# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-243.el10]
changelog:
  - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-178260]
  - nvme: make nvme_add_ns{_head}_cdev return void (Utkarsh Singh) [RHEL-186079]
  - nvme: fix crash and memory leak during invalid cdev teardown (Utkarsh Singh) [RHEL-186079]
  - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-185104]
  - KVM: s390: Increase permitted SE header size to 1 MiB (Ramesh Chhetri) [RHEL-185661]
  - net/sched: fix pedit partial COW leading to page cache corruption (CKI Backport Bot) [RHEL-177381] {CVE-2026-46331}
  - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-176465] {CVE-2026-31739}
  - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-176465]
  - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180700] {CVE-2026-31530}
  - s390/uv: Fix comment of uv_find_secret() function (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Fix memory leak with CCA cards used as accelerator (Mircea Dragan) [RHEL-136440]
  - crypto: s390/paes - Refuse clear key material by default (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Support new xflag PKEY_XFLAG_NOCLEARKEY (Mircea Dragan) [RHEL-136440]
  - crypto: skcipher - Add new helper function crypto_skcipher_tested (Mircea Dragan) [RHEL-136440]
  - s390/crypto: Select crypto engine in Kconfig when PAES is chosen (Mircea Dragan) [RHEL-136440]
  - s390/crypto: Extend protected key conversion retry loop (Mircea Dragan) [RHEL-136440]
  - s390/crypto: Rework protected key AES for true asynch support (Mircea Dragan) [RHEL-136440]
  - s390/cpacf: Rework cpacf_pcc() to return condition code (Mircea Dragan) [RHEL-136440]
  - s390/pkey/crypto: Introduce xflags param for pkey in-kernel API (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Provide and pass xflags within pkey and zcrypt layers (Mircea Dragan) [RHEL-136440]
  - s390/uv: Remove uv_get_secret_metadata function (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Use preallocated memory for retrieve of UV secret metadata (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Rework EP11 pkey handler to use stack for small memory allocs (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Rework CCA pkey handler to use stack for small memory allocs (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework ep11 misc functions to use cprb mempool (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Locate ep11_domain_query_info onto the stack instead of kmalloc (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Propagate xflags argument with cca_get_info() (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework cca misc functions kmallocs to use the cprb mempool (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework ep11 findcard() implementation and callers (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework cca findcard() implementation and callers (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Remove CCA and EP11 card and domain info caches (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Remove unused functions from cca misc (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Introduce pre-allocated device status array for ep11 misc (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Introduce pre-allocated device status array for cca misc (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework zcrypt function zcrypt_device_status_mask_ext (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Introduce cprb mempool for ep11 misc functions (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Introduce cprb mempool for cca misc functions (Mircea Dragan) [RHEL-136440]
  - s390/ap/zcrypt: New xflag parameter (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Avoid alloc and copy of ep11 targets if kernelspace cprb (Mircea Dragan) [RHEL-136440]
  - s390/ap: Introduce ap message buffer pool (Mircea Dragan) [RHEL-136440]
  - s390/ap/zcrypt: Rework AP message buffer allocation (Mircea Dragan) [RHEL-136440]
  - s390/ap: Move response_type struct into ap_msg struct (Mircea Dragan) [RHEL-136440]
  - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179311] {CVE-2026-46090}
  - KVM: s390: vsie: Allow non-zarch guests (Mircea Dragan) [RHEL-136477]
  - KVM: s390: Add KVM capability for ESA mode guests (Mircea Dragan) [RHEL-136477]
  - KVM: s390: Add capability that forwards operation exceptions (Mircea Dragan) [RHEL-136477]
  - KVM: s390: vsie: Accommodate ESA prefix pages (Mircea Dragan) [RHEL-136477]
  - KVM: s390: vsie: Disable some bits when in ESA mode (Mircea Dragan) [RHEL-136477]
  - KVM: s390: only deliver service interrupt with payload (Mircea Dragan) [RHEL-136477]
  - KVM: s390: vsie: retry SIE when unable to get vsie_page (Mircea Dragan) [RHEL-136477]
  - KVM: s390: vsie: Check alignment of BSCA header (Mircea Dragan) [RHEL-136477]
  - rhashtable: Fix rhashtable_try_insert test (Herton R. Krzesinski) [RHEL-115002]
  - rhashtable: Fix potential deadlock by moving schedule_work outside lock (Herton R. Krzesinski) [RHEL-115002]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-244.el10]
changelog:
  - x86/microcode: Add platform mask to Intel microcode "old" list (Luis Claudio R. Goncalves) [RHEL-184788]
  - x86/cpu: Add platform ID to CPU matching structure (Luis Claudio R. Goncalves) [RHEL-184788]
  - x86/cpu: Add platform ID to CPU info structure (Luis Claudio R. Goncalves) [RHEL-184788]
  - x86/microcode: Refactor platform ID enumeration into a helper (Luis Claudio R. Goncalves) [RHEL-184788]
  - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-186142]
  - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180777]
  - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180777]
  - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180777]
  - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180777] {CVE-2025-38614}
  - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180777]
  - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180777]
  - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180777]
  - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180777] {CVE-2026-46242}
  - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180777]
  - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180777]
  - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180777]
  - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180777]
  - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180777]
  - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180777]
  - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173837] {CVE-2026-43074}
  - epoll: annotate racy check (Ian Kent) [RHEL-180777]
  - ima: Add code comments to explain IMA iint cache atomic_flags (Bruno Meneguele) [RHEL-104343]
  - evm: fix security.evm for a file with IMA signature (Bruno Meneguele) [RHEL-104343]
  - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183963] {CVE-2026-46316}
  - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181905] {CVE-2026-46259}
  - mei: late_bind: fix struct intel_lb_component_ops kernel-doc (Steve Best) [RHEL-177639]
  - misc/mei: INTEL_MEI should depend on X86 or DRM_XE (Steve Best) [RHEL-177639]
  - mei: me: reduce the scope on unexpected reset (Steve Best) [RHEL-177639]
  - mei: trace: treat reg parameter as string (Steve Best) [RHEL-177639]
  - misc/mei: gsc_proxy: add dependency on Xe driver (Steve Best) [RHEL-177639]
  - misc/mei: Allow building standalone for compile testing (Steve Best) [RHEL-177639]
  - misc/mei: Decouple ME interfaces from GPU drivers (Steve Best) [RHEL-177639]
  - misc/mei: Allow building Intel ME interface on non-x86 (Steve Best) [RHEL-177639]
  - mei: Fix error handling in mei_register (Steve Best) [RHEL-177639]
  - mei: gsc: add dependency on Xe driver (Steve Best) [RHEL-177639]
  - mei: Remove redundant pm_runtime_mark_last_busy() calls (Steve Best) [RHEL-177639]
  - mei: fix error flow in probe (Steve Best) [RHEL-177639]
  - mei: txe: fix initialization order (Steve Best) [RHEL-177639]
  - mei: late_bind: Fix -Wincompatible-function-pointer-types-strict (Steve Best) [RHEL-177639]
  - redhat/configs: disable CONFIG_INTEL_MEI_LB (Steve Best) [RHEL-177639]
  - mei: late_bind: add late binding component driver [partial] (Steve Best) [RHEL-177639]
  - mei: bus: add mei_cldev_mtu interface (Steve Best) [RHEL-177639]
  - mei: gsc: demote unexpected reset print (Steve Best) [RHEL-177639]
  - mei: bus: demote error on connect (Steve Best) [RHEL-177639]
  - mei: retry connect if interrupted by link reset (Steve Best) [RHEL-177639]
  - mei: make a local copy of client uuid in connect (Steve Best) [RHEL-177639]
  - mei: me: trigger link reset if hw ready is unexpected (Steve Best) [RHEL-177639]
  - mei: gsc: fix remove operations order (Steve Best) [RHEL-177639]
  - mei: hook mei_device on class device (Steve Best) [RHEL-177639]
  - RDMA/irdma: Add support for GEN4 hardware (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Provide scratch buffers to firmware for internal use (Michal Schmidt) [RHEL-186151]
  - RDMA: Don't use %pK through printk (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Harden depth calculation functions (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Return EINVAL for invalid arp index error (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Fix deadlock during netdev reset with active connections (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Remove reset check from irdma_modify_qp_to_err() (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Clean up unnecessary dereference of event->cm_node (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce() (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Update ibqp state to error if QP is already in error state (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Initialize free_qp completion before using it (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Fix double free related to rereg_user_mr (Michal Schmidt) [RHEL-186151]
  - RDMA: Complete k[z|m|c]alloc-to-k[z|m]alloc_obj conversion [irdma] (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() (Michal Schmidt) [RHEL-186151]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [irdma] (Michal Schmidt) [RHEL-186151]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [irdma] (Michal Schmidt) [RHEL-186151]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [irdma] (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Use kvzalloc for paged memory DMA address array (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Use CQ ID for CEQE context (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Add enum defs for reserved CQs/QPs (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Remove fixed 1 ms delay during AH wait loop (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Remove redundant dma_wmb() before writel() (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Simplify bool conversion (Michal Schmidt) [RHEL-186151]
  - rtla: Fix parsing of multi-character short options (Tomas Glozar) [RHEL-151369]
  - tracing: Fix potential deadlock in cpu hotplug with osnoise (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Convert links to RST format (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Document SIGINT behavior (Tomas Glozar) [RHEL-151369]
  - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-151369 RHEL-151475]
  - rtla/utils: Fix loop condition in PID validation (Tomas Glozar) [RHEL-151369]
  - rtla/utils: Fix resource leak in set_comm_sched_attr() (Tomas Glozar) [RHEL-151369]
  - rtla/trace: Fix I/O handling in save_trace_to_file() (Tomas Glozar) [RHEL-151369]
  - rtla/trace: Fix write loop in trace_event_save_hist() (Tomas Glozar) [RHEL-151369]
  - rtla/timerlat: Simplify RTLA_NO_BPF environment variable check (Tomas Glozar) [RHEL-151369]
  - rtla: Use str_has_prefix() for option prefix check (Tomas Glozar) [RHEL-151369]
  - rtla: Enforce exact match for time unit suffixes (Tomas Glozar) [RHEL-151369]
  - rtla: Use str_has_prefix() for prefix checks (Tomas Glozar) [RHEL-151369]
  - rtla: Add str_has_prefix() helper function (Tomas Glozar) [RHEL-151369]
  - rtla: Handle pthread_create() failure properly (Tomas Glozar) [RHEL-151369]
  - rtla/timerlat: Add bounds check for softirq vector (Tomas Glozar) [RHEL-151369]
  - rtla: Simplify code by caching string lengths (Tomas Glozar) [RHEL-151369]
  - rtla: Replace magic number with MAX_PATH (Tomas Glozar) [RHEL-151369]
  - rtla: Introduce common_threshold_handler() helper (Tomas Glozar) [RHEL-151369]
  - rtla/actions: Simplify argument parsing (Tomas Glozar) [RHEL-151369]
  - rtla: Use strdup() to simplify code (Tomas Glozar) [RHEL-151369]
  - rtla: Exit on memory allocation failures during initialization (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Remove unneeded nr_cpus from for_each_monitored_cpu (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Remove unneeded nr_cpus members (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Remove unneeded nr_cpus arguments (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate nr_cpus usage across all tools (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Document --stack-format option (Tomas Glozar) [RHEL-136812 RHEL-151369]
  - rtla/timerlat: Add --stack-format option (Tomas Glozar) [RHEL-136812 RHEL-151369]
  - tools/rtla: Add unit tests for utils.c (Tomas Glozar) [RHEL-151369]
  - tools/build: Add feature test for libcheck (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Generate optstring from long options (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Add hwnoise to main page (Tomas Glozar) [RHEL-151369]
  - rtla: Fix build without libbpf header (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Include defaults for tracer options (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Mention default cgroup state (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Mention default priority (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Correct tracer name for common options (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Fix typo in common_timerlat_options.txt (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Fix typo in rtla-timerlat-top.rst (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Fix typo in common_timerlat_options.txt (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Fix typo in common_options.txt (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: rename common_xxx.rst files to common_xxx.txt (Tomas Glozar) [RHEL-151369]
  - rtla: Fix parse_cpu_set() bug introduced by strtoi() (Tomas Glozar) [RHEL-151369]
  - rtla: Fix parse_cpu_set() return value documentation (Tomas Glozar) [RHEL-151369]
  - rtla: Ensure null termination after read operations in utils.c (Tomas Glozar) [RHEL-151369]
  - rtla: Make stop_tracing variable volatile (Tomas Glozar) [RHEL-151369]
  - rtla: Add generated output files to gitignore (Tomas Glozar) [RHEL-151369]
  - rtla: Fix NULL pointer dereference in actions_parse (Tomas Glozar) [RHEL-151369]
  - rtla: Remove unused headers (Tomas Glozar) [RHEL-151369]
  - rtla: Remove redundant memset after calloc (Tomas Glozar) [RHEL-151369]
  - rtla: Use standard exit codes for result enum (Tomas Glozar) [RHEL-151369]
  - rtla: Replace atoi() with a robust strtoi() (Tomas Glozar) [RHEL-151369]
  - rtla: Introduce for_each_action() helper (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Deduplicate cgroup path opening code (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -H/--house-keeping option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -P/--priority option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -e/--event option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -d/--duration option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -D/--debug option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -C/--cgroup option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -c/--cpus option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Add common_parse_options() (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Add common_usage() (Tomas Glozar) [RHEL-151369]
  - rtla: Set stop threshold after all instances are enabled (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Remove unused function declarations (Tomas Glozar) [RHEL-151369]
  - tracing: Fix multiple typos in trace_osnoise.c (Tomas Glozar) [RHEL-151369]
  - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-147742 RHEL-151369]
  - rtla/tests: Don't rely on matching ^1ALL (Tomas Glozar) [RHEL-151369]
  - rtla: Fix -a overriding -t argument (Tomas Glozar) [RHEL-151369]
  - rtla: Fix -C/--cgroup interface (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Replace osnoise_hist_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Replace osnoise_top_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Replace timerlat_hist_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Replace timerlat_top_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Add fatal() and replace error handling pattern (Tomas Glozar) [RHEL-151369]
  - rtla/tests: Fix osnoise test calling timerlat (Tomas Glozar) [RHEL-151369]
  - rtla/tests: Extend action tests to 5s (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Fix --on-threshold always triggering (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Fix unassigned nr_cpus (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Remove unused optional option_index (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Add for_each_monitored_cpu() helper (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Add remaining support for osnoise actions (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Add test engine support for unexpected output (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Fix -A option name in test comment (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Consolidate code between osnoise/timerlat and hist/top (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Create common_apply_config() (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Move top/hist params into common struct (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Consolidate common parameters into shared structure (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tracing: Replace opencoded cpumask_next_wrap() in move_to_next_cpu() (Tomas Glozar) [RHEL-151369]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-245.el10]
changelog:
  - riscv: entry: Split ret_from_fork() into user and kernel (Jennifer Berringer) [RHEL-188766]
  - riscv: entry: Convert ret_from_fork() to C (Jennifer Berringer) [RHEL-188766]
  - ACPICA: actbl2: Add definitions for RIMT (Jennifer Berringer) [RHEL-187991]
  - soc/tegra: Use ARM SMCCC to get chip ID, revision, and platform info (Steve Dunnagan) [RHEL-143339]
  - dma-debug: suppress cacheline overlap warning when arch has no DMA alignment requirement (Jerry Snitselaar) [RHEL-182720]
  - platform/x86: intel-hid: Check ACPI_HANDLE() against NULL (Steve Best) [RHEL-182291]
  - redhat/configs: riscv: Enable ARCH_SPACEMIT (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Clear interrupt move state during CPU offlining (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-aplic: Prevent crash when MSI domain is missing (Jennifer Berringer) [RHEL-174301] {CVE-2024-56682}
  - irqchip/riscv-imsic: Adjust the number of available guest irq files (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Add a CPU pm notifier to restore the IMSIC on exit (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Inline imsic_vector_from_local_id() (Jennifer Berringer) [RHEL-174301]
  - irqchip/irq-riscv-imsic-early: Export imsic_acpi_get_fwnode() (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Don't dereference before NULL pointer check (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Add kernel parameter to disable IPIs (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Convert to msi_create_parent_irq_domain() helper (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Start local sync timer on correct CPU (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Avoid interrupt translation in interrupt handler (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Implement irq_force_complete_move() for IMSIC (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Separate next and previous pointers in IMSIC vector (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv: Ensure ordering of memory writes and IPI writes (Jennifer Berringer) [RHEL-174301]
  - serial: 8250_of: manage bus clock in suspend/resume (Jennifer Berringer) [RHEL-174301]
  - serial: 8250_of: add support for an optional bus clock (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: k3: mark top_dclk as CLK_IS_CRITICAL (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_mix: fix inverted condition in ccu_mix_trigger_fc() (Jennifer Berringer) [RHEL-174301]
  - reset: spacemit: k3: Decouple composite reset lines (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: return -ENOTSUPP for unsupported pin configurations (Jennifer Berringer) [RHEL-174301]
  - reset: spacemit: Add SpacemiT K3 reset driver (Jennifer Berringer) [RHEL-174301]
  - reset: spacemit: Extract common K1 reset code (Jennifer Berringer) [RHEL-174301]
  - reset: Create subdirectory for SpacemiT drivers (Jennifer Berringer) [RHEL-174301]
  - reset: spacemit: fix auxiliary device id (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: soc: spacemit: Add K3 reset support and IDs (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: support I/O power domain configuration (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: k3: add the clock tree (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: k3: extract common header (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_pll: add plla type clock (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_mix: add inverted enable gate clock (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: soc: spacemit: k3: add clock support (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: add platform SoC prefix to reset name (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: extract common ccu functions (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: prepare common ccu header (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: k3: adjust drive strength and schmitter trigger (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: k3: add initial pin support (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: Hide common clock driver from user controller (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: Respect Kconfig setting when building modules (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: Set clk_hw_onecell_data::num before using flex array (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: fix comment typo (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: fix i2s clock (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: introduce pre-div for ddn clock (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: clock: spacemit: introduce i2s pre-clock to fix i2s clock (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: fix typo in PRI_TDI pin name (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_pll: convert from round_rate() to determine_rate() (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_mix: convert from round_rate() to determine_rate() (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_ddn: convert from round_rate() to determine_rate() (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: fix sspax_clk (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: clock: spacemit: CLK_SSPA_I2S_BCLK for SSPA (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: remove extra line in debug output (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_pll: fix error return value in recalc_rate callback (Jennifer Berringer) [RHEL-174301]
  - reset: spacemit: add support for SpacemiT CCU resets (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: mark K1 pll1_d8 as critical (Jennifer Berringer) [RHEL-174301] {CVE-2025-38633}
  - clk: spacemit: define three reset-only CCUs (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: set up reset auxiliary devices (Jennifer Berringer) [RHEL-174301]
  - soc: spacemit: create a header for clock/reset registers (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: soc: spacemit: define spacemit,k1-ccu resets (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: add clock support for K1 SoC (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: k1: Add TWSI8 bus and function clocks (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: Add clock support for SpacemiT K1 SoC (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: clock: spacemit: Add spacemit,k1-pll (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: soc: spacemit: Add spacemit,k1-syscon (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: PINCTRL_SPACEMIT_K1 should not default to y unconditionally (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: destroy mutex at driver detach (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: enable config option (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: fix double free of map (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: add support for SpacemiT K1 SoC (Jennifer Berringer) [RHEL-174301]
  - reset: amlogic: move drivers to a dedicated directory (Jennifer Berringer) [RHEL-174301]
  - reset: amlogic: convert driver to regmap (Jennifer Berringer) [RHEL-174301]
  - dts: riscv: spacemit: k3: add P1 PMIC regulator tree (Jennifer Berringer) [RHEL-174301]
  - dts: riscv: spacemit: k3: Add i2c nodes (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable PCIe ports on Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable USB 3 ports on Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable QSPI and add SPI NOR on Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add i2c aliases on Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add 24c04 eeprom on Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add LEDs for Milk-V Jupiter board (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add ethernet device for K3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: drop incorrect pinctrl for combo PHY (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: reorder phy nodes for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: k3: add full resource to UART (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: k3: add GPIO support (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: k3: add pinctrl support (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: k3: add clock tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add 'linux,pci-domain' to PCIe nodes for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: adapt regulator node name to preferred form (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Update PMIC supply properties for BPI-F3 and Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: pcie: fix missing power regulator (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Disable ETH PHY sleep mode for OrangePi (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: pinctrl: update register and IO power (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add K3 Pico-ITX board support (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add initial support for K3 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: k1: Add "b" ISA extension (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Enable USB3.0 on BananaPi-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add DWC3 USB 3.0 controller node for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add USB2 PHY node for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: sdhci: add reset support (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add reset property (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: PCIe and PHY-related updates (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add a PCIe regulator (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Define the P1 PMIC regulators for Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Define fixed regulators for Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Enable i2c8 adapter for Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: define all missing I2C controller nodes (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: reorder i2c2 node (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add OrangePi R2S board device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable K1 SoC QSPI on BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add MusePi Pro board device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add Ethernet and PDMA to OrangePi RV2 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add i2c aliases on BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add 24c02 eeprom on BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable the i2c2 adapter on BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: define regulator constraints (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: define fixed regulators (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable the i2c8 adapter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add UART pinctrl combinations (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add Ethernet support for Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add Ethernet support for BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add Ethernet support for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: uart: remove sec_uart1 device node (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Enable PDMA on Banana Pi F3 and Milkv Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add PDMA node for K1 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add UART resets for Soc K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add OrangePi RV2 board device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Move eMMC under storage-bus for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Move UARTs under dma-bus for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add DMA translation buses for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add pwm14_1 pinctrl setting (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add PWM support for K1 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add reset support for the K1 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable eMMC for K1 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add gpio LED for system heartbeat (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add gpio support for K1 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Acquire clocks for UART (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Acquire clocks for pinctrl (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add clock tree for SpacemiT K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add Milk-V Jupiter board device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: move aliases to board dts (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add pinctrl property to uart0 in BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add Banana Pi BPI-F3 board device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: add initial SpacemiT K1 SoC device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: add SpacemiT SoC family Kconfig support (Jennifer Berringer) [RHEL-174301]
  - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179911] {CVE-2026-46209}
  - platform/x86: intel-hid: disable wakeup_mode during hibernation (Steve Best) [RHEL-176441]
  - platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 (Steve Best) [RHEL-176441]
  - platform/x86: intel-hid: Add Dell 16 Plus 2-in-1 to dmi_vgbs_allow_list (Steve Best) [RHEL-176441]
  - platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list (Steve Best) [RHEL-176441]
  - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks (Steve Best) [RHEL-176441]
  - platform/x86: int0002: Remove IRQF_ONESHOT from request_irq() (Steve Best) [RHEL-176441]
  - platform/x86/intel/tpmi/plr: Make the file domain<n>/status writeable (Steve Best) [RHEL-176441]
  - platform/x86: intel_telemetry: Fix PSS event register mask (Steve Best) [RHEL-176441]
  - platform/x86: intel_telemetry: Fix swapped arrays in PSS output (Steve Best) [RHEL-176441]
  - platform/x86: intel: punit_ipc: fix memory corruption (Steve Best) [RHEL-176441]
  - New configs in drivers/platform (Steve Best) [RHEL-176441]
  - platform/x86/intel: Introduce Intel Elkhart Lake PSE I/O (Steve Best) [RHEL-176441]
  - platform/x86/amd: hfi: Remove redundant assignment to .owner (Steve Best) [RHEL-176387]
  - platform/x86/amd: hfi: Remove unused cpumask from cpuinfo struct (Steve Best) [RHEL-176387]
  - powercap: intel_rapl_tpmi: Remove FW_BUG from invalid version check (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Expose all package CPUs in PMU cpumask (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Remove incorrect CPU check in PMU context (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Add PL4 support for Ice Lake (Steve Best) [RHEL-130025]
  - powercap: Replace sprintf() with sysfs_emit() in sysfs show functions (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Fix possible recursive lock warning (Steve Best) [RHEL-130025]
  - powercap: fix sscanf() error return value handling (Steve Best) [RHEL-130025]
  - powercap: fix race condition in register_control_type() (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Enable MSR-based RAPL PMU support (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Prepare read_raw() interface for atomic-context callers (Steve Best) [RHEL-130025]
  - x86/msr: Rename 'rdmsrl_safe_on_cpu()' to 'rdmsrq_safe_on_cpu()' [partial] (Steve Best) [RHEL-130025]
  - x86/msr: Rename 'wrmsrl_safe()' to 'wrmsrq_safe()' [partial] (Steve Best) [RHEL-130025]
  - x86/msr: Rename 'rdmsrl_safe()' to 'rdmsrq_safe()' [partial] (Steve Best) [RHEL-130025]
  - powercap: idle_inject: use us_to_ktime() where appropriate (Steve Best) [RHEL-130025]
  - irqchip/sifive-plic: Fix frozen interrupt due to affinity setting (Jennifer Berringer) [RHEL-174305] {CVE-2026-23287}
  - irqchip/sifive-plic: Handle number of hardware interrupts correctly (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Fix call to __plic_toggle() in M-Mode code path (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Add support for UltraRISC DP1000 PLIC (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Cache the interrupt enable state (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Avoid interrupt ID 0 handling during suspend/resume (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Respect mask state when setting affinity (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Use for_each_present_cpu() instead of for_each_cpu() (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Make use of __assign_bit() (Jennifer Berringer) [RHEL-174305]
  - cache: sifive_ccache: Optimize cache flushes (Jennifer Berringer) [RHEL-174305]
  - PCI: starfive: Use regulator APIs to control the 3v3 power supply of PCIe slots (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Append JH-7110 SoC compatible to VisionFive 2 Lite eMMC board (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Append JH-7110 SoC compatible to VisionFive 2 Lite board (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: add Orange Pi RV (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Add VisionFive 2 Lite eMMC board device tree (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Add VisionFive 2 Lite board device tree (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Add common board dtsi for VisionFive 2 Lite variants (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: Move out some nodes to the board dts (Jennifer Berringer) [RHEL-174305]
  - dts: starfive: jh7110-common: split out mmc0 reset pins from common into boards (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: add Milk-V Mars CM Lite system-on-module (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: add Milk-V Mars CM system-on-module (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: add common board dtsi for Milk-V Mars CM variants (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: drop mmc post-power-on-delay-ms (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: drop no-mmc property from mmc1 (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110: bootph-pre-ram hinting needed by boot loader (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110: add DMC memory controller (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: drop no-sdio property from mmc1 (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: add status power led node (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-milkv-mars sort properties (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: bootph-pre-ram hinting needed by boot loader (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: add eeprom node to i2c5 (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: qspi flash setting read-delay 2 cycles max 100MHz (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: add CPU BUS PERH QSPI clocks to syscrg (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: use macros for MMC0 pins (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: fml13v01: enable USB 3.0 port (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-pine64-star64: enable USB 3.0 port (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110: pciephy0 USB 3.0 configuration registers (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: fml13v01: enable pcie1 (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: remove non-existent dac from jh7110 (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Unify regulator naming scheme (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Fix a typo in StarFive JH7110 pin function definitions (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-milkv-mars: enable usb0 host function (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-pine64-star64: enable usb0 host function (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: add DeepComputing FML13V01 board device tree (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: move usb0 config to board dts (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: revised device node (Jennifer Berringer) [RHEL-174305]
  - redhat/configs: enable CONFIG_GPIO_NOVALAKE for x86 on RHEL (Steve Best) [RHEL-117349]
  - gpio: Add Intel Nova Lake ACPI GPIO events driver (Steve Best) [RHEL-117349]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-246.el10]
changelog:
  - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189498] {CVE-2026-43112}
  - objtool/x86: Reorder ORC register numbering (Yannick Cote) [RHEL-152190]
  - objtool: Support Clang RAX DRAP sequence (Yannick Cote) [RHEL-152190]
  - objtool/klp: Correlate locals to globals (Yannick Cote) [RHEL-152190]
  - objtool/klp: Match symbols based on demangled_name for global variables (Yannick Cote) [RHEL-152190]
  - objtool/klp: Remove .llvm suffix in demangle_name() (Yannick Cote) [RHEL-152190]
  - objtool/klp: Also demangle global objects (Yannick Cote) [RHEL-152190]
  - objtool/klp: Use sym->demangled_name for symbol_name hash (Yannick Cote) [RHEL-152190]
  - objtool/klp: Remove trailing '_' in demangle_name() (Yannick Cote) [RHEL-152190]
  - objtool/klp: Remove redundant strcmp() in correlate_symbols() (Yannick Cote) [RHEL-152190]
  - objtool: Use section/symbol type helpers (Yannick Cote) [RHEL-152190]
  - redhat/configs: disable CONFIG_INET_PSP on RHEL for now (Ivan Vecera) [RHEL-185448]
  - psp: strip variable-length PSP header in psp_dev_rcv() (Ivan Vecera) [RHEL-185448]
  - net: psp: require admin permission for dev-set and key-rotate (Ivan Vecera) [RHEL-185448]
  - net: psp: check for device unregister when creating assoc (Ivan Vecera) [RHEL-185448]
  - psp: add missing device stats to get-stats reply attributes (Ivan Vecera) [RHEL-185448]
  - psp: use sk->sk_hash in psp_write_headers() (Ivan Vecera) [RHEL-185448]
  - net: psp: select CONFIG_SKB_EXTENSIONS (Ivan Vecera) [RHEL-185448]
  - psp: Expand PSP acronym in INET_PSP help description (Ivan Vecera) [RHEL-185448]
  - psp: clarify checksum behavior of psp_dev_rcv() (Ivan Vecera) [RHEL-185448]
  - psp: don't use flags for checking sk_state (Ivan Vecera) [RHEL-185448]
  - psp: fix preemptive inet_twsk() cast in psp_sk_get_assoc_rcu() (Ivan Vecera) [RHEL-185448]
  - psp: make struct sock argument const in psp_sk_get_assoc_rcu() (Ivan Vecera) [RHEL-185448]
  - psp: add stats from psp spec to driver facing api (Ivan Vecera) [RHEL-185448]
  - psp: report basic stats from the core (Ivan Vecera) [RHEL-185448]
  - net: psp: don't assume reply skbs will have a socket (Ivan Vecera) [RHEL-185448]
  - psp: do not use sk_dst_get() in psp_dev_get_for_sock() (Ivan Vecera) [RHEL-185448]
  - psp: rename our psp_dev_destroy() (Ivan Vecera) [RHEL-185448]
  - psp: provide decapsulation and receive helper for drivers (Ivan Vecera) [RHEL-185448]
  - psp: provide encapsulation helper for drivers (Ivan Vecera) [RHEL-185448]
  - psp: track generations of device key (Ivan Vecera) [RHEL-185448]
  - net: psp: update the TCP MSS to reflect PSP packet overhead (Ivan Vecera) [RHEL-185448]
  - net: psp: add socket security association code (Ivan Vecera) [RHEL-185448]
  - net: tcp: allow tcp_timewait_sock to validate skbs before handing to device (Ivan Vecera) [RHEL-185448]
  - net: move sk_validate_xmit_skb() to net/core/dev.c (Ivan Vecera) [RHEL-185448]
  - psp: add op for rotation of device key (Ivan Vecera) [RHEL-185448]
  - tcp: add datapath logic for PSP with inline key exchange (Ivan Vecera) [RHEL-185448]
  - net: modify core data structures for PSP datapath support (Ivan Vecera) [RHEL-185448]
  - psp: base PSP device support (Ivan Vecera) [RHEL-185448]
  - psp: add documentation (Ivan Vecera) [RHEL-185448]
  - scsi: target: iscsi: Validate CHAP_R length before base64 decode (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: tcm_loop: Fix NULL ptr dereference (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: iscsi: reject invalid size Extended CDB AHS (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (Maurizio Lombardi) [RHEL-163760] {CVE-2026-46149}
  - scsi: target: tcm_loop: Drain commands in target_reset handler (Maurizio Lombardi) [RHEL-163760] {CVE-2026-43054}
  - scsi: target: Fix recursive locking in __configfs_open_file() (Maurizio Lombardi) [RHEL-163760] {CVE-2026-23292}
  - scsi: target: Reset t_task_cdb pointer in error case (Maurizio Lombardi) [RHEL-163760] {CVE-2025-68782}
  - scsi: target: Do not write NUL characters into ASCII configfs output (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() (Maurizio Lombardi) [RHEL-163760] {CVE-2025-68229}
  - scsi: target: target_core_configfs: Add length check to avoid buffer overflow (Maurizio Lombardi) [RHEL-163760] {CVE-2025-39998}
  - scsi: target: iscsi: fix typos and formatting in lio_target messages (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: iscsi: Use int type to store negative value (Maurizio Lombardi) [RHEL-163760]
  - arm64/simd: Add scoped guard API for kernel mode SIMD (CKI Backport Bot) [RHEL-180976]
  - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171143] {CVE-2026-31684}
  - exec: fix up /proc/pid/comm in the execveat(AT_EMPTY_PATH) case (Oleg Nesterov) [RHEL-95059]


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - with python3-Cython -> python3dist(cython) < 3~~


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - revert python3-Cython -> python3dist(cython) < 3~~


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-2
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Petr Písař <ppisar@redhat.com> - 0.7.33-3
changelog:
  - Fix a buffer overflow when copying SHA-384/512 checksum from a Debian
    repository (CVE-2026-9150) (RHEL-178263)


author: Petr Písař <ppisar@redhat.com> - 0.7.33-4
changelog:
  - Cope with integer overflow in data size arithmetics in repo_add_solv()
    (CVE-2026-9149) (RHEL-178267)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-8
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148253)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-9
changelog:
  - backport documentation change for CVE-2023-52355 (RHEL-179103)
  - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159311)


author: Matej Mužila <mmuzila@redhat.com> - 4.5.0-3
changelog:
  - New upstream release 4.5.0 (#2153870)
  - Fix CVE-2022-3570, CVE-2022-2867, CVE-2022-2868, CVE-2022-2869, CVE-2022-2519,
    CVE-2022-2953, CVE-2022-3597, CVE-2022-3598, CVE-2022-3599, CVE-2022-3626,
    CVE-2022-3627, CVE-2022-3970 (#2142735, #2118854, #2118867, #2118875,


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-2
changelog:
  - tests: add test for a single per-device smmuv3 (RHEL-74200)
  - qemu: Use pci_bus to identify multi-smmuv3 model (RHEL-74200)
  - qemu: tpm: Account for possible migration without actually sharing storage (RHEL-132534)
  - tests: Test virFileIsSharedFSOverride (RHEL-102925)
  - util: Fix race condition in virFileIsSharedFSType (RHEL-102925)
  - util: Fix race condition in virFileIsSharedFSOverride (RHEL-102925)
  - util: Rework virFileIsSharedFSOverride using virFileCheckParents (RHEL-102925)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-3
changelog:
  - util: json: Increase JSON nesting limit when parsing to 300 (RHEL-135181)
  - virjsontest: Add test for nesting depth (RHEL-135181)
  - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-114412)
  - esx: Allow connecting to IPv6 server (RHEL-138300)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-4
changelog:
  - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
  - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
  - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
  - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
  - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
  - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
  - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
  - esx: Debug URL just before opening with curl (RHEL-138300)
  - esx: Abstract all URL-creation code into one function (RHEL-138300)
  - esx: Switch to creating URLs using virURIFormat (RHEL-138300)
  - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
  - esx: URI encode inventory objects twice (RHEL-140196)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-5
changelog:
  - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
  - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
  - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-6
changelog:
  - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
  - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
  - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
  - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
  - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-8
changelog:
  - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
  - qemu: Ignore cmp_legacy CPU flag (RHEL-148494)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-9
changelog:
  - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
  - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
  - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
  - qemu: Implement support for persistent reservation migration control (RHEL-135115)
  - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
  - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
  - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
  - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
  - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
  - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335)
  - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335)
  - Introduce support for disk operation latency histogram collection (RHEL-131335)
  - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-10
changelog:
  - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
  - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
  - util: Move openning IOMMU device to viriommufd (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
  - util: Move openning VFIO device to virpci (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
  - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
  - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
  - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
  - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
  - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
  - qemuxmlconftest: Refactor host device preparation (RHEL-150351)
  - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
  - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
  - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
  - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
  - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
  - qemu: Save IOMMUFD state into status XML (RHEL-150351)
  - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
  - qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
  - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
  - conf: Introduce iommufd enum for domaincaps (RHEL-148135)
  - qemu: Fill iommufd domain capability (RHEL-148135)
  - tests: properly mock VFIO and IOMMU checks (RHEL-148135)
  - iommufd: fix FD leak in case of error (RHEL-150351)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-11
changelog:
  - qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
  - qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
  - qemu_firmware: Move format=raw compat exception (RHEL-82645)
  - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
  - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
  - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
  - tests: Add firmware-auto-bios-rw (RHEL-82645)
  - tests: Add firmware-manual-bios-rw (RHEL-82645)
  - domain_validate: Reject read/write ROMs (RHEL-82645)
  - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
  - domain_validate: Reject ROMs with format other than raw (RHEL-82645)
  - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
  - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
  - schemas: Allow templateFormat without template path (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
  - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
  - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
  - qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
  - qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
  - qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
  - qemu_firmware: Prefer template format to loader format (RHEL-82645)
  - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
  - qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
  - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
  - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
  - tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
  - tests: Add firmware-manual-efi-tdx (RHEL-82645)
  - qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
  - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
  - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
  - schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Document firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
  - docs: Improvement related to firmware selection (RHEL-82645)
  - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
  - conf: Move type=rom default for loader to drivers (RHEL-82645)
  - tests: Rename custom JSON firmware descriptors (RHEL-82645)
  - schema: Introduce osnvram define (RHEL-82645)
  - conf: Parse and format varstore element (RHEL-82645)
  - conf: Update validation to consider varstore element (RHEL-82645)
  - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
  - qemu: Validate presence of uefi-vars device (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
  - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
  - qemu_firmware: Split sanity check (RHEL-82645)
  - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
  - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
  - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
  - conf: Include varstore element in domcaps (RHEL-82645)
  - qemu: Fill in varstore element in domcaps (RHEL-82645)
  - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
  - qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
  - qemu_firmware: Fill in varstore information (RHEL-82645)
  - qemu: Introduce varstoreDir (RHEL-82645)
  - qemu_firmware: Generate varstore path when necessary (RHEL-82645)
  - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
  - qemu: Create and delete varstore file (RHEL-82645)
  - security: Mark ROMs as read only when using AppArmor (RHEL-82645)
  - security: Handle varstore file (RHEL-82645)
  - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
  - qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
  - include: Mention varstore where applicable (RHEL-82645)
  - virsh: Update for varstore handling (RHEL-82645)
  - domain_conf: initialize network hostdev private data (RHEL-151916)
  - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-12
changelog:
  - test: Default to ROM type for loader (RHEL-82645)
  - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-4
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-104382)
  - qemu: sanitize blank lines in config file (RHEL-104382)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-104382)


author: Jiri Denemark <jdenemar@redhat.com> - 11.7.0-1
changelog:
  - Rebased to libvirt-11.7.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-72006, RHEL-110191


author: Jiri Denemark <jdenemar@redhat.com> - 11.8.0-1
changelog:
  - Rebased to libvirt-11.8.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-7038, RHEL-50320, RHEL-62032, RHEL-79806, RHEL-113574
      RHEL-116690


author: Jiri Denemark <jdenemar@redhat.com> - 11.9.0-1
changelog:
  - Rebased to libvirt-11.9.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-87522, RHEL-95818, RHEL-122932


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-1
changelog:
  - Rebased to libvirt-11.10.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-74200, RHEL-80679, RHEL-104216, RHEL-104427, RHEL-113843
      RHEL-118671, RHEL-122751, RHEL-126854, RHEL-126945, RHEL-128105
  - spec: Fix RPM build when %{fedora} is undefined (RHEL-104238)


author: Jiri Denemark <jdenemar@redhat.com> - 12.2.0-1
changelog:
  - Rebased to libvirt-12.2.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-76301, RHEL-114415, RHEL-118303, RHEL-145306, RHEL-147660
      RHEL-147661, RHEL-148219, RHEL-150883, RHEL-153832, RHEL-154252
      RHEL-154292, RHEL-154549, RHEL-156689, RHEL-156800, RHEL-156804
      RHEL-159134


author: Jiri Denemark <jdenemar@redhat.com> - 12.4.0-1
changelog:
  - Rebased to libvirt-12.4.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-76301, RHEL-114415, RHEL-118303, RHEL-145306, RHEL-145937
      RHEL-147660, RHEL-147661, RHEL-148219, RHEL-150883, RHEL-153832
      RHEL-154252, RHEL-154292, RHEL-154549, RHEL-155804, RHEL-155809
      RHEL-156689, RHEL-156800, RHEL-156804, RHEL-159134, RHEL-164023
      RHEL-169588, RHEL-170773, RHEL-170993, RHEL-174300, RHEL-176438


author: Jiri Denemark <jdenemar@redhat.com> - 12.5.0-1
changelog:
  - Rebased to libvirt-12.5.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-180448, RHEL-181350, RHEL-185108, RHEL-186015, RHEL-187057


author: Michael Jeanson <mjeanson@efficios.com> - 2.13.5-1
changelog:
  - New upstream release
  - Add builddep on python3-setuptools in prevision of python 3.12 removing distutils


author: Koichiro Iwao <meta@almalinux.org> - 24.2.8-2.alma.1
changelog:
  - AlmaLinux changes: Enable vc4 and v3d for Raspberry Pi graphics in
    AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32)


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.82.2-1
changelog:
  - Update to 2.82.2
  - RHEL-35772 - CVE-2024-34397 mingw-glib2: glib2: Signal subscription vulnerabilities
  - RHEL-67083 - CVE-2024-52533 mingw-glib2: buffer overflow in set_connect_msg()


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.87.0-1
changelog:
  - Update to 2.87.0
  - RHEL-130993 - CVE-2025-13601 mingw-glib2: Integer overflow in in g_escape_uri_string()


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.87.5-1
changelog:
  - RHEL-159874 - Rebase mingw-glib2 to 2.87.5
  - RHEL-159187 - CVE-2025-14087 mingw-glib2: GLib: Buffer underflow in GVariant parser leads to heap corruption
  - Drop 0001-Use-CreateFile-on-Win32-to-make-sure-g_unlink-always.patch see https://bugzilla.redhat.com/show_bug.cgi?id=2431179


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Dominik Mierzejewski <rpm@greysector.net> - 2.16.01-1
changelog:
  - update to 2.16.01 (#2155636)
  - drop obsolete patch
  - drop rdoff subpackage (discontinued upstream)


author: Richard W.M. Jones <rjones@redhat.com> - 1.40.0-2
changelog:
  - Rebase to nbdkit 1.40.0
    related: RHEL-49594
  - Send the last error to the NBD client
    resolves: RHEL-50666


author: Richard W.M. Jones <rjones@redhat.com> - 1.44.1-2
changelog:
  - Rebase to nbdkit 1.44.1
    resolves: RHEL-78830, RHEL-101180
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-count-filter & nbdkit-time-limit-filter.
  - Remove nbdkit-cacheextents-filter.
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819
  - Add support for VDDK 9.0.0.0
    resolves: RHEL-99467
  - server: Fix .zero fallback path
    resolves: RHEL-101636


author: Richard W.M. Jones <rjones@redhat.com> - 1.45.17-1
changelog:
  - Rebase to nbdkit 1.45.17
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-1
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-2
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-3
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff and nbdkit_name from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.2-1
changelog:
  - Rebase to nbdkit 1.46.2
  - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp
    from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Richard W.M. Jones <rjones@redhat.com> - 5.2.0-5
changelog:
  - Fix remote code execution via buffer over-read in Marshal deserialization
    CVE-2026-28364
    Resolves: RHEL-152488


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-1
changelog:
  - Rebase to libguestfs 1.52.2 (along the stable branch)
  - Remove dependency on syslinux packages
    resolves: RHEL-50565


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-4
changelog:
  - Synchronize patches with RHEL 9.5
    resolves: RHEL-56325
  - appliance/init: Don't set impossible "noop" disk scheduler
    resolves: RHEL-56157


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-5
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56810
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62989
  - Replace Jansson with json-c
    resolves: RHEL-65293
  - Remove squashfs-tools on RHEL
    resolves: RHEL-68937
  - Fix perl-Sys-Guestfs debuginfo
    resolves: RHEL-68973


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.56.1-3
changelog:
  - Rebase to libguestfs 1.56.1
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170
  - Add btrfs-scrub-full API
    resolves: RHEL-91936
  - Add e2fsck forceno flag
    resolves: RHEL-92599
  - Capture and raise qemu-img stderr
    resolves: RHEL-92239
  - Ignore btrfs snapshots of roots
    resolves: RHEL-93109
  - Add /etc/fstab, lsblk and blkid to verbose output
    resolves: RHEL-106490
  - Fix conversion of SLES15 with encrypted btrfs filesystem
    resolves: RHEL-93584
  - Add guestfs_setfiles API
    resolves: RHEL-108832
  - Ignore blank disks in Windows drive mapping
    resolves: RHEL-109258


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-2
changelog:
  - Rebase to libguestfs 1.58.1
    resolves: RHEL-111240
  - Synchronize spec file with Fedora
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833
  - Use setfiles -A option if available to reduce memory usage
    resolves: RHEL-114292
  - Add -cpu max when testing for KVM via QMP
    resolves: RHEL-121076
  - Require passt
    resolves: RHEL-122315
  - Add AV and GPOs to inspection info
    resolves: RHEL-125846
  - Add new xfs_info2 API
    resolves: RHEL-143673


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.7-1
changelog:
  - Rebase to libguestfs 1.59.7
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.8-1
changelog:
  - Rebase to libguestfs 1.59.8
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.9-1
changelog:
  - Rebase to libguestfs 1.59.9
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895
  - Ignore RHEL 7 XFS AGFL inconsistency
    resolves: RHEL-178287
  - Allow shell commands with immutable resolv.conf
    resolves: RHEL-178556


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49802
  - Print full NBD error from server
    resolves: RHEL-50667


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-1
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-2
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104019


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.0-1
changelog:
  - Rebase to libnbd 1.24.0
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.1-1
changelog:
  - Rebase to libnbd 1.24.1
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-74
changelog:
  - Use %{buildroot} instead of $RPM_BUILD_ROOT as it is more recent
  - Use directory macros and push/popd


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-75
changelog:
  - Fix installation on OSTree by removing %ghost (rhbz#2193429)
  - Remove %ldconfig_postun as it has no effect in Fedora


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-77
changelog:
  - Sync the RHEL version and Fedora version of the specfile
  - Update sources file and config.{sub|guess}
  - Skip verification for .soc file as it will change after install


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.7.2-10
changelog:
  - Support added for post-quantum cryptography
    Resolves: RHEL-93091
  - Remove deprecated path from systemd service file
    Resolves: RHEL-101169


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Align start of PCP services with systemd presets (RHEL-22723)
  - Improved pcp-xsos command line error diagnostics (RHEL-56836)
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57795)
  - Guard against symlink attacks in pmpost program (RHEL-57797)
  - Update to latest stable version of PCP (RHEL-62801)


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Make pcp-zeroconf start enabled services once again (RHEL-93182)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories
  - Backport some more fixes to the OpenMetrics PMDA
  - Fix a multilib regression in PCP header files


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.227-1
changelog:
  - Update to 1.227
    - New maintainer, GTERMARS
    - Add basic GitHub Actions setup for testing
    - Typo corrections in POD
    - Eliminated use of state/node files in temp directory


author: Paul Howarth <paul@city-fan.org> - 1.18-1
changelog:
  - Update to 1.18 (rhbz#2251844)
    - Address Freebsd build issue: make function checks more robust within
      shared lib (GH#35)


author: Paul Howarth <paul@city-fan.org> - 1.20-1
changelog:
  - Update to 1.20 (rhbz#2256127)
    - Remove --no-undefined from compiler test, which is not compatible with all
      platforms (GH#37)
    - Skip t/pty_get_winsize.t tests on AIX (GH#32)
    - Fix patchlevel check for util.h (GH#27)


author: Paul Howarth <paul@city-fan.org> - 0.010-1
changelog:
  - Update to 0.010 (rhbz#2138013)
    - Re-release with updated ppport.h for 5.8.5 compatibility
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 0.03-48
changelog:
  - Spec tidy-up
    - Use SPDX-format license tag
    - Use author-independent source URL
    - Specify all dependencies
    - Fix permissions verbosely
    - Simplify find commands using -empty and -delete
    - Make %files list more explicit


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Can not find network create and rm message from podman event when set --events-backend to journald"
  - Related: RHEL-109790


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-8
changelog:
  - dtc-Properly-harden-built-packages.patch [RHEL-33493]
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-10
changelog:
  - Fix missing dynamic tags for aarch64 python3 pylibfdt
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-12
changelog:
  - dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448]
  - dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448]
  - Resolves: RHEL-64318
    ([RHEL10][CS10] dtc fails to build with Swig 4.3.0)
  - Resolves: RHEL-65448
    ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10)


author: Vladis Dronov <vdronov@redhat.com> - 24.02.0-1
changelog:
  - Update to qatlib 24.02.0 (RHEL-20173)
  - Add zuc_sample to qatlib-tests package
  - Use proper SPDX license identifiers


author: Vladis Dronov <vdronov@redhat.com> - 24.09.0-1
changelog:
  - Update to qatlib 24.09.0 @ 36fb0903 (RHEL-40261)
  - Add pciutils as a dependency of the qatlib-service subpackage
  - Add numactl-devel as a dependency since it is required by qatlib-24.09.0


author: Vladislav Dronov <vdronov@redhat.com> - 25.08.0-1
changelog:
  - Update to qatlib 25.08.0 @ 686d209b (RHEL-91079)
  - Add autoconf-archive as a dependency
  - Add update_sample to qatlib-tests
  - Add manpage for cpa_sample_code
  - Add sysusers.d config file to allow rpm to create users/groups automatically


author: Vladislav Dronov <vdronov@redhat.com> - 26.02.0-1
changelog:
  - Update to qatlib 26.02.0 @ fe4bb4b6 (RHEL-115466)
  - Add patch to force 32 bit MMIO CSR reads for GCC 16.1


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - QSsl: add support for ML-DSA signature algorithm
    Resolves: RHEL-97008


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - Fix CVE-2025-11277 in bundled assimp library
    Resolves: RHEL-120979


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-104
changelog:
  - resolves: RHEL-101759 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-103.el10)


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-100
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114545 - Update to version 4.23.4
  - resolves: RHEL-132338 - Fix Time Machine backup
  - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-100
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-138263 - Fix winbind group resolution
  - resolves: RHEL-141012 - Fix winbind crash


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.24.3-100
changelog:
  - Update to version 4.24.3
  - resolves: RHEL-156281 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
    various flaws
  - resolves: RHEL-161645 - CVE-2026-4480 samba: Samba: Remote Code Execution
    in printing
  - resolves: RHEL-170596 - CVE-2026-40170 samba: ngtcp2:
  - resolves: RHEL-177928 - CVE-2026-4408 samba: Remote Code Execution in
    SAMR
  - resolves: RHEL-166872 - build hardening with FORTIFY_SOURCE


author: Andreas Schneider <asn@redhat.com> - 1.3.4-1
changelog:
  - Update to version 1.3.4
    * https://gitlab.com/cwrap/socket_wrapper/-/blob/socket_wrapper-1.3.4/CHANGELOG


author: Andreas Schneider <asn@redhat.com> - 1.4.0-1
changelog:
  - Update to version 1.4.0
    * https://gitlab.com/cwrap/socket_wrapper/-/blob/socket_wrapper-1.4.0/CHANGELOG


author: Jitka Plesnikova <jplesnik@redhat.com> - 4.2.1-1
changelog:
  - Resolves: RHEL-32325
  - 4.2.1 bump
  - Fix gcc's -Wformat-security warning in R Raise function
  - OCaml 5.2.0 ppc64le fix
  - Add support for Python 3.13


author: Andreas Schneider <asn@redhat.com> - 1.3.0-1
changelog:
  - Update to version 1.3.0
    o https://gitlab.com/cwrap/uid_wrapper/-/blob/uid_wrapper-1.3.0/CHANGELOG


author: Packit <hello@packit.dev> - 0.17.17-1
changelog:
  - Fix race with worker thread accessing $UMOCKDEV_DIR
  - Disable -Wincompatible-function-pointer-types for clang


author: Packit <hello@packit.dev> - 0.17.18-1
changelog:
  - preload: Don't read udev cache data from system (thanks Bastien Nocera)
  - spec: Update License: to SPDX format
  - Various test fixes


author: Packit <hello@packit.dev> - 0.18.0-1
changelog:
  - Record and restore SELinux context for mocked /dev nodes
  - preload: wrap fstatfs() and statfs() on musl
  - Fix build with meson 1.4


author: Packit <hello@packit.dev> - 0.18.1-1
changelog:
  - preload: Provide wrappers for functions specific to 64-bit time_t (thanks Steve Langasek)
  - preload: Fix building with _FILE_OFFSET_BITS (thanks Zixing Liu and Steve Langasek)


