# changelog

author: Julio Faracco <jfaracco@redhat.com> [6.12.0-110.el10]
changelog:
  - nvme-multipath: fix suspicious RCU usage warning (Chris Leech) [RHEL-102650]
  - livepatch: no need to build kselftests with kernel (Radomir Vrbovsky) [RHEL-70905]
  - treewide: Switch/rename to timer_delete[_sync]() (Dennis Chen) [RHEL-72659]
  - sfc: fix NULL dereferences in ef100_process_design_param() (Dennis Chen) [RHEL-72659]
  - sfc: support X4 devlink flash (Dennis Chen) [RHEL-72659]
  - sfc: update MCDI protocol headers (Dennis Chen) [RHEL-72659]
  - sfc: rip out MDIO support (Dennis Chen) [RHEL-72659]
  - sfc: Remove newline at the end of a netlink error message (Dennis Chen) [RHEL-72659]
  - sfc: document devlink flash support (Dennis Chen) [RHEL-72659]
  - sfc: deploy devlink flash images to NIC over MCDI (Dennis Chen) [RHEL-72659]
  - sfc: extend NVRAM MCDI handlers (Dennis Chen) [RHEL-72659]
  - sfc: parse headers of devlink flash images (Dennis Chen) [RHEL-72659]
  - net: sfc: Correct key_len for efx_tc_ct_zone_ht_params (Dennis Chen) [RHEL-72659]
  - sfc: Use netdev refcount tracking in struct efx_async_filter_insertion (Dennis Chen) [RHEL-72659]
  - sfc: remove efx_writed_page_locked (Dennis Chen) [RHEL-72659]
  - net: sfc: use ethtool string helpers (Dennis Chen) [RHEL-72659]
  - sfc: Remove more unused functions (Dennis Chen) [RHEL-72659]
  - sfc: Remove unused mcdi functions (Dennis Chen) [RHEL-72659]
  - sfc: Remove unused efx_mae_mport_vf (Dennis Chen) [RHEL-72659]
  - sfc: Remove falcon deadcode (Dennis Chen) [RHEL-72659]
  - sfc: add per-queue RX bytes stats (Dennis Chen) [RHEL-72659]
  - sfc: implement per-queue TSO (hw_gso) stats (Dennis Chen) [RHEL-72659]
  - sfc: implement per-queue rx drop and overrun stats (Dennis Chen) [RHEL-72659]
  - sfc: account XDP TXes in netdev base stats (Dennis Chen) [RHEL-72659]
  - sfc: add n_rx_overlength to ethtool stats (Dennis Chen) [RHEL-72659]
  - sfc: implement basic per-queue stats (Dennis Chen) [RHEL-72659]
  - sfc: remove obsolete counters from struct efx_channel (Dennis Chen) [RHEL-72659]
  - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101261] {CVE-2025-38085}
  - mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101296] {CVE-2025-38084}
  - tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101296]
  - mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101296]
  - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102248] {CVE-2025-38079}
  - ntb_hw_amd: Add NTB PCI ID for new gen CPU (Jerry Snitselaar) [RHEL-94523]
  - dmaengine: ptdma: Move variable condition check to the first place and remove redundancy (Jerry Snitselaar) [RHEL-94523]
  - dmaengine: ptdma: Utilize the AE4DMA engine's multi-queue functionality (Jerry Snitselaar) [RHEL-94523]
  - dmaengine: ae4dma: Use the MSI count and its corresponding IRQ number (Jerry Snitselaar) [RHEL-94523]
  - dmaengine: ae4dma: Remove deprecated PCI IDs (Jerry Snitselaar) [RHEL-94523]
  - dmaengine: ae4dma: Register debugfs using ptdma_debugfs_setup (Jerry Snitselaar) [RHEL-94523]
  - dmaengine: ptdma: Extend ptdma-debugfs to support multi-queue (Jerry Snitselaar) [RHEL-94523]
  - dmaengine: ae4dma: Register AE4DMA using pt_dmaengine_register (Jerry Snitselaar) [RHEL-94523]
  - dmaengine: ptdma: Extend ptdma to support multi-channel and version (Jerry Snitselaar) [RHEL-94523]
  - redhat/configs: Enable CONFIG_AMD_AE4DMA (Jerry Snitselaar) [RHEL-94523]
  - dmaengine: ae4dma: Add AMD ae4dma controller driver (Jerry Snitselaar) [RHEL-94523]
  - Merge DRM changes from upstream v6.14..v6.15 (José Expósito) [RHEL-88418]
  - redhat/configs: Add new configs from drm 6.15 backport (José Expósito) [RHEL-88418]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-111.el10]
changelog:
  - powerpc/pseries/dlpar: Search DRC index from ibm,drc-indexes for IO add (Mamatha Inamdar) [RHEL-90596]
  - block/blk-throttle: silence !BLK_DEV_IO_TRACE variable warnings (Ming Lei) [RHEL-97188]
  - blk-throttle: Prevents the bps restricted io from entering the bps queue again (Ming Lei) [RHEL-97188]
  - blk-throttle: Split the service queue (Ming Lei) [RHEL-97188]
  - blk-throttle: Split the blkthrotl queue (Ming Lei) [RHEL-97188]
  - blk-throttle: Introduce flag "BIO_TG_BPS_THROTTLED" (Ming Lei) [RHEL-97188]
  - blk-throttle: Split throtl_charge_bio() into bps and iops functions (Ming Lei) [RHEL-97188]
  - blk-throttle: Refactor tg_dispatch_time by extracting tg_dispatch_bps/iops_time (Ming Lei) [RHEL-97188]
  - blk-throttle: Rename tg_may_dispatch() to tg_dispatch_time() (Ming Lei) [RHEL-97188]
  - blk-throttle: Add an additional overflow check to the call calculate_bytes/io_allowed (Ming Lei) [RHEL-97188]
  - blk-throttle: Delete unnecessary carryover-related fields from throtl_grp (Ming Lei) [RHEL-97188]
  - blk-throttle: Fix wrong tg->[bytes/io]_disp update in __tg_update_carryover() (Ming Lei) [RHEL-97188]
  - intel_th: pci: Add Panther Lake-P/U support (Michael Petlan) [RHEL-47423]
  - intel_th: pci: Add Panther Lake-H support (Michael Petlan) [RHEL-47423]
  - intel_th: pci: Add Arrow Lake support (Michael Petlan) [RHEL-47423]
  - kernel.spec: always provide kernel-devel-uname-r (Scott Weaver) [RHEL-88117]
  - kernel.spec: always provide kernel (Scott Weaver) [RHEL-88117]
  - kernel.spec: dynamically set provides/requires name (Scott Weaver) [RHEL-88117]
  - kernel.spec: use %{name} in partner/internal modules (Scott Weaver) [RHEL-88117]
  - kernel.spec: introduce with_automotive_build (Scott Weaver) [RHEL-88117]
  - kernel.spec: add a few macro option comments (Scott Weaver) [RHEL-88117]
  - kernel.spec: fix kernel-automotive packaging (Scott Weaver) [RHEL-88117]
  - kernel.spec: honor packaging flags (Scott Weaver) [RHEL-88117]
  - gitlab-ci: update automotive pipelines (Scott Weaver) [RHEL-88117]
  - redhat/self-test: update for new automotive variables (Scott Weaver) [RHEL-88117]
  - kernel.spec: fedora automotive build is not supported (Scott Weaver) [RHEL-88117]
  - gitignore: kernel-automotive generated files (Scott Weaver) [RHEL-88117]
  - gitlab-ci: use AUTOMOTIVE_BUILD with dist-srpm (Scott Weaver) [RHEL-88117]
  - redhat/Makefile: introduce AUTOMOTIVE_BUILD (Scott Weaver) [RHEL-88117]
  - kernel.spec: updates for automotive-only build (Scott Weaver) [RHEL-88117]
  - ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-83567]
  - ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-83567]
  - ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-83567]
  - ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-83567]
  - ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-83567]
  - ice: fix vf->num_mac count with port representors (Petr Oros) [RHEL-83567]
  - ice: use DSN instead of PCI BDF for ice_adapter index (Petr Oros) [RHEL-83567]
  - ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-83567]
  - ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-83567]
  - ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-83567]
  - ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-83567]
  - ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-83567]
  - ice: stop truncating queue ids when checking (Petr Oros) [RHEL-83567]
  - virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-83567]
  - ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-83567]
  - ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-83567]
  - ice: E825C PHY register cleanup (Petr Oros) [RHEL-83567]
  - ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-83567]
  - ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-83567]
  - ice: Add E830 checksum offload support (Petr Oros) [RHEL-83567]
  - ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-83567]
  - ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-83567]
  - ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-83567]
  - ice: do not configure destination override for switchdev (Petr Oros) [RHEL-83567]
  - ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-83567]
  - ice: Avoid setting default Rx VSI twice in switchdev setup (Petr Oros) [RHEL-83567]
  - virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-83567]
  - ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-83567]
  - virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-83567]
  - ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-83567]
  - ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-83567]
  - ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-83567]
  - ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-83567]
  - ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-83567]
  - ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-83567]
  - ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-83567]
  - ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-83567]
  - ice: use generic unrolled_count() macro (Petr Oros) [RHEL-83567]
  - ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-83567]
  - ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-83567]
  - ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-83567]
  - ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-83567]
  - ice: support FW Recovery Mode (Petr Oros) [RHEL-83567]
  - ice: Add in/out PTP pin delays (Petr Oros) [RHEL-83567]
  - ice: use string choice helpers (Petr Oros) [RHEL-83567]
  - ice: add fw and port health reporters (Petr Oros) [RHEL-83567]
  - ice: add recipe priority check in search (Petr Oros) [RHEL-83567]
  - ice: Add MDD logging via devlink health (Petr Oros) [RHEL-83567]
  - ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-83567]
  - ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-83567]
  - ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-83567]
  - ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-83567]
  - ice: reduce size of queue context fields (Petr Oros) [RHEL-83567]
  - ice: use <linux/packing.h> for Tx and Rx queue context data (Petr Oros) [RHEL-83567]
  - ice: use structures to keep track of queue context size (Petr Oros) [RHEL-83567]
  - ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-83567]
  - ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-83567]
  - ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-83567]
  - ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-83567]
  - ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-83567]
  - ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-83567]
  - ice: Unbind the workqueue (Petr Oros) [RHEL-83567]
  - ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-83567]
  - ice: initialize pf->supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-83567]
  - ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-83567]
  - ice: Add support for persistent NAPI config (Petr Oros) [RHEL-83567]
  - ice: support optional flags in signature segment header (Petr Oros) [RHEL-83567]
  - ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-83567]
  - ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-83567]
  - ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-83567]
  - ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-83567]
  - virtchnl: fix m68k build. (Petr Oros) [RHEL-83567]
  - virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-83567]
  - ice: Cleanup unused declarations (Petr Oros) [RHEL-83567]
  - ice: Use common error handling code in two functions (Petr Oros) [RHEL-83567]
  - ice: Make use of assign_bit() API (Petr Oros) [RHEL-83567]
  - ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-83567]
  - ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-83567]
  - ice: Implement ethtool reset support (Petr Oros) [RHEL-83567]


author: Julio Faracco <jfaracco@redhat.com> [6.12.0-112.el10]
changelog:
  - powerpc/defconfigs: Set HZ=1000 on ppc64 and powernv defconfigs (Mamatha Inamdar) [RHEL-102017]
  - net: ipv4: fix stat increase when udp early demux drops the packet (CKI Backport Bot) [RHEL-102383]
  - virtio_net: Enforce minimum TX ring size for reliability (Laurent Vivier) [RHEL-84409]
  - virtio_net: Cleanup '2+MAX_SKB_FRAGS' (Laurent Vivier) [RHEL-84409]
  - virtio_ring: Fix error reporting in virtqueue_resize (Laurent Vivier) [RHEL-84409]
  - iommu/s390: allow larger region tables (Christoph Schlameuss) [RHEL-52964]
  - iommu/s390: support map/unmap for additional table regions (Christoph Schlameuss) [RHEL-52964]
  - iommu/s390: support iova_to_phys for additional table regions (Christoph Schlameuss) [RHEL-52964]
  - iommu/s390: support cleanup of additional table regions (Christoph Schlameuss) [RHEL-52964]
  - iommu/s390: set appropriate IOTA region type (Christoph Schlameuss) [RHEL-52964]
  - s390/pci: Fix dev.dma_range_map missing sentinel element (Christoph Schlameuss) [RHEL-52964]
  - iommu/s390: implement iommu passthrough via identity domain (Christoph Schlameuss) [RHEL-52964]
  - iommu/s390: handle IOAT registration based on domain (Christoph Schlameuss) [RHEL-52964]
  - s390/pci: store DMA offset in bus_dma_region (Christoph Schlameuss) [RHEL-52964]
  - s390/pci: check for relaxed translation capability (Christoph Schlameuss) [RHEL-52964]
  - selftests: drv-net: rss_ctx: Add test for ntuple rules targeting default RSS context (Mohammad Heib) [RHEL-75603]
  - net: ethtool: Don't check if RSS context exists in case of context 0 (Mohammad Heib) [RHEL-75603]
  - net: ethtool: remove duplicate defines for family info (Mohammad Heib) [RHEL-75603]
  - netlink: specs: ethtool: Remove UAPI duplication of phy-upstream enum (Mohammad Heib) [RHEL-75603]
  - ethtool: cmis_cdb: use correct rpl size in ethtool_cmis_module_poll() (Mohammad Heib) [RHEL-75603]
  - ethtool: cmis_cdb: Fix incorrect read / write length extension (Mohammad Heib) [RHEL-75603]
  - net: ethtool: Don't call .cleanup_data when prepare_data fails (Mohammad Heib) [RHEL-75603]
  - selftests: drv-net: test random value for hds-thresh (Mohammad Heib) [RHEL-75603]
  - net: ethtool: fix ethtool_ringparam_get_cfg() returns a hds_thresh value always as 0. (Mohammad Heib) [RHEL-75603]
  - net: ethtool: Export the link_mode_params definitions (Mohammad Heib) [RHEL-75603]
  - net: ethtool: tsinfo: Fix dump command (Mohammad Heib) [RHEL-75603]
  - net: ethtool: netlink: Allow NULL nlattrs when getting a phy_device (Mohammad Heib) [RHEL-75603]
  - selftests: drv-net-hw: Add a test for symmetric RSS hash (Mohammad Heib) [RHEL-75603]
  - selftests: drv-net: Make rand_port() get a port more reliably (Mohammad Heib) [RHEL-75603]
  - ethtool: Symmetric OR-XOR RSS hash (Mohammad Heib) [RHEL-75603]
  - tools: ynl: add all headers to makefile deps (Mohammad Heib) [RHEL-75603]
  - net: ethtool: fix ioctl confusing drivers about desired HDS user config (Mohammad Heib) [RHEL-75603]
  - net: move stale comment about ntuple validation (Mohammad Heib) [RHEL-75603]
  - selftests: net-drv: test adding flow rule to invalid RSS context (Mohammad Heib) [RHEL-75603]
  - net: ethtool: prevent flow steering to RSS contexts which don't exist (Mohammad Heib) [RHEL-75603]
  - net: ethtool: tsconfig: Fix netlink type of hwtstamp flags (Mohammad Heib) [RHEL-75603]
  - ethtool: Add support for 200Gbps per lane link modes (Mohammad Heib) [RHEL-75603]
  - selftests: drv-net: rss_ctx: don't fail reconfigure test if queue offset not supported (Mohammad Heib) [RHEL-75603]
  - selftests: drv-net: rss_ctx: add missing cleanup in queue reconfigure (Mohammad Heib) [RHEL-75603]
  - ethtool: ntuple: fix rss + ring_cookie check (Mohammad Heib) [RHEL-75603]
  - ethtool: rss: fix hiding unsupported fields in dumps (Mohammad Heib) [RHEL-75603]
  - ethtool: Fix set RXNFC command with symmetric RSS hash (Mohammad Heib) [RHEL-75603]
  - net: ethtool: populate the default HDS params in the core (Mohammad Heib) [RHEL-75603]
  - net: provide pending ring configuration in net_device (Mohammad Heib) [RHEL-75603]
  - net: ethtool: store netdev in a temp variable in ethnl_default_set_doit() (Mohammad Heib) [RHEL-75603]
  - net: move HDS config from ethtool state (Mohammad Heib) [RHEL-75603]
  - net: avoid race between device unregistration and ethnl ops (Mohammad Heib) [RHEL-75603]
  - net: ethtool: ts: add separate counter for unconfirmed one-step TX timestamps (Mohammad Heib) [RHEL-75603]
  - selftest: net-drv: hds: add test for HDS feature (Mohammad Heib) [RHEL-75603]
  - netdevsim: add HDS feature (Mohammad Heib) [RHEL-75603]
  - net: disallow setup single buffer XDP when tcp-data-split is enabled. (Mohammad Heib) [RHEL-75603]
  - net: ethtool: add ring parameter filtering (Mohammad Heib) [RHEL-75603]
  - net: devmem: add ring parameter filtering (Mohammad Heib) [RHEL-75603]
  - net: ethtool: add support for configuring hds-thresh (Mohammad Heib) [RHEL-75603]
  - net: ethtool: add hds_config member in ethtool_netdev_state (Mohammad Heib) [RHEL-75603]
  - Documentation: networking: update PHY error counter diagnostics in twisted pair guide (Mohammad Heib) [RHEL-75603]
  - net: ethtool: add support for structured PHY statistics (Mohammad Heib) [RHEL-75603]
  - net: ethtool: plumb PHY stats to PHY drivers (Mohammad Heib) [RHEL-75603]
  - ethtool: linkstate: migrate linkstate functions to support multi-PHY setups (Mohammad Heib) [RHEL-75603]
  - Documentation: networking: add Twisted Pair Ethernet diagnostics at OSI Layer 1 (Mohammad Heib) [RHEL-75603]
  - net: ethtool: Use hwprov under rcu_read_lock (Mohammad Heib) [RHEL-75603]
  - net: ethtool: Fix suspicious rcu_dereference usage (Mohammad Heib) [RHEL-75603]
  - net: ethtool: Add support for tsconfig command to get/set hwtstamp config (Mohammad Heib) [RHEL-75603]
  - net: ethtool: tsinfo: Enhance tsinfo to support several hwtstamp by net topology (Mohammad Heib) [RHEL-75603]
  - net: Add the possibility to support a selected hwtstamp in netdevice (Mohammad Heib) [RHEL-75603]
  - net: Make net_hwtstamp_validate accessible (Mohammad Heib) [RHEL-75603]
  - net: Make dev_get_hwtstamp_phylib accessible (Mohammad Heib) [RHEL-75603]
  - ethtool: regenerate uapi header from the spec (Mohammad Heib) [RHEL-75603]
  - ethtool: remove the comments that are not gonna be generated (Mohammad Heib) [RHEL-75603]
  - ethtool: separate definitions that are gonna be generated (Mohammad Heib) [RHEL-75603]
  - ynl: include uapi header after all dependencies (Mohammad Heib) [RHEL-75603]
  - ynl: add missing pieces to ethtool spec to better match uapi header (Mohammad Heib) [RHEL-75603]
  - ynl: support directional specs in ynl-gen-c.py (Mohammad Heib) [RHEL-75603]
  - ynl: skip rendering attributes with header property in uapi mode (Mohammad Heib) [RHEL-75603]
  - ynl: support enum-cnt-name attribute in legacy definitions (Mohammad Heib) [RHEL-75603]
  - ethtool: Fix wrong mod state in case of verbose and no_mask bitset (Mohammad Heib) [RHEL-75603]
  - ethtool: Fix access to uninitialized fields in set RXNFC command (Mohammad Heib) [RHEL-75603]
  - UAPI: ethtool: Avoid flex-array in struct ethtool_link_settings (Mohammad Heib) [RHEL-75603]
  - selftest: extend test_rss_context_queue_reconfigure for action addition (Mohammad Heib) [RHEL-75603]
  - selftest: validate RSS+ntuple filters with nonzero ring_cookie (Mohammad Heib) [RHEL-75603]
  - selftest: include dst-ip in ethtool ntuple rules (Mohammad Heib) [RHEL-75603]
  - net: ethtool: account for RSS+RXNFC add semantics when checking channel count (Mohammad Heib) [RHEL-75603]
  - net: ethtool: only allow set_rxnfc with rss + ring_cookie if driver opts in (Mohammad Heib) [RHEL-75603]
  - Documentation: networking: Add missing PHY_GET command in the message list (Mohammad Heib) [RHEL-75603]
  - netlink: specs: Add missing phy-ntf command to ethtool spec (Mohammad Heib) [RHEL-75603]
  - netlink: specs: Add missing bitset attrs to ethtool spec (Mohammad Heib) [RHEL-75603]
  - selftests: drv-net: rss_ctx: add rss ctx busy testcase (Mohammad Heib) [RHEL-75603]
  - ethtool: rss: prevent rss ctx deletion when in use (Mohammad Heib) [RHEL-75603]
  - net: ethtool: Add support for writing firmware blocks using EPL payload (Mohammad Heib) [RHEL-75603]
  - net: ethtool: Add new parameters and a function to support EPL (Mohammad Heib) [RHEL-75603]
  - ethtool: rss: fix rss key initialization warning (Mohammad Heib) [RHEL-75603]
  - media: cx231xx: Remove vidioc_s_ctrl callback (Desnes Nunes) [RHEL-78934]
  - media: uvcvideo: Remove vidioc_queryctrl (Desnes Nunes) [RHEL-78934]
  - media: pvrusb2: Remove g/s_ctrl callbacks (Desnes Nunes) [RHEL-78934]
  - media: pvrusb2: Convert queryctrl to query_ext_ctrl (Desnes Nunes) [RHEL-78934]
  - media: cx231xx: set device_caps for 417 (Desnes Nunes) [RHEL-78934] {CVE-2025-38044}
  - media: uvcvideo: Drop the uvc_driver structure (Desnes Nunes) [RHEL-78934]
  - media: uvcvideo: Add quirk for Actions UVC05 (Desnes Nunes) [RHEL-78934]
  - media: uvcvideo: implement UVC v1.5 ROI (Desnes Nunes) [RHEL-78934]
  - media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map (Desnes Nunes) [RHEL-78934]
  - media: uvcvideo: Introduce uvc_mapping_v4l2_size (Desnes Nunes) [RHEL-78934]
  - media: uvcvideo: let v4l2_query_v4l2_ctrl() work with v4l2_query_ext_ctrl (Desnes Nunes) [RHEL-78934]
  - media: uvcvideo: support V4L2_CTRL_WHICH_MIN/MAX_VAL (Desnes Nunes) [RHEL-78934]
  - media: v4l2-ctrls: add support for V4L2_CTRL_WHICH_MIN/MAX_VAL (Desnes Nunes) [RHEL-78934]
  - media: v4l2_ctrl: Add V4L2_CTRL_TYPE_RECT (Desnes Nunes) [RHEL-78934]
  - media: uvcvideo: Factor out query_boundaries from query_ctrl (Desnes Nunes) [RHEL-78934]
  - media: uvcvideo: add support for compound controls (Desnes Nunes) [RHEL-78934]
  - media: uvcvideo: Factor out clamping from uvc_ctrl_set (Desnes Nunes) [RHEL-78934]
  - media: uvcvideo: Support any size for mapping get/set (Desnes Nunes) [RHEL-78934]
  - media: uvcvideo: uvc_ioctl_(g|s)_ext_ctrls: handle NoP case (Desnes Nunes) [RHEL-78934]
  - media: uvcvideo: refactor uvc_ioctl_g_ext_ctrls (Desnes Nunes) [RHEL-78934]
  - media: uvcvideo: Handle uvc menu translation inside uvc_set_le_value (Desnes Nunes) [RHEL-78934]
  - media: uvcvideo: Handle uvc menu translation inside uvc_get_le_value (Desnes Nunes) [RHEL-78934]
  - media: dvb-usb-v2: Constify struct i2c_algorithm (Desnes Nunes) [RHEL-78934]
  - media: dvb-usb: Constify struct i2c_algorithm (Desnes Nunes) [RHEL-78934]
  - media: cx231xx: Convert enum into a define (Desnes Nunes) [RHEL-78934]
  - media: dvb-usb: Constify struct usb_device_id (Desnes Nunes) [RHEL-78934]
  - media: pwc: remove useless header files (Desnes Nunes) [RHEL-78934]
  - usb: usbtmc: Fix timeout value in get_stb (Desnes Nunes) [RHEL-78934]
  - usb: usbtmc: Fix read_stb function and get_stb ioctl (Desnes Nunes) [RHEL-78934]
  - phy: Fix error handling in tegra_xusb_port_init (Desnes Nunes) [RHEL-78934]
  - phy: tegra: xusb: remove a stray unlock (Desnes Nunes) [RHEL-78934]
  - xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive. (Desnes Nunes) [RHEL-78934]
  - usb: xhci: Don't trust the EP Context cycle bit when moving HW dequeue (Desnes Nunes) [RHEL-78934]
  - usb: usbtmc: Fix erroneous generic_read ioctl return (Desnes Nunes) [RHEL-78934]
  - usb: usbtmc: Fix erroneous wait_srq ioctl return (Desnes Nunes) [RHEL-78934]
  - usb: usbtmc: Fix erroneous get_stb ioctl error returns (Desnes Nunes) [RHEL-78934]
  - usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition (Desnes Nunes) [RHEL-78934]
  - USB: usbtmc: use interruptible sleep in usbtmc_read (Desnes Nunes) [RHEL-78934]
  - usb: typec: ucsi: displayport: Fix NULL pointer access (Desnes Nunes) [RHEL-78934 RHEL-96306] {CVE-2025-37994}
  - usb: typec: ucsi: displayport: Fix deadlock (Desnes Nunes) [RHEL-78934] {CVE-2025-37967}
  - usb: misc: onboard_usb_dev: fix support for Cypress HX3 hubs (Desnes Nunes) [RHEL-78934]
  - usb: uhci-platform: Make the clock really optional (Desnes Nunes) [RHEL-78934]
  - usb: dwc3: gadget: Make gadget_wakeup asynchronous (Desnes Nunes) [RHEL-78934]
  - usb: host: tegra: Prevent host controller crash when OTG port is used (Desnes Nunes) [RHEL-78934]
  - usb: cdnsp: Fix issue with resuming from L1 (Desnes Nunes) [RHEL-78934]
  - usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN (Desnes Nunes) [RHEL-78934]
  - USB: serial: simple: add OWON HDS200 series oscilloscope support (Desnes Nunes) [RHEL-78934]
  - USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe (Desnes Nunes) [RHEL-78934]
  - USB: serial: option: add Sierra Wireless EM9291 (Desnes Nunes) [RHEL-78934]
  - usb: typec: class: Unlocked on error in typec_register_partner() (Desnes Nunes) [RHEL-78934]
  - usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive (Desnes Nunes) [RHEL-78934]
  - USB: wdm: add annotation (Desnes Nunes) [RHEL-78934]
  - USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context (Desnes Nunes) [RHEL-78934]
  - USB: wdm: close race between wdm_open and wdm_wwan_port_stop (Desnes Nunes) [RHEL-78934] {CVE-2025-37985}
  - USB: wdm: handle IO errors in wdm_wwan_port_start (Desnes Nunes) [RHEL-78934]
  - USB: VLI disk crashes if LPM is used (Desnes Nunes) [RHEL-78934]
  - usb: dwc3: gadget: check that event count does not exceed event buffer length (Desnes Nunes) [RHEL-78934] {CVE-2025-37810}
  - USB: storage: quirk for ADATA Portable HDD CH94 (Desnes Nunes) [RHEL-78934]
  - usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive (Desnes Nunes) [RHEL-78934]
  - USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02) (Desnes Nunes) [RHEL-78934]
  - usb: cdns3: Fix deadlock when using NCM gadget (Desnes Nunes) [RHEL-78934] {CVE-2025-37812}
  - usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling (Desnes Nunes) [RHEL-78934]
  - usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines (Desnes Nunes) [RHEL-78934]
  - usb: chipidea: ci_hdrc_imx: fix usbmisc handling (Desnes Nunes) [RHEL-78934] {CVE-2025-37811}
  - usb: typec: class: Invalidate USB device pointers on partner unregistration (Desnes Nunes) [RHEL-78934] {CVE-2025-37986}
  - usb: typec: class: Fix NULL pointer access (Desnes Nunes) [RHEL-78934] {CVE-2025-37809}
  - xhci: Limit time spent with xHC interrupts disabled during bus resume (Desnes Nunes) [RHEL-78934]
  - usb: xhci: Fix invalid pointer dereference in Etron workaround (Desnes Nunes) [RHEL-78934] {CVE-2025-37813}
  - usb: xhci: Fix Short Packet handling rework ignoring errors (Desnes Nunes) [RHEL-78934]
  - Revert "xhci: Prevent early endpoint restart when handling STALL errors." (Desnes Nunes) [RHEL-78934]
  - Revert "xhci: Avoid queuing redundant Stop Endpoint command for stalled endpoint" (Desnes Nunes) [RHEL-78934]
  - phy: tegra: xusb: Use a bitmask for UTMI pad power state tracking (Desnes Nunes) [RHEL-78934] {CVE-2025-38010}
  - dt-bindings: xilinx: Remove myself from maintainership (Desnes Nunes) [RHEL-78934]
  - treewide: Switch/rename to timer_delete[_sync]() (Desnes Nunes) [RHEL-78934]
  - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (Desnes Nunes) [RHEL-78934 RHEL-99039] {CVE-2025-22020}
  - thunderbolt: Do not add non-active NVM if NVM upgrade is disabled for retimer (Desnes Nunes) [RHEL-78934]
  - thunderbolt: Scan retimers after device router has been enumerated (Desnes Nunes) [RHEL-78934]
  - usb: host: cdns3: forward lost power information to xhci (Desnes Nunes) [RHEL-78934]
  - usb: host: xhci-plat: allow upper layers to signal power loss (Desnes Nunes) [RHEL-78934]
  - usb: xhci: change xhci_resume() parameters to explicit the desired info (Desnes Nunes) [RHEL-78934]
  - usb: cdns3-ti: run HW init at resume() if HW was reset (Desnes Nunes) [RHEL-78934]
  - usb: cdns3-ti: move reg writes to separate function (Desnes Nunes) [RHEL-78934]
  - usb: cdns3: call cdns_power_is_lost() only once in cdns_resume() (Desnes Nunes) [RHEL-78934]
  - usb: cdns3: rename hibernated argument of role->resume() to lost_power (Desnes Nunes) [RHEL-78934]
  - usb: xhci: tegra: rename `runtime` boolean to `is_auto_runtime` (Desnes Nunes) [RHEL-78934]
  - usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func (Desnes Nunes) [RHEL-78934]
  - usb: dwc3: Don't use %pK through printk (Desnes Nunes) [RHEL-78934]
  - usb: core: Don't use %pK through printk (Desnes Nunes) [RHEL-78934]
  - dt-bindings: usb: qcom,dwc3: Synchronize minItems for interrupts and -names (Desnes Nunes) [RHEL-78934]
  - usb: common: usb-conn-gpio: switch psy_cfg from of_node to fwnode (Desnes Nunes) [RHEL-78934]
  - usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running (Desnes Nunes) [RHEL-78934]
  - usb: xhci: Don't change the status of stalled TDs on failed Stop EP (Desnes Nunes) [RHEL-78934]
  - xhci: Avoid queuing redundant Stop Endpoint command for stalled endpoint (Desnes Nunes) [RHEL-78934]
  - phy: qcom: qmp-usbc: Add qmp configuration for QCS615 (Desnes Nunes) [RHEL-78934]
  - phy: core: Remove unused phy_pm_runtime_(allow|forbid) (Desnes Nunes) [RHEL-78934]
  - xhci: Handle spurious events on Etron host isoc enpoints (Desnes Nunes) [RHEL-78934]
  - usb: xhci: Unify duplicate inc_enq() code (Desnes Nunes) [RHEL-78934]
  - usb: xhci: Apply the link chain quirk on NEC isoc endpoints (Desnes Nunes) [RHEL-78934] {CVE-2025-22022}
  - xhci: Prevent early endpoint restart when handling STALL errors. (Desnes Nunes) [RHEL-78934]
  - usb: xhci: move debug capabilities from trb_in_td() to handle_tx_event() (Desnes Nunes) [RHEL-78934]
  - usb: xhci: refactor trb_in_td() to be static (Desnes Nunes) [RHEL-78934]
  - usb: xhci: set page size to the xHCI-supported size (Desnes Nunes) [RHEL-78934]
  - usb: xhci: correct debug message page size calculation (Desnes Nunes) [RHEL-78934]
  - usb: xhci: Skip only one TD on Ring Underrun/Overrun (Desnes Nunes) [RHEL-78934]
  - usb: xhci: Expedite skipping missed isoch TDs on modern HCs (Desnes Nunes) [RHEL-78934]
  - usb: xhci: Fix isochronous Ring Underrun/Overrun event handling (Desnes Nunes) [RHEL-78934] {CVE-2025-37882}
  - usb: xhci: Complete 'error mid TD' transfers when handling Missed Service (Desnes Nunes) [RHEL-78934]
  - usb: xhci: Don't skip on Stopped - Length Invalid (Desnes Nunes) [RHEL-78934] {CVE-2025-22023}
  - usb: xhci: remove redundant update_ring_for_set_deq_completion() function (Desnes Nunes) [RHEL-78934]
  - xhci: show correct U1 and U2 timeout values in debug messages (Desnes Nunes) [RHEL-78934]
  - dt-bindings: usb: dwc3: Add support for rk3562 (Desnes Nunes) [RHEL-78934]
  - dt-bindings: usb: add rk3576 compatible to rockchip,dwc3 (Desnes Nunes) [RHEL-78934]
  - usb: storage: shuttle_usbat: Use const for constant array (Desnes Nunes) [RHEL-78934]
  - usb: storage: sddr55: Use const for constant arrays (Desnes Nunes) [RHEL-78934]
  - usb: storage: sddr09: Use const for constant arrays (Desnes Nunes) [RHEL-78934]
  - usb: storage: realtek_cr: Use const for constant arrays (Desnes Nunes) [RHEL-78934]
  - usb: storage: initializers: Use const for constant array (Desnes Nunes) [RHEL-78934]
  - usb: storage: datafab: Use const for constant arrays (Desnes Nunes) [RHEL-78934]
  - usb: storage: alauda: Use const for card ID array (Desnes Nunes) [RHEL-78934]
  - usb: storage: transport: Use const for constant array (Desnes Nunes) [RHEL-78934]
  - usb: storage: jumpshot: Use const for constant arrays (Desnes Nunes) [RHEL-78934]
  - ucsi_ccg: Don't show non-functional attributes (Desnes Nunes) [RHEL-78934]
  - ucsi_ccg: Don't show failed to get FW build information error (Desnes Nunes) [RHEL-78934]
  - usb: chipidea: imx: fix some typo (Desnes Nunes) [RHEL-78934]
  - dt-bindings: usb: generic-xhci: Allow dma-coherent (Desnes Nunes) [RHEL-78934]
  - usb: ulpi: Remove unused otg_ulpi_create (Desnes Nunes) [RHEL-78934]
  - usb: core: replace usb_sndaddr0pipe macro with usb_sndctrlpipe (Desnes Nunes) [RHEL-78934]
  - thunderbolt: Make tb_tunnel_alloc_usb3() error paths consistent with the rest (Desnes Nunes) [RHEL-78934]
  - usb: Add base USB MCTP definitions (Desnes Nunes) [RHEL-78934]
  - USB: core: Add eUSB2 descriptor and parsing in USB core (Desnes Nunes) [RHEL-78934]
  - usb: dwc2: Implement recovery after PM domain off (Desnes Nunes) [RHEL-78934]
  - usb: dwc2: Refactor backup/restore of registers (Desnes Nunes) [RHEL-78934]
  - usb: dwc2: gadget: Introduce register restore flags (Desnes Nunes) [RHEL-78934]
  - docs: Fix typo in usb/CREDITS (Desnes Nunes) [RHEL-78934]
  - dt-bindings: usb: usb-device: Replace free-form 'reg' with constraints (Desnes Nunes) [RHEL-78934]
  - usb: misc: onboard_dev: add vdda support for Microchip USB2514 (Desnes Nunes) [RHEL-78934]
  - dt-bindings: usb: microchip,usb2514: add support for USB2512/USB2513 (Desnes Nunes) [RHEL-78934]
  - dt-bindings: usb: microchip,usb2514: add support for vdda (Desnes Nunes) [RHEL-78934]
  - docs: thunderbolt: Allow creating cross-references for ABI (Desnes Nunes) [RHEL-78934]
  - usb: typec: tcpm: Switch to use hrtimer_setup() (Desnes Nunes) [RHEL-78934]
  - usb: ehci: Switch to use hrtimer_setup() (Desnes Nunes) [RHEL-78934]
  - usb: gadget: Switch to use hrtimer_setup() (Desnes Nunes) [RHEL-78934]
  - usb: dwc2: Switch to use hrtimer_setup() (Desnes Nunes) [RHEL-78934]
  - USB: serial: mos7840: drop unused defines (Desnes Nunes) [RHEL-78934]
  - phy: fsl-imx8mq-usb: add tca function driver for imx95 (Desnes Nunes) [RHEL-78934]
  - redhat/configs: Adding CONFIG_TYPEC_MUX_PS883X (Desnes Nunes) [RHEL-78934]
  - usb: typec: Add support for Parade PS8830 Type-C Retimer (Desnes Nunes) [RHEL-78934]
  - dt-bindings: usb: Add Parade PS8830 Type-C retimer bindings (Desnes Nunes) [RHEL-78934]
  - USB: dwc3: Use syscon_regmap_lookup_by_phandle_args (Desnes Nunes) [RHEL-78934]
  - usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield (Desnes Nunes) [RHEL-78934]
  - usb: dwc3: gadget: Add support for snps,reserved-endpoints property (Desnes Nunes) [RHEL-78934]
  - usb: dwc3: gadget: Refactor loop to avoid NULL endpoints (Desnes Nunes) [RHEL-78934]
  - dt-bindings: usb: dwc3: Add a property to reserve endpoints (Desnes Nunes) [RHEL-78934]
  - phy: core: don't require set_mode() callback for phy_get_mode() to work (Desnes Nunes) [RHEL-78934]
  - r8152: add vendor/device ID pair for Dell Alienware AW1022z (Desnes Nunes) [RHEL-78934]
  - usb: typec: ucsi: acpi: move LG Gram quirk to ucsi_gram_sync_control() (Desnes Nunes) [RHEL-78934]
  - usb: typec: ucsi: ccg: move command quirks to ucsi_ccg_sync_control() (Desnes Nunes) [RHEL-78934]
  - usb: typec: ucsi: return CCI and message from sync_control callback (Desnes Nunes) [RHEL-78934]
  - usb: typec: ucsi: Enable UCSI commands in debugfs (Desnes Nunes) [RHEL-78934]
  - usb: typec: ucsi: Rename SET_UOM UCSI command to SET_CCOM (Desnes Nunes) [RHEL-78934]
  - wifi: ath12k: fix uaf in ath12k_core_init() (CKI Backport Bot) [RHEL-102087] {CVE-2025-38116}
  - block: flip iter directions in blk_rq_integrity_map_user() (Ming Lei) [RHEL-102497]
  - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-75598]
  - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-75598]
  - selftests/tc-testing: Add an HFSC qlen accounting test (Ivan Vecera) [RHEL-75598]
  - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Ivan Vecera) [RHEL-75598]
  - selftests/tc-testing: Add qdisc limit trimming tests (Ivan Vecera) [RHEL-75598]
  - net_sched: Flush gso_skb list too during ->change() (Ivan Vecera) [RHEL-75598] {CVE-2025-37992}
  - selftests/tc-testing: Add a test case to cover basic HTB+FQ_CODEL case (Ivan Vecera) [RHEL-75598]
  - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-75598] {CVE-2025-37953}
  - selftests: tc-testing: Add TDC tests that exercise reentrant enqueue behaviour (Ivan Vecera) [RHEL-75598]
  - net_sched: qfq: Fix double list add in class with netem as child qdisc (Ivan Vecera) [RHEL-75598] {CVE-2025-37913}
  - net_sched: ets: Fix double list add in class with netem as child qdisc (Ivan Vecera) [RHEL-75598] {CVE-2025-37914}
  - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-75598] {CVE-2025-37890}
  - net_sched: drr: Fix double list add in class with netem as child qdisc (Ivan Vecera) [RHEL-75598] {CVE-2025-37915}
  - selftests/tc-testing: Add test for HFSC queue emptying during peek operation (Ivan Vecera) [RHEL-75598]
  - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (Ivan Vecera) [RHEL-75598] {CVE-2025-37823}
  - net_sched: hfsc: Fix a UAF vulnerability in class handling (Ivan Vecera) [RHEL-75598] {CVE-2025-37797}
  - selftests/tc-testing: Add test for echo of big TC filters (Ivan Vecera) [RHEL-75598]
  - selftests/tc-testing: sfq: check that a derived limit of 1 is rejected (Ivan Vecera) [RHEL-75598]
  - net_sched: sch_sfq: move the limit validation (Ivan Vecera) [RHEL-75598] {CVE-2025-37752}
  - net_sched: sch_sfq: use a temporary work area for validating configuration (Ivan Vecera) [RHEL-75598]
  - tc: Ensure we have enough buffer space when sending filter netlink notifications (Ivan Vecera) [RHEL-75598]
  - selftests/tc-testing: Add a test case for FQ_CODEL with ETS parent (Ivan Vecera) [RHEL-75598]
  - selftests/tc-testing: Add a test case for FQ_CODEL with DRR parent (Ivan Vecera) [RHEL-75598]
  - selftests/tc-testing: Add a test case for FQ_CODEL with HFSC parent (Ivan Vecera) [RHEL-75598]
  - selftests/tc-testing: Add a test case for FQ_CODEL with QFQ parent (Ivan Vecera) [RHEL-75598]
  - selftests/tc-testing: Add a test case for FQ_CODEL with HTB parent (Ivan Vecera) [RHEL-75598]
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-75598] {CVE-2025-37798}
  - sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-75598]
  - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-75598]
  - sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-75598]
  - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-75598]
  - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-75598] {CVE-2025-37932}
  - treewide: Switch/rename to timer_delete[_sync]() (Ivan Vecera) [RHEL-75598]
  - selftests: tc-testing: fix nat regex matching (Ivan Vecera) [RHEL-75598]
  - selftests: tc-testing: Add TBF with SKBPRIO queue length corner case test (Ivan Vecera) [RHEL-75598]
  - net_sched: skbprio: Remove overly strict queue assertions (Ivan Vecera) [RHEL-75598] {CVE-2025-38637}
  - tc-tests: Update tc police action tests for tc buffer size rounding fixes. (Ivan Vecera) [RHEL-75598]
  - selftests/tc-testing: Add a test case for DRR class with TC_H_ROOT (Ivan Vecera) [RHEL-75598]
  - net_sched: Prevent creation of classes with TC_H_ROOT (Ivan Vecera) [RHEL-75598] {CVE-2025-21971}
  - sched: address a potential NULL pointer dereference in the GRED scheduler. (Ivan Vecera) [RHEL-75598] {CVE-2025-21980}
  - net: sched: wrap doit/dumpit methods (Ivan Vecera) [RHEL-75598]
  - net: sched: Remove newline at the end of a netlink error message (Ivan Vecera) [RHEL-75598]
  - coccinelle: Add missing (GE)NL_SET_ERR_MSG_* to strings ending with newline test (Ivan Vecera) [RHEL-75598]
  - net: remove '__' from __skb_flow_get_ports() (Ivan Vecera) [RHEL-75598]
  - skbuff: kill skb_flow_get_ports() (Ivan Vecera) [RHEL-75598]
  - flow_dissector: Fix port range key handling in BPF conversion (Ivan Vecera) [RHEL-75598]
  - selftests/net/forwarding: Add a test case for tc-flower of mixed port and port-range (Ivan Vecera) [RHEL-75598]
  - net: sched: Fix truncation of offloaded action statistics (Ivan Vecera) [RHEL-75598]
  - selftests/tc-testing: Add a test case for qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-75598]
  - netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-75598] {CVE-2025-21703}
  - selftests/tc-testing: Add a test case for pfifo_head_drop qdisc when limit==0 (Ivan Vecera) [RHEL-75598]
  - net: sched: fix ets qdisc OOB Indexing (Ivan Vecera) [RHEL-75598] {CVE-2025-21692}
  - net: sched: Disallow replacing of child qdisc from one parent to another (Ivan Vecera) [RHEL-75598] {CVE-2025-21700}
  - net: tc: improve qdisc error messages (Ivan Vecera) [RHEL-75598]
  - net: sched: calls synchronize_net() only when needed (Ivan Vecera) [RHEL-75598]
  - selftests: tc-testing: reduce rshift value (Ivan Vecera) [RHEL-75598]
  - net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (Ivan Vecera) [RHEL-75598] {CVE-2025-21653}
  - netlink: specs: add uint, sint to netlink-raw schema (Ivan Vecera) [RHEL-75598]
  - net/sched: netem: account for backlog updates from child qdisc (Ivan Vecera) [RHEL-75598] {CVE-2024-56770}
  - selftests/tc-testing: sfq: test that kernel rejects limit of 1 (Ivan Vecera) [RHEL-75598]
  - net_sched: sch_sfq: don't allow 1 packet limit (Ivan Vecera) [RHEL-75598] {CVE-2024-57996}
  - selinux: use sk_to_full_sk() in selinux_ip_output() (Ivan Vecera) [RHEL-75598]
  - net/sched: tbf: correct backlog statistic for GSO packets (Ivan Vecera) [RHEL-75598]
  - tcp: populate XPS related fields of timewait sockets (Ivan Vecera) [RHEL-75598]
  - net: sched: cls_api: improve the error message for ID allocation failure (Ivan Vecera) [RHEL-75598]
  - selftests/tc-testing: add tests for qdisc_tree_reduce_backlog (Ivan Vecera) [RHEL-75598]
  - net: sched: propagate "skip_sw" flag to struct flow_cls_common_offload (Ivan Vecera) [RHEL-75598]
  - selftests: tc-testing: Fix typo error (Ivan Vecera) [RHEL-75598]
  - net/sched: act_api: unexport tcf_action_dump_1() (Ivan Vecera) [RHEL-75598]
  - net: sched: Use rtnl_register_many(). (Ivan Vecera) [RHEL-75598]
  - net/sched: cbs: Fix integer overflow in cbs_set_port_rate() (Ivan Vecera) [RHEL-75598]
  - ipv4: tcp: give socket pointer to control skbs (Ivan Vecera) [RHEL-75598]
  - ipv6: tcp: give socket pointer to control skbs (Ivan Vecera) [RHEL-75598]
  - net: add skb_set_owner_edemux() helper (Ivan Vecera) [RHEL-75598]
  - net_sched: sch_fq: prepare for TIME_WAIT sockets (Ivan Vecera) [RHEL-75598]
  - net: add TIME_WAIT logic to sk_to_full_sk() (Ivan Vecera) [RHEL-75598]
  - net_sched: sch_sfq: handle bigger packets (Ivan Vecera) [RHEL-75598]
  - net_sched: sch_fq: add the ability to offload pacing (Ivan Vecera) [RHEL-75598]
  - net: add IFLA_MAX_PACING_OFFLOAD_HORIZON device attribute (Ivan Vecera) [RHEL-75598]
  - netem: Include <linux/prandom.h> in sch_netem.c (Ivan Vecera) [RHEL-75598]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-113.el10]
changelog:
  - nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103236] {CVE-2025-38264}
  - usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-102858]
  - usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-102858]
  - usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-102858]
  - perf test probe_vfs_getname: Skip if no suitable line detected (Jakub Brnak) [RHEL-74228]
  - net: e1000e: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Corinna Vinschen) [RHEL-99400]
  - treewide: Switch/rename to timer_delete[_sync]() (Corinna Vinschen) [RHEL-99400]
  - e1000e: change k1 configuration on MTP and later platforms (Corinna Vinschen) [RHEL-99400]
  - e1000e: Fix real-time violations on link up (Corinna Vinschen) [RHEL-99400]
  - e1000e: Link NAPI instances to queues and IRQs (Corinna Vinschen) [RHEL-99400]
  - e1000e: Remove duplicated writel() in e1000_configure_tx/rx() (Corinna Vinschen) [RHEL-99400]
  - smb: client: fix perf regression with deferred closes (Paulo Alcantara) [RHEL-96872]
  - smb: client: disable path remapping with POSIX extensions (Paulo Alcantara) [RHEL-96872]
  - cifs: update internal version number (Paulo Alcantara) [RHEL-96872]
  - cifs: add documentation for smbdirect setup (Paulo Alcantara) [RHEL-96872]
  - cifs: do not disable interface polling on failure (Paulo Alcantara) [RHEL-96872]
  - cifs: serialize other channels when query server interfaces is pending (Paulo Alcantara) [RHEL-96872]
  - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-96872]
  - smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-96872]
  - smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-96872]
  - smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-96872]
  - smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-96872]
  - smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-96872]
  - smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-96872]
  - smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-96872]
  - smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-96872]
  - cifs: update the lock ordering comments with new mutex (Paulo Alcantara) [RHEL-96872]
  - cifs: dns resolution is needed only for primary channel (Paulo Alcantara) [RHEL-96872]
  - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-96872]
  - cifs: reset connections for all channels when reconnect requested (Paulo Alcantara) [RHEL-96872]
  - smb: client: use ParentLeaseKey in cifs_do_create (Paulo Alcantara) [RHEL-96872]
  - smb: client: use ParentLeaseKey in open_cached_dir (Paulo Alcantara) [RHEL-96872]
  - smb: client: add ParentLeaseKey support (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix cifs_query_path_info() for Windows NT servers (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix validation of SMB1 query reparse point response (Paulo Alcantara) [RHEL-96872]
  - cifs: Correctly set SMB1 SessionKey field in Session Setup Request (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix encoding of SMB1 Session Setup NTLMSSP Request in non-UNICODE mode (Paulo Alcantara) [RHEL-96872]
  - smb: client: add NULL check in automount_fullpath (Paulo Alcantara) [RHEL-96872]
  - smb: client: Remove an unused function and variable (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix undifferentiation of DIO reads from unbuffered reads (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix wait/wake to be consistent about the waitqueue used (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix the request's work item to not require a ref (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix setting of transferred bytes with short DIO reads (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix oops in write-retry from mis-resetting the subreq iterator (Paulo Alcantara) [RHEL-96872]
  - fs/netfs: remove unused flag NETFS_RREQ_BLOCKED (Paulo Alcantara) [RHEL-96872]
  - fs/netfs: remove unused flag NETFS_RREQ_DONT_UNLOCK_FOLIOS (Paulo Alcantara) [RHEL-96872]
  - folio_queue: remove unused field `marks3` (Paulo Alcantara) [RHEL-96872]
  - fs/netfs: declare field `proc_link` only if CONFIG_PROC_FS=y (Paulo Alcantara) [RHEL-96872]
  - fs/netfs: remove `netfs_io_request.ractl` (Paulo Alcantara) [RHEL-96872]
  - fs/netfs: reorder struct fields to eliminate holes (Paulo Alcantara) [RHEL-96872]
  - fs/netfs: remove unused enum choice NETFS_READ_HOLE_CLEAR (Paulo Alcantara) [RHEL-96872]
  - fs/netfs: remove unused flag NETFS_ICTX_WRITETHROUGH (Paulo Alcantara) [RHEL-96872]
  - fs/netfs: remove unused source NETFS_INVALID_WRITE (Paulo Alcantara) [RHEL-96872]
  - fs/netfs: remove unused flag NETFS_SREQ_SEEK_DATA_READ (Paulo Alcantara) [RHEL-96872]
  - lib/oid_registry.c: remove unused sprint_OID (Paulo Alcantara) [RHEL-96872]
  - netfs: Update main API document (Paulo Alcantara) [RHEL-96872]
  - smb: client: Reset all search buffer pointers when releasing buffer (Paulo Alcantara) [RHEL-96872]
  - smb: client: Fix use-after-free in cifs_fill_dirent (Paulo Alcantara) [RHEL-96872]
  - smb: client: fix zero rsize error messages (Paulo Alcantara) [RHEL-96872]
  - smb: client: fix memory leak during error handling for POSIX mkdir (Paulo Alcantara) [RHEL-96872]
  - smb: client: Avoid race in open_cached_dir with lease breaks (Paulo Alcantara) [RHEL-96872]
  - smb3 client: warn when parse contexts returns error on compounded operation (Paulo Alcantara) [RHEL-96872]
  - smb: client: ensure aligned IO sizes (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix changing times and read-only attr over SMB1 smb_set_file_info() function (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix and improve cifs_query_path_info() and cifs_query_file_info() (Paulo Alcantara) [RHEL-96872]
  - smb: client: fix zero length for mkdir POSIX create context (Paulo Alcantara) [RHEL-96872]
  - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-96872]
  - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-96872]
  - smb3 client: fix open hardlink on deferred close file error (Paulo Alcantara) [RHEL-96872]
  - netfs: Only create /proc/fs/netfs with CONFIG_PROC_FS (Paulo Alcantara) [RHEL-96872]
  - afs: Fix afs_dynroot_readdir() to not use the RCU read lock (Paulo Alcantara) [RHEL-96872]
  - smb3: Add defines for two new FileSystemAttributes (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix querying of WSL CHR and BLK reparse points over SMB1 (Paulo Alcantara) [RHEL-96872]
  - cifs: Split parse_reparse_point callback to functions: get buffer and parse buffer (Paulo Alcantara) [RHEL-96872]
  - cifs: Improve handling of name surrogate reparse points in reparse.c (Paulo Alcantara) [RHEL-96872]
  - cifs: Remove explicit handling of IO_REPARSE_TAG_MOUNT_POINT in inode.c (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix encoding of SMB1 Session Setup Kerberos Request in non-UNICODE mode (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix support for WSL-style symlinks (Paulo Alcantara) [RHEL-96872]
  - smb311 client: fix missing tcon check when mounting with linux/posix extensions (Paulo Alcantara) [RHEL-96872]
  - cifs: Ensure that all non-client-specific reparse points are processed by the server (Paulo Alcantara) [RHEL-96872]
  - cifs: update internal version number (Paulo Alcantara) [RHEL-96872]
  - cifs: Implement is_network_name_deleted for SMB1 (Paulo Alcantara) [RHEL-96872]
  - cifs: Remove cifs_truncate_page() as it should be superfluous (Paulo Alcantara) [RHEL-96872]
  - cifs: Do not add FILE_READ_ATTRIBUTES when using GENERIC_READ/EXECUTE/ALL (Paulo Alcantara) [RHEL-96872]
  - cifs: Improve SMB2+ stat() to work also without FILE_READ_ATTRIBUTES (Paulo Alcantara) [RHEL-96872]
  - cifs: Add fallback for SMB2 CREATE without FILE_READ_ATTRIBUTES (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix querying and creating MF symlinks over SMB1 (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix access_flags_to_smbopen_mode (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix negotiate retry functionality (Paulo Alcantara) [RHEL-96872]
  - cifs: Improve handling of NetBIOS packets (Paulo Alcantara) [RHEL-96872]
  - cifs: Allow to disable or force initialization of NetBIOS session (Paulo Alcantara) [RHEL-96872]
  - cifs: Add a new xattr system.smb3_ntsd_owner for getting or setting owner (Paulo Alcantara) [RHEL-96872]
  - cifs: Add a new xattr system.smb3_ntsd_sacl for getting or setting SACLs (Paulo Alcantara) [RHEL-96872]
  - smb: client: Update IO sizes after reconnection (Paulo Alcantara) [RHEL-96872]
  - smb: client: Store original IO parameters and prevent zero IO sizes (Paulo Alcantara) [RHEL-96872]
  - smb:client: smb: client: Add reverse mapping from tcon to superblocks (Paulo Alcantara) [RHEL-96872]
  - cifs: remove unreachable code in cifs_get_tcp_session() (Paulo Alcantara) [RHEL-96872]
  - cifs: fix integer overflow in match_server() (Paulo Alcantara) [RHEL-96872]
  - cifs: Add new mount option -o nounicode to disable SMB1 UNICODE mode (Paulo Alcantara) [RHEL-96872]
  - cifs: Set default Netbios RFC1001 server name to hostname in UNC (Paulo Alcantara) [RHEL-96872]
  - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-96872]
  - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-96872]
  - CIFS: Propagate min offload along with other parameters from primary to secondary channels. (Paulo Alcantara) [RHEL-96872]
  - cifs: Improve establishing SMB connection with NetBIOS session (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix establishing NetBIOS session for SMB2+ connection (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix getting DACL-only xattr system.cifs_acl and system.smb3_acl (Paulo Alcantara) [RHEL-96872]
  - cifs: Check if server supports reparse points before using them (Paulo Alcantara) [RHEL-96872]
  - cifs: avoid NULL pointer dereference in dbg call (Paulo Alcantara) [RHEL-96872]
  - smb: client: Remove redundant check in smb2_is_path_accessible() (Paulo Alcantara) [RHEL-96872]
  - smb: client: Remove redundant check in cifs_oplock_break() (Paulo Alcantara) [RHEL-96872]
  - smb: mark the new channel addition log as informational log with cifs_info (Paulo Alcantara) [RHEL-96872]
  - smb: minor cleanup to remove unused function declaration (Paulo Alcantara) [RHEL-96872]
  - mm/folio_queue: delete __folio_order and use folio_order directly (Paulo Alcantara) [RHEL-96872]
  - afs: Simplify cell record handling (Paulo Alcantara) [RHEL-96872]
  - afs: Fix afs_server ref accounting (Paulo Alcantara) [RHEL-96872]
  - afs: Use the per-peer app data provided by rxrpc (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Allow the app to store private data on peer structs (Paulo Alcantara) [RHEL-96872]
  - afs: Drop the net parameter from afs_unuse_cell() (Paulo Alcantara) [RHEL-96872]
  - afs: Make afs_lookup_cell() take a trace note (Paulo Alcantara) [RHEL-96872]
  - afs: Improve server refcount/active count tracing (Paulo Alcantara) [RHEL-96872]
  - afs: Improve afs_volume tracing to display a debug ID (Paulo Alcantara) [RHEL-96872]
  - afs: Change dynroot to create contents on demand (Paulo Alcantara) [RHEL-96872]
  - afs: Remove the "autocell" mount option (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix netfs_unbuffered_read() to return ssize_t rather than int (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix rolling_buffer_load_from_ra() to not clear mark bits (Paulo Alcantara) [RHEL-96872]
  - netfs: Call `invalidate_cache` only if implemented (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix collection of results during pause when collection offloaded (Paulo Alcantara) [RHEL-96872]
  - afs: Fix afs_atcell_get_link() to check if ws_cell is unset first (Paulo Alcantara) [RHEL-96872]
  - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix integer overflow while processing actimeo mount option (Paulo Alcantara) [RHEL-96872]
  - afs: Fix afs_atcell_get_link() to handle RCU pathwalk (Paulo Alcantara) [RHEL-96872]
  - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-96872]
  - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix the smb1 readv callback to correctly call netfs (Paulo Alcantara) [RHEL-96872]
  - afs: Give an afs_server object a ref on the afs_cell object it points to (Paulo Alcantara) [RHEL-96872]
  - afs: Fix the server_list to unuse a displaced server rather than putting it (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Fix locking issues with the peer record hash (Paulo Alcantara) [RHEL-96872]
  - rxrpc: peer->mtu_lock is redundant (Paulo Alcantara) [RHEL-96872]
  - rxrpc: rxperf: Fix missing decoding of terminal magic cookie (Paulo Alcantara) [RHEL-96872]
  - cifs: Treat unhandled directory name surrogate reparse points as mount directory nodes (Paulo Alcantara) [RHEL-96872]
  - cifs: Throw -EOPNOTSUPP error on unsupported reparse point type from parse_reparse_point() (Paulo Alcantara) [RHEL-96872]
  - smb311: failure to open files of length 1040 when mounting with SMB3.1.1 POSIX extensions (Paulo Alcantara) [RHEL-96872]
  - smb: client, common: Avoid multiple -Wflex-array-member-not-at-end warnings (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Fix ipv6 path MTU discovery (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix setting NETFS_RREQ_ALL_QUEUED to be after all subreqs queued (Paulo Alcantara) [RHEL-96872]
  - netfs: Add retry stat counters (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix a number of read-retry hangs (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Fix alteration of headers whilst zerocopy pending (Paulo Alcantara) [RHEL-96872]
  - cifs: pick channels for individual subrequests (Paulo Alcantara) [RHEL-96872]
  - smb: client: change lease epoch type from unsigned int to __u16 (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Fix race in call state changing vs recvmsg() (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Fix call state set to not include the SERVER_SECURING state (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Fix the rxrpc_connection attend queue handling (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix parsing native symlinks directory/file type (Paulo Alcantara) [RHEL-96872]
  - cifs: update internal version number (Paulo Alcantara) [RHEL-96872]
  - cifs: Add support for creating WSL-style symlinks (Paulo Alcantara) [RHEL-96872]
  - smb3: add support for IAKerb (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix struct FILE_ALL_INFO (Paulo Alcantara) [RHEL-96872]
  - cifs: Add support for creating NFS-style symlinks (Paulo Alcantara) [RHEL-96872]
  - cifs: Add support for creating native Windows sockets (Paulo Alcantara) [RHEL-96872]
  - cifs: Add mount option -o reparse=none (Paulo Alcantara) [RHEL-96872]
  - cifs: Add mount option -o symlink= for choosing symlink create type (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix creating and resolving absolute NT-style symlinks (Paulo Alcantara) [RHEL-96872]
  - cifs: Simplify reparse point check in cifs_query_path_info() function (Paulo Alcantara) [RHEL-96872]
  - cifs: Remove symlink member from cifs_open_info_data union (Paulo Alcantara) [RHEL-96872]
  - cifs: Update description about ACL permissions (Paulo Alcantara) [RHEL-96872]
  - cifs: Rename struct reparse_posix_data to reparse_nfs_data_buffer and move to common/smb2pdu.h (Paulo Alcantara) [RHEL-96872]
  - cifs: Remove struct reparse_posix_data from struct cifs_open_info_data (Paulo Alcantara) [RHEL-96872]
  - cifs: Remove unicode parameter from parse_reparse_point() function (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix getting and setting SACLs over SMB1 (Paulo Alcantara) [RHEL-96872]
  - cifs: Remove intermediate object of failed create SFU call (Paulo Alcantara) [RHEL-96872]
  - cifs: Validate EAs for WSL reparse points (Paulo Alcantara) [RHEL-96872]
  - cifs: Change translation of STATUS_PRIVILEGE_NOT_HELD to -EPERM (Paulo Alcantara) [RHEL-96872]
  - cifs: Change translation of STATUS_NOT_A_REPARSE_POINT to -ENODATA (Paulo Alcantara) [RHEL-96872]
  - cifs: Remove duplicate struct reparse_symlink_data and SYMLINK_FLAG_RELATIVE (Paulo Alcantara) [RHEL-96872]
  - cifs: Do not attempt to call CIFSGetSrvInodeNumber() without CAP_INFOLEVEL_PASSTHRU (Paulo Alcantara) [RHEL-96872]
  - cifs: Do not attempt to call CIFSSMBRenameOpenFile() without CAP_INFOLEVEL_PASSTHRU (Paulo Alcantara) [RHEL-96872]
  - cifs: Remove declaration of dead CIFSSMBQuerySymLink function (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix printing Status code into dmesg (Paulo Alcantara) [RHEL-96872]
  - cifs: Add missing NT_STATUS_* codes from nterr.h to nterr.c (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix endian types in struct rfc1002_session_packet (Paulo Alcantara) [RHEL-96872]
  - afs: Make /afs/@cell and /afs/.@cell symlinks (Paulo Alcantara) [RHEL-96872]
  - afs: Add rootcell checks (Paulo Alcantara) [RHEL-96872]
  - afs: Make /afs/.<cell> as well as /afs/<cell> mountpoints (Paulo Alcantara) [RHEL-96872]
  - netfs: Report on NULL folioq in netfs_writeback_unlock_folios() (Paulo Alcantara) [RHEL-96872]
  - afs: Add a tracepoint for afs_read_receive() (Paulo Alcantara) [RHEL-96872]
  - afs: Locally initialise the contents of a new symlink on creation (Paulo Alcantara) [RHEL-96872]
  - afs: Use the contained hashtable to search a directory (Paulo Alcantara) [RHEL-96872]
  - afs: Make afs_mkdir() locally initialise a new directory's content (Paulo Alcantara) [RHEL-96872]
  - netfs: Change the read result collector to only use one work item (Paulo Alcantara) [RHEL-96872]
  - afs: Make {Y,}FS.FetchData an asynchronous operation (Paulo Alcantara) [RHEL-96872]
  - afs: Eliminate afs_read (Paulo Alcantara) [RHEL-96872]
  - afs: Use netfslib for symlinks, allowing them to be cached (Paulo Alcantara) [RHEL-96872]
  - afs: Use netfslib for directories (Paulo Alcantara) [RHEL-96872]
  - afs: Make afs_init_request() get a key if not given a file (Paulo Alcantara) [RHEL-96872]
  - netfs: Add support for caching single monolithic objects such as AFS dirs (Paulo Alcantara) [RHEL-96872]
  - netfs: Add functions to build/clean a buffer in a folio_queue (Paulo Alcantara) [RHEL-96872]
  - afs: Add more tracepoints to do with tracking validity (Paulo Alcantara) [RHEL-96872]
  - cachefiles: Add auxiliary data trace (Paulo Alcantara) [RHEL-96872]
  - cachefiles: Add some subrequest tracepoints (Paulo Alcantara) [RHEL-96872]
  - netfs: Remove some extraneous directory invalidations (Paulo Alcantara) [RHEL-96872]
  - afs: Don't use mutex for I/O operation lock (Paulo Alcantara) [RHEL-96872]
  - netfs: Don't use bh spinlock (Paulo Alcantara) [RHEL-96872]
  - netfs: Drop the was_async arg from netfs_read_subreq_terminated() (Paulo Alcantara) [RHEL-96872]
  - netfs: Drop the error arg from netfs_read_subreq_terminated() (Paulo Alcantara) [RHEL-96872]
  - netfs: Split retry code out of fs/netfs/write_collect.c (Paulo Alcantara) [RHEL-96872]
  - netfs: Make netfs_advance_write() return size_t (Paulo Alcantara) [RHEL-96872]
  - netfs: Abstract out a rolling folio buffer implementation (Paulo Alcantara) [RHEL-96872]
  - netfs: Add a tracepoint to log the lifespan of folio_queue structs (Paulo Alcantara) [RHEL-96872]
  - netfs: Use a folio_queue allocation and free functions (Paulo Alcantara) [RHEL-96872]
  - cachefiles: Clean up some whitespace in trace header (Paulo Alcantara) [RHEL-96872]
  - netfs: Clean up some whitespace in trace header (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Fix ability to add more data to a call once MSG_MORE deasserted (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Disable IRQ, not BH, to take the lock for ->attend_link (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Implement RACK/TLP to deal with transmission stalls [RFC8985] (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Fix request for an ACK when cwnd is minimum (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Manage RTT per-call rather than per-peer (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Add a reason indicator to the tx_ack tracepoint (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Add a reason indicator to the tx_data tracepoint (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Tidy up the ACK parsing a bit (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Use irq-disabling spinlocks between app and I/O thread (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Don't allocate a txbuf for an ACK transmission (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Send jumbo DATA packets (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Fix initial resend timeout (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Fix the calculation and use of RTO (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Display userStatus in rxrpc_rx_ack trace (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Adjust the rxrpc_rtt_rx tracepoint (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Generate rtt_min (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Don't use received skbuff timestamps (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Store the DATA serial in the txqueue and use this in RTT calc (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Use the new rxrpc_tx_queue struct to more efficiently process ACKs (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Adjust names and types of congestion-related fields (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Display stats about jumbo packets transmitted and received (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Replace call->acks_first_seq with tracking of the hard ACK point (Paulo Alcantara) [RHEL-96872]
  - rxrpc: call->acks_hard_ack is now the same call->tx_bottom, so remove it (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Implement progressive transmission queue struct (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Don't need barrier for ->tx_bottom and ->acks_hard_ack (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Timestamp DATA packets before transmitting them (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Only set DF=1 on initial DATA transmission (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Fix injection of packet loss (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Fix CPU time starvation in I/O thread (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Add a tracepoint to show variables pertinent to jumbo packet size (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Prepare to be able to send jumbo DATA packets (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Separate the packet length from the data length in rxrpc_txbuf (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Implement path-MTU probing using padded PING ACKs (RFC8899) (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Use a large kvec[] in rxrpc_local rather than every rxrpc_txbuf (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Request an ACK on impending Tx stall (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Show stats counter for received reason-0 ACKs (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Don't set the MORE-PACKETS rxrpc wire header flag (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Clean up Tx header flags generation handling (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Use umin() and umax() rather than min_t()/max_t() where possible (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Fix handling of received connection abort (Paulo Alcantara) [RHEL-96872]
  - ktime: Add us_to_ktime() (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix read-retry for fs with no ->prepare_read() (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix kernel async DIO (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix is-caching check in read-retry (Paulo Alcantara) [RHEL-96872]
  - netfs: Work around recursion by abandoning retry if nothing read (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix missing barriers by using clear_and_wake_up_bit() (Paulo Alcantara) [RHEL-96872]
  - netfs: Remove redundant use of smp_rmb() (Paulo Alcantara) [RHEL-96872]
  - cachefiles: Parse the "secctx" immediately (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix enomem handling in buffered reads (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix non-contiguous donation between completed reads (Paulo Alcantara) [RHEL-96872]
  - cifs: update internal version number (Paulo Alcantara) [RHEL-96872]
  - fscache: Remove duplicate included header (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Add a tracepoint for aborts being proposed (Paulo Alcantara) [RHEL-96872]
  - netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING (Paulo Alcantara) [RHEL-96872]
  - cachefiles: Fix NULL pointer dereference in object->file (Paulo Alcantara) [RHEL-96872]
  - cachefiles: Clean up in cachefiles_commit_tmpfile() (Paulo Alcantara) [RHEL-96872]
  - cachefiles: Fix missing pos updates in cachefiles_ondemand_fd_write_iter() (Paulo Alcantara) [RHEL-96872]
  - cachefiles: Fix incorrect length return value in cachefiles_ondemand_fd_write_iter() (Paulo Alcantara) [RHEL-96872]
  - convert cifs_ioctl_copychunk() (Paulo Alcantara) [RHEL-96872]
  - netfs: Remove unnecessary references to pages (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix a few minor bugs in netfs_page_mkwrite() (Paulo Alcantara) [RHEL-96872]
  - netfs: Remove call to folio_index() (Paulo Alcantara) [RHEL-96872]
  - mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (Ivan Vecera) [RHEL-94570]
  - mlxsw: spectrum_acl_bloom_filter: Workaround for some LLVM versions (Ivan Vecera) [RHEL-94570]
  - selftests: vxlan_bridge: Test flood with unresolved FDB entry (Ivan Vecera) [RHEL-94570]
  - mlxsw: Add VXLAN bridge ports to same hardware domain as physical bridge ports (Ivan Vecera) [RHEL-94570]
  - mlxsw: spectrum_switchdev: Move mlxsw_sp_bridge_vxlan_join() (Ivan Vecera) [RHEL-94570]
  - mlxsw: spectrum_switchdev: Add an internal API for VXLAN leave (Ivan Vecera) [RHEL-94570]
  - mlxsw: spectrum: Call mlxsw_sp_bridge_vxlan_{join, leave}() for VLAN-aware bridge (Ivan Vecera) [RHEL-94570]
  - mlxsw: Trap ARP packets at layer 2 instead of layer 3 (Ivan Vecera) [RHEL-94570]
  - mlxsw: Add return value check for mlxsw_sp_port_get_stats_raw() (Ivan Vecera) [RHEL-94570]
  - mlxsw: Enable Tx checksum offload (Ivan Vecera) [RHEL-94570]
  - mlxsw: spectrum_router: Remove unused functions (Ivan Vecera) [RHEL-94570]
  - mlxsw: Do not store Tx header length as driver parameter (Ivan Vecera) [RHEL-94570]
  - mlxsw: Move Tx header handling to PCI driver (Ivan Vecera) [RHEL-94570]
  - mlxsw: Define Tx header fields in txheader.h (Ivan Vecera) [RHEL-94570]
  - mlxsw: Initialize txhdr_info according to PTP operations (Ivan Vecera) [RHEL-94570]
  - mlxsw: Add mlxsw_txhdr_info structure (Ivan Vecera) [RHEL-94570]
  - net/mlxfw: Drop hard coded max FW flash image size (Ivan Vecera) [RHEL-94570]
  - mlxsw: Switch to napi_gro_receive() (Ivan Vecera) [RHEL-94570]
  - mlxsw: spectrum_flower: Do not allow mixing sample and mirror actions (Ivan Vecera) [RHEL-94570]
  - selftests: mlxsw: sharedbuffer: Ensure no extra packets are counted (Ivan Vecera) [RHEL-94570]
  - selftests: mlxsw: sharedbuffer: Remove duplicate test cases (Ivan Vecera) [RHEL-94570]
  - selftests: mlxsw: sharedbuffer: Remove h1 ingress test case (Ivan Vecera) [RHEL-94570]
  - mlxsw: spectrum_acl_flex_keys: Use correct key block on Spectrum-4 (Ivan Vecera) [RHEL-94570]
  - selftests: mlxsw: devlink_trap_police: Use defer for test cleanup (Ivan Vecera) [RHEL-94570]
  - selftests: mlxsw: qos_max_descriptors: Use defer for test cleanup (Ivan Vecera) [RHEL-94570]
  - selftests: mlxsw: qos_ets_strict: Use defer for test cleanup (Ivan Vecera) [RHEL-94570]
  - selftests: mlxsw: qos_mc_aware: Use defer for test cleanup (Ivan Vecera) [RHEL-94570]
  - selftests: mlxsw: sch_red_core: Lower TBF rate (Ivan Vecera) [RHEL-94570]
  - selftests: mlxsw: sch_red_core: Send more packets for drop tests (Ivan Vecera) [RHEL-94570]
  - selftests: mlxsw: sch_red_core: Sleep before querying queue depth (Ivan Vecera) [RHEL-94570]
  - selftests: mlxsw: sch_red_core: Increase backlog size tolerance (Ivan Vecera) [RHEL-94570]
  - selftests: mlxsw: sch_red_ets: Increase required backlog (Ivan Vecera) [RHEL-94570]
  - mlxsw: spectrum_acl_flex_keys: Constify struct mlxsw_afk_element_inst (Ivan Vecera) [RHEL-94570]
  - selftests: mlxsw: rtnetlink: Use devlink_reload() API (Ivan Vecera) [RHEL-94570]
  - x86/its: Fix an ifdef typo in its_alloc() (Waiman Long) [RHEL-91960]
  - Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-91960]
  - tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-91960]
  - x86/its: explicitly manage permissions for ITS pages (Waiman Long) [RHEL-91960]
  - x86/its: move its_pages array to struct mod_arch_specific (Waiman Long) [RHEL-91960]
  - x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-91960]
  - x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-91960]
  - tools headers x86 cpufeatures: Sync with the kernel sources to pick ZEN6 and Indirect Target Selection (ITS) bits (Waiman Long) [RHEL-91960]
  - tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-91960]
  - x86/its: Fix build errors when CONFIG_MODULES=n (Waiman Long) [RHEL-91960]
  - arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-91960]
  - arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-91960] {CVE-2025-37963}
  - arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-91960] {CVE-2025-37948}
  - arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-91960]
  - arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-91960]
  - arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-91960]
  - redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-91960]
  - selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-91960 RHEL-92176] {CVE-2024-28956}
  - x86/its: Use dynamic thunks for indirect branches (Waiman Long) [RHEL-91960 RHEL-92176] {CVE-2024-28956}
  - x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-91960 RHEL-92176] {CVE-2024-28956}
  - mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-91960 RHEL-92176] {CVE-2024-28956}
  - x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-91960 RHEL-92176] {CVE-2024-28956}
  - x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-91960 RHEL-92176] {CVE-2024-28956}
  - x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-91960 RHEL-92176] {CVE-2024-28956}
  - x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-91960 RHEL-92176] {CVE-2024-28956}
  - x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-91960 RHEL-92176] {CVE-2024-28956}
  - x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-91960 RHEL-92176] {CVE-2024-28956}
  - x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-91960 RHEL-92176] {CVE-2024-28956}
  - Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-91960 RHEL-92176] {CVE-2024-28956}
  - x86/bhi: Do not set BHI_DIS_S in 32-bit mode (Waiman Long) [RHEL-91960]
  - x86/bpf: Add IBHF call at end of classic BPF (Waiman Long) [RHEL-91960]
  - x86/bpf: Call branch history clearing sequence on exit (Waiman Long) [RHEL-91960]
  - x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-91960]
  - x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-91960]
  - x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-91960]
  - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-91960]
  - x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-91960]
  - x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-91960]
  - x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-91960]
  - x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-91960]
  - x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-91960]
  - x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-91960]
  - x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-91960]
  - x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-91960]
  - x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-91960]
  - x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-91960]
  - arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-91960]
  - arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-91960]
  - x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-91960]
  - x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-91960]
  - x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-91960]
  - x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-91960]
  - x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-91960]
  - module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-91960]
  - x86: re-enable EXECMEM_ROX support (Waiman Long) [RHEL-91960]
  - module: drop unused module_writable_address() (Waiman Long) [RHEL-91960]
  - Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-91960]
  - module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-91960]
  - execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-91960]
  - execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-91960]
  - x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-91960]
  - x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-91960]
  - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-91960]
  - Enable the gs_usb CAN bus driver in RHEL (Radu Rendec) [RHEL-90131]
  - iommu/vt-d: Assign devtlb cache tag on ATS enablement (Jerry Snitselaar) [RHEL-89891]
  - iommu/vt-d: Restore context entry setup order for aliased devices (Jerry Snitselaar) [RHEL-89891]
  - iommu: remove duplicate selection of DMAR_TABLE (Jerry Snitselaar) [RHEL-89891]
  - iommu/io-pgtable-arm: dynamically allocate selftest device struct (Jerry Snitselaar) [RHEL-89891]
  - iommu: Allow attaching static domains in iommu_attach_device_pasid() (Jerry Snitselaar) [RHEL-89891]
  - iommu: Protect against overflow in iommu_pgsize() (Jerry Snitselaar) [RHEL-89891]
  - dma-mapping: fix missing clear bdr in check_ram_in_range_map() (Jerry Snitselaar) [RHEL-89891]
  - iommu: Skip PASID validation for devices without PASID capability (Jerry Snitselaar) [RHEL-95265]
  - iommu: ipmmu-vmsa: avoid Wformat-security warning (Jerry Snitselaar) [RHEL-89891]
  - iommu: Handle yet another race around registration (Jerry Snitselaar) [RHEL-89891]
  - iommu/arm-smmu-v3: Fix incorrect return in arm_smmu_attach_dev (Jerry Snitselaar) [RHEL-89891]
  - platform: Fix race condition during DMA configure at IOMMU probe time (Jerry Snitselaar) [RHEL-89891]
  - software node: Prevent link creation failure from causing kobj reference count imbalance (Jerry Snitselaar) [RHEL-73600]
  - PCI: Run quirk_huawei_pcie_sva() before arm_smmu_probe_device() (Jerry Snitselaar) [RHEL-89891]
  - iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57) (Jerry Snitselaar) [RHEL-89891]
  - iommu/vt-d: Revert ATS timing change to fix boot failure (Jerry Snitselaar) [RHEL-89891]
  - iommu: Fix two issues in iommu_copy_struct_from_user() (Jerry Snitselaar) [RHEL-89891]
  - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (Jerry Snitselaar) [RHEL-89891]
  - iommu/arm-smmu-v3: Fail aliasing StreamIDs more gracefully (Jerry Snitselaar) [RHEL-89891]
  - iommu/arm-smmu-v3: Fix iommu_device_probe bug due to duplicated stream ids (Jerry Snitselaar) [RHEL-89891]
  - iommu/arm-smmu-v3: Fix pgsize_bit for sva domains (Jerry Snitselaar) [RHEL-89891 RHEL-92494]
  - iommu/arm-smmu-v3: Add missing S2FWB feature detection (Jerry Snitselaar) [RHEL-89891]
  - dma-coherent: Warn if OF reserved memory is beyond current coherent DMA mask (Jerry Snitselaar) [RHEL-89891]
  - dma-mapping: Fix warning reported for missing prototype (Jerry Snitselaar) [RHEL-89891]
  - dma-mapping: avoid potential unused data compilation warning (Jerry Snitselaar) [RHEL-89891]
  - dma/mapping.c: dev_dbg support for dma_addressing_limited (Jerry Snitselaar) [RHEL-89891]
  - dma/contiguous: avoid warning about unused size_bytes (Jerry Snitselaar) [RHEL-89891]
  - iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() (Jerry Snitselaar) [RHEL-89891]
  - iommu: remove unneeded semicolon (Jerry Snitselaar) [RHEL-89891]
  - iommu/ipmmu-vmsa: Register in a sensible order (Jerry Snitselaar) [RHEL-89891]
  - iommu: Clear iommu-dma ops on cleanup (Jerry Snitselaar) [RHEL-89891]
  - iommu/vt-d: Remove an unnecessary call set_dma_ops() (Jerry Snitselaar) [RHEL-89891]
  - iommu/vt-d: Wire up irq_ack() to irq_move_irq() for posted MSIs (Jerry Snitselaar) [RHEL-89891]
  - iommu: Fix crash in report_iommu_fault() (Jerry Snitselaar) [RHEL-89891]
  - iommufd: Test attach before detaching pasid (Jerry Snitselaar) [RHEL-89891]
  - iommufd: Fix iommu_vevent_header tables markup (Jerry Snitselaar) [RHEL-89891]
  - iommu: Convert unreachable() to BUG() (Jerry Snitselaar) [RHEL-89891]
  - iommufd: Balance veventq->num_events inc/dec (Jerry Snitselaar) [RHEL-73596]
  - iommufd: Initialize the flags of vevent in iommufd_viommu_report_event() (Jerry Snitselaar) [RHEL-73596]
  - vfio: VFIO_DEVICE_[AT|DE]TACH_IOMMUFD_PT support pasid (Jerry Snitselaar) [RHEL-73603]
  - vfio-iommufd: Support pasid [at|de]tach for physical VFIO devices (Jerry Snitselaar) [RHEL-73603]
  - ida: Add ida_find_first_range() (Jerry Snitselaar) [RHEL-73603]
  - iommufd/selftest: Add coverage for reporting max_pasid_log2 via IOMMU_HW_INFO (Jerry Snitselaar) [RHEL-73603]
  - iommufd: Extend IOMMU_GET_HW_INFO to report PASID capability (Jerry Snitselaar) [RHEL-73603]
  - iommufd/selftest: Add coverage for iommufd pasid attach/detach (Jerry Snitselaar) [RHEL-73600]
  - iommufd/selftest: Add test ops to test pasid attach/detach (Jerry Snitselaar) [RHEL-73600]
  - iommufd/selftest: Add a helper to get test device (Jerry Snitselaar) [RHEL-73600]
  - iommufd/selftest: Add set_dev_pasid in mock iommu (Jerry Snitselaar) [RHEL-73600]
  - iommufd: Allow allocating PASID-compatible domain (Jerry Snitselaar) [RHEL-73600]
  - iommu/vt-d: Add IOMMU_HWPT_ALLOC_PASID support (Jerry Snitselaar) [RHEL-73600]
  - iommufd: Enforce PASID-compatible domain for RID (Jerry Snitselaar) [RHEL-73600]
  - iommufd: Support pasid attach/replace (Jerry Snitselaar) [RHEL-73600]
  - iommufd: Enforce PASID-compatible domain in PASID path (Jerry Snitselaar) [RHEL-73600]
  - iommufd/device: Add pasid_attach array to track per-PASID attach (Jerry Snitselaar) [RHEL-73600]
  - iommufd/device: Replace device_list with device_array (Jerry Snitselaar) [RHEL-73600]
  - iommufd/device: Wrap igroup->hwpt and igroup->device_list into attach struct (Jerry Snitselaar) [RHEL-73600]
  - iommufd/device: Add helper to detect the first attach of a group (Jerry Snitselaar) [RHEL-73600]
  - iommufd/device: Replace idev->igroup with local variable (Jerry Snitselaar) [RHEL-73600]
  - iommufd/device: Only add reserved_iova in non-pasid path (Jerry Snitselaar) [RHEL-73600]
  - iommufd: Pass @pasid through the device attach/replace path (Jerry Snitselaar) [RHEL-73600]
  - iommu: Introduce a replace API for device pasid (Jerry Snitselaar) [RHEL-73600]
  - iommu: Require passing new handles to APIs supporting handle (Jerry Snitselaar) [RHEL-73600]
  - iommu: Drop sw_msi from iommu_domain (Jerry Snitselaar) [RHEL-88960]
  - iommufd: Move iommufd_sw_msi and related functions to driver.c (Jerry Snitselaar) [RHEL-88960]
  - iommu/dma: Remove redundant locking (Jerry Snitselaar) [RHEL-89891]
  - iommu: Sort out domain user data (Jerry Snitselaar) [RHEL-88960]
  - iommu/arm-smmu-v3: Set MEV bit in nested STE for DoS mitigations (Jerry Snitselaar) [RHEL-73596]
  - iommu/arm-smmu-v3: Report events that belong to devices attached to vIOMMU (Jerry Snitselaar) [RHEL-73596]
  - iommu/arm-smmu-v3: Introduce struct arm_smmu_vmaster (Jerry Snitselaar) [RHEL-73596]
  - Documentation: userspace-api: iommufd: Update FAULT and VEVENTQ (Jerry Snitselaar) [RHEL-73596]
  - iommufd/selftest: Add IOMMU_VEVENTQ_ALLOC test coverage (Jerry Snitselaar) [RHEL-73596]
  - iommufd/selftest: Add IOMMU_TEST_OP_TRIGGER_VEVENT for vEVENTQ coverage (Jerry Snitselaar) [RHEL-73596]
  - iommufd/selftest: Require vdev_id when attaching to a nested domain (Jerry Snitselaar) [RHEL-73596]
  - iommufd/viommu: Add iommufd_viommu_report_event helper (Jerry Snitselaar) [RHEL-73596]
  - iommufd/viommu: Add iommufd_viommu_get_vdev_id helper (Jerry Snitselaar) [RHEL-73596]
  - iommufd: Add IOMMUFD_OBJ_VEVENTQ and IOMMUFD_CMD_VEVENTQ_ALLOC (Jerry Snitselaar) [RHEL-73596]
  - iommufd: Rename fault.c to eventq.c (Jerry Snitselaar) [RHEL-73596]
  - iommufd: Abstract an iommufd_eventq from iommufd_fault (Jerry Snitselaar) [RHEL-73596]
  - iommufd/fault: Add an iommufd_fault_init() helper (Jerry Snitselaar) [RHEL-73596]
  - iommufd/fault: Move two fault functions out of the header (Jerry Snitselaar) [RHEL-73596]
  - iommufd: Fail replace if device has not been attached (Jerry Snitselaar) [RHEL-73596]
  - iommufd: Set domain->iommufd_hwpt in all hwpt->domain allocators (Jerry Snitselaar) [RHEL-73596]
  - iommufd: Fix uninitialized rc in iommufd_access_rw() (Jerry Snitselaar) [RHEL-73596]
  - iommufd: Disallow allocating nested parent domain with fault ID (Jerry Snitselaar) [RHEL-73596]
  - iommu/amd: Consolidate protection domain free code (Jerry Snitselaar) [RHEL-89891]
  - iommu/amd: Remove unused forward declaration (Jerry Snitselaar) [RHEL-89891]
  - iommu/amd: Remove outdated comment (Jerry Snitselaar) [RHEL-89891]
  - iommu/amd/pgtbl_v2: Improve error handling (Jerry Snitselaar) [RHEL-89891]
  - iommu/amd: Remove unused variable (Jerry Snitselaar) [RHEL-89891]
  - iommu/amd: Log IOMMU control register in event log path (Jerry Snitselaar) [RHEL-89891]
  - iommu/vt-d: Don't clobber posted vCPU IRTE when host IRQ affinity changes (Jerry Snitselaar) [RHEL-89891]
  - iommu/vt-d: Put IRTE back into posted MSI mode if vCPU posting is disabled (Jerry Snitselaar) [RHEL-89891]
  - iommu/vt-d: Cleanup intel_context_flush_present() (Jerry Snitselaar) [RHEL-89891]
  - iommu/vt-d: Move PRI enablement in probe path (Jerry Snitselaar) [RHEL-89891]
  - iommu/vt-d: Move scalable mode ATS enablement to probe path (Jerry Snitselaar) [RHEL-89891]
  - iommu/vt-d: Check if SVA is supported when attaching the SVA domain (Jerry Snitselaar) [RHEL-89891]
  - iommu/vt-d: Use virt_to_phys() (Jerry Snitselaar) [RHEL-89891]
  - iommu/vt-d: Fix system hang on reboot -f (Jerry Snitselaar) [RHEL-89891]
  - iommu: Don't warn prematurely about dodgy probes (Jerry Snitselaar) [RHEL-89891]
  - iommu: Get DT/ACPI parsing into the proper probe path (Jerry Snitselaar) [RHEL-89891]
  - iommu: Keep dev->iommu state consistent (Jerry Snitselaar) [RHEL-89891]
  - iommu: Resolve ops in iommu_init_device() (Jerry Snitselaar) [RHEL-89891]
  - iommu: Handle race with default domain setup (Jerry Snitselaar) [RHEL-89891]
  - iommu: Unexport iommu_fwspec_free() (Jerry Snitselaar) [RHEL-89891]
  - iommu: Swap the order of setting group->pasid_array and calling attach op of iommu drivers (Jerry Snitselaar) [RHEL-89891]
  - iommu: Store either domain or handle in group->pasid_array (Jerry Snitselaar) [RHEL-89891]
  - iommu: Drop iommu_group_replace_domain() (Jerry Snitselaar) [RHEL-89891]
  - iommu: Make @handle mandatory in iommu_{attach|replace}_group_handle() (Jerry Snitselaar) [RHEL-89891]
  - iommufd: Implement sw_msi support natively (Jerry Snitselaar) [RHEL-73588]
  - iommu: Turn fault_data to iommufd private pointer (Jerry Snitselaar) [RHEL-73588]
  - irqchip: Have CONFIG_IRQ_MSI_IOMMU be selected by irqchips that need it (Jerry Snitselaar) [RHEL-73588]
  - iommu: Make iommu_dma_prepare_msi() into a generic operation (Jerry Snitselaar) [RHEL-73588]
  - genirq/msi: Refactor iommu_dma_compose_msi_msg() (Jerry Snitselaar) [RHEL-73588]
  - genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie (Jerry Snitselaar) [RHEL-73588]
  - iommufd/fault: Remove iommufd_fault_domain_attach/detach/replace_dev() (Jerry Snitselaar) [RHEL-88959]
  - iommufd: Make attach_handle generic than fault specific (Jerry Snitselaar) [RHEL-88959]
  - iommu/arm-smmu: Set rpm auto_suspend once during probe (Jerry Snitselaar) [RHEL-89891]
  - redhat/configs: Enable early lockdown for Arm (Mark Salter) [RHEL-82437]
  - arm64: add early lockdown for secure boot (Mark Salter) [RHEL-82437]
  - efi: pass secure boot mode to kernel proper (Mark Salter) [RHEL-82437]


author: Julien Rische <jrische@redhat.com> - 1.21.2-1
changelog:
  - New upstream version (1.21.2)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
    Resolves: rhbz#2229113
  - Make tests compatible with Python 3.12
    Resolves: rhbz#2224013


author: Julien Rische <jrische@redhat.com> - 1.21.2-3
changelog:
  - Fix double free in klist's show_ccache()
    Resolves: rhbz#2257301
  - Store krb5-tests files in architecture-specific directories
    Resolves: rhbz#2244601


author: Julien Rische <jrische@redhat.com> - 1.21.3-1
changelog:
  - New upstream version (1.21.3)
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45387 RHEL-45378
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-47284
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-47287
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-47285
  - Make TCP waiting time configurable
    Resolves: RHEL-47278


author: Julien Rische <jrische@redhat.com> - 1.21.3-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55427
  - Fix various issues detected by static analysis
    Resolves: RHEL-45165
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-56070


author: Julien Rische <jrische@redhat.com> - 1.21.3-6
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74373
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56058
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-71881


author: Julien Rische <jrische@redhat.com> - 1.21.3-8
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88705
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88047
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-74295


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.7.7-1
changelog:
  - Rebase to version 3.7.7
  - Fixing SAST issues, accepted by upstream
  - Resolves: RHEL-39391 RHEL-67895


author: Marek Polacek <polacek@redhat.com>
changelog:
  - enable hardening and configure with --enable-host-pie --enable-host-bind-now
    on RHEL
  - don't require rocm-runtime on RHEL


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.1.0 release
    - PRs analyzer/111475, c++/89224, c++/114856, c++/114889, c++/114935,
  	ipa/92606, middle-end/114734, middle-end/114907, modula2/113768,
  	modula2/114133, modula2/114929, rtl-optimization/114924,
  	sanitizer/114956, tree-optimization/114876,
  	tree-optimization/114921, tree-optimization/114965


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-4
changelog:
  - update from releases/gcc-14 branch
    - PRs c++/114901, c++/114903, c++/114974, c++/114994, c++/115114,
  	c++/115139, driver/114980, fortran/114827, fortran/114874,
  	fortran/115039, libstdc++/107800, libstdc++/114866, libstdc++/114891,
  	libstdc++/115015, libstdc++/115063, libstdc++/115119,
  	middle-end/114931, sanitizer/115172, target/69374, target/112959,
  	target/114968, target/114975, target/114981, target/115065,
  	target/115069, tree-optimization/114998, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-5
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/115270, c/114493, c++/105320, c++/114275, c++/114868, c++/114983,
  	c++/115187, fortran/86100, fortran/115150, libstdc++/109849,
  	libstdc++/111641, libstdc++/114940, libstdc++/115099,
  	libstdc++/115269, libstdc++/115335, middle-end/108789,
  	middle-end/115352, modula2/114886, rtl-optimization/114902,
  	rtl-optimization/115038, rtl-optimization/115092, target/113719,
  	target/115169, target/115297, target/115317, target/115324,
  	tree-optimization/115149, tree-optimization/115192,
  	tree-optimization/115197, tree-optimization/115232,
  	tree-optimization/115307, tree-optimization/115337


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-6
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/114398, ada/114708, c/115290, c++/99678, c++/115239, c++/115283,
  	c++/115378, c++/115511, driver/115440, fortran/83865, jit/115442,
  	libstdc++/114958, libstdc++/115247, libstdc++/115308,
  	rtl-optimization/115281, target/109549, target/111343, target/115253,
  	target/115353, target/115360, tree-optimization/115544
    - fix s390x ICEs with vector permutations from memory (#2293207, #2292501)


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-7
changelog:
  - update from releases/gcc-14 branch
    - PRs c/114930, c/115502, c/115587, c++/115198, c++/115358, c++/115504,
  	c++/115624, fortran/114019, fortran/115390, libstdc++/115454,
  	libstdc++/115575, libstdc++/115668, target/106069, target/114846,
  	target/115342, target/115355, target/115608, tree-optimization/115278,
  	tree-optimization/115508
  - revert the August 2016 workaround for python bytecode compilation (#2294381)


author: Jakub Jelinek <jakub@redhat.com> 14.2.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.2 release
    - PRs analyzer/114899, c++/99241, c++/99242, c++/104981, c++/106760,
  	c++/111890, c++/115165, c++/115476, c++/115550, c++/115561,
  	c++/115583, c++/115623, c++/115754, c++/115783, c++/115865,
  	c++/115897, c++/115900, c++/115986, fortran/59104, fortran/84006,
  	fortran/93635, fortran/98534, fortran/99798, fortran/100027,
  	fortran/103115, fortran/103312, fortran/113363, fortran/115700,
  	ipa/111613, ipa/113291, ipa/113787, ipa/114207, ipa/115033,
  	ipa/115277, ipa/116055, libstdc++/113376, libstdc++/114387,
  	libstdc++/115399, libstdc++/115482, libstdc++/115522,
  	libstdc++/115585, libstdc++/115807, libstdc++/115854,
  	libstdc++/116070, middle-end/115527, middle-end/115836,
  	middle-end/115887, pch/115312, rtl-optimization/115049,
  	rtl-optimization/115565, target/87376, target/88236, target/97367,
  	target/98762, target/105090, target/113715, target/114759,
  	target/114890, target/114936, target/114988, target/115068,
  	target/115153, target/115188, target/115351, target/115389,
  	target/115456, target/115457, target/115459, target/115475,
  	target/115526, target/115554, target/115562, target/115591,
  	target/115611, target/115691, target/115725, target/115726,
  	target/115752, target/115763, target/115840, target/115872,
  	target/115978, target/115981, target/115988, target/116035,
  	testsuite/115826, testsuite/116061, tree-optimization/113673,
  	tree-optimization/115382, tree-optimization/115646,
  	tree-optimization/115669, tree-optimization/115694,
  	tree-optimization/115701, tree-optimization/115723,
  	tree-optimization/115841, tree-optimization/115843,
  	tree-optimization/115867, tree-optimization/115868,
  	tree-optimization/116034, tree-optimization/116057


author: Joseph Myers <josmyers@redhat.com> - 14.2.1-6
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/114593, ada/114636, ada/114640, ada/115535, ada/116190,
  	ada/116430, ada/116551, c/116726, c/117230, c++/88313, c++/96097,
  	c++/112288, c++/115296, c++/115361, c++/115656, c++/115987,
  	c++/116071, c++/116219, c++/116223, c++/116276, c++/116320,
  	c++/116327, c++/116369, c++/116384, c++/116418, c++/116424,
  	c++/116449, c++/116476, c++/116492, c++/116534, c++/116567,
  	c++/116606, c++/116636, c++/116676, c++/116678, c++/116929,
  	c++/117054, c++/117107, c++/117259, c++/117274, fortran/79685,
  	fortran/84868, fortran/100273, fortran/108889, fortran/116530,
  	ipa/109985, ipa/115815, ipa/116410, jit/117275, libstdc++/37475,
  	libstdc++/108619, libstdc++/113663, libstdc++/116038,
  	libstdc++/116159, libstdc++/116381, libstdc++/116529,
  	libstdc++/116549, libstdc++/116641, libstdc++/116754,
  	libstdc++/116755, libstdc++/116777, libstdc++/116857,
  	libstdc++/117085, libstdc++/117094, libstdc++/117135,
  	libstdc++/117321, libstdc++/117406, lto/116361, lto/116614,
  	middle-end/115110, middle-end/115426, middle-end/115641,
  	middle-end/116258, middle-end/116259, middle-end/116454,
  	middle-end/116891, middle-end/116898, middle-end/116899,
  	middle-end/117086, middle-end/117249, middle-end/117354,
  	rtl-optimization/116783, rtl-optimization/117327, sanitizer/117209,
  	target/85624, target/112108, target/113384, target/115464,
  	target/115860, target/116007, target/116033, target/116043,
  	target/116174, target/116189, target/116237, target/116287,
  	target/116295, target/116390, target/116407, target/116415,
  	target/116512, target/116617, target/116627, target/116738,
  	target/116839, target/116883, target/116921, target/116953,
  	target/116962, target/117116, target/117159, target/117240,
  	target/117296, target/117318, testsuite/70150, testsuite/116238,
  	tree-optimization/107467, tree-optimization/113281,
  	tree-optimization/116156, tree-optimization/116166,
  	tree-optimization/116224, tree-optimization/116258,
  	tree-optimization/116274, tree-optimization/116290,
  	tree-optimization/116380, tree-optimization/116460,
  	tree-optimization/116481, tree-optimization/116501,
  	tree-optimization/116585, tree-optimization/116610,
  	tree-optimization/116768, tree-optimization/116850,
  	tree-optimization/116879, tree-optimization/116907,
  	tree-optimization/116982, tree-optimization/116990,
  	tree-optimization/117041, tree-optimization/117104,
  	tree-optimization/117287
    - add hint #34 to aarch64 sanitizer asm stubs if -mbranch-protection=standard
      (#2306353)


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-65532)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-73475)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-73585)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-2
changelog:
  - update from releases/gcc-14 branch (RHEL-83953)
    - GCC 14.3 release
    - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
  	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
  	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
  	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
  	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
  	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
  	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
  	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
  	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
  	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
  	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
  	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
  	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
  	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
  	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
  	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
  	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
  	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
  	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
  	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
  	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
  	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
  	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
  	c++/120125, c++/120161, d/114434, d/115249, d/116373,
  	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
  	d/119112, d/119139, d/119817, d/119826, debug/101533,
  	driver/117739, driver/119727, fortran/59252, fortran/81978,
  	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
  	fortran/106948, fortran/108434, fortran/108454,
  	fortran/109066, fortran/110993, fortran/116706,
  	fortran/117434, fortran/118080, fortran/118640,
  	fortran/118683, fortran/118750, fortran/119054,
  	fortran/119380, fortran/119656, fortran/119986,
  	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
  	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
  	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
  	libfortran/120196, libgcc/101075, libgcc/119151,
  	libgcc/119796, libstdc++/21334, libstdc++/90389,
  	libstdc++/99832, libstdc++/100249, libstdc++/101527,
  	libstdc++/101587, libstdc++/104395, libstdc++/105258,
  	libstdc++/105609, libstdc++/106612, libstdc++/108487,
  	libstdc++/108760, libstdc++/108846, libstdc++/110498,
  	libstdc++/112490, libstdc++/112803, libstdc++/114758,
  	libstdc++/114945, libstdc++/115046, libstdc++/115285,
  	libstdc++/115939, libstdc++/116212, libstdc++/116440,
  	libstdc++/116471, libstdc++/117121, libstdc++/117921,
  	libstdc++/117983, libstdc++/118083, libstdc++/118158,
  	libstdc++/118160, libstdc++/118185, libstdc++/118413,
  	libstdc++/118699, libstdc++/118811, libstdc++/119121,
  	libstdc++/119135, libstdc++/119429, libstdc++/119469,
  	libstdc++/119593, libstdc++/119671, libstdc++/120198,
  	libstdc++/120548, lto/91299, lto/113207, lto/114501,
  	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
  	middle-end/111285, middle-end/113546, middle-end/114877,
  	middle-end/115871, middle-end/115913, middle-end/117498,
  	middle-end/117811, middle-end/118140, middle-end/118411,
  	middle-end/118819, middle-end/118950, middle-end/119119,
  	middle-end/119204, middle-end/119219, middle-end/119706,
  	middle-end/119808, middle-end/120547, modula2/115032,
  	modula2/115112, modula2/118703, modula2/118761,
  	preprocessor/108900, preprocessor/116047, preprocessor/120061,
  	rtl-optimization/115568, rtl-optimization/116564,
  	rtl-optimization/117186, rtl-optimization/117239,
  	rtl-optimization/117506, rtl-optimization/118320,
  	rtl-optimization/118638, rtl-optimization/118662,
  	rtl-optimization/118739, rtl-optimization/119071,
  	rtl-optimization/119291, rtl-optimization/119689,
  	rtl-optimization/119785, target/86772, target/106544,
  	target/110901, target/113257, target/115258, target/115485,
  	target/116036, target/116086, target/116111, target/116149,
  	target/116240, target/116256, target/116305, target/116308,
  	target/116550, target/116591, target/116592, target/116593,
  	target/116693, target/116720, target/116809, target/116827,
  	target/116927, target/117286, target/117383, target/117483,
  	target/117544, target/117682, target/117878, target/118067,
  	target/118137, target/118154, target/118182, target/118184,
  	target/118329, target/118357, target/118501, target/118531,
  	target/118561, target/118601, target/118623, target/118685,
  	target/118776, target/118813, target/118815, target/118825,
  	target/118835, target/118843, target/118844, target/118892,
  	target/118942, target/119084, target/119133, target/119172,
  	target/119235, target/119327, target/119340, target/119383,
  	target/119386, target/119408, target/119450, target/119533,
  	target/119547, target/119549, target/119572, target/119610,
  	target/119784, target/119834, target/120441, target/120480,
  	testsuite/52641, testsuite/116448, testsuite/118127,
  	testsuite/118597, tree-optimization/117358,
  	tree-optimization/120638 tree-optimization/87984,
  	tree-optimization/98845, tree-optimization/111873,
  	tree-optimization/112859, tree-optimization/113197,
  	tree-optimization/114052, tree-optimization/115347,
  	tree-optimization/115494, tree-optimization/116098,
  	tree-optimization/116125, tree-optimization/116412,
  	tree-optimization/116749, tree-optimization/116906,
  	tree-optimization/116922, tree-optimization/117113,
  	tree-optimization/117119, tree-optimization/117243,
  	tree-optimization/117424, tree-optimization/117919,
  	tree-optimization/117979, tree-optimization/118476,
  	tree-optimization/118522, tree-optimization/118605,
  	tree-optimization/118653, tree-optimization/118689,
  	tree-optimization/118717, tree-optimization/118915,
  	tree-optimization/118922, tree-optimization/118924,
  	tree-optimization/118953, tree-optimization/118976,
  	tree-optimization/119057, tree-optimization/119096,
  	tree-optimization/119145, tree-optimization/119351,
  	tree-optimization/119399, tree-optimization/119417,
  	tree-optimization/119534, tree-optimization/119706,
  	tree-optimization/119707, tree-optimization/119722,
  	tree-optimization/119778, tree-optimization/120048,
  	tree-optimization/120156


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Karel Zak <kzak@redhat.com> - 2.40.2-3
changelog:
  - revert recent uuidd mode changes
  - rebase rhel specific patches
  - fix uuidd-tmpfiles.conf (upstream patch)
  - remove unused patches


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 2.69-1
changelog:
  - Update to 2.69 (with contribs from Yanko Kaneti <yaneti@declera.com>, and Andrew G. Morgan <morgan@kernel.org>)
  - Update license to SPDX (by Anderson Toshiyuki Sasaki <ansasaki@redhat.com>)
  - Make file lists more explicit to avoid accidental ABI changes (Dominik Mierzejewski <dominik@greysector.net>)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.69-4
changelog:
  - Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>)
  - Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.7.0-8
changelog:
  - Update license to SPDX format
  - spec file tidy/modernization
    - use modern cmake build and install
    - properly own include directories in the devel package
    - de-glob some files to follow packaging guidelines


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.10.2-1
changelog:
  - Update to version 0.10.2 ( resolves: rhbz#1880885 )
  - Revise specs per packaging guidelines for globs of soname


author: Jan Kolarik <jkolarik@redhat.com> - 0.1.20-1
changelog:
  - Update to 0.1.20
  - Fixes of xml parsing
  - Fix non-optimized builds by removing inline keyword
  - Use Py_hash_t instead of long


author: Evan Goode <egoode@redhat.com> - 0.73.1-1
changelog:
  - Update to 0.73.1 (RHEL-38831)
  - Fix https://issues.redhat.com/browse/RHEL-27657 (RHEL-32935)
  - subject-py: Fix memory leak (RHEL-32924)
  - MergedTransaction: Calculate RPM difference between two same versions as
    no-op (RHEL-33541)
  - Onboard packit tests
  - Add virtual destructor to TransactionItem (RHEL-32943)


author: Petr Pisar <ppisar@redhat.com> - 0.73.1-2
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-32919)
  - Fix an invalid memory access when dropping an item in MergedTransaction
    class (RHEL-33541)


author: Jan Kolarik <jkolarik@redhat.com> - 0.72.0-1
changelog:
  - Update to 0.72.0
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474)
  - transaction: Save the reason for installing (RhBug:1733274)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279,2176263)
  - conf: Add limited shell-style variable expansion (RhBug:1789346)
  - conf: Add support for $releasever_major, $releasever_minor (RhBug:1789346)
  - repo: Don't download the repository if the local cache is up to date
  - Allow DNF to be removed by DNF 5 (RhBug:2221907)
  - Include dist-info for python3-libdnf
  - bindings: Load all modules with RTLD_GLOBAL
  - Update translations


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.73.0-1
changelog:
  - Update to 0.73.0
  - filelists metadata loading on demand
  - deltarpm disabled on Fedora
  - conf: Introduce new optional_metadata_types option to load filelists on demand
  - goal: Method for detecting file dependency problems


author: Pino Toscano <ptoscano@redhat.com> 1.29.36-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ENT-5581: Update messaging around the "container mode" (mhorky@redhat.com)
  - Remove 'dbus' marker for pytest (mhorky@redhat.com)
  - Rewrite D-Bus tests to be testable without pytest-forked (mhorky@redhat.com)
  - Drop further ethtool dependency mentions (mhorky@redhat.com)
  - tests: fix test_file_monitor without pyinotify (ptoscano@redhat.com)
  - tests: switch from imp to importlib (ptoscano@redhat.com)
  - Fix the order of user env var checking for translations.
    (tkuratom@redhat.com)
  - 2215974: Collect network facts using 'ip' (mhorky@redhat.com)
  - ENT-5582: Remove container detection envvar overwrite (mhorky@redhat.com)
  - ENT-5603: Explicitly check for provided entitlement certificates
    (mhorky@redhat.com)
  - fix test case (chambrid@redhat.com)
  - Collect GCP Project information as cloud facts (chambrid@redhat.com)
  - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com)
  - ENT-5580: Disable the proper container detection (mhorky@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - 2093291: Make reading of cache file more reliable (jhnidek@redhat.com)
  - 2093291: Make code of DNF plugins testable (jhnidek@redhat.com)
  - spec: change subscription-manager dnf dep (ptoscano@redhat.com)
  - spec: update libdnf-plugin-subscription-manager deps (ptoscano@redhat.com)
  - tests: repair attach cases in SCA mode (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.37-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - 2225446: Hotfix of D-Bus policy (jhnidek@redhat.com)
  - TESTING: Update testing requirements (mhorky@redhat.com)
  - Use Fedora registry to pull container images (mhorky@redhat.com)
  - 2232316: dbus: check "force" again from the registration option
    (ptoscano@redhat.com)
  - dbus: run EntCertActionInvoker on PoolAttach (ptoscano@redhat.com)
  - ENT-5624: Properly translate error strings (mhorky@redhat.com)
  - Mock IOError for Insights fact collection tests (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.38-1
changelog:
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ENT-5603: Fix a typo in a comment (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.39-1
changelog:
  - tito: drop bz requirement (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)
  - RHEL-7206: Small change of message printed by dnf plugin (jhnidek@redhat.com)
  - CCT-118: Fix flake8 error E721 (mhorky@redhat.com)
  - Fix type hint in rhsm (mhorky@redhat.com)
  - Simplify autoregistration test setup (mhorky@redhat.com)
  - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com)
  - Fixed inappropriate logical expression (ataf@openrefactory.com)
  - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com)
  - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com)
  - RPM: Avoid needless runtime requirement on python3-setuptools
    (miro@hroncok.cz)
  - cli: normalize hostname in error message (ptoscano@redhat.com)
  - connection: normalize hostname in ConnectionOSErrorException
    (ptoscano@redhat.com)
  - Improved printing of addresses and URLs (jhnidek@redhat.com)
  - Use username and password from --proxy=URL (jhnidek@redhat.com)
  - Use parse_url() from utils.py for parsing URL, when --proxy is used.
    (jhnidek@redhat.com)
  - 2225403: Parse URL properly (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.40-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
    (mariocanfly@hotmail.com)
  - spec: Add missing GLib dependency when building without DNF
    (debarshir@gnome.org)
  - Remove deprecated `locale.*()` functions (mhorky@redhat.com)
  - Remove version constraint of pytest (mhorky@redhat.com)
  - RHEL-15110: RegisterServer is stopped, when not needed (jhnidek@redhat.com)
  - RHEL-15110: Fix issue with registration using gsd-subman (jhnidek@redhat.com)
  - Fix an error in debug logging of cloud-what (mhorky@redhat.com)
  - ci: bump actions/upload-artifact from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Improve debug logging to make it faster to understand (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.0-1
changelog:
  - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - chore: Format register.py (mhorky@redhat.com)
  - feat: Require SCA for registration (mhorky@redhat.com)
  - doc: Update install and testing guide (stomsa@redhat.com)
  - Fixed spec file to list packages twice (suttner@atix.de)
  - code review comments fixes - update metadata and test. (chambrid@redhat.com)
  - feat: Disable anonymous cloud registration temporarily (mhorky@redhat.com)
  - Collect Azure VM Name and Resource Group Name as a cloud fact.
    (chambrid@redhat.com)
  - fix: Improve wording in redhat.repo template (glutexo@icloud.com)
  - Remove commands moved to syspurpose (glutexo@icloud.com)
  - doc: drop references to "activate" (ptoscano@redhat.com)
  - feat: Remove import command (zpetrace@redhat.com)
  - fix: make SyspurposeComplianceStatusCache.get_overall_status() always usable
    (ptoscano@redhat.com)
  - fix: Change order of checks (jhnidek@redhat.com)
  - fix: Cache shouldn't try to get data from server without UUID
    (jhnidek@redhat.com)
  - feat: Add option to run smoke tests with fake IMDS servers.
    (jhnidek@redhat.com)
  - fix: Hide subscription management "errors" in container mode
    (mhorky@redhat.com)
  - feat(ci): Update testing matrix (mhorky@redhat.com)
  - fix(test): Properly stop method mock (mhorky@redhat.com)
  - feat: Azure: added extended location and type of location fact
    (jhnidek@redhat.com)
  - fix: Update version of Azure metadata (jhnidek@redhat.com)
  - feat: Added Azure location to facts (jhnidek@redhat.com)
  - feat: Added zone GCP fact (jhnidek@redhat.com)
  - feat: Added more AWS cloud facts (jhnidek@redhat.com)
  - fix: Change type hint according returned value. (jhnidek@redhat.com)
  - feat: Add warning message about release version to dnf plugin
    (jhnidek@redhat.com)
  - Bump black from 23.3.0 to 24.3.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Format code with black==24.3.0 (ptoscano@redhat.com)
  - Fix memory leaks in test-productdb.c (jhnidek@redhat.com)
  - Fix memory leaks in productdb.c (jhnidek@redhat.com)
  - fix: Function prototype without declaration is deprecated
    (jhnidek@redhat.com)
  - Removed unused includes of .h files (jhnidek@redhat.com)
  - libdnf: switch from g_error_free() to g_clear_error() in tests
    (ptoscano@redhat.com)
  - libdnf: do not build test code in plugin (ptoscano@redhat.com)
  - Change handling of deprecated `datetime.datetime.utcnow()`
    (mhorky@redhat.com)
  - CCT-66: Update identity reporting in DNF plugin during autoregistration
    (mhorky@redhat.com)
  - Remove automatic registration delay for rhsmcertd (mhorky@redhat.com)
  - Remove API endpoint for automatic cloud registration v1 (mhorky@redhat.com)
  - CCT-67: Use automatic registration v2 (mhorky@redhat.com)
  - IdentityUpdateAction: Improve logging for updating identity certificates
    (mhorky@redhat.com)
  - Identity: Add method to extract current owner (mhorky@redhat.com)
  - rhsmcertd: Define exit codes (mhorky@redhat.com)
  - rhsmcertd: Use module-level logger (mhorky@redhat.com)
  - Add AnonymousCertificateManager (mhorky@redhat.com)
  - Add CloudTokenCache for Candlepin JWT (mhorky@redhat.com)
  - Implement API endpoints for Automatic registration v2 (mhorky@redhat.com)
  - Update documentation for one API call in connection.py (mhorky@redhat.com)
  - Fix type hint of RegisterService.register() (mhorky@redhat.com)
  - rhsmcertd: Drop D-Bus loop code (mhorky@redhat.com)
  - rhsmcertd: Add type hints (mhorky@redhat.com)
  - rhsmcertd: Remove forgotten old comment (mhorky@redhat.com)
  - Stop logging full lscpu output (mhorky@redhat.com)
  - Prevent double-logging of syspurpose cache log statement (mhorky@redhat.com)
  - Update the log message containing response time statistics
    (mhorky@redhat.com)
  - CCT-266: Update TLS flags (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.2-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - feat: Create consumer cert & key owner by rhsm group (jhnidek@redhat.com)
  - feat: Add rhsm group during installation of subman RPM (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - docs: remove references to removed commands (jajerome@redhat.com)
  - feat: Remove auto-attach command (jhnidek@redhat.com)
  - feat: Eliminate command 'remove' from subscription-manager
    (jvlcek@redhat.com)
  - feat: Remove attach from bash completion script (jhnidek@redhat.com)
  - feat: Remove references on auto-attach in man page (jhnidek@redhat.com)
  - feat: Removed attach service (jhnidek@redhat.com)
  - feat: Removed D-Bus methods related to attach (jhnidek@redhat.com)
  - feat: Removed attach command and CLI option related to attach
    (jhnidek@redhat.com)
  - feat: Remove 'addons' subcommand(s) (mhorky@redhat.com)
  - feat: Removed command "redeem" from subscription-manager (jhnidek@redhat.com)
  - Update the correct man page file. (jvlcek@redhat.com)
  - docs: Change reverse proxy to proxy in man page (jvlcek@redhat.com)
  - test(ci): Improve container pre-test script (mhorky@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.3-1
changelog:
  - Card ID: CCT-731 - integration tests for DBus Register method
    (jstavel@redhat.com)
  - chore: Remove the --token authentication (pkoprda@redhat.com)
  - chore: Remove artifacts of import (stomsa@redhat.com)
  - chore: Remove artifacts of redeem (stomsa@redhat.com)
  - chore: Remove artifacts of remove (stomsa@redhat.com)
  - chore: Remove artifacts of autoheal (glutexo@icloud.com)
  - chore: Remove artifacts of --auto-attach (glutexo@icloud.com)
  - chore: Remove artifacts of attach (stomsa@redhat.com)
  - fix: Added missing python packages (jhnidek@redhat.com)
  - fix: Fixed integration tests (jhnidek@redhat.com)
  - chore: Remove auto-assign CI job (mhorky@redhat.com)
  - feat: Add initial support for tmt (jhnidek@redhat.com)
  - fix: Renamed integration-tests to cockpit-tests (jhnidek@redhat.com)
  - Feat CCT-965: Include timezone in the logs In `subscription-
    manager/src/rhsm/logutil.py`i: (mgrunwal@redhat.com)
  - feat: remove content access mode cache (jajerome@redhat.com)
  - feat: add GetEnvironments method to DBus register (ryanverdile@gmail.com)
  - feat: Added basic configuration for Packit (jhnidek@redhat.com)
  - fix: drop "autoattachinterval" from the rhsmcertd defaults
    (ptoscano@redhat.com)
  - feat/cct-875: Options -i and --cert-interval were removed from rhsmcertd
    command autocompletion Options -i and --cert-interval were removed from
    rhsmcertd command autocompletion. (mgrunwal@mgrunwal-
    thinkpadp1gen3.rmtcz.csb)
  - feat/cct-874: Autocompletion for option --servicelevel removed Autocompletion
    for option --servicelevel (sub-man register --servicelevel) was removed.
    (mgrunwal@mgrunwal-thinkpadp1gen3.rmtcz.csb)
  - fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
  - feat: Better automatic registration logging (mhorky@redhat.com)
  - refactor: Moved some definition of lists from list.py (jhnidek@redhat.com)
  - fix: Removed show_autosubscribe_output() method (jhnidek@redhat.com)
  - feat: Remove useless CLI options from list command (jhnidek@redhat.com)
  - fix: perform autoreg waiting when performing standard autoreg
    (ptoscano@redhat.com)
  - chore: move autoreg waiting code in own function (ptoscano@redhat.com)
  - feat: support registering specifying environments with activation keys
    (ryanverdile@gmail.com)
  - feat: Remove autoheal functionality from rhsmcertd (jvlcek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.4-1
changelog:
  - Revert "feat: Disable anonymous cloud registration temporarily"
    (ptoscano@redhat.com)
  - Revert "feat: forcefully switch automatic cloud registration to v1"
    (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Update translation files (noreply@weblate.org)
  - spec: respect the %{_sbindir} of the distro (ptoscano@redhat.com)
  - build: make it possible to customize the 'sbin' install dir
    (ptoscano@redhat.com)
  - fix: Restart rhsm service after installation (pkoprda@redhat.com)
  - Drop pam_console leftovers (ptoscano@redhat.com)
  - Stop using usermode (ptoscano@redhat.com)
  - fix: Do not upload profile from DNF, when it is disabled in conf
    (jhnidek@redhat.com)
  - rhsmcertd: use ISO 8601 timestamps for the log file (ptoscano@redhat.com)
  - rhsmcertd: refactor timestamp function (ptoscano@redhat.com)
  - ci: temporarily install 'which' on CentOS Stream 10 (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - ci: use official c10s container image (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - feat: Enable register with environment names and environment types
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.5-1
changelog:
  - fix: Disabling of content in D-Bus methods Register*() (jhnidek@redhat.com)
  - chore: logging.warn() -> logging.warning() (ptoscano@redhat.com)
  - Feat CCT-467: Add explanatory info about the source of overrides in repo-
    overrides command (mgrunwal@mgrunwal-thinkpadp1gen3.rmtcz.csb)
  - feat: Allow to call RegisterWithActivationKeys() with enable_content
    (jhnidek@redhat.com)
  - refactor: Small changes of _enable_content (jhnidek@redhat.com)
  - fix: It is possible to disable content using enable_content option
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.6-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Japanese) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - spec: Remove an unnecessary explicit dependency on json-c
    (debarshir@gnome.org)
  - spec: Require shared libraries with architecture-specific dependencies
    (debarshir@gnome.org)
  - Revert "ci: temporarily install 'which' on CentOS Stream 10"
    (ptoscano@redhat.com)
  - build: cockpit: fix installation of sub-man with newer Fedora
    (ptoscano@redhat.com)
  - spec: Require the base package with architecture-specific dependencies
    (debarshir@gnome.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - feat: drop the --ondate option of "status" (ptoscano@redhat.com)
  - feat: drop non-SCA support in status command (ptoscano@redhat.com)
  - tests: fix mocking of get_terminal_width() in TestColumnize
    (ptoscano@redhat.com)
  - feat: print compliance errors & syspurpose status only in entitlement mode
    (ptoscano@redhat.com)
  - feat: print "registered" as status when using SCA (ptoscano@redhat.com)
  - feat: print "not registered" on status when not registered
    (ptoscano@redhat.com)
  - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
  - refactor: move determination of content access mode in own method
    (ptoscano@redhat.com)
  - tests: move StubIdentity to stubs (ptoscano@redhat.com)
  - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
  - chore: move banner printing to its own function (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.7-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (noreply-mt-weblate-
    translation-memory@weblate.org)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Japanese) (mhorky@redhat.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - fix: Unit test should ignore locale, when generating test timestamp
    (jhnidek@redhat.com)
  - fix: Handle improperly closed connections (mhorky@redhat.com)
  - test: Added integration tests for activation keys (jstavel@redhat.com)
  - test: Integration tests for DBus Unregister call (jhnidek@redhat.com)
  - fix: Do not call removed bash script from tesh.sh (jhnidek@redhat.com)
  - spec: drop old libdnf-plugin-subscription-manager-debuginfo definition
    (ptoscano@redhat.com)
  - spec: switch from an own run_dir to _rundir (ptoscano@redhat.com)
  - spec: switch from python_sitelib to python3_sitelib (ptoscano@redhat.com)
  - spec: switch from python_sitearch to python3_sitearch (ptoscano@redhat.com)
  - spec: inline & drop rhsm_package_name (ptoscano@redhat.com)
  - spec: switch from __python to __python3 (ptoscano@redhat.com)
  - spec: inline & drop py_package_prefix (ptoscano@redhat.com)
  - spec: remove redundant check (ptoscano@redhat.com)
  - spec: deduplicate BuildRequires for use_dnf (ptoscano@redhat.com)
  - spec: drop old %post snippet for rhsmd (ptoscano@redhat.com)
  - spec: drop EL 8 bits (ptoscano@redhat.com)
  - ci: tweak the dependabot config for branches a bit (ptoscano@redhat.com)
  - feat: remove no more needed branding strings (ptoscano@redhat.com)
  - feat: drop ClassicCheck (ptoscano@redhat.com)
  - ci: track also active stable branches with dependabot for GitHub actions
    (ptoscano@redhat.com)
  - tests: update location of pytest-client-tools (ptoscano@redhat.com)
  - Handle URL params for AptRepoFiles (grigo@atix.de)
  - fix: Append two additional facts to the graylist (pkoprda@redhat.com)
  - refactor: Use class constant instead of variable graylist
    (pkoprda@redhat.com)
  - spec: Require subpackages from the same build as the base package
    (debarshir@gnome.org)
  - spec: Consolidate dependencies on the DNF & libdnf plugins in one place
    (debarshir@gnome.org)
  - spec: Fix grammar and spelling mistakes (debarshir@gnome.org)
  - build: use cmake pkg-config imported targets (ptoscano@redhat.com)
  - build: fix order of parameters for pkg_check_modules() (ptoscano@redhat.com)
  - build: drop manual setting of -std=c99 (ptoscano@redhat.com)
  - build: remove check for in source cmake builddir (ptoscano@redhat.com)
  - build: bump cmake required version to 3.20 (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.8-1
changelog:
  - fix: Enable content during auto-registration v2 (jhnidek@redhat.com)
  - CCT-1490: blackified repolib.py (jstavel@redhat.com)
  - CCT-1473: new url for local candlepin image, fixed register test (#3580)
    (jstavel@redhat.com)
  - fix: Create consumer cert & key, when chown failed (jhnidek@redhat.com)
  - Skip to load default plugins on suse/sles (suttner@atix.de)
  - CCT-739: tests for GetUuid method (jstavel@redhat.com)
  - feat: Added warning to dnf4 plugin about skewed clock (jhnidek@redhat.com)
  - CCT-1081 FEAT Remove unused classes and functions - including
    Conduits/Slots/Hooks for pre/post_subscribe Remove "pre_subscribe" and
    "post_subscribe" plugin slots by removing classes SubscriptionConduit and
    PostSubscriptionConduit. (mgrunwal@redhat.com)
  - Fix upload profile if rhsmcertd is not running at all (suttner@atix.de)
  - chore: Drop get_status_for_icon (mhorky@redhat.com)
  - chore: Remove getCompliance method from connection.py (mhorky@redhat.com)
  - chore: Clean up compliance status of ComplianceManager (mhorky@redhat.com)
  - chore: Hardcode SCA-relevant values to ComplianceManager (mhorky@redhat.com)
  - chore: Drop HTTP call to /consumers/{uuid}/compliance (mhorky@redhat.com)
  - feat: adding sourcery config (jmolet@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.9-1
changelog:
  - feat: Call random.seed() at begining of auto-register (jhnidek@redhat.com)
  - feat: Better control over auto-reg waiting game (jhnidek@redhat.com)


author: Pavol Žáčik <pzacik@redhat.com> - 2.1.12-13
changelog:
  - Update license identifiers to SPDX in subpackages
  - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta2-1
changelog:
  - Resolves: RHEL-40253 - Rebase SSSD for RHEL 10-beta
  - Resolves: RHEL-43259 - sudo does not work any more with krb ticket


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta2-2
changelog:
  - Resolves: RHEL-51891 - [RHEL-10]logrotate.service fails to start because /var/log/sssd has insecure permission
  - Resolves: RHEL-52400 - SYSDB: remove index on dataExpireTimestamp [rhel-10]
  - Resolves: RHEL-50243 - Please install sssd-polkit-rules by default


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0-1
changelog:
  - Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
  - Resolves: RHEL-56701 - sss_ssh_knownhosts is breaking ansible-pull
  - Resolves: RHEL-55993 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.1-1
changelog:
  - Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
  - Resolves: RHEL-4984 - Mismatch between input and parsed domain name when default_domain_suffix is set.
  - Resolves: RHEL-65848 - sssd password authentication broken in sssd-2.10.0~beta2-2 and later
  - Resolves: RHEL-67669 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option
  - Resolves: RHEL-68421 - sssd ldap_child process segfaults when krb5.conf is invalid [rhel-10]
  - Resolves: RHEL-66935 - Avoid log flooding in case an app keeps making invalid `getservbyport(0, ...)` request
  - Resolves: RHEL-65736 - ipa: sudo commands doesn't check threshold correctly
  - Resolves: RHEL-68319 - Please deprecate/remove ad_allow_remote_domain_local_groups


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Peter Fordham <peter.fordham@gmail.com> - 1.0.8-6
changelog:
  - Port autoconf script to C99 and enable autoreconf for this package.
    https://bugzilla.netfilter.org/show_bug.cgi?id=1654


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Phil Sutter <psutter@redhat.com> - 1.2.6-1
changelog:
  - Drop outdated libnftables provides, it might clash with the new
    nftables-provided libnftables at some point in future
  - Backport one late fix from upstream
  - new version 1.2.6


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Dmitry Belyavskiy - 0.10.1-1
changelog:
  - Rebase to 0.10.1 version (CVE-2024-36405)
    Resolves: RHEL-40699
  - Use dlopen for OpenSSL algos implementation
    Resolves: RHEL-46598
  - Correct license naming
    Resolves: RHEL-45265


author: José Expósito <jexposit@redhat.com> - 0.16-13
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29742


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Jan Kolarik <jkolarik@redhat.com> - 1.15.2-1
changelog:
  - Update to 1.15.2
  - Fixes and optimizations in header files
  - Fix lr_gpg_list_keys function when keys are empty
  - Update PGP test vectors
  - Fix CMake warnings
  - Bump glib version


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - lr_gpg_check_signature: Forward PGP error messages from RPM
  - PGP: fix: Support importing binary public keys in librpm backend
  - PGP: Enable creating a UID directory for GnuGP agent socket in /run/gnupg/user
  - PGP: Set a default creation SELinux labels on GnuPG directories


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1 (RHEL-38831)
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (RHEL-35699)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Petr Pisar <ppisar@redhat.com> - 1.18.0-2
changelog:
  - Use librpmio instead of gpgme for handling PGP keys (RHEL-47106)
  - Fix a memory leak in select_next_target() (RHEL-35699)


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-14
changelog:
  - Improve a documentation (RHEL-38831)
  - Refactor parse_entitlement_data() (RHEL-32365)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-37866)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-3
changelog:
  - restorecon: Include <selinux/label.h> (RHEL-53852)
  - Fix integer comparison issues when compiling for 32-bit


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - setexecfilecon: Remove useless rc check (RHEL-35586)
  - matchpathcon: RESOURCE_LEAK: Variable "con" (RHEL-35584)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Than Ngo <than@redhat.com> - 1.1.19-13
changelog:
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    Resolves: RHEL-86305


author: Kate Hsuan <hpa@redhat.com> - 1.0.28-1
changelog:
  - Update to the upstream version 1.0.28
  - Update to the upstream version 1.0.28
  - Fix automake-1.17 issue since the release was based on automake-1.17


author: David King <dking@redhat.com> - 2.12.5-6
changelog:
  - Fix CVE-2025-6021 (RHEL-96495)
  - Fix CVE-2025-49794 (RHEL-96395)
  - Fix CVE-2025-49795 (RHEL-96408)
  - Fix CVE-2025-49796 (RHEL-96421)


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 18.1.8-1
changelog:
  - Update to LLVM 18.1.2 (RHEL-28056)
  - Remove llvm17 compat package (RHEL-30890)
  - Workaround for GFX11.5 export priority (RHEL-49746)


author: Nikita Popov <npopov@redhat.com> - 19.1.7-1
changelog:
  - Update to LLVM 19.1.7 (RHEL-57456)
  - Remove llvm18 compat package (RHEL-57457)
  - Remove generated html content from llvm-doc subpackage (RHEL-58900)
  - Enable LLVM_ENABLE_ZSTD=ON (RHEL-70325)


author: Jan Staněk <jstanek@redhat.com> - 0.9.29-7
changelog:
  - Fix source file definition and handling
  - Use archive name expected by GitLab, then the archive does not contain
    whole commit reference.
  - Use standard %forgemeta macros, although some detail neede to be fill in
    – GitLab handling is not detected from URL.
  - Fix upstream URL.


author: Martin Osvald <mosvald@redhat.com> - 2.1.1-1
changelog:
  - New version 2.1.1 (rhbz#2250290)
  - Fix incorrect upstream URL and SourceX (rhbz#2249526)
  - SPDX migration


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: DJ Delorie <dj@redhat.com> - 1:4.4.1-3
changelog:
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Lianbo Jiang <lijiang@redhat.com> - 1.7.5-11
changelog:
  - Fix failure of hugetlb pages exclusion on Linux 6.9 and later
  - Fix wrong exclusion of Slab pages on Linux 6.10-rc1 and later


author: Xiao Ni <xni@redhat.com> - 4.4-1
changelog:
  - Update to mdadm 4.4 and latest upstream
  - Resolves: RHEL-86676, RHEL-72803, RHEL-88793, RHEL-88791


author: Jaroslav Rohel <jrohel@redhat.com> - 3.9.0-1
changelog:
  - Update to 3.9.0
  - Add leaves command - List installed packages not required by other installed packages


author: Evan Goode <egoode@redhat.com> - 3.10.1-1
changelog:
  - Update to 3.10.1
  - Correct spelling of summary
  - Print more helpful error message when reinstalling non-installed pkg
    Resolves: RHEL-53430


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Lukáš Zaoral <lzaoral@redhat.com> - 7.2-1
changelog:
  - Update to 7.2 (rhbz#2161916)
  - Do not use %{_bindir}/* and %{_mandir}/* as suggested by the packaging
    guidelines.


author: Lukáš Zaoral <lzaoral@redhat.com> - 8.0-1
changelog:
  - rebase to latest upstream version (RHEL-35944)
  - remove `nano-default-editor` from the specfile (RHEL-30790)


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.63.20160912git
changelog:
  - Resolves: #2114821 - The output of `route -A inet6` does not display properly when the 'Use' column output is over 6 digits


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.64.20160912git
changelog:
  - Resolves: #2077846 - net-tools utilities display incorrect statistics for interfaces with 15-character names


author: Pavel Reichl <preichl@redhat.com> - 0.4.2-3
changelog:
  - Actually change License from BSD to LGPL, based on content of COPYING file
  - Convert License tag to SPDX format


author: Kevin Fenzi <kevin@scrye.com> - 1.0.7-1
changelog:
  - Update to 1.0.7. Fixes rhbz#2155658
  - Build the package with setuptools instead of distutils. Fixes: rhbz#2154872


author: Phil Sutter <psutter@redhat.com> - 1:1.0.9-1
changelog:
  - Fix devel sub-package description
  - Utilize pyproject-rpm-macros for the python sub-package
  - new version 1.0.9


author: Phil Sutter <psutter@redhat.com> [1.1.1-1.el10]
changelog:
  - monitor: Recognize flowtable add/del events (Phil Sutter) [RHEL-65346]
  - tests: py: Fix for storing payload into missing file (Phil Sutter) [RHEL-65346]
  - json: Support typeof in set and map types (Phil Sutter) [RHEL-65346]
  - json: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - doc: extend description of fib expression (Phil Sutter) [RHEL-65346]
  - tests: monitor: fix up test case breakage (Phil Sutter) [RHEL-65346]
  - src: fix extended netlink error reporting with large set elements (Phil Sutter) [RHEL-65346]
  - rule: netlink attribute offset is uint32_t for struct nlerr_loc (Phil Sutter) [RHEL-65346]
  - mnl: update cmd_add_loc() to take struct nlmsghdr (Phil Sutter) [RHEL-65346]
  - mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc() (Phil Sutter) [RHEL-65346]
  - src: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - libnftables-json: fix raw payload expression documentation (Phil Sutter) [RHEL-65346]
  - tests: shell: fix spurious dump failure in vmap timeout test (Phil Sutter) [RHEL-65346]
  - Rebase onto version 1.1.1 (Phil Sutter) [RHEL-65346]


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.5-42.20150602git
changelog:
  - recognize the -m option
  - modernize the specfile
      - use recommended systemd macros
      - fix manual pages installation
      - sort file list and BuildRequires
      - use modern make macros
      - simplify %install section


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.1-4
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.8-2.D20220919gitb041f6d
changelog:
  - Update to the latest git, expecially:
    - Update to Unicode 15.0 (upstream #272)
    - [[:punct:]] behavoir change (upsteam #268)


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-58996, update to 3.24.0
  - Resolves: RHEL-39004, provide opencryptoki CCA Token also on x86_64 and ppc64le
  - Resolves: RHEL-43675, openCryptoki cca token RSA OAEP v2.1 support
  - Resolves: RHEL-43674, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-43676, openCryptoki cca token SHA3 support
  - Resolves: RHEL-24036, support protected keys for extractable keys


author: Than Ngo <than@redhat.com> - 3.24.0-5
changelog:
  - Use systemd-sysusers
  - Modifie the unit file to change file ownership
  - opencryptoki doesn't work in image mode
    Resolves: RHEL-77146


author: Than Ngo <than@redhat.com> - 3.24.0-7
changelog:
  - Resolves: RHEL-80632, tokens are deleted on reboot
  - Related: RHEL-77146, opencryptoki doesn't work in image mode


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-85376, ep11 token: PKCS #11 3.0 - support SHA3
  - Resolves: RHEL-90589, CCA token: basic support of AES-GCM
  - Resolves: RHEL-72964, cca token support cipher keys
  - Resolves: RHEL-72968, Support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-73343, Upgrade openCryptoki to latest version
  - Resolves: RHEL-75144, p11kmip: a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75761, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85374, cca token: Support ECDH to derive AES keys


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73343, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77146, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104598


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-1
changelog:
  - Rebase to version 2.6.7 (rhbz#2261163)
  - Use systemd-sysusers for ldap user and group (rhbz#2173965)
  - Fix compiler errors (rhbz#2261427)
  - Replace License with SPDX identifier


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-2
changelog:
  - Remove libslapi from the main package (RHEL-35581)
  - Add "servers" conditional which includes libslapi


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71052)
  - Avoid SSL context cleanup during library destruction (RHEL-68424)


author: Veronika Hanulikova <vhanulik@redhat.com> - 0.26.1-1
changelog:
  - Rebase to new upstream release (RHEL-71523)
  - Separate OpenSC into libraries and binaries (RHEL-73314)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-3
changelog:
  - Extra help information should not be printed if stderr is not a TTY
    Resolves: RHEL-63061
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-63190


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-5
changelog:
  - Fix regression of Match directive processing
    Resolves: RHEL-76317
  - Avoid linking issues for openssl logging
    Related: RHEL-63190


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-6
changelog:
  - Fix regression of Match directive processing
    Related: RHEL-76317
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465, CVE-2025-26466).
    Resolves: RHEL-78699
    Resolves: RHEL-78943


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-8
changelog:
  - OpenSSH should not use its own implementation of MLKEM
    Resolves: RHEL-58252
  - Correct processing of Compression directive
    Resolves: RHEL-68346
  - Supress systemd warning
    Resolves: RHEL-84816


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-9
changelog:
  - CVE-2025-32728: Fix logic error in DisableForwarding option
    Resolves: RHEL-86819
  - Provide better error for non-supported private keys
    Resolves: RHEL-68124
  - Ignore bad hostkeys in known_hosts file
    Resolves: RHEL-83644


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.8p1-2.0
changelog:
  - Temporary disabling self-test
    Related: RHEL-42635
  - Change ssh-keygen defaults in FIPS mode
    Resolves: RHEL-37324
  - Use FIPS-compatible API for key derivation RHEL-10
    Resolves: RHEL-43592


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.8p1-3
changelog:
  - sshd doesn't propose to enter password again when a non-existing user is specified
    Resolves: RHEL-11981
  - Reenabling self-test on rpm build
    Related: RHEL-42635


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.8p1-5
changelog:
  - Restore GSS connectivity when no hostkeys are present
    Related: RHEL-42635
  - Add missing gsskeyex authentication method
    Related: RHEL-42635
  - "publickey-hostbound@openssh.com" extension makes no sense with GSS
    Related: RHEL-42635


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-1
changelog:
  - Update to OpenSSH 9.9p1
    Resolves: RHEL-60564
  - Separate ssh-keysign to a dedicated package
    Resolves: RHEL-62112
  - Use FIPS KEX defaults in FIPS mode
    Resolves: RHEL-58986


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-2
changelog:
  - Resolve memory management issues after rebase
    Related: RHEL-60564
  - Add extra help information on ssh early failure
    Resolves: RHEL-62718


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-10
changelog:
  - Use PBMAC1 by default when creating PKCS#12 files in FIPS mode
    Related: RHEL-36659
  - Support key encapsulation/decapsulation in openssl pkeyutl command
    Resolves: RHEL-54156
  - Fix typo in the patch numeration
    Related: RHEL-41261
  - Enable KTLS, temporary disable KTLS tests
    Related: RHEL-47335
  - Speedup SSL_add_{file,dir}_cert_subjects_to_stack
    Resolves: RHEL-54232
  - Resolve SAST package scan results
    Resolves: RHEL-37561


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-15
changelog:
  - Fix providers no_cache behavior
    Resolves: RHEL-71903
  - Fix pkcs12 command line segfault
    Resolves: RHEL-70878
  - Print key exchange group for hybrid PQC
    Resolves: RHEL-66163
  - Ensure correct fips.so checksum calculation
    Resolves: RHEL-73170
  - Locally configured providers should not interfere with openssl build-time tests
    Resolves: RHEL-76182
  - Load system default cipher string from crypto-policies configuration file
    include /etc/crypto-policies/back-ends/opensslcnf.config and remove
    /etc/crypto-policies/back-ends/openssl.config.
    Resolves: RHEL-71132


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-16
changelog:
  - Fix timing side-channel in ECDSA signature computation (CVE-2024-13176)
    Resolves: RHEL-70879
  - Load system default cipher string from crypto-policies configuration file
    should ignore errors.
    Related: RHEL-71132
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76754
  - Fix segfault on printing the temp key from s_client when connection is not established
    Resolves: RHEL-79045


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
changelog:
  - Rebasing OpenSSL to 3.5
    Resolves: RHEL-80811
    Resolves: RHEL-57022
    Resolves: RHEL-24098
    Resolves: RHEL-24097
    Resolves: RHEL-86865


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-3
changelog:
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-88908
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-88911
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-88913
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-88906
  - Enable sslkeylog support
    Resolves: RHEL-90853
  - Fix UEFI builds
    Resolves: RHEL-89137


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Fix regressions caused by rebase to OpenSSL 3.5
    Related: RHEL-80811
  - Fix UEFI builds on double function definitions
    Resolves: RHEL-93168


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-5
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80811
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-94614


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.1-1
changelog:
  - Rebasing to OpenSSL 3.5.1
    Resolves: RHEL-90350
    Resolves: RHEL-95613
    Resolves: RHEL-97796
    Resolves: RHEL-99353
    Resolves: RHEL-100168


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80811


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-101548
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-105010


author: Hedayat Vatankhah <hedayat.fwd+rpmchlog@gmail.com> - 1.81-1
changelog:
  - Update to latest upstream version with better support for latest OSes,
    closes rhbz#2090942
  - Remove 'which' dependency, closes rhbz#2111531
  - Add support for detecting EFI shell binary (shell.efi), closes rhbz#2101953
  - Add support for Win 11 on ARM 64 systems


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-2
changelog:
  - Fix static analyzer detected issues. Resolves: RHEL-36475
  - pam_env: fixes for NULL environment variables


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-6
changelog:
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-65223


author: Brian C. Lane <bcl@redhat.com> - 3.5-11
changelog:
  - parted: Fix ending sector location when using kibi IEC suffix (bcl)
  - tests: Fix formatting and snprintf warnings in tests. (bcl)
  - ui: Add checks for prompt being NULL (bcl)
  - strlist: Handle realloc error in wchar_to_str (bcl)
  - libparted: Fix potential NULL dereference in ped_disk_next_partition (bcl)
  - filesys: Check for null from close_fn (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.5.28-1
changelog:
  - Upstream 3.5.28 Alpha release
  - Dropped all patches included in new upstream release
  - Bumped minor version on libparted.so and libparted-fs-resize.so


author: Brian C. Lane <bcl@redhat.com> - 3.6-7
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73220
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73220
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73220
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73220


author: Michal Hlavinka <mhlavink@redhat.com> - 3.9.0-4
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Michal Hlavinka <mhlavink@redhat.com> - 3.13.0-1
changelog:
  - updated to 3.13, adds support for cxl1.1 device link status information (#RHEL-29153)
  - add riscv64 build support (#RHEL-40383)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.2-503
changelog:
  - 5.38.2 bump (see <https://metacpan.org/release/PEVANS/perl-5.38.2/view/pod/perldelta.pod>
    or release notes


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-509
changelog:
  - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod)
  - Subpackage Term-Table
  - Subpackage Test-Suite2


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-512
changelog:
  - Resolves: RHEL-75798
  - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>)
  - Add config.over to make build od perl reproducible
  - Removed unnecessary conversion
  - Add new systemtap-sdt-dtrace to build deps


author: Paul Howarth <paul@city-fan.org> - 2.081-1
changelog:
  - Update to 2.081
    - New function set_msg_callback for user defined callback on each SSL message
    - Showcase function in example/ssl_client.pl and example/ssl_server.pl for
      computing JA3S/JA3 fingerprints
    - Fix tracing added in 2.076 to no longer include SSL3_RT_HEADER (noise)


author: Paul Howarth <paul@city-fan.org> - 2.082-1
changelog:
  - Update to 2.082
    - SSL_version default now TLS 1.2+ since TLS 1.1 and lower are deprecated
      (GH#122)
    - Fix output of alert string when debugging (GH#132)
    - Improve regex for hostname validation (GH#130, GH#126)
    - Add can_ciphersuites subroutine for feature checking (GH#127)
    - Utils::CERT_create - die if unexpected arguments are given instead of
      ignoring these
  - Avoid use of deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 2.083-1
changelog:
  - Update to 2.083
    - Fix t/protocol_version.t for OpenSSL versions that don't support SECLEVEL
      (regression from GH#122)


author: Paul Howarth <paul@city-fan.org> - 2.084-1
changelog:
  - Update to 2.084
    - Various fixes for edge cases and build: GH#136, GH#141, GH#142, GH#143,
      GH#145
    - Update documentation to reflect default SSL_version


author: Paul Howarth <paul@city-fan.org> - 2.085-1
changelog:
  - Update to 2.085
    - Fix test that failed due to behavior changes in OpenSSL 3.2 (GH#147)
    - Update PublicSuffix
    - Add examples for TLS JA3/JA4 fingerprinting to tls_fingerprint/


author: Paul Howarth <paul@city-fan.org> - 1.92-7
changelog:
  - Update test suite to handle potential unavailability of sha1 algorithm
    https://github.com/radiator-software/p5-net-ssleay/pull/433
  - Avoid deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list


author: Paul Howarth <paul@city-fan.org> - 1:0.240-1
changelog:
  - Update to 0.240
    - Use Test::More::isnt() instead of Test::More::isn't in tests, which is
      deprecated, as ' isn't allowed as package separator in an upcoming version
      of Perl (GH#13)


author: Christian Glombek <cglombek@redhat.com> - 123-2
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Jan Rybar <jrybar@redhat.com> - 0.1-26
changelog:
  - use build macros, on behalf of original author Tom Stellard (tstellar)
  - Pagure doesn't allow one-click rebase, AFAIK


author: Than Ngo <than@redhat.com> - 1.3.11-4
changelog:
  - Fix negative values seen while running lpar
  - Fix lparstat error with mixed SMT state
  - Fix negative values seen while running lparstat with -E option


author: Than Ngo <than@redhat.com> - 1.3.12-7
changelog:
  - Add, multipath - drmgr support
  - Fix, SMT state is not honored when new CPUs are added dynamically
  Resolves: RHEL-62938


author: Than Ngo <than@redhat.com> - 2.7.10-1
changelog:
  - Update to 2.7.10
    * Aadd support for multiple platform dumps
    * Add support for light path diagnostics for rtas events
    * Enable correct display of model and system-id for IPS Power systems
    * Fix call home feature for nvmf devices
    * Fix crash in rtas_errd due to invalid -f option values
    * Fix build warnings with GCC-15
  Resolves: RHEL-65188


author: Jan Rybar <jrybar@redhat.com> - 6.6.4-17
changelog:
  - migrate to autosetup; convert specfile script to a patch
  - FORTIFY_SOURCE_3 detected a buffer overflow
  - Resolves: bz#2190057


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Security fix for CVE-2024-9287 and CVE-2024-12254
  Resolves: RHEL-64877, RHEL-70450


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-90555


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98060, RHEL-98047, RHEL-97813, RHEL-98062, RHEL-98180


author: Miro Hrončok <mhroncok@redhat.com> - 23.3.1-5
changelog:
  - Switched to autogenerated BuildRequires for test dependencies,
    which removed some that were no longer necessary


author: Charalampos Stratakis <cstratak@redhat.com> - 23.3.2-2
changelog:
  - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706)
  - Require Python with tarfile filters
  - Resolves: RHEL-25820


author: Miro Hrončok <mhroncok@redhat.com> - 2.28.2-7
changelog:
  - Do not package requests[security] and requests[socks] on RHEL
  - Make the package build even when urllib3 won't pull in pysocks


author: Lumír Balhar <lbalhar@redhat.com> - 2.32.3-1
changelog:
  - Update to 2.32.3
  - Fix for CVE-2024-35195
  Resolves: RHEL-37604
  - Add support for IPv6 CIDR in no_proxy setting
  Resolves: RHEL-32523


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-3
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-54012)
  - Fix potential use of uninitialized pgp struct (RHEL-54013)
  - Fix memory leak in rpmsign(8) (RHEL-37564)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-4
changelog:
  - Remove hardcoded GPG references from signing error messages
  - Support switching between GnuPG and Sequoia for package signing (RHEL-56363)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-9
changelog:
  - Revert the gnupg/sequoia sub-packages, too much headache
  - Ship sequoia-signing enablement macros as documentation instead
  - Generate binary signatures with Sequoia too


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-10
changelog:
  - Report unsafe symlinks during installation as a specific case (RHEL-73186)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-54386)
  - Rebuild for ima-evm-utils 1.6 soname bump (RHEL-65378)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-11
changelog:
  - Fix possible package corruption on --delsign/resign/addsign (RHEL-69518)
  - Fix regression on build-id generation from compressed ELF (RHEL-54000)
  - Fix root relocation regression (RHEL-56613)
  - Update sequoia macros for sq 1.0 (RHEL-56363)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.2-4
changelog:
  - Disable/remove neverallow options in sediff.
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-5
changelog:
  - Split packages for variable fonts.
  - Drop unnecessary/duplicate fonts from packages.
  - Worked around broken family name in variable fonts.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-8
changelog:
  - Use no VF in family name version of ttf for -vf packages.
  - Adjust properties in VF to avoid confusion.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-11
changelog:
  - Add a provide line of font(redhatdisplayvf), font(redhattextvf),
    and font(redhatmonovf) to each sub-packages for backward compatibility.
  - Fix invalid License field.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-14
changelog:
  - Remove Italic variable fonts to workaround a crash issue
    and unexpected italic rendering.
    Resolves: RHEL-69430


author: Stephen Gallagher <sgallagh@redhat.com> - 1:0.4-0.54.b47
changelog:
  - Fixes for -WError=implicit-function-declaration on RHEL
  - Reinstates the dump headers without compiling the implementations


author: Jiri Hnidek <jhnidek@redhat.com> 4-1
changelog:
  * Tue Jul 26 2022 Jiri Hnidek <jhnidek@redhat.com> 3-1
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - test: drop unused reference-image file (ptoscano@redhat.com)
  - Drop the static npm-shrinkwrap.json (ptoscano@redhat.com)
  - Bump cockpit test API to 273 + run-tests scheduler fix (martin@piware.de)
  - spec: suggest insights-client on RHEL (ptoscano@redhat.com)
  - tito: remove autogenerated spec file before tagging (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 5-1
changelog:
  - Translated using Weblate (French) (vincent.lefebvre59@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - 2077759: invoke cockpit.translate() after document loading
    (ptoscano@redhat.com)
  - test: Drop outdated copy of packagelib.py (martin@piware.de)
  - Added missing keys to react components (jhnidek@redhat.com)
  - Fix the issue, when it is not possible to install insights-client
    (jhnidek@redhat.com)
  - test: Sync packagelib.py with cockpit main (martin@piware.de)
  - New target and added one project directory to .gitignore (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 6-1
changelog:
  - Translated using Weblate (Kannada) (jsefler@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - 2169976: insights: fix spawn_error_to_string in more cases
    (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 7-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Finnish) (ricky.tigg@gmail.com)
  - Translated using Weblate (Finnish) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Finnish) (jiri.gronroos@iki.fi)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - test: drop no more used machine_python() helper function
    (ptoscano@redhat.com)
  - test: use a simpler way to append content to a file (ptoscano@redhat.com)
  - test: use f-strings to replace other string formattings (ptoscano@redhat.com)
  - test: use curl directly to wait for Candlepin (ptoscano@redhat.com)
  - test: drop extra activation key code (ptoscano@redhat.com)
  - test: upload product certificates to /etc/pki/product-default
    (ptoscano@redhat.com)
  - test: use onlyImage() from cockpit test lib (ptoscano@redhat.com)
  - Makefile: fix names of po extractor tools (ptoscano@redhat.com)
  - fix: Drop deprecated cockpit.resolve() (martin@piware.de)
  - Bump cockpit testlib to 327 (martin@piware.de)
  - fix: adapt to the new state of insights-client.service on failure
    (ptoscano@redhat.com)
  - Update cockpit test lib to 323 (ptoscano@redhat.com)
  - test: switch one more org to SCA one (ptoscano@redhat.com)
  - test: Use SCA to register (mhorky@redhat.com)
  - fix: switch to the proper URL for Red Hat's Hybrid Cloud Console
    (ptoscano@redhat.com)
  - test: setup the subscription repositories (ptoscano@redhat.com)
  - test: mock-insights: switch away from ssl.wrap_socket() (ptoscano@redhat.com)
  - test: switch to CERT auth for insights-client (ptoscano@redhat.com)
  - chore: ignore node_modules for flake8 (ptoscano@redhat.com)
  - test: mock-insights: implement upload and delete platform endpoints
    (ptoscano@redhat.com)
  - test: mock-insights: fix/improve handling of IDs (ptoscano@redhat.com)
  - test: mock-insights: refactor of two platform endpoints (ptoscano@redhat.com)
  - feat: switch from .last-upload.results to .lastupload (ptoscano@redhat.com)
  - fix: Remove Auto-attach button (jhnidek@redhat.com)
  - chore: test: use the new syspurpose command (ptoscano@redhat.com)
  - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - chore: bump version of black to 24.3.0 (ptoscano@redhat.com)
  - test: wait more when registering to Insights (ptoscano@redhat.com)
  - test: break insights-client in a different way (ptoscano@redhat.com)
  - test: mock-insights: return 404 for missing systems in /systems
    (ptoscano@redhat.com)
  - test: wait longer in certain situations (ptoscano@redhat.com)
  - Fix obsolete cockpit defer API (martin@piware.de)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - Update cockpit test lib and webpack build (martin@piware.de)
  - Use proper imports (martin@piware.de)
  - flake8: update/improve the config (ptoscano@redhat.com)
  - test: split/wrap overly long strings (ptoscano@redhat.com)
  - test: minor comment updates (ptoscano@redhat.com)
  - test: format embedded Python snippets with black==23.3.0
    (ptoscano@redhat.com)
  - test: assume /root/run-candlepin to start candlepin (ptoscano@redhat.com)
  - test: drop bits for rhel-8-5 (ptoscano@redhat.com)
  - Use 'type' instead of 'which' which is standard unix (kkoukiou@redhat.com)
  - Format code with black==23.3.0 (ptoscano@redhat.com)
  - Update black to version 23.3.0 (ptoscano@redhat.com)
  - Fix usage of exception state (mmarusak@redhat.com)
  - Drop usage of obsolete cockpit.defer() (martin@piware.de)
  - Fix getSyspurposeStatus to not return an ever-pending promise
    (martin@piware.de)
  - Makefile: Fix "make watch" to work from a clean tree (martin@piware.de)
  - build: use `pip wheel` to get cockpit wheel (allison.karlitskaya@redhat.com)
  - Set autocomplete to "current-password" for password inputs
    (jhnidek@redhat.com)
  - Run `npm install` with `--ignore-scripts` (mpitt@redhat.com)
  - README: document development dependencies for Fedora/Ubuntu
    (jvanderwaa@redhat.com)
  - Install into /usr/local/ by default (martin@piware.de)
  - Makefile: Some noise cleanup (martin@piware.de)
  - build: use translation tools from pkg/lib (martin@piware.de)
  - Makefile: Drop update-po rule (martin@piware.de)
  - Start using cockpit-po-plugin instead of Po2Json (kkoukiou@redhat.com)
  - Add support for dark theme (kkoukiou@redhat.com)
  - Bump up pkg/lib reference tag (kkoukiou@redhat.com)
  - Bump up patternfly (kkoukiou@redhat.com)
  - Bump up react version and start using new client API (kkoukiou@redhat.com)
  - node_modules: Update chrome-remote-interface to 0.32 (martin@piware.de)
  - Makefile: Add support for /pybridge scenario (martin@piware.de)


author: Jiri Hnidek <jhnidek@redhat.com> 8-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (noreply-mt-weblate-
    translation-memory@weblate.org)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Finnish) (ricky.tigg@gmail.com)
  - Various fixes in state management (tomatus777@gmail.com)
  - Upgrade to Patternfly 6 (tomatus777@gmail.com)
  - make eslint happy (tomatus777@gmail.com)
  - test: mock-insights should have /host_exists endpoint (pkoprda@redhat.com)
  - build: switch to esbuild (tomatus777@gmail.com)
  - build: fix installation of sub-man with newer Fedora (ptoscano@redhat.com)
  - refactor: Remove system purpose status (pkoprda@redhat.com)
  - refactor: Display status consistent with subscription-manager
    (pkoprda@redhat.com)
  - refactor: Simplify displaying of installed products (pkoprda@redhat.com)
  - Stop using deprecated translatable for html (jvanderwaa@redhat.com)


author: Vladis Dronov <vdronov@redhat.com> - 6.17-2
changelog:
  - Add Intel CET IBT instrumentation to assembly code
  - Update to the upstream v6.17 @ ac43f912 (RHEL-36771)


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-1
changelog:
  - New version 3.4.1
  - Resolves: RHEL-70151 - Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling
  - Resolves: RHEL-70159 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70203 - rsync server leaks arbitrary client files
  - Resolves: RHEL-72500 - Path traversal vulnerability in rsync
  - Resolves: RHEL-72501 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71658 - Race Condition in rsync Handling Symbolic Links
  - Resolves: RHEL-71293 - Build rsync with --with-rrsync


author: Paolo Bonzini <pbonzini@redhat.com> - 4.9-1
changelog:
  - Rebase to 4.9
  - Update downstream patches
  - Resolves: rhbz#2140486
  - Remove change to gnulib tests, they pass anyway
  - Install valgrind and langpacks to increase test coverage


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.25-1
changelog:
  - Update ktlshd policy to read /proc/keys and domain keyrings
  Resolves: RHEL-42672
  - Allow pcmsensor read nmi_watchdog state information
  Resolves: RHEL-52838
  - Support peer-to-peer migration of vms using ssh
  Resolves: RHEL-77351
  - Allow virt_domain read hardware state information unconditionally
  Resolves: RHEL-71270
  - Allow timemaster write to sysfs files
  Resolves: RHEL-44637
  - Allow virtqemud map svirt_image_t plain files
  Resolves: RHEL-40080
  - Allow virtqemud unmount a filesystem with extended attributes
  Resolves: RHEL-40080
  - Allow virtqemud work with nvdimm devices
  Resolves: RHEL-71656
  - Update virtqemud policy regarding the svirt_tcg_t domain
  Resolves: RHEL-71270
  - Allow virtqemud use hostdev usb devices conditionally
  Resolves: RHEL-74230
  - Support saving and restoring a VM to/from a block device
  Resolves: RHEL-76138
  - Allow virtnwfilterd dbus chat with firewalld
  Resolves: RHEL-76138
  - Allow virt_domain to use pulseaudio - conditional
  Resolves: RHEL-62763
  - Allow virtstoraged write to sysfs files
  Resolves: RHEL-44637
  - Allow irqbalance to run unconfined scripts conditionally
  Resolves: RHEL-54019
  - Allow rhsmcertd notify virt-who
  Resolves: RHEL-77114
  - Allow init mounton crypto sysctl files
  Resolves: RHEL-56250


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.26-1
changelog:
  - Rename winbind_rpcd_* types to samba_dcerpcd_*
  Resolves: RHEL-14759
  - Allow samba-dcerpcd work with ctdb cluster
  Resolves: RHEL-14759
  - Revert "Remove socket from unconfined_domain_type allow rule"
  Resolves: RHEL-77327
  - Dontaudit access of virt-related permissive domains
  Resolves: RHEL-77808
  - Add selinux_requires_min macro
  Resolves: RHEL-54715
  - Filter out EPEL related modules
  Resolves: RHEL-73505


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.27-1
changelog:
  - Allow afterburn to mount and read config drives
  Resolves: RHEL-82120
  - Update afterburn file transition policy
  Resolves: RHEL-82120
  - Label /run/metadata with afterburn_runtime_t
  Resolves: RHEL-82120
  - Allow afterburn list ssh home directory
  Resolves: RHEL-82120
  - Confine tuned-ppd
  Resolves: RHEL-69450
  - Update ktls policy
  Resolves: RHEL-74424
  - Add the switcheroo module
  Resolves: RHEL-83267
  - Update switcheroo policy
  Resolves: RHEL-83267
  - Confine the switcheroo-control service
  Resolves: RHEL-83267


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.28-1
changelog:
  - Change path of tuned and tuned-ppd to /usr/sbin
  Resolves: RHEL-69450
  - Update the pcmsensor policy
  Resolves: RHEL-80452
  - Allow dovecot-deliver read mail aliases
  Resolves: RHEL-80153
  - Allow boothd connect to systemd-machined over a unix socket
  Resolves: RHEL-75471
  - Allow chronyd-restricted sendto to chronyc
  Resolves: RHEL-82299
  - Allow chronyc sendto to chronyd-restricted
  Resolves: RHEL-82299
  - Allow cifs.idmap helper to set attributes on kernel keys
  Resolves: RHEL-83921
  - Remove ktls from modules-filtered.lst
  Resolves: RHEL-74424


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.29-1
changelog:
  - Revert "Dontaudit access of virt-related permissive domains"
  Resolves: RHEL-79833
  - Remove permissive domains
  Resolves: RHEL-82672


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.30-1
changelog:
  - Allow auditctl signal auditd
  Resolves: RHEL-87418
  - Update bootupd policy for the removing-state-file test
  Resolves: RHEL-87372
  - Allow systemd-user-runtime-dir get/set tmpfs quotas
  Resolves: RHEL-86789
  - Allow systemd-user-runtime-dir delete gnome homedir content
  Resolves: RHEL-86789
  - Confine /usr/lib/systemd/systemd-user-runtime-dir
  Resolves: RHEL-86789
  - Allow system-dbusd list systemd-machined directories
  Resolves: RHEL-86528
  - Allow NetworkManager create and use icmp_socket
  Resolves: RHEL-86258
  - Allow tuned-ppd dbus chat with xdm
  Resolves: RHEL-85849
  - Allow virt_domain write to virt_image_t files
  Resolves: RHEL-85319
  - Allow rhsmcertd connect to systemd-machined
  Resolves: RHEL-83925
  - Allow varnishd execute the prlimit64() syscall
  Resolves: RHEL-77779
  - Allow systemd-machined the kill user-namespace capability
  Resolves: RHEL-77087
  - Allow system_dbusd_t r/w unix stream sockets of unconfined_service_t
  Resolves: RHEL-62185
  - Allow tlshd read network sysctls
  Resolves: RHEL-74424


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.31-1
changelog:
  - Label /dev/diag as diagnostic_device_t
  Resolves: RHEL-89804
  - Label SetroubleshootPrivileged.py with setroubleshootd_exec_t
  Resolves: RHEL-87727
  - Allow syslogd watch syslog_conf_t directories
  Resolves: RHEL-87648
  - Allow networkmanager send a general signal to iptables
  Resolves: RHEL-86780
  - Define file equivalency for /var/etc
  Resolves: RHEL-86678
  - Update bootupd policy when ESP is not mounted
  Resolves: RHEL-86588
  - dontaudit execmem for modemmanager
  Resolves: RHEL-86176
  - Allow systemd create journal pid files
  Resolves: RHEL-72692
  - Allow virtqemud read/write/setattr input event devices
  Resolves: RHEL-46385


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.32-1
changelog:
  - Backport policy for additional systemd generators from rawhide
  Resolves: RHEL-36740
  - Allow login_userdomain create /run/tlog directory with user_tmp_t
  Resolves: RHEL-56344
  - Backport bootupd policy from current Fedora rawhide
  Resolves: RHEL-86588


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.33-1
changelog:
  - Allow systemd_generator read files in /proc and /sys
  Resolves: RHEL-36740
  - Update irqbalance policy for using unconfined scripts
  Resolves: RHEL-54019
  - Allow utempter use terminal multiplexor
  Resolves: RHEL-56344
  - Allow virtqemud execute ovs-vsctl with a domain transition
  Resolves: RHEL-65322
  - Allow mptcpd the net_admin capability
  Resolves: RHEL-70730
  - Allow tomcat execute cracklib-check with a domain transition
  Resolves: RHEL-82090
  - Update the files_search_mnt() interface
  Resolves: RHEL-85178
  - Allow key.dns_resolve set attributes on the kernel key ring
  Resolves: RHEL-91602
  - Allow switcheroo-control dbus chat with xdm
  Resolves: RHEL-93535
  - Revert "Allow virt_domain write to virt_image_t files"
  Resolves: RHEL-93773


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.34-1
changelog:
  - Allow systemd-coredump the sys_admin capability
  Resolves: RHEL-97586
  - Dontaudit systemd-coredump the sys_resource capability
  Resolves: RHEL-97586
  - Allow systemd-coredumpd sys_admin and sys_resource capabilities
  Resolves: RHEL-97586
  - Allow systemd-coredump read nsfs files
  Resolves: RHEL-97586
  - Dontaudit systemd-coredump sys_admin capability
  Resolves: RHEL-97586
  - Allow svirt-tcg read init state
  Resolves: RHEL-95725
  - Allow virtqemud create and unlink files in /etc/libvirt/
  Resolves: RHEL-95725
  - Allow virtqemud send a generic signal to passt
  Resolves: RHEL-44994
  - Allow openvswitch ioctl vduse devices
  Resolves: RHEL-93041
  - Label /dev/vduse/control and /dev/vduse/NAME devices
  Resolves: RHEL-93041
  - Allow virtstoraged the sys_rawio capability
  Resolves: RHEL-44639
  - Allow virtstoraged fsetid capability
  Resolves: RHEL-44639
  - Allow virtqemud additional permissions on scsi generic chr files
  Resolves: RHEL-44628
  - Allow irqbalance execute shell if irqbalance_run_unconfined is on
  Resolves: RHEL-54019
  - Fix files_dontaudit_delete_all_files()
  Resolves: RHEL-86789
  - Allow virtnodedev create mdevctl config dirs
  Resolves: RHEL-98559
  - Allow cryptsetup-generator manage systemd unit files
  Resolves: RHEL-98656


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.35-1
changelog:
  - Remove duplicate summary header
  Related: RHEL-87742
  - Allow irqbalance execute shell if irqbalance_run_unconfined is on
  Resolves: RHEL-54019
  - virt: allow QEMU use of the qgs daemon for attestation
  Resolves: RHEL-87742
  - qgs: add contrib module for TDX "qgs" daemon
  Resolves: RHEL-87742
  - kernel: add interfaces for using SGX enclaves
  Resolves: RHEL-87742


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.3-1
changelog:
  - Allow svirt read virtqemud fifo files
  Resolves: RHEL-104069
  - Allow virtqemud handle virt_content_t chr files
  Resolves: RHEL-76104
  - Allow "hostapd_cli ping" run as a systemd service
  Resolves: RHEL-77047
  - All sblim-sfcbd the dac_read_search capability
  Resolves: RHEL-98287
  - Allow sblim domain read systemd session files
  Resolves: RHEL-98287
  - Allow sblim-sfcbd execute dnsdomainname
  Resolves: RHEL-98287
  - Allow systemd-importd create and unlink init pid socket
  Resolves: RHEL-98490


author: Martin Osvald <mosvald@redhat.com> - 2.14.2-1
changelog:
  - sysusers.d: add script and configuration fragments for groups
  - passwd: align 'nologin' shell path with systemd defaults
  - uidgid: assign GID 101 for 'ssh_keys' group
  - uidgid: assign UID/GID 114 for 'polkitd'
  - passwd: update GECOS field for 'root' user
  - services: remove commas from aliases for ircu-3
  - setup.spec: throw away newaliases output again


author: Martin Osvald <mosvald@redhat.com> - 2.14.3-1
changelog:
  - sysusers.d: add script and generate configuration fragment for users
  - Add fallback to hostname determination for csh.login (rhbz#2079768)
  - Remove ancient Conflicts
  - files: mark /run/motd as an ephemeral ghost entry


author: Martin Osvald <mosvald@redhat.com> - 2.14.4-1
changelog:
  - protocols: add mptcp (262)
  - setup.spec: make setup protected package (rhbz#2155547)
  - setup.spec: don't report rpm -Va error on /run/motd (rhbz#2160954)
  - services: replace hostmon with llmnr for port 5355 (rhbz#2216914)


author: Martin Osvald <mosvald@redhat.com> - 2.14.5-1
changelog:
  - bashrc: switch PROMPT_COMMAND to be an array (rhbz#2097525)
  - profile: don't overwrite the HISTSIZE environment variable
  - hosts: use "example.org" as example domain (rhbz#2246220)
  - csh.login: source csh.local (RHEL-17226)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.48-7
changelog:
  - udev rules: avoid spurious warning for non-SCSI devices (RHEL-40861,RHEL-54607)
  - Install missing 00-scsi-sg3_config.rules
  - Fix file references to other udev rules


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.14.0-5
changelog:
  - passwd: Provide binary from this package. Enable libpam and
    disable account-tools-setuid. Provide passwd PAM service file.
    Resolves: #2233275
  - passwd: provide --stdin option


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-1
changelog:
  - Rebase to version 4.15.0
  - getdef: avoid spurious error messages about unknown configuration options


author: Milan Crha <mcrha@redhat.com> - 2.3-6
changelog:
  - Co-own /usr/share/gettext and /usr/share/gettext/its
  - Related to rhbz#2280150
  - Resolves: RHEL-38682 (Backport Fedora 40 changes)


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.45.0-1
changelog:
  - Updated to version 3.45.0 (https://sqlite.org/releaselog/3_45_0.html)
  - List versioned soname in files, preventing unnoticed soname bumps
  - Disable func4 tests for i686 arch due to failing float<->int conversions


author: Bruno Wolff III <bruno@wolff.to> - 4.6-1
changelog:
  - 4.6 release
  - PR #231 was merged
  - See https://github.com/plougher/squashfs-tools/blob/master/CHANGES


author: Bruno Wolff III <bruno@wolff.to> - 4.6.1-1
changelog:
  - Phillip is now doing two tags per release and we can
  - use the one that works better with forgemeta
  - There are a few fixes after the 4.6 release. I think only
  - one applies to Fedora because of the build options we use.
  - It was not something that affects image builds.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-5
changelog:
  - Fix incorrect syscall name reporting in restart_syscall() on attach when
    PTRACE_GET_SYSCALL_INFO is in use (RHEL-65108).
  - Update net-yy-inet* and linkat--secontext_mismatch tests.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-6
changelog:
  - Avoid failures of creat.gen test on kernels that include commit
    v6.11-rc1~242^2~19 ("fs: don't block i_writecount during exec").


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.9.14-1.p3
changelog:
  - Rebase to 1.9.14p3
  - sudo-1_9_14p2 is available Resolves: rhbz#2175672
  - sudo fails to build with Python 3.12: FAILED: testcase
    check_example_group_plugin_is_able_to_debug() Resolves: rhbz#2186412


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-5.p5
changelog:
  - RHEL 10.0 ERRATUM
  - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
    positive(s) Resolves: RHEL-44436
  - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864


author: Alejandro López <allopez@redhat.com> - 1.9.15-9.p5
changelog:
  - RHEL 10.1 ERRATUM
  - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009
  - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022


author: Jan Macku <jamacku@redhat.com> - 257-3
changelog:
  - udev/net_id: introduce naming scheme for RHEL-9.6 (RHEL-44417)
  - Rebase to new upstream stable release v257.2 (RHEL-71409)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-4
changelog:
  - ci: use ubuntu 22:04 for deploy of man pages (RHEL-57603)
  - tree-wide: Fix python formatting (RHEL-57603)
  - ci: fix Packit (RHEL-57603)
  - ci: drop testing farm test (RHEL-57603)
  - dbus: stash the subscriber list when we disconenct from the bus (RHEL-73780)
  - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-73780)
  - shared/bus-util: move bus_message_read_id128() to bus-message-util (RHEL-73780)
  - shared/bus-util: move bus_message_hash_ops to bus-message-util (RHEL-73780)
  - shared/bus-util: move string set append/get funcs to bus-message-util and bus-get-properties, respectively (RHEL-73780)
  - shared/serialize: make input params const (RHEL-73780)
  - shared/serialize: introduce serialize_id128() (RHEL-73780)
  - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-73780)
  - core/manager: use FOREACH_ARRAY at one more place (RHEL-73780)
  - core/manager: drop duplicate bus track deserialization (RHEL-73780)
  - bus-util: introduce bus_get_instance_id() (RHEL-73780)
  - core: serialize API bus id and validate before deserializing bus tracks (RHEL-73780)
  - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-73780)
  - shared/bus-util: add missing `set.h` include (RHEL-73780)
  - udevadm-test: add missing oom check (RHEL-75774)
  - udev-rules: replace 'type *func()' -> 'type* func()' (RHEL-75774)
  - udev-rules: do not change maximum log level when running in test mode (RHEL-75774)
  - udevadm-test: introduce -v/--verbose option to show verbose log messages (RHEL-75774)
  - udev-rules: show original token string in log_event_error() and friends (RHEL-75774)
  - udev-rules: logs result of format substitution (RHEL-75774)
  - udev-rules: add more trace logs for string match (RHEL-75774)
  - udev-rules: introduce udev_replace_chars_and_log() (RHEL-75774)
  - udev-rules: ignore whole command result if it is too long and does not contain newline (RHEL-75774)
  - udev-rules: update log messages (RHEL-75774)
  - udev-rules: add trace logs for GOTO and parent conditions (RHEL-75774)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-8
changelog:
  - Rebase to new upstream stable release v257.3 (RHEL-71409)
  - udev: introduce several features to make debugging rules easier (RHEL-75774)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-10
changelog:
  - resolved: pick up new DNSSEC KSC from 2024 (RHEL-77718)
  - test_ukify: Skip on riscv64 (RHEL-85854)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-11
changelog:
  - fuzz-journal-remote: use ASSERT_OK() and friends (RHEL-79976)
  - logs-show: skip journal entry with an invalid timestamp (RHEL-79976)
  - man: mention that rhel-9.0 net naming scheme is the same as v251 (RHEL-87179)
  - backlight: Drop support for actual_brightness (RHEL-86713)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-13
changelog:
  - systemctl: do not try to acquire triggering units for template units (RHEL-55132)
  - core/unit: add one assertion for u->manager (RHEL-55734)
  - core/service: destroy runtime data when Type=oneshot services exit (RHEL-55734)
  - cgroup-util: Ignore kernel threads in cg_kill_items() (RHEL-55746)
  - cgroup-util: Don't try to open pidfd for kernel threads (RHEL-55746)
  - cgroup-util: fix typo (RHEL-55746)
  - netif-naming-scheme: rename rhel-10.0 to rhel-10.0.beta (RHEL-55728)
  - net-naming-scheme: disable NAMING_FIRMWARE_NODE_SUN (RHEL-55728)
  - net-naming-scheme: remove NAMING_FIRMWARE_NODE_SUN from 9.5 (RHEL-55728)
  - make systemd-ukify subpackage arch dependent (RHEL-52634)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-14
changelog:
  - Revert "cgroup-util: Don't try to open pidfd for kernel threads" (RHEL-52634)
  - ukify: Skip test on architectures without UEFI (RHEL-52634)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-15
changelog:
  - ci: rename beta branch to match dist-git name (RHEL-57603)
  - udev: Handle PTP device symlink properly on udev action 'change' (RHEL-59871)
  - Fix detection of TDX confidential VM on Azure platform (RHEL-56144)
  - confidential-virt: split caching of CVM detection into separate method (RHEL-56144)
  - confidential-virt: add detection for s390x target (RHEL-56144)
  - man/systemd-detect-virt: fix row spanning for VM header (RHEL-56144)
  - man/systemd-detect-virt: list known CVM technologies (RHEL-56144)


author: Jan Macku <jamacku@redhat.com> - 257-1
changelog:
  - Rebase to new upstream release v257 (RHEL-71409)
  - netif-naming-scheme: introduce rhel-10.0 scheme (RHEL-44417)


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1:1.6.0-8
changelog:
  - migrated to SPDX license
  - resolves: rhbz#2219549* Sat Jul 23 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.6.0-5

  - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild


author: John Kacur <jkacur@redhat.com> - 0.19-7
changelog:
  - Add missing patch to prevents tuna gui from starting if display not available
  - remove oscilloscope which is unsupported in rhel
  - Add rpmsinpect.yaml and gating.yaml
  - Add tests dir
  - update the current version of python-linux-procfs as a requires
  Resolves: RHEL-30171


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-17121
    - print all arguments of failing commands in error messages
      resolves: RHEL-3689
    - plugin_sysctl: added support for sysctl names with slash
      resolves: RHEL-3707
    - tuned-adm: added support for moving devices between plugin instances
      resolves: RHEL-15141
    - api: added methods for retrieval of plugin instances and devices
      resolves: RHEL-15137
    - plugin_cpu: amd-pstate mentioned instead of just intel_pstate
      resolves: RHEL-16469
    - hotplug: do not report ENOENT errors on device remove
      resolves: RHEL-11342
    - plugin_sysctl: expand variables when reporting overrides
      resolves: RHEL-18972
    - plugin_acpi: new plugin which handles ACPI platform_profile
      resolves: RHEL-16966
    - plugin_bootloader: skip calling rpm-ostree kargs in no-op case
      resolves: RHEL-20767
    - plugin_cpu: support cstate settings of pm_qos_resume_latency_us
      resolves: RHEL-21129
    - scheduler: add option for ignoring IRQs affinity
      resolves: RHEL-21923
    - plugin_intel_uncore: new plugin for uncore setting


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-17121
    - renamed intel_uncore plugin to uncore
    - network-throughput: increased net.ipv4.tcp_rmem default value
      resolves: RHEL-25847


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-50567
    - spec: create /etc/tuned/profiles directory
      resolves: RHEL-46721
    - hotplug: wait for device initialization
    - sap-netweaver: increased vm.max_map_count
    - daemon: buffer sighup signal
    - added an option to configure profile directories
    - api: added commands to dynamically create/destroy instances
    - functions: added 'intel_recommended_pstate'
    - functions: added 'log' which helps with debugging
    - functions: added 'package2cpus' and 'packages2uncores' matchers
    - functions: added 'lscpu' to list CPU details
    - plugins: added plugin_irq
    - plugin_video: added support for amdgpu `panel_power_savings` attribute
    - plugin_cpu: check that writes are necessary if they may cause redundant IPIs
    - plugin_uncore: allow to configure frequency limits using percent
    - amd-pstate: added support for controlling core performance boost
    - plugin_scheduler: adjusted error logging in _set_affinity
    - plugin_audio: enabled controller reset to fix suspend with NVIDIA
    - plugin_irq: fixed expansion of variables
    - plugin_irqbalance: switched to IRQBALANCE_BANNED_CPULIST


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-50567
    - clear plugin repository when stopping tuning
    - man: add description of the balanced-battery profile


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-3
changelog:
  - Fixed privileged execution of arbitrary scripts by active local user,
    (CVE-2024-52336)
    Resolves: RHEL-66636
  - Added sanity checks for API methods parameters, (CVE-2024-52337)
    Resolves: RHEL-66613


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-70454
    - tuned-ppd: removed the use of StrEnum
    - tuned-ppd: fixed traceback
      resolves: RHEL-74384
    - tuned-ppd: multiple fixes and updates
    - docs: plugins docs are now automatically generated from the docstrings
    - plugin_cpu: fixed no_turbo boolean option parsing
    - plugin_cpu: allowed raw energy_performance_preference values
    - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    - plugin_bootloader: added variables to BLS entries only if grub is used
    - plugin_scheduler: do not assume that perf events have type attribute
    - plugin_scheduler: updated sched knobs for kernels 6.6+
    - plugin_scheduler: log process info when its affinity cannot be changed
      resolves: RHEL-69933
    - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    - plugin_scheduler: made perf support optional
    - plugin_net: added support for hotplug and rename
    - makefile: added support for installation to custom $BINDIR/$SBINDIR
    - functions: dropped cpuspeed support


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-0.1.rc1
changelog:
  - new release
    - tuned-ppd: removed the use of StrEnum
    - tuned-ppd: fixed traceback
      resolves: RHEL-74384
    - tuned-ppd: multiple fixes and updates
    - docs: plugins docs are now automatically generated from the docstrings
    - plugin_cpu: fixed no_turbo boolean option parsing
    - plugin_cpu: allowed raw energy_performance_preference values
    - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    - plugin_bootloader: added variables to BLS entries only if grub is used
    - plugin_scheduler: do not assume that perf events have type attribute
    - plugin_scheduler: updated sched knobs for kernels 6.6+
    - plugin_scheduler: log process info when its affinity cannot be changed
      resolves: RHEL-69933
    - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    - plugin_scheduler: made perf support optional
    - plugin_net: added support for hotplug and rename
    - makefile: added support for installation to custom $BINDIR/$SBINDIR
    - functions: dropped cpuspeed support


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70454
    - sap-hana: Set transparent_hugepages to madvise
      resolves: RHEL-68454
    - plugin_bootloader: export Grub variables to make them available in submenus
    - utils.commands: fixed CPU online detection when not present
    - plugin_net: handled cqe-mode-rx ethtool option
    - profiles: correct CPU governor settings


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70454
    - plugins: added missing instance parameters
    - disk: added missing remove parameter
    - plugin_scheduler: added switch to disable processing of kthreads
    - Makefile: added support for installation to custom LIBEXECDIR
    - functions: create a new parser object for each string expansion


author: Patsy Griffin <patsy@redhat.com> - 2023d-1
changelog:
  - Rebase to tzdata-2023d
    - Include time zone changes for Ittoqqortoormiit, Greenland
      and Vostok, Antarctica.
    - Update the expiration date for the leap-seconds.list file.
      No new leap seconds were added.


author: Patsy Griffin <patsy@redhat.com> - 2024a-1
changelog:
  - Rebase to tzdata-2024a
    - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
    - Palestine will spring forward a week later than previously
      predicted.


author: Patsy Griffin <patsy@redhat.com> - 2024a-3
changelog:
  - Add java patch to fix incorrect calculations for
    Africa/Casablanca starting in 2027. (RHEL-32178)
  - Remove hardcoded versioned path to javac.


author: Patsy Griffin <patsy@redhat.com> - 2024b-1
changelog:
  - Update to tzdata-2024b
    - Improve historical data for Mexico, Mongolia, and Portugal.
    - System V names are now obsolescent.
    - The main data form now uses %z.
    - The code now conforms to RFC 8536 for early timestamps.
    - Support POSIX.1-2024, which removes asctime_r and ctime_r.
    - Assume POSIX.2-1992 or later for shell scripts.
    - SUPPORT_C89 now defaults to 1.
    - Include two upstream patches for month names as in April vs Apr.
  - Harden against links to removed zones


author: Patsy Griffin <pats@redhat.com> - 2025a-1
changelog:
  Update to tzdata-2025a (RHEL-74296)
    - Paraguay is now permanently at -03. This impacts timestamps
      starting on 2025-03-22.
    - Includes improvements to pre-1991 data for the Philippines.
    - Etc/Unknown is now reserved.


author: Patsy Griffin <patsy@redhat.com> - 2025b-1
changelog:
  - Update to tzdata-2025b (RHEL-84740)
    - Chile's Aysén Region moves from -04/-03
      to -03 year-round, diverging from America/Santiago and
      creating a new zone America/Coyhaique.


author: Jakub Martisko <jamartis@redhat.com> - 6.0-65
changelog:
  - Fix: Unzip Fails on Large Zip Files
  - Use the patch from Debian dealing with this
  Resolves: RHEL-45993


author: Jakub Martisko <jamartis@redhat.com> - 6.0-67
changelog:
  - zipinfo: remove the extra %c that caused invalid reads
  - zipinfo: fix the whitespaces in the output
  - Zipbombs: Port Another patch, orinally made by Mark Adler
  - https://github.com/madler/unzip/commit/af0d07f95809653b669d88aa0f424c6d5aa48ba0
    Resolves: RHEL-59972
    Resolves: RHEL-6286


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.076-2
changelog:
  - enable building without GPM support - build with GPM in Fedora
  - 2262371 - gvim: symbol lookup error: gvim: undefined symbol: g_once_init_enter_pointer


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1:2.10-8
changelog:
  - Backport WPA3 support for Broadcom devices. Fixes: rhbz#2226569
  - Enable parsing of IPv6 addresses in RADIUS configuration (#2095296)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.10-10
changelog:
  - Fix package configuration/add missing patches to avoid regressions when
    upgrading from rhel-9 (RHEL-43250)
  - Backport P2P fixc causing nmci failures (RHEL-17701)
  - Disable OpenSSL ENGINE API (RHEL-33750)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.10-10
changelog:
  - Fix package configuration/add missing patches to avoid regressions when
    upgrading from rhel-9 (RHEL-43250)
  - Backport P2P fix causing nmci failures (RHEL-17701)
  - Disable OpenSSL ENGINE API (RHEL-33750)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.11-1
changelog:
  - Update to version 2.11 (RHEL-59010)
  - backport fix for known regression on brcmfmac (rhbz#2302577)


author: Jakub Martisko <jamartis@redhat.com> - 3.0-42
changelog:
  - Use C implementation of some functions instead of asm
  - Fix the missing compiler/linker flags
  - Minor spec clean up
  Resolves: RHEL-33526


