3f
  - Resolves: RHEL-90807


author: Jan Rybar <jrybar@redhat.com> - 0.1-26
changelog:
  - use build macros, on behalf of original author Tom Stellard (tstellar)
  - Pagure doesn't allow one-click rebase, AFAIK


author: Jan Rybar <jrybar@redhat.com> - 4.0.4-11
changelog:
  - ps: etime overflow reappeared with rewritten library
  - uptime, w: report user sessions only; upstream backport of 734930e47
  - Resolves: RHEL-60826
  - Resolves: RHEL-141839


author: Fraser Tweedale <ftweedal@redhat.com> - 48.0.0-1
changelog:
  - Update to 48.0.0, resolves RHEL-172409
  - Fix AES-GCM with FIPS provider version mismatch, resolves RHEL-173746


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-18
changelog:
  - Add support for multiple OpenPGP signatures per package (RHEL-100571)
  - Add support for OpenPGP v6 signature pre-salting (RHEL-100571)
  - Add support for PQC algorithms from RFC-9580 (RHEL-100571)
  - Add --list and --erase commands to rpmkeys(8) (RHEL-105421)
  - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-21
changelog:
  - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936)
  - Fix redundant rpmdb-migrate.service runs (RHEL-96510)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-22
changelog:
  - Ignore signatures made by unknown or disabled algorithms (RHEL-112394)
  - Enable NSS-based user and group lookups again (RHEL-118365)
  - Fix ignored password field if empty in passwd/group file (RHEL-118365)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-24
changelog:
  - Add support for %autosetup -C (RHEL-141269)
  - Add support for database parking (RHEL-126405)
  - Make syslog plugin actually useful and also required (RHEL-155272)
  - Require rpm-plugin-audit instead of just recommending (RHEL-139071)
  - Fix buffer overruns with long language strings (RHEL-169755)


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-90555


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98060, RHEL-98047, RHEL-97813, RHEL-98062, RHEL-98180


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-4
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143057
  Resolves: RHEL-143109
  Resolves: RHEL-144854


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-5
changelog:
  - Rebuilding previous fixes for different build target
  Related: RHEL-143057, RHEL-143109, RHEL-144854


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.13-1
changelog:
  - Update to 3.12.13
  - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672
  - Require expat >= 2.7.2 to prevent symbol lookup errors at runtime with older expat
  Related: RHEL-167886, RHEL-168120


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.13-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
  Resolves: RHEL-167886, RHEL-168120


author: Stephen Gallagher <sgallagh@redhat.com> - 1:0.4-0.54.b47
changelog:
  - Fixes for -WError=implicit-function-declaration on RHEL
  - Reinstates the dump headers without compiling the implementations


author: Vladis Dronov <vdronov@redhat.com> - 6.17-2
changelog:
  - Add Intel CET IBT instrumentation to assembly code
  - Update to the upstream v6.17 @ ac43f912 (RHEL-36771)


author: Vladislav Dronov <vdronov@redhat.com> - 6.17-10
changelog:
  - Update to the upstream v6.17 @ e8da3cdc (RHEL-176338)
  - Handle new radiacode entropy source
  - Build with the updated jitterentropy v3.7.0 library
  - Drop the older i686 force-PIC fix


author: Scott Mayhew <smayhew@redhat.com> 1.2.9-0
changelog:
  - Updated the URL to https://sourceforge.net/projects/rpcbind (RHEL-174800)
  - Updated to latest upstream release: rpcbind-1_2_9 (RHEL-174804)
  - Rename RPCBIND_ARGS to RPCBIND_OPTIONS in /etc/sysconfig/rpcbind (RHEL-174804)


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-1
changelog:
  - New version 3.4.1
  - Resolves: RHEL-70151 - Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling
  - Resolves: RHEL-70159 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70203 - rsync server leaks arbitrary client files
  - Resolves: RHEL-72500 - Path traversal vulnerability in rsync
  - Resolves: RHEL-72501 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71658 - Race Condition in rsync Handling Symbolic Links
  - Resolves: RHEL-71293 - Build rsync with --with-rrsync


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-5
changelog:
  - Resolves: RHEL-169137 - CVE-2026-41035 - Use-after-free vulnerability in extended attribute handling


author: Michal Ruprich <mruprich@redhat.com> - 3.4.4-1
changelog:
  - Resolves: RHEL-186589 - Rebase rsync to version 3.4.4
  - Resolves: RHEL-174931 - TOCTOU symlink race condition (CVE-2026-29518)
  - Resolves: RHEL-174947 - Memory disclosure via int overflow (CVE-2026-43618)


author: Paolo Bonzini <pbonzini@redhat.com> - 4.9-1
changelog:
  - Rebase to 4.9
  - Update downstream patches
  - Resolves: rhbz#2140486
  - Remove change to gnulib tests, they pass anyway
  - Install valgrind and langpacks to increase test coverage


author: Jakub Martisko <jamartis@redhat.com> - 4.9-5
changelog:
  - lib/dfa.c: Increase the maximum size of the transitions table
  - After changes introduced between sed 4.2 and 4.4, some regexps
    started to hit the table size limits. This lead to repeated deletion
    and rebuilding of the table, leading to massive performance drops.
    While the core issue is still present, this change should at least
    help by moving the threshold of the regexp complexity that triggers the 
    table rebuilds.
  - Resolves: RHEL-144027


author: Tomas Bzatek <tbzatek@redhat.com> - 1.48-7
changelog:
  - udev rules: avoid spurious warning for non-SCSI devices (RHEL-40861,RHEL-54607)
  - Install missing 00-scsi-sg3_config.rules
  - Fix file references to other udev rules


author: Paul Evans <pevans@redhat.com> - 1.48-8
changelog:
  - rescan-scsi-bus.sh: Correctly read RMB bit on enquiry (RHEL-153277)
  - rescan-scsi-bus.sh: Replace 'which' with build in 'command -v' (RHEL-70693)
  - sg_safte: update short option of version (RHEL-125869)
  - sg_rdac: accept --help or -h without error (RHEL-69439)
  - sg_inq: fix issing output fields in --export format (RHEL-119246, RHEL-123748)
  - sg_inq: re-add Unit serial number field (RHEL-119246, RHEL-123748)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-1
changelog:
  - Rebase to version 4.15.0
  - getdef: avoid spurious error messages about unknown configuration options


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-11
changelog:
  - passwd.c: lock, open, close and unlock passwd database
    Resolves: RHEL-151055
    Resolves: RHEL-150955


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-12
changelog:
  - groupmod.c: delete gr_free_members(&grp) to avoid double free
    Resolves: RHEL-135902
  - subordinateio.c: list_owner_ranges(): Fix duplicate range when
    username matches ID. Resolves: RHEL-114226


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.14.0-5
changelog:
  - passwd: Provide binary from this package. Enable libpam and
    disable account-tools-setuid. Provide passwd PAM service file.
    Resolves: #2233275
  - passwd: provide --stdin option


author: Milan Crha <mcrha@redhat.com> - 2.3-6
changelog:
  - Co-own /usr/share/gettext and /usr/share/gettext/its
  - Related to rhbz#2280150
  - Resolves: RHEL-38682 (Backport Fedora 40 changes)


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.45.0-1
changelog:
  - Updated to version 3.45.0 (https://sqlite.org/releaselog/3_45_0.html)
  - List versioned soname in files, preventing unnoticed soname bumps
  - Disable func4 tests for i686 arch due to failing float<->int conversions


author: Bruno Wolff III <bruno@wolff.to> - 4.6-1
changelog:
  - 4.6 release
  - PR #231 was merged
  - See https://github.com/plougher/squashfs-tools/blob/master/CHANGES


author: Bruno Wolff III <bruno@wolff.to> - 4.6.1-1
changelog:
  - Phillip is now doing two tags per release and we can
  - use the one that works better with forgemeta
  - There are a few fixes after the 4.6 release. I think only
  - one applies to Fedora because of the build options we use.
  - It was not something that affects image builds.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-5
changelog:
  - Fix incorrect syscall name reporting in restart_syscall() on attach when
    PTRACE_GET_SYSCALL_INFO is in use (RHEL-65108).
  - Update net-yy-inet* and linkat--secontext_mismatch tests.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-6
changelog:
  - Avoid failures of creat.gen test on kernels that include commit
    v6.11-rc1~242^2~19 ("fs: don't block i_writecount during exec").


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-5.p5
changelog:
  - RHEL 10.0 ERRATUM
  - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
    positive(s) Resolves: RHEL-44436
  - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864


author: Alejandro López <allopez@redhat.com> - 1.9.15-9.p5
changelog:
  - RHEL 10.1 ERRATUM
  - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009
  - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022


author: Alejandro López <allopez@redhat.com> - 1.9.17-2.p2
changelog:
  - Resolves: RHEL-59136 - sudo passes SHELL environment variable twice to
    the shell being executed [rhel-10]
  - Resolves: RHEL-128212 - [RFE] request to backport support for regex in
    sudo [rhel-10]
  - Resolves: RHEL-112100 - Rebase of sudo to 1.9.17p2 [rhel-10]


author: Alejandro López <allopez@redhat.com> - 1.9.17-3.p2
changelog:
  - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation
    due to failure in privilege drop calls


author: Alejandro López <allopez@redhat.com> - 1.9.17-4.p2
changelog:
  - Bump release number
  - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation
    due to failure in privilege drop calls


author: Alejandro López <allopez@redhat.com> - 1.9.17-8.p2
changelog:
  - Resolves: RHEL-95850 - A sudo'd command when invoked from ksh through a
    pipe mangles output, leaves tty insane


author: systemd maintenance team <systemd-maint@redhat.com> - 257-19
changelog:
  - man: fix a missing word (RHEL-120277)
  - sd_bus_open_user_machine(): Don't shortcut without necessary env (RHEL-129179)
  - udev: set clock group for PTP and RTC devices (RHEL-113051)
  - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-126122)
  - strv: introduce string_strv_hashmap_remove() (RHEL-126937)
  - unit-file: introduce unit_file_remove_from_name_map() (RHEL-126937)
  - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-126937)
  - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-126937)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-20
changelog:
  - tools/check-version-history: avoid DeprecationWarning with newer lxml (RHEL-128767)
  - man: don't duplicate version in History section (RHEL-128767)
  - tools: ignore root element explicitly in check-version-history (RHEL-128767)
  - systemd-logind: Add signal section in man systemd-logind (RHEL-128767)
  - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118216)
  - timer: rebase last_trigger timestamp if needed (RHEL-118216)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-22
changelog:
  - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-125822)
  - hwdb: Add Accelerometer mount matrix for Irbis TW43 (RHEL-72702)
  - hwdb: map FN key on TongFang X4SP4NAL laptops (RHEL-72702)
  - hwdb: update rules (RHEL-72702)
  - hwdb: update autosuspend rules (RHEL-72702)
  - Add Razer Cobra mouse to hwdb (RHEL-72702)
  - hwdb: enable autosuspend for Dell DW5826e WWAN modem (RHEL-72702)
  - hwdb: sort SDR devices by vendor name (RHEL-72702)
  - 70-mouse.hwdb: Add Razer Basilisk V3, Asus Cerberus, +2 more (RHEL-72702)
  - hwdb: run "update-hwdb" (RHEL-72702)
  - Add Hantek DSO-6022 oscilloscopes and compatible devices (RHEL-72702)
  - Update 60-sensor.hwdb - Add support for Lenovo Legion Go (RHEL-72702)
  - hwdb: add Airspy devices (RHEL-72702)
  - hwdb: add more devices (RHEL-72702)
  - hwdb: add MiriSDR MSi2500 devices (RHEL-72702)
  - hwdb: add missing Ettus Research B200 rule (RHEL-72702)
  - hwdb: add LimeSDR XTRX devices (RHEL-72702)
  - hwdb: add HydraSDR RFOne (RHEL-72702)
  - hwdb: add SDRplay devices (RHEL-72702)
  - hwdb: update (RHEL-72702)
  - hwdb: fix calibrate rotation sensor for Positivo K116J (#39189) (RHEL-72702)
  - Add Nulea M501 trackball to hwdb (RHEL-72702)
  - add comment to 70-mouse.hwdb regarding generic name for Nulea M501 USB dongle (RHEL-72702)
  - remove extra space from new hwdb.d/70-mouse.hwdb entries to fix failing test (RHEL-72702)
  - remove bonus line (RHEL-72702)
  - hwdb: drop trailing whitespace (RHEL-72702)
  - remove Nulea M501 usb entry from hwdb (RHEL-72702)
  - test/parse_hwdb: wrap Or inside an And in a Group (RHEL-72702)
  - rules: extend 60-input-id.rules to allow for bus/vid/pid/name matches (RHEL-72702)
  - hwdb: don't tag a named Mouse device as pointingstick (RHEL-72702)
  - hwdb: Add V64x_V65xAU to list of Clevo models where scancode f7+f8 get mapped to touchpad-toggle (RHEL-72702)
  - hwdb: gpd micropc2 sensor (#39493) (RHEL-72702)
  - hwdb: add support for the Logitech MX Master 4 (#39490) (RHEL-72702)
  - hwdb: add entry for Acer Switch One 10 (SW1-011) (#39716) (RHEL-72702)
  - keymap: Ignore brightness keys on Dell Inspiron 3505 to avoid double events (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: Add Elecom IST Pro trackball (#39762) (RHEL-72702)
  - hwdb: Fix keyboard backlight keys on Acer Nitro 5 AN515-58 (#39769) (RHEL-72702)
  - hwdb: Add alternative mode for Beacn Mic (#39868) (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: add ProtoArc EM01 NL mouse configuration (RHEL-72702)
  - hwdb: add Magic Trackpad v2 USB-C (2024) to quirks (#40032) (RHEL-72702)
  - hwdb: sensor: Remove Lenovo IdeaPad D330 accel mount matrix (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: update autosuspend rules (RHEL-72702)
  - hwdb: Add ACCEL_MOUNT_MATRIX for variant of TERRA PAD 1061 (RHEL-72702)
  - hwdb: sensor: Add HP OmniBook Ultra Flip 14 accel mount matrix (#40076) (RHEL-72702)
  - hwdb: sensor: Remove Lenovo IdeaPad Duet 3 accel mount matrix (#40075) (RHEL-72702)
  - hwdb: Fix ACCEL_MOUNT_MATRIX for Lenovo Ideapad MIIX 310-ICR (#40067) (RHEL-72702)
  - hwdb: fix unstable button triggering on Mipad 2 under GNOME (#40071) (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: touchpad config for Apple MacbookPro12,1 Early 2015 (RHEL-72702)
  - Add Lenovo Y50-70 touchpad to 60-evdev.hwdb (RHEL-72702)
  - quirks: sensor: add info about ACPI accel_matrix (RHEL-72702)
  - quirks: Re-add D330 accel_matrix as identity one (#40226) (RHEL-72702)
  - quirks: touchpad: Set Duet 3 bt touchpad internal (RHEL-72702)
  - hwdb: Add missing scancodes for Lenovo Legion devices (RHEL-72702)
  - hwdb: Add missing vendor names for older AYANEO devices Adds AYADEVICE and AYA NEO vendor names. Early founders editon and 2021 models used these DMI values instead of AYANEO (RHEL-72702)
  - hwdb: add matrix for ASUS 2-in-1 T101HA (RHEL-72702)
  - hwdb: add HP EliteBoard Mic mute key mapping (RHEL-72702)
  - hwdb: Add GPD Pocket 4 chassis quirk (RHEL-72702)
  - hwdb: make three more hwdb files parsed by parse_hwdb.py (RHEL-72702)
  - hwdb: set touchpad resolution for all ThinkPad T49x chassis laptops (RHEL-72702)
  - hwdb: Update Lenovo Legion Go Models - Different BIOS versions of the Legion Go 2 can init the keyboard   device as set 1 (appears as raw set 2) or as set 2 (appears as   translated set 2). Add the Legion Go 2 to the Translated list. - While at it, specify the models in a more verbose manner for   posterity. (RHEL-72702)
  - hwdb: Add extended SteelSeries Arctis headset device support (#40479) (RHEL-72702)
  - hwdb: keyboard: fix typo CAPSLOCK to NUMLOCK (RHEL-72702)
  - hwdb: keyboard: uppercase apple id (RHEL-72702)
  - integritysetup: Add support for hmac-sha512 (RHEL-27852)
  - integritysetup: Add PHMAC algorithm to list of known algorithms (RHEL-27852)
  - core: increment start limit counter only when we can start the unit (RHEL-115032)
  - TEST-07-PID1: wait for systemd-resolved being stopped (RHEL-115032)
  - test: extend start limit interval (RHEL-115032)
  - userdbctl: optionally show user/group data from JSON filerather than from system (RHEL-143029)
  - man: fix typo (RHEL-143029)
  - test: fix test with -Dnetworkd=false (RHEL-143029)
  - ci: run apt-get update before running mkosi (RHEL-115001)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-23
changelog:
  - test-journal-dump: dump the headers of journal files (RHEL-106795)
  - journal: store counts, not byte sizes, in table size constants (RHEL-106795)
  - journal: treble field hash table size (RHEL-106795)
  - nspawn: move uid shift/chown() code into shared/ (RHEL-143036)
  - user-classification: add new "foreign" UID range (RHEL-143036)
  - userdb: synthesize stub user records for the foreign UID (RHEL-143036)
  - dissect: add new --shift command (RHEL-143036)
  - userdb: optionally parse numeric UIDs/GIDs where a username is expected (RHEL-143036)
  - userdbd: separate parameter structure of GetMemberships() varlink call from the GetUserRecord() one (RHEL-143036)
  - userdb: move setting of 'service' varlink parameter into userdb_connect() (RHEL-143036)
  - user-record: make a NULL UserDBMatch be equivalent to no filtering (RHEL-143036)
  - sd-varlink: add sd_varlink_get_description() call (RHEL-143036)
  - user-record: add helper for dispatching a disposition mask (RHEL-143036)
  - user-record: rename USER_DISPOSITION_MASK_MAX → USER_DISPOSITION_MASK_ALL (RHEL-143036)
  - user-record: add some helpers for working with UserDBMatch (RHEL-143036)
  - varlink: add new calls for server-side user record filtering to varlink IDL + to spec (RHEL-143036)
  - userdb: move UserDBMatch handling from userdbctl into generic userdb code to allow it to be done server side (RHEL-143036)
  - userdbd: implement server side filtering in the Multiplexer API (RHEL-143036)
  - homectl: port has_regular_user() + acquire_group_list() to use server-side filtering (RHEL-143036)
  - update TODO (RHEL-143036)
  - JSON User/Group records: Add properties for UUIDs (RHEL-143036)
  - userdb: add support for printing the UUID from user and group records (RHEL-143036)
  - userdb: add support for looking up users or groups by uuid. (RHEL-143036)
  - userdbctl: add --uuid filtering option (RHEL-143036)
  - userdbctl: add missing --uuid= to --help text (RHEL-143036)
  - userdb: fix typo (RHEL-143036)
  - man/userdbctl: fixup version info (RHEL-143036)
  - user-record: add a concept of inverting per-host matching sections in user record (RHEL-143034)
  - homectl: add interface for controlling storage for negative machine ID matches (RHEL-143034)
  - logind: also save pidfdid as part of session state, even if we don't parse it (RHEL-53112)
  - logind: support deserializing session leader through pidfdid (RHEL-53112)
  - TEST-35-LOGIN: test coldplug without fdstore on kernels with pidfd id (RHEL-53112)
  - logind: fix potential fd leak in deliver_session_leader_fd_consume() (RHEL-53112)
  - Revert "coredump: lock down EnterNamespace= mount even more" (RHEL-95219)
  - coredump: add compat support for SYSTEMD_COREDUMP_ALLOW_NAMESPACE_CHANGE (RHEL-95219)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-24
changelog:
  - ci: re-enable bpf-framework option for build and unit test jobs (RHEL-155454)
  - ci: add bpftool workaround to codeql job too (RHEL-155454)
  - ci: fix workaround about bpftool for codeql (RHEL-155454)
  - ci: add bpftool workaround to coverity too (RHEL-155454)
  - Revert "man: mention RHEL documentation in systemctl's man page" (RHEL-155805)
  - path-util: add flavour of path_startswith() that leaves a leading slash in place (RHEL-155396)
  - cgroup: port some code over to path_startswith_full() (RHEL-155396)
  - path-util: invert PATH_STARTSWITH_ACCEPT_DOT_DOT flag (RHEL-155396)
  - sd-json: fix off-by-one issue when updating parent for array elements (RHEL-155396)
  - core/cgroup: avoid one unnecessary strjoina() (RHEL-155396)
  - core: validate input cgroup path more prudently (RHEL-155396)
  - nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-158303)
  - nspawn: normalize pivot_root paths (RHEL-158303)
  - udev: check for invalid chars in various fields received from the kernel (RHEL-158354)
  - udev: ensure there is space for trailing NUL before calling sprintf (RHEL-158354)
  - udev: ensure tag parsing stays within bounds (RHEL-158354)
  - udev: fix review mixup (RHEL-158354)
  - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-158354)
  - udev-builtin-net-id: print cescaped bad attributes (RHEL-158354)
  - core: only activate transaction that contain useful jobs (RHEL-143728)
  - journald: extend STDOUT_STREAMS_MAX to 64k (RHEL-168098)
  - string-util: introduce strprepend() helper (RHEL-143028)
  - missing: add quotactl_fd() wrapper (RHEL-143028)
  - homed: always use quotactl_fd() if its available (RHEL-143028)
  - pid1: add GracefulOptions= setting to .mount units (RHEL-143028)
  - pid1: enable usrquota support on /dev/shm (RHEL-143028)
  - units: enable usrquota support on /tmp/ (RHEL-143028)
  - nspawn: enable usrquota support on /tmp/ and /dev/shm/ (RHEL-143028)
  - nspawn: downgrade log message about usrquota to debug (RHEL-143028)
  - mount-setup: drop outdated comment (RHEL-143028)
  - mount-setup: tune down log level if usrquota is not supported, apply usrquota when smack is in use too (RHEL-143028)
  - devnum-util: add macros to safely convert dev_t to pointers and back (RHEL-143028)
  - user-record: add fields for setting limits on /tmp/ and /dev/shm/ (RHEL-143028)
  - user-runtime-dir: some smaller modernizations/refactorings (RHEL-143028)
  - user-runtime-dir: enforce /tmp/ and /dev/shm/ quota (RHEL-143028)
  - homectl: add support for configuring tmpfs limits (RHEL-143028)
  - test: add test case for tmpfs quota logic + PAMName= ask-password logic (RHEL-143028)
  - update TODO (RHEL-143028)
  - core/dbus-service: fix alignment (RHEL-143028)
  - core/mount: filter out "fail" option as well (RHEL-143028)
  - core/mount: check parameters_fragment first in mount_enter_(re)mounting() (RHEL-143028)
  - core/mount: report accurate can_start and can_reload (RHEL-143028)
  - core/mount: trivial coding style cleanups (RHEL-143028)
  - core/dbus-mount: add missing ReloadResult and CleanResult properties (RHEL-143028)
  - bus-unit-util: add missing assertions (RHEL-143028)
  - core/mount: rework GracefulOptions= to be just x-systemd.graceful-option= (RHEL-143028)
  - mountpoint-util: assume fsopen() works in mount_option_supported() (RHEL-143028)
  - core/mount: log only once about fs not supporting new mount API (RHEL-143028)
  - user-runtime-dir: correct quota size calculation (RHEL-143028)
  - test-display-quota: add a little helper binary to show quota on tmpfs (RHEL-143028)
  - TEST-46-HOMED: check for support on /dev/shm and /tmp separately (RHEL-143028)
  - TEST-46-HOMED: conditionally skip usrquota tests (RHEL-143028)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-25
changelog:
  - core: cleanup unit's dropin directories from global cache (RHEL-171097)
  - libsystemd: drop "const" decorators on public inline functions (RHEL-155454)
  - sd-id128: Drop _sd_const_ from sd_id128_in_setv() (RHEL-155454)
  - test: wrap mount/umount when running with sanitizers (RHEL-155454)
  - test: wrap even more binaries when running with sanitizers (RHEL-155454)
  - test: temporarily ignore sanitizer warning about blocked ptrace() (RHEL-155454)
  - test: slightly reduce the performance/memory overhead for wrapped binaries (RHEL-155454)
  - fstab-generator: support swap on network block devices (RHEL-128058)
  - man: add tags for the next few versions (RHEL-128058)
  - test: drop some extraneous whitespaces (RHEL-155021)
  - shared: fix segfault when processing matchHostname field (RHEL-155021)
  - shared: don't exclude valid min/max values for cgroup weight fields (RHEL-155021)
  - shared: don't leak memory from array fields (RHEL-155021)
  - man: fix short option for userdbctl's --from-file= (RHEL-155021)
  - fuzz: add a fuzzer for user records (RHEL-155021)
  - user-record: extract user_record_image_is_blockdev() common helper (RHEL-155021)
  - udev/net_id: introduce naming scheme for RHEL-9.9 (RHEL-72814)
  - udev/net_id: introduce naming scheme for RHEL-10.3 (RHEL-72814)
  - Tag accel devices for uaccess-render (RHEL-153030)
  - udev: tag kfd devices for xaccess-render (#40888) (RHEL-153030)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-28
changelog:
  - man: reword the description of "secure pager" handling (RHEL-102939)
  - pager: also check for $SUDO_UID (RHEL-102939)
  - Revert "mount-setup: tune down log level if usrquota is not supported, apply usrquota when smack is in use too" (RHEL-143028)
  - Revert "nspawn: enable usrquota support on /tmp/ and /dev/shm/" (RHEL-143028)
  - Revert "units: enable usrquota support on /tmp/" (RHEL-143028)
  - Revert "pid1: enable usrquota support on /dev/shm" (RHEL-143028)
  - Revert "udev-builtin-net-id: print cescaped bad attributes" (RHEL-180922)
  - homectl: apply all --member-of= groups from a comma-separated list (RHEL-180924)
  - udevadm: gracefully handle when a maked file is specified to udevadm verify/cat (RHEL-180917)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-29
changelog:
  - udev: drop redundant checks (RHEL-180923)
  - TEST-71-HOSTNAME: specify job mode for the stop job (#38413) (RHEL-180923)
  - test: wait for coredump to appear before parsing (RHEL-155454)
  - TEST-87-AUX-UTILS-VM: make coredumps stored in archived journal file (RHEL-155454)
  - TEST-87-AUX-UTILS-VM: rotate journal at one more place (RHEL-155454)
  - udev-rules: add missing device name prefix in log message (RHEL-180929)


author: Pavel Cahyna <pcahyna@redhat.com> - 2:1.35-8
changelog:
  - Backport upstream changes to jailify extraction directory
    Includes related gnulib changes to add openat2
    Fixes CVE-2025-45582


author: Pavel Cahyna <pcahyna@redhat.com> - 2:1.35-10
changelog:
  - added "padding with zeros" info message (#2089298)
  - do not report disk error as file shrank (#2089316)
  - upstream fix for savannah bug 64581, commit 51142180
    (crash with TAR_OPTIONS)
  - Backport fix for regression in the --no-overwrite-dir option
    Upstream commit 4e742fc8674064a9fa00d4483d06aca48d5b0463, discussed
    in https://www.mail-archive.com/bug-tar@gnu.org/msg06445.html


author: Pavel Cahyna <pcahyna@redhat.com> - 2:1.35-11
changelog:
  - Add upstream patch to improve error message for --one-top-level
    with absolute path (unsupported as a result of CVE-2025-45582 fix)


author: Jakub Martisko <jamartis@redhat.com> - 6.0-65
changelog:
  - Fix: Unzip Fails on Large Zip Files
  - Use the patch from Debian dealing with this
  Resolves: RHEL-45993


author: Jakub Martisko <jamartis@redhat.com> - 6.0-67
changelog:
  - zipinfo: remove the extra %c that caused invalid reads
  - zipinfo: fix the whitespaces in the output
  - Zipbombs: Port Another patch, orinally made by Mark Adler
  - https://github.com/madler/unzip/commit/af0d07f95809653b669d88aa0f424c6d5aa48ba0
    Resolves: RHEL-59972
    Resolves: RHEL-6286


author: - Chung Chung <cchung@redhat.com> - 8.3.2.1-1
changelog:
  - Add vdocalculatesize utility.
  - Improve handling of corrupt index metadata.
  - Resolves: RHEL-129392


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-6
changelog:
  - RHEL-113549 CVE-2025-53906 vim: Vim path traversal
  - RHEL-113543 CVE-2025-53905 vim: Vim path traversial


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-9
changelog:
  - RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-9
changelog:
  - RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-10
changelog:
  - Resolves: RHEL-159617 vim: Vim: Arbitrary code execution via command injection
    in glob() function


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-11
changelog:
  - RHEL-170124 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
    via path traversal bypass


author: Davide Caratti <dcaratti@redhat.com> - 1:2.10-10
changelog:
  - Fix package configuration/add missing patches to avoid regressions when
    upgrading from rhel-9 (RHEL-43250)
  - Backport P2P fix causing nmci failures (RHEL-17701)
  - Disable OpenSSL ENGINE API (RHEL-33750)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.11-1
changelog:
  - Update to version 2.11 (RHEL-59010)
  - backport fix for known regression on brcmfmac (rhbz#2302577)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.11-4
changelog:
  - Use pkcs11 provider to resolve PKCS11 URIs (RHEL-86951)
  - De-clutter syslog from CTRL-EVENT-SIGNAL-CHANGE messages (RHEL-71344)


author: Jakub Martisko <jamartis@redhat.com> - 3.0-42
changelog:
  - Use C implementation of some functions instead of asm
  - Fix the missing compiler/linker flags
  - Minor spec clean up
  Resolves: RHEL-33526


