# changelog

author: Augusto Caringi <acaringi@redhat.com> [5.14.0-604.el9]
changelog:
  - net: e1000e: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Corinna Vinschen) [RHEL-99399]
  - treewide: Switch/rename to timer_delete[_sync]() (Corinna Vinschen) [RHEL-99399]
  - e1000e: change k1 configuration on MTP and later platforms (Corinna Vinschen) [RHEL-99399]
  - e1000e: Fix real-time violations on link up (Corinna Vinschen) [RHEL-99399]
  - e1000e: Link NAPI instances to queues and IRQs (Corinna Vinschen) [RHEL-99399]
  - e1000e: Remove duplicated writel() in e1000_configure_tx/rx() (Corinna Vinschen) [RHEL-99399]
  - net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103029] {CVE-2025-38124}
  - scsi: storvsc: Increase the timeouts to storvsc_timeout JIRA: https://issues.redhat.com/browse/RHEL-100669 (Dexuan Cui)
  - dpll: add phase_offset_monitor_get/set callback ops (Ivan Vecera) [RHEL-105066]
  - dpll: add phase-offset-monitor feature to netlink spec (Ivan Vecera) [RHEL-105066]
  - devlink: Add new "clock_id" generic device param (Ivan Vecera) [RHEL-105064]
  - devlink: Add support for u64 parameters (Ivan Vecera) [RHEL-105064]
  - netlink: specs: devlink: replace underscores with dashes in names (Ivan Vecera) [RHEL-105064]
  - devlink: Add new "enable_phc" generic device param (Ivan Vecera) [RHEL-105064]
  - netlink: fix policy dump for int with validation callback (Ivan Vecera) [RHEL-105064]
  - devlink: use DEVLINK_VAR_ATTR_TYPE_* instead of NLA_* in fmsg (Ivan Vecera) [RHEL-105064]
  - devlink: avoid param type value translations (Ivan Vecera) [RHEL-105064]
  - devlink: define enum for attr types of dynamic attributes (Ivan Vecera) [RHEL-105064]
  - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103260] {CVE-2025-38250}
  - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95607]
  - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103158] {CVE-2025-38159}
  - wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103222] {CVE-2025-38292}
  - bnxt_en: Flush FW trace before copying to the coredump (Shruti Parab) [RHEL-76568]
  - bnxt_en: fix module unload sequence (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix ethtool -d byte order for 32-bit values (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix out-of-bound memcpy() during ethtool -w (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix coredump logic to free allocated buffer (Shruti Parab) [RHEL-76568]
  - bnxt_en: delay pci_alloc_irq_vectors() in the AER path (Shruti Parab) [RHEL-76568]
  - bnxt_en: call pci_alloc_irq_vectors() after bnxt_reserve_rings() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add missing skb_mark_for_recycle() in bnxt_rx_vlan() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix ethtool selftest output in one of the failure cases (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix error handling path in bnxt_init_chip() (Shruti Parab) [RHEL-76568]
  - bnxt_en: improve TX timestamping FIFO configuration (Shruti Parab) [RHEL-76568]
  - bnxt_en: hide CONFIG_DETECT_HUNG_TASK specific code (Shruti Parab) [RHEL-76568]
  - bnxt_en: Remove unused macros in bnxt_ulp.h (Shruti Parab) [RHEL-76568]
  - bnxt_en: Remove unused field "ref_count" in struct bnxt_ulp (Shruti Parab) [RHEL-76568]
  - bnxt_en: Report the ethtool coredump length after copying the coredump (Shruti Parab) [RHEL-76568]
  - bnxt_en: Change FW message timeout warning (Shruti Parab) [RHEL-76568]
  - bnxt_en: Linearize TX SKB if the fragments exceed the max (Shruti Parab) [RHEL-76568]
  - bnxt_en: Mask the bd_cnt field in the TX BD properly (Shruti Parab) [RHEL-76568]
  - bnxt_en: add .set_module_eeprom_by_page() support (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor bnxt_get_module_eeprom_by_page() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Update firmware interface to 1.10.3.97 (Shruti Parab) [RHEL-76568]
  - bnxt_en: Query FW parameters when the CAPS_CHANGE bit is set (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add devlink support for ENABLE_ROCE nvm parameter (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor bnxt_hwrm_nvm_req() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add support for a new ethtool dump flag 3 (Shruti Parab) [RHEL-76568]
  - bnxt_en: Extend queue stop/start for TX rings (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor TX ring free logic (Shruti Parab) [RHEL-76568]
  - bnxt_en: Reallocate RX completion ring for TPH support (Shruti Parab) [RHEL-76568]
  - bnxt_en: Pass NQ ID to the FW when allocating RX/RX AGG rings (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor RX/RX AGG ring parameters setup for P5_PLUS (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor bnxt_free_tx_rings() to free per TX ring (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor completion ring free routine (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor TX ring allocation logic (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor completion ring allocation logic for P5_PLUS chips (Shruti Parab) [RHEL-76568]
  - bnxt_en: Set NPAR 1.2 support when registering with firmware (Shruti Parab) [RHEL-76568]
  - eth: bnxt: update header sizing defaults (Shruti Parab) [RHEL-76568]
  - eth: bnxt: allocate enough buffer space to meet HDS threshold (Shruti Parab) [RHEL-76568]
  - eth: bnxt: apply hds_thrs settings correctly (Shruti Parab) [RHEL-76568]
  - bnxt_en: add support for hds-thresh ethtool command (Shruti Parab) [RHEL-76568]
  - bnxt_en: add support for tcp-data-split ethtool command (Shruti Parab) [RHEL-76568]
  - bnxt_en: add support for rx-copybreak ethtool command (Shruti Parab) [RHEL-76568]
  - bnxt_en: Skip reading PXP registers during ethtool -d if unsupported (Shruti Parab) [RHEL-76568]
  - bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (Shruti Parab) [RHEL-76568]
  - bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (Shruti Parab) [RHEL-76568]
  - bnxt_en: Do not allow ethtool -m on an untrusted VF (Shruti Parab) [RHEL-76568]
  - bnxt_en: Use FW defined resource limits for RoCE (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix potential crash when dumping FW log coredump (Shruti Parab) [RHEL-76568]
  - bnxt_en: handle tpa_info in queue API implementation (Shruti Parab) [RHEL-76568]
  - bnxt_en: refactor bnxt_alloc_rx_rings() to call bnxt_alloc_rx_agg_bmap() (Shruti Parab) [RHEL-76568]
  - bnxt_en: refactor tpa_info alloc/free into helpers (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add FW trace coredump segments to the coredump (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add a new ethtool -W dump flag (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add 2 parameters to bnxt_fill_coredump_seg_hdr() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add functions to copy host context memory (Shruti Parab) [RHEL-76568]
  - bnxt_en: Do not free FW log context memory (Shruti Parab) [RHEL-76568]
  - bnxt_en: Manage the FW trace context memory (Shruti Parab) [RHEL-76568]
  - bnxt_en: Allocate backing store memory for FW trace logs (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add a 'force' parameter to bnxt_free_ctx_mem() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor bnxt_free_ctx_mem() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add mem_valid bit to struct bnxt_ctx_mem_type (Shruti Parab) [RHEL-76568]
  - bnxt_en: Update firmware interface spec to 1.10.3.85 (Shruti Parab) [RHEL-76568]
  - bnxt_en: optimize gettimex64 (Shruti Parab) [RHEL-76568]
  - eth: bnxt: use page pool for head frags (Shruti Parab) [RHEL-76568]
  - bnxt_en: add unlocked version of bnxt_refclk_read (Shruti Parab) [RHEL-76568]
  - bnxt_en: replace PTP spinlock with seqlock (Shruti Parab) [RHEL-76568]
  - bnxt_en: cache only 24 bits of hw counter (Shruti Parab) [RHEL-76568]
  - bnxt_en: Update bnxt.rst devlink documentation (Shruti Parab) [RHEL-76568]
  - cpufreq: tegra: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Fix setting policy limits when frequency tables are used (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Limit resolving a frequency to policy min/max (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Avoid using inconsistent policy->min and policy->max (Mark Langsdorf) [RHEL-83803]
  - cpufreq: cppc: Fix invalid return value in .get() callback (Mark Langsdorf) [RHEL-83803]
  - cpufreq: intel_pstate: Fix hwp_get_cpu_scaling() (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Enable ITMT support after initializing core rankings (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Add SM8650 to cpufreq-dt-platdev blocklist (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Init cpufreq only for present CPUs (Mark Langsdorf) [RHEL-83803]
  - cpufreq: tegra186: Share policy per cluster (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Fix min_limit perf and freq updation for performance governor (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Drop actions in amd_pstate_epp_cpu_offline() (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Stop caching EPP (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Rework CPPC enabling (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Drop debug statements for policy setting (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Update cppc_req_cached for shared mem EPP writes (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Move all EPP tracing into *_update_perf and *_set_epp functions (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Cache CPPC request in shared mem case too (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Replace all AMD_CPPC_* macros with masks (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate-ut: Adjust variable scope (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate-ut: Run on all of the correct CPUs (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate-ut: Drop SUCCESS and FAIL enums (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate-ut: Allow lowest nonlinear and lowest to be the same (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate-ut: Use _free macro to free put policy (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Drop `cppc_cap1_cached` (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Overhaul locking (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Move perf values into a union (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Drop min and max cached frequencies (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Show a warning when a CPU fails to setup (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Invalidate cppc_req_cached during suspend (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Fix the clamping of perf values (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Remove the unncecessary driver_lock in amd_pstate_update_limits (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Add missing NULL ptr check in amd_pstate_update (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Remove the unnecessary cpufreq_update_policy call (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Modularize perf<->freq conversion (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Convert all perf values to u8 (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Pass min/max_limit_perf as min/max_perf to amd_pstate_update (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Remove the redundant des_perf clamping in adjust_perf (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Modify the min_perf calculation in adjust_perf callback (Mark Langsdorf) [RHEL-83803]
  - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom: Set .set_boost directly (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Remove cpufreq_enable_boost_support() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: staticize policy_has_boost_freq() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: amd: Set policy->boost_supported (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt: Set .set_boost directly (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Set .set_boost directly (Mark Langsdorf) [RHEL-83803]
  - cpufreq: powernv: Set .set_boost directly (Mark Langsdorf) [RHEL-83803]
  - cpufreq: vexpress: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Stop checking for duplicate available/boost freq attributes (Mark Langsdorf) [RHEL-83803]
  - cpufreq: sc520_freq: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: spear: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: powernow: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scpi: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: pmac: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qoriq: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: imx6q: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: davinci: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: kirkwood: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: p4: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: omap: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: e_powersaver: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: elanfreq: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: pasemi: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: mediatek: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: acpi: Stop setting common freq attributes (Mark Langsdorf) [RHEL-83803]
  - cpufreq: brcmstb: Stop setting common freq attributes (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Always create freq-table related sysfs file (Mark Langsdorf) [RHEL-83803]
  - cpufreq: bmips: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scpi: compare kHz instead of Hz (Mark Langsdorf) [RHEL-83803]
  - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ACPI: Re-sync CPU boost state on system resume (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Restrict enabling boost on policies with no boost frequencies (Mark Langsdorf) [RHEL-83803]
  - cpufreq: cppc: Set policy->boost_supported (Mark Langsdorf) [RHEL-83803]
  - cpufreq: acpi: Set policy->boost_supported (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Export cpufreq_boost_set_sw() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Introduce policy->boost_supported flag (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Use str_enable_disable() helper (Mark Langsdorf) [RHEL-83803]
  - cpufreq: prevent NULL dereference in cpufreq_online() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ACPI: Remove set_boost in acpi_cpufreq_cpu_init() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: CPPC: Fix wrong max_freq in policy initialization (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Introduce a more generic way to set default per-policy boost flag (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Fix re-boost issue after hotplugging a CPU (Mark Langsdorf) [RHEL-83803]
  - cpufreq: s3c64xx: Fix compilation warning (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Use str_enable_disable()-like helpers (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ACPI: Fix max-frequency computation (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom: Implement clk_ops::determine_rate() for qcom_cpufreq* clocks (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom: Fix qcom_cpufreq_hw_recalc_rate() to query LUT if LMh IRQ is not available (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Register for limit change notifications (Mark Langsdorf) [RHEL-83803]
  - cpufreq: maple: Remove maple driver (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ACPI: Simplify MSR read on the boot CPU (Mark Langsdorf) [RHEL-83803]
  - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Fix cleanup path when boost enablement fails (Mark Langsdorf) [RHEL-83803]
  - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() (Mark Langsdorf) [RHEL-83803]
  - Revert "cpufreq: brcmstb-avs-cpufreq: Fix initial command check" (Mark Langsdorf) [RHEL-83803]
  - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: add virtual-cpufreq driver (Mark Langsdorf) [RHEL-83803]
  - redhat/configs: Enabled CPUFREQ_VIRT (Mark Langsdorf) [RHEL-83803]
  - cpufreq: use proper units for frequency (Mark Langsdorf) [RHEL-83803]
  - cpufreq/cppc: Use NSEC_PER_MSEC for deadline task (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Fix the cacography in powernv-cpufreq.c (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Fix warning on unused of_device_id tables for !CONFIG_OF (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Drop CONFIG_ARM and CONFIG_ARM64 dependency on Arm drivers (Mark Langsdorf) [RHEL-83803]
  - cpufreq: omap: Drop asm includes (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom: Add explicit io.h include for readl/writel_relaxed (Mark Langsdorf) [RHEL-83803]
  - cpufreq: spear: Use of_property_for_each_u32() instead of open coding (Mark Langsdorf) [RHEL-83803]
  - redhat/configs: make ACPI_CPPC_CPUFREQ generic (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Use of_property_present() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: powerpc: add missing MODULE_DESCRIPTION() macros (Mark Langsdorf) [RHEL-83803]
  - cpufreq: sti: fix build warning (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Make cpufreq_driver->exit() return void (Mark Langsdorf) [RHEL-83803]
  - cpufreq: pcc: Remove empty exit() callback (Mark Langsdorf) [RHEL-83803]
  - cpufreq: nforce2: Remove empty exit() callback (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ACPI: Mark boost policy as enabled when setting boost (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Allow drivers to advertise boost enabled (Mark Langsdorf) [RHEL-83803]
  - cpufreq: make cpufreq_boost_enabled() return bool (Mark Langsdorf) [RHEL-83803]
  - cpufreq: sti: add missing MODULE_DEVICE_TABLE entry for stih418 (Mark Langsdorf) [RHEL-83803]
  - cpufreq: simplify boolean parsing with kstrtobool in store function (Mark Langsdorf) [RHEL-83803]
  - cpufreq: update to sysfs_emit() for safer buffer handling (Mark Langsdorf) [RHEL-83803]
  - cpufreq/cppc: Don't compare desired_perf in target() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt-platdev: add missing MODULE_DESCRIPTION() macro (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom-nvmem: eliminate uses of of_node_put() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom-nvmem: fix memory leaks in probe error paths (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Avoid overflow of target_freq in fast switch (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom-nvmem: add support for IPQ5321 (Mark Langsdorf) [RHEL-83803]
  - soc: qcom: socinfo: Add SoC ID for IPQ5321 (Mark Langsdorf) [RHEL-83803]
  - dt-bindings: arm: qcom,ids: Add SoC ID for IPQ5321 (Mark Langsdorf) [RHEL-83803]
  - powerpc: rename SPRN_HID2 define to SPRN_HID2_750FX (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Fix up printing large CPU numbers and frequency values (Mark Langsdorf) [RHEL-83803]
  - cpufreq: brcmstb-avs-cpufreq: ISO C90 forbids mixed declarations (Mark Langsdorf) [RHEL-83803]
  - cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt: eliminate uses of of_node_put() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt-platdev: eliminate uses of of_node_put() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ti: Implement scope-based cleanup in ti_cpufreq_match_node() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt-platdev: Blocklist Allwinner H616/618 SoCs (Mark Langsdorf) [RHEL-83803]
  - cpupfreq: tegra124: eliminate uses of of_node_put() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Use a smaller freq for the policy->max when verify (Mark Langsdorf) [RHEL-83803]
  - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-92556]
  - x86/sev: Make sure pages are not skipped during kdump (Bandan Das) [RHEL-10019]
  - x86/sev: Do not touch VMSA pages during SNP guest memory kdump (Bandan Das) [RHEL-10019]
  - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-79685]
  - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-79685]
  - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-79685]
  - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-79685] {CVE-2025-38053}
  - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-79685 RHEL-93924]
  - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-79685]
  - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-66157 RHEL-79685 RHEL-82204]
  - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-79685 RHEL-93924] {CVE-2025-22065}
  - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-79685] {CVE-2025-22116}
  - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-79685] {CVE-2025-21890}
  - libeth: move idpf_rx_csum_decoded and idpf_rx_extracted (Michal Schmidt) [RHEL-79685]
  - idpf: record rx queue in skb for RSC packets (Michal Schmidt) [RHEL-79685]
  - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-79685]
  - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-79685]
  - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-79685 RHEL-82469] {CVE-2024-58057}
  - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-79685]
  - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-79685]
  - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-79685]
  - i2c: designware: add a new bit check for IC_CON control (John Allen) [RHEL-78660]
  - perf/x86/intel: Add Panther Lake support (Michael Petlan) [RHEL-47406 RHEL-47452]
  - perf/x86/intel: Add PMU support for Clearwater Forest (Michael Petlan) [RHEL-45093 RHEL-47454]
  - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106622] {CVE-2025-38380}
  - tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106083] {CVE-2025-38471}
  - ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-104380]
  - ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-104380]
  - ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-104380]
  - ice: wait before enabling TSPLL (Petr Oros) [RHEL-104380]
  - ice: add multiple TSPLL helpers (Petr Oros) [RHEL-104380]
  - ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-104380]
  - ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-104380]
  - ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-104380]
  - ice: add TSPLL log config helper (Petr Oros) [RHEL-104380]
  - ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-104380]
  - ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-104380]
  - ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-104380]
  - ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-104380]
  - ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-104380]
  - ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-104380]
  - ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-104380]
  - ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-104380]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-605.el9]
changelog:
  - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-91331]
  - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-91331]
  - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-91331]
  - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-91331]
  - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-91331]
  - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64457]
  - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64457]
  - mux: Add support for reading mux state from consumer DT node (Radu Rendec) [RHEL-105629]
  - mux: add support for delay after muxing (Radu Rendec) [RHEL-105629]
  - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-87983]
  - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-87983]
  - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-87983]
  - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-87983]
  - can: tcan4x5x: fix reset gpio usage during probe (Radu Rendec) [RHEL-90130]
  - can: m_can: m_can_class_allocate_dev(): initialize spin lock on device probe (Radu Rendec) [RHEL-90130]
  - can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices (Radu Rendec) [RHEL-90130]
  - can: m_can: m_can_close(): stop clocks after device has been shut down (Radu Rendec) [RHEL-90130]
  - can: m_can: Limit coalescing to peripheral instances (Radu Rendec) [RHEL-90130]
  - can: m_can: Reset cached active_interrupts on start (Radu Rendec) [RHEL-90130]
  - can: m_can: disable_all_interrupts, not clear active_interrupts (Radu Rendec) [RHEL-90130]
  - can: m_can: Do not cancel timer from within timer (Radu Rendec) [RHEL-90130]
  - can: m_can: Remove m_can_rx_peripheral indirection (Radu Rendec) [RHEL-90130]
  - can: m_can: Remove coalesing disable in isr during suspend (Radu Rendec) [RHEL-90130]
  - can: m_can: Reset coalescing during suspend/resume (Radu Rendec) [RHEL-90130]
  - can: mcp251xfd: __mcp251xfd_get_berr_counter(): use CAN_BUS_OFF_THRESHOLD instead of open coding it (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_cmd_reset(): use cpu_to_le32() to assign mode (Radu Rendec) [RHEL-90130]
  - can: kvaser_usb: Add support for Leaf v3 (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: support resuming from rx interrupt signal (Radu Rendec) [RHEL-90130]
  - can: m_can: allow keeping the transceiver running in suspend (Radu Rendec) [RHEL-90130]
  - dt-bindings: can: tcan4x5x: Document the wakeup-source flag (Radu Rendec) [RHEL-90130]
  - can: m_can: remove redundant check for pm_clock_support (Radu Rendec) [RHEL-90130]
  - can: netlink: Fix TDCO calculation using the old data bittiming (Radu Rendec) [RHEL-90130]
  - can: m_can: Implement transmit submission coalescing (Radu Rendec) [RHEL-90130]
  - can: m_can: Implement BQL (Radu Rendec) [RHEL-90130]
  - can: m_can: Use tx_fifo_in_flight for netif_queue control (Radu Rendec) [RHEL-90130]
  - can: m_can: Introduce a tx_fifo_in_flight counter (Radu Rendec) [RHEL-90130]
  - can: m_can: Use the workqueue as queue (Radu Rendec) [RHEL-90130]
  - can: m_can: Cache tx putidx (Radu Rendec) [RHEL-90130]
  - can: m_can: Use u32 for putidx (Radu Rendec) [RHEL-90130]
  - can: m_can: Add tx coalescing ethtool support (Radu Rendec) [RHEL-90130]
  - can: m_can: Add rx coalescing ethtool support (Radu Rendec) [RHEL-90130]
  - can: m_can: Implement transmit coalescing (Radu Rendec) [RHEL-90130]
  - can: m_can: Implement receive coalescing (Radu Rendec) [RHEL-90130]
  - can: m_can: Write transmit header and data in one transaction (Radu Rendec) [RHEL-90130]
  - can: m_can: Move hrtimer init to m_can_class_register (Radu Rendec) [RHEL-90130]
  - can: m_can: Start/Cancel polling timer together with interrupts (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Fix id2_register for tcan4553 (Radu Rendec) [RHEL-90130]
  - can: dev: can_restart(): move debug message and stats after successful restart (Radu Rendec) [RHEL-90130]
  - can: dev: can_restart(): reverse logic to remove need for goto (Radu Rendec) [RHEL-90130]
  - can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() (Radu Rendec) [RHEL-90130]
  - can: dev: can_restart(): don't crash kernel if carrier is OK (Radu Rendec) [RHEL-90130]
  - dt-bindings: can: m_can: change from additional- to unevaluatedProperties (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Add error messages in probe (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Add support for tcan4552/4553 (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Rename ID registers to match datasheet (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Check size of mram configuration (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Remove reserved register 0x814 from writable table (Radu Rendec) [RHEL-90130]
  - dt-bindings: can: tcan4x5x: Add tcan4552 and tcan4553 variants (Radu Rendec) [RHEL-90130]
  - can: gs_usb: convert to NAPI/rx-offload to avoid OoO reception (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_disconnect(): remove not needed usb_kill_anchored_urbs() (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_destroy_candev(): remove not needed usb_kill_anchored_urbs() (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_close(): don't complain about failed device reset during ndo_stop (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_start_xmit(), gs_can_open(): clean up printouts in error path (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_receive_bulk_callback(): make use of stats (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_receive_bulk_callback(): make use of netdev (Radu Rendec) [RHEL-90130]
  - can: gs_usb: uniformly use "parent" as variable name for struct gs_usb (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_set_timestamp(): remove return statements form void function (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_probe(): align block comment (Radu Rendec) [RHEL-90130]
  - can: gs_usb: remove leading space from goto labels (Radu Rendec) [RHEL-90130]
  - can: Explicitly include correct DT includes, part 2 (Radu Rendec) [RHEL-90130]
  - can: peak_usb: remove unused/legacy peak_usb_netif_rx() function (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED (Radu Rendec) [RHEL-90130]
  - can: m_can: Add hrtimer to generate software interrupt (Radu Rendec) [RHEL-90130]
  - dt-bindings: net: can: Remove interrupt properties for MCAN (Radu Rendec) [RHEL-90130]
  - can: mcp251xfd: __mcp251xfd_chip_set_mode(): increase poll timeout (Radu Rendec) [RHEL-90130]
  - can: gs_usb: fix time stamp counter initialization (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_open(): improve error handling (Radu Rendec) [RHEL-90130]
  - can: rx-offload: fix coding style (Radu Rendec) [RHEL-90130]
  - can: m_can: fix coding style (Radu Rendec) [RHEL-90130]
  - can: kvaser_usb: Add len8_dlc support (Radu Rendec) [RHEL-90130]
  - can: m_can: Convert to platform remove callback returning void (Radu Rendec) [RHEL-90130]
  - can: dev: fix missing CAN XL support in can_put_echo_skb() (Radu Rendec) [RHEL-90130]
  - kvaser_usb: convert USB IDs to hexadecimal values (Radu Rendec) [RHEL-90130]
  - can: m_can: Keep interrupts enabled during peripheral read (Radu Rendec) [RHEL-90130]
  - can: m_can: Disable unused interrupts (Radu Rendec) [RHEL-90130]
  - can: m_can: Remove double interrupt enable (Radu Rendec) [RHEL-90130]
  - can: m_can: Always acknowledge all interrupts (Radu Rendec) [RHEL-90130]
  - can: m_can: Remove repeated check for is_peripheral (Radu Rendec) [RHEL-90130]
  - can: bittiming: can_fixup_bittiming(): set effective tq (Radu Rendec) [RHEL-90130]
  - can: gs_usb: remove gs_can::iface (Radu Rendec) [RHEL-90130]
  - can: m_can: Add check for devm_clk_get (Radu Rendec) [RHEL-90130]
  - can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (Radu Rendec) [RHEL-90130 RHEL-90138] {CVE-2022-49024}
  - can: kvaser_usb: Fix possible completions during init_completion (Radu Rendec) [RHEL-90130]
  - can: mcp251x: mcp251x_can_probe(): add missing unregister_candev() in error path (Radu Rendec) [RHEL-90130]
  - can: m_can: use consistent indention (Radu Rendec) [RHEL-90130]
  - can: gs_usb: add support for reading error counters (Radu Rendec) [RHEL-90130]
  - can: gs_usb: document GS_CAN_FEATURE_GET_STATE (Radu Rendec) [RHEL-90130]
  - can: gs_usb: add ability to enable / disable berr reporting (Radu Rendec) [RHEL-90130]
  - can: gs_usb: document GS_CAN_FEATURE_BERR_REPORTING (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_open(): merge setting of timestamp flags and init (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_open(): sort checks for ctrlmode (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_open(): allow loopback and listen only at the same time (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_make_candev(): set netdev->dev_id (Radu Rendec) [RHEL-90130]
  - can: gs_usb: mention candleLight as supported device (Radu Rendec) [RHEL-90130]
  - can: m_can: m_can_handle_bus_errors(): add support for handling DLEC error on CAN-FD frames (Radu Rendec) [RHEL-90130]
  - can: m_can: is_lec_err(): clean up LEC error handling (Radu Rendec) [RHEL-90130]
  - can: kvaser_usb: Remove -Warray-bounds exception (Radu Rendec) [RHEL-90130]
  - can: gs_usb: remove dma allocations (Radu Rendec) [RHEL-90130]
  - can: gs_usb: add switchable termination support (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_make_candev(): clean up error handling (Radu Rendec) [RHEL-90130]
  - can: gs_usb: convert from usb_control_msg() to usb_control_msg_{send,recv}() (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_cmd_reset(): rename variable holding struct gs_can pointer to dev (Radu Rendec) [RHEL-90130]
  - can: kvaser_usb: kvaser_usb_hydra: Use kzalloc for allocating only one element (Radu Rendec) [RHEL-90130]
  - can: rx-offload: can_rx_offload_init_queue(): fix typo (Radu Rendec) [RHEL-90130]
  - dt-binding: can: mcp251xfd: add binding information for mcp251863 (Radu Rendec) [RHEL-90130]
  - dt-binding: can: m_can: include common CAN controller bindings (Radu Rendec) [RHEL-90130]
  - dt-binding: can: m_can: fix indention of table in bosch,mram-cfg description (Radu Rendec) [RHEL-90130]
  - dt-binding: can: m_can: list Chandrasekar Ramakrishnan as maintainer (Radu Rendec) [RHEL-90130]
  - dt-binding: can: mcp251xfd: include common CAN controller bindings (Radu Rendec) [RHEL-90130]
  - dt-bindings: can: tcan4x5x: fix mram-cfg RX FIFO config (Radu Rendec) [RHEL-90130]
  - dt-bindings: can-controller: add support for termination-gpios (Radu Rendec) [RHEL-90130]
  - dt-bindings: net: can: Document power-domains property (Radu Rendec) [RHEL-90130]
  - dt-bindings: net: can: Document transceiver implementation as phy (Radu Rendec) [RHEL-90130]
  - KVM: x86: Reject KVM_SET_TSC_KHZ vCPU ioctl for TSC protected guest (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Ensure unused kvm_tdx_capabilities fields are zeroed out (Paolo Bonzini) [RHEL-15711]
  - Documentation: KVM: Fix unexpected unindent warning (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Don't report base TDVMCALLs (Paolo Bonzini) [RHEL-15711]
  - Documentation: KVM: Fix unexpected unindent warnings (Paolo Bonzini) [RHEL-95318]
  - KVM: selftests: Add back the missing check of MONITOR/MWAIT availability (Paolo Bonzini) [RHEL-95318]
  - KVM: x86: avoid underflow when scaling TSC frequency (Paolo Bonzini) [RHEL-95318]
  - KVM: TDX: Report supported optional TDVMCALLs in TDX capabilities (Paolo Bonzini) [RHEL-95318]
  - KVM: TDX: Exit to userspace for SetupEventNotifyInterrupt (Paolo Bonzini) [RHEL-95318]
  - KVM: TDX: Exit to userspace for GetTdVmCallInfo (Paolo Bonzini) [RHEL-95318]
  - KVM: TDX: Handle TDG.VP.VMCALL<GetQuote> (Paolo Bonzini) [RHEL-95318]
  - KVM: TDX: Add new TDVMCALL status code for unsupported subfuncs (Paolo Bonzini) [RHEL-95318]
  - KVM: x86/mmu: Reject direct bits in gpa passed to KVM_PRE_FAULT_MEMORY (Paolo Bonzini) [RHEL-95318]
  - KVM: x86/mmu: Embed direct bits into gpa for KVM_PRE_FAULT_MEMORY (Paolo Bonzini) [RHEL-95318]
  - KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the guest (Maxim Levitsky) [RHEL-95318]
  - KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter (Maxim Levitsky) [RHEL-95318]
  - KVM: VMX: Extract checking of guest's DEBUGCTL into helper (Maxim Levitsky) [RHEL-95318]
  - KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Convert vcpu_run()'s immediate exit param into a generic bitmap (Maxim Levitsky) [RHEL-95318]
  - KVM: TDX: Use kvm_arch_vcpu.host_debugctl to restore the host's DEBUGCTL (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: access_tracking_perf_test: Add option to skip the sanity check (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Extract guts of THP accessor to standalone sysfs helpers (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Add a nested (forced) emulation intercept test for x86 (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Actually emit forced emulation prefix for kvm_asm_safe_fep() (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Print out the actual Top-Down Slots count on failure (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Drop the "feature event" param from guest test helpers (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Remove dead code in Intel PMU counters test (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Only validate counts for hardware-supported arch events (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Make Intel arch events globally available in PMU counters test (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Use data load to trigger LLC references/misses in Intel PMU (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Fix typos in x86's PMU counter test's macro variable use (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Assert that STI blocking isn't set after event injection (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Print the seed for the guest pRNG iff it has changed (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Add global snapshot of kvm_is_forced_emulation_enabled() (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Provide an API for getting a random bool from an RNG (Maxim Levitsky) [RHEL-95318]
  - rtmutex_api: provide correct extern functions (Maxim Levitsky) [RHEL-95318]
  - KVM: arm64: use kvm_trylock_all_vcpus when locking all vCPUs (Maxim Levitsky) [RHEL-95318]
  - x86: KVM: SVM: use kvm_lock_all_vcpus instead of a custom implementation (Maxim Levitsky) [RHEL-95318]
  - KVM: add kvm_lock_all_vcpus and kvm_trylock_all_vcpus (Maxim Levitsky) [RHEL-95318]
  - locking/mutex: implement mutex_lock_killable_nest_lock (Maxim Levitsky) [RHEL-95318]
  - locking/mutex: implement mutex_trylock_nested (Maxim Levitsky) [RHEL-95318]
  - perf/x86/intel: Ensure LBRs are disabled when a CPU is starting (Maxim Levitsky) [RHEL-95318]
  - KVM: x86/mmu: Prevent installing hugepages when mem attributes are changing (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Add Idle HLT intercept support (Maxim Levitsky) [RHEL-95318]
  - x86/cpufeatures: Add CPUID feature bit for Idle HLT intercept (Maxim Levitsky) [RHEL-95318]
  - KVM: SEV: Use long-term pin when registering encrypted memory regions (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Synthesize nested VM-Exit for supported emulation intercepts (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Allow the caller to provide instruction length on nested VM-Exit (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Add a #define for the architectural max instruction length (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Plumb the emulator's starting RIP into nested intercept checks (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Plumb the src/dst operand types through to .check_intercept() (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Consolidate missing X86EMUL_INTERCEPTED logic in L2 emulation (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Emulate HLT in L2 if it's not intercepted (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Allow emulating RDPID on behalf of L2 (Maxim Levitsky) [RHEL-95318]
  - KVM: nSVM: Pass next RIP, not current RIP, for nested VM-Exit on emulation (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Check PAUSE_EXITING, not BUS_LOCK_DETECTION, on PAUSE emulation (Maxim Levitsky) [RHEL-95318]
  - KVM: x86/cpuid: add type suffix to decimal const 48 fix building warning (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Clear pv_unhalted on all transitions to KVM_MP_STATE_RUNNABLE (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Introduce kvm_set_mp_state() (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Wake vCPU for PIC interrupt injection iff a valid IRQ was found (Maxim Levitsky) [RHEL-95318]
  - KVM: x86/xen: Only write Xen hypercall page for guest writes to MSR (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Explicitly zero EAX and EBX when PERFMON_V2 isn't supported by KVM (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Snapshot the host's DEBUGCTL after disabling IRQs (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Manually context switch DEBUGCTL if LBR virtualization is disabled (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Snapshot the host's DEBUGCTL in common x86 (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Suppress DEBUGCTL.BTF on AMD (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Drop DEBUGCTL[5:2] from guest's effective value (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow (Maxim Levitsky) [RHEL-95318]
  - KVM: nSVM: Enter guest mode before initializing nested NPT MMU (Maxim Levitsky) [RHEL-95318]
  - KVM: Drop hack that "manually" informs lockdep of kvm->lock vs. vcpu->mutex (Maxim Levitsky) [RHEL-95318]
  - KVM: Don't BUG() the kernel if xa_insert() fails with -EBUSY (Maxim Levitsky) [RHEL-95318]
  - Revert "KVM: Fix vcpu_array[0] races" (Maxim Levitsky) [RHEL-95318]
  - KVM: Grab vcpu->mutex across installing the vCPU's fd and bumping online_vcpus (Maxim Levitsky) [RHEL-95318]
  - KVM: Verify there's at least one online vCPU when iterating over all vCPUs (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Disable AVIC on SNP-enabled system without HvInUseWrAllowed feature (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: fix canonical check of vmcs12 HOST_RIP (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: model canonical checks more precisely (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Add X86EMUL_F_MSR and X86EMUL_F_DT_LOAD to aid canonical checks (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Route non-canonical checks in emulator through emulate_ops (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: drop x86.h include from cpuid.h (Maxim Levitsky) [RHEL-95318]
  - x86/tdx: mark tdh_vp_enter() as __flatten (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: use __always_inline for is_td_vcpu and is_td (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Revert kvm_x86_ops.mem_enc_ioctl() back to an OPTIONAL hook (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Use kvm_x86_call() instead of manual static_call() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Check that the high 32bits are clear in kvm_arch_vcpu_ioctl_run() (Paolo Bonzini) [RHEL-15711]
  - RHEL: add debugging info for TDX module initialization (Paolo Bonzini) [RHEL-15711]
  - Documentation/virt/kvm: Document on Trust Domain Extensions (TDX) (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Make TDX VM type supported (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: KVM: TDX: Always honor guest PAT on TDX enabled guests (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: remove shadow_memtype_mask (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Introduce Intel specific quirk KVM_X86_QUIRK_IGNORE_GUEST_PAT (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Introduce supported_quirks to block disabling quirks (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Allow vendor code to disable quirks (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: do not allow re-enabling quirks (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Enable guest access to MTRR MSRs (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add a method to ignore hypercall patching (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Ignore setting up mce (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add methods to ignore accesses to TSC (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add methods to ignore VMX preemption timer (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add method to ignore guest instruction emulation (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add methods to ignore accesses to CPU state (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDG.VP.VMCALL<GetTdVmCallInfo> hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Enable guest access to LMCE related MSRs (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDX PV rdmsr/wrmsr hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement callbacks for MSR operations (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Move KVM_MAX_MCE_BANKS to header file (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDX PV HLT hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDX PV CPUID hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Kick off vCPUs when SEAMCALL is busy during TD page removal (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Retry locally in TDX EPT violation handler on RET_PF_RETRY (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Detect unexpected SEPT violations due to pending SPTEs (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle EPT violation/misconfig exit (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle EXIT_REASON_OTHER_SMI (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle EXCEPTION_NMI and EXTERNAL_INTERRUPT (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Add a helper for NMI handling (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Move emulation_required to struct vcpu_vt (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add methods to ignore virtual apic related operation (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Force APICv active for TDX guest (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Enforce KVM_IRQCHIP_SPLIT for TDX guests (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Always block INIT/SIPI (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle SMI request as !CONFIG_KVM_SMM (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement methods to inject NMI (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Wait lapic expire when timer IRQ was injected (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Assume timer IRQ was injected if APIC state is protected (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement non-NMI interrupt injection (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Move posted interrupt delivery code to common header (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Disable PI wakeup for IPIv (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add support for find pending IRQ in a protected local APIC (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDX PV MMIO hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDX PV port I/O hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDG.VP.VMCALL<ReportFatalError> (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDG.VP.VMCALL<MapGPA> (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle KVM hypercall with TDG.VP.VMCALL (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add a place holder for handler of TDX hypercalls (TDG.VP.VMCALL) (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add a place holder to handle TDX VM exit (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Move pv_unhalted check out of kvm_vcpu_has_events() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Have ____kvm_emulate_hypercall() read the GPRs (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Add a switch_db_regs flag to handle TDX's auto-switched behavior (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Save and restore IA32_DEBUGCTL (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Disable support for TSX and WAITPKG (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: restore user ret MSRs (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Allow to update cached values in kvm_user_return_msrs w/o wrmsr (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: restore host xsave state when exit from the guest TD (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: vcpu_run: save/restore host state(host kernel gs) (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement TDX vcpu enter/exit path (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Move common fields of struct vcpu_{vmx,tdx} to a struct (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrapper to enter/exit TDX guest (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle SEPT zap error due to page add error in premap (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Skip updating CPU dirty logging request for TDs (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Make cpu_dirty_log_size a per-VM value (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Add parameter "kvm" to kvm_mmu_page_ad_need_write_protect() (Paolo Bonzini) [RHEL-15711]
  - KVM: Add parameter "kvm" to kvm_cpu_dirty_log_size() and its callers (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle vCPU dissociation (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Finalize VM initialization (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add an ioctl to create initial guest memory (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Export kvm_tdp_map_page() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Bail out kvm_tdp_map_page() when VM dead (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement hook to get max mapping level of private pages (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement hooks to propagate changes of TDP MMU mirror page table (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TLB tracking for TDX (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Set per-VM shadow_mmio_value to 0 (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Add setter for shadow_mmio_value (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Require TDP MMU, mmio caching and EPT A/D bits for TDX (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Set gfn_direct_bits to shared bit (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add load_mmu_pgd method for TDX (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add accessors VMX VMCS helpers (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Teach EPT violation helper about private mem (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Split out guts of EPT violation to common/exposed function (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Do not enable page track for TD guest (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Add a helper function to walk down the TDP MMU (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Implement memslot deletion for TDX (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TD measurement of initial contents (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers to remove a TD private page (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers to manage TDX TLB tracking (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers to add TD private pages (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrapper tdh_mem_sept_add() to add SEPT pages (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Register TDX host key IDs to cgroup misc controller (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Taking guest pa into consideration when calculate tdp level (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Introduce KVM_TDX_GET_CPUID (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Do TDX specific vcpu initialization (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: create/free TDX vcpu structure (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Don't offline the last cpu of one package when there's TDX guest (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Make pmu_intel.c ignore guest TD case (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: add ioctl to initialize VM with TDX specific parameters (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: expose cpuid_entry2_find for TDX (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Support per-VM KVM_CAP_MAX_VCPUS extension check (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: create/destroy VM structure (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Get system-wide info about TDX module on initialization (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add place holder for TDX VM specific mem_enc_op ioctl (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add helper functions to print TDX SEAMCALL error (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add TDX "architectural" error codes (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Define TDX architectural definitions (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add placeholders for TDX VM/vCPU structures (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Get TDX global information (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Initialize TDX during KVM module load (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Refactor VMX module init/exit functions (Paolo Bonzini) [RHEL-15711]
  - KVM: Export hardware virtualization enabling/disabling functions (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add tdx_guest_keyid_alloc/free() to alloc and free TDX guest KeyID (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Read essential global metadata for KVM (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: allocate tdx_sys_info in static memory (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX flush operations (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX VM/vCPU field access (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX page cache management (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX vCPU creation (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX TD creation (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX KeyID management (Paolo Bonzini) [RHEL-15711]
  - selftests: kvm: revamp MONITOR/MWAIT tests (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Add infrastructure for secure TSC (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Push down setting vcpu.arch.user_set_tsc (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: block KVM_CAP_SYNC_REGS if guest state is protected (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: move vm_destroy callback at end of kvm_arch_destroy_vm (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Prevent aliased memslot GFNs (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Don't zap valid mirror roots in kvm_tdp_mmu_zap_all() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Take root types for kvm_tdp_mmu_invalidate_all_roots() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Propagate tearing down mirror page tables (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Propagate building mirror page tables (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Propagate attr_filter to MMU notifier callbacks (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Support mirror root for TDP MMU (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Take root in tdp_mmu_for_each_pte() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Introduce KVM MMU root types to specify page table type (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Extract root invalid check from tdx_mmu_next_root() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Support GFN direct bits (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Take struct kvm in iter loops (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Make kvm_tdp_mmu_alloc_root() return void (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Add an is_mirror member for union kvm_mmu_page_role (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Add an external pointer to struct kvm_mmu_page (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Add a VM type define for TDX (Paolo Bonzini) [RHEL-15711]
  - KVM: Add member to struct kvm_gfn_range to indicate private/shared (Paolo Bonzini) [RHEL-15711]
  - x86/irq: Remove bitfields in posted interrupt descriptor (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Exit to userspace if fastpath triggers one on instruction skip (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Dedup fastpath MSR post-handling logic (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Re-enter guest if WRMSR(X2APIC_ICR) fastpath is successful (Paolo Bonzini) [RHEL-15711]
  - KVM: nVMX: Process events on nested VM-Exit if injectable IRQ or NMI is pending (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Free vCPUs before freeing VM state (Paolo Bonzini) [RHEL-15711]
  - Documentation: KVM: update amd-memory-encryption.rst references (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Modify NMI and INTR handlers to take intr_info as function argument (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Drop support for forcing UC memory when guest CR0.CD=1 (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Remove VMX support for virtualizing guest MTRR memtypes (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Add fastpath handling of HLT VM-Exits (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Reorganize code in x86.c to co-locate vCPU blocking/running helpers (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Zap invalid roots with mmu_lock holding for write at uninit (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Refactor __kvm_emulate_hypercall() into a macro (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Always complete hypercall via function callback (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Bump hypercall stat prior to fully completing hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Move "emulate hypercall" function declarations to x86.h (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Add a helper to check for user interception of KVM hypercalls (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: clear vcpu->run->hypercall.ret before exiting for KVM_EXIT_HYPERCALL (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Remove hwapic_irr_update() from kvm_x86_ops (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Plumb in the vCPU to kvm_x86_ops.hwapic_isr_update() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: don't fall through case statements without annotations (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Only advertise KVM_CAP_READONLY_MEM when supported by VM (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Disallow read-only memslots for SEV-ES and SEV-SNP (and TDX) (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Return RET_PF* instead of 1 in kvm_mmu_page_fault() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Treat TDP MMU faults as spurious if access is already allowed (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Don't overwrite shadow-present MMU SPTEs when prefaulting (Paolo Bonzini) [RHEL-15711]
  - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-104899]
  - xfs: do not check NEEDSREPAIR if ro,norecovery mount. (Pavel Reichl) [RHEL-101639]
  - iavf: fix reset_task for early reset event (Michal Schmidt) [RHEL-83572]
  - iavf: add support for Rx timestamps to hotpath (Michal Schmidt) [RHEL-83572]
  - iavf: handle set and get timestamps ops (Michal Schmidt) [RHEL-83572]
  - iavf: periodically cache PHC time (Michal Schmidt) [RHEL-83572]
  - iavf: add support for indirect access to PHC time (Michal Schmidt) [RHEL-83572]
  - iavf: add initial framework for registering PTP clock (Michal Schmidt) [RHEL-83572]
  - iavf: negotiate PTP capabilities (Michal Schmidt) [RHEL-83572]
  - iavf: Implement checking DD desc field (Michal Schmidt) [RHEL-83572]
  - iavf: refactor iavf_clean_rx_irq to support legacy and flex descriptors (Michal Schmidt) [RHEL-83572]
  - iavf: add support for negotiating flexible RXDID format (Michal Schmidt) [RHEL-83572]
  - iavf: define Rx descriptors as qwords (Michal Schmidt) [RHEL-83572]
  - iavf: allow changing VLAN state without calling PF (Michal Schmidt) [RHEL-83572]
  - iavf: Remove unused declarations (Michal Schmidt) [RHEL-83572]
  - iavf: add support to exchange qos capabilities (Michal Schmidt) [RHEL-83572]
  - iavf: Add net_shaper_ops support (Michal Schmidt) [RHEL-83572]
  - iavf: switch to Page Pool (Michal Schmidt) [RHEL-83572]
  - iavf: pack iavf_ring more efficiently (Michal Schmidt) [RHEL-83572]
  - iavf: drop page splitting and recycling (Michal Schmidt) [RHEL-83572]
  - block: use plug request list tail for one-shot backmerge attempt (Ming Lei) [RHEL-96295]
  - drm/nouveau/nvkm: introduce new GSP reply policy NVKM_GSP_RPC_REPLY_POLL (Robert Foss) [RHEL-91332]
  - drm/nouveau/nvkm: factor out current GSP RPC command policies (Robert Foss) [RHEL-91332]
  - redhat: add drm_atomic_state_test to mod-internal.list (Robert Foss) [RHEL-91332]
  - accel/ivpu: Don't convert symbol namespace to string literal (Robert Foss) [RHEL-91332]
  - xe: Don't select CONFIG_DRM_GPUSVM (Robert Foss) [RHEL-91332]
  - drm: xe: Include linux/nospec.h (Robert Foss) [RHEL-91332]
  - drm: Use old __assign_str function definition (Robert Foss) [RHEL-91332]
  - Revert "drm/amdgpu: Add cgroups implementation" (Robert Foss) [RHEL-91332]
  - Revert "drm/amdgpu: register a vga_switcheroo client for MacBooks with apple-gmux" (Robert Foss) [RHEL-91332]
  - Revert "drm/i915: Constify 'struct bin_attribute'" (Robert Foss) [RHEL-91332]
  - Revert "drm/amdgpu: Constify 'struct bin_attribute'" (Robert Foss) [RHEL-91332]
  - Revert "drm/amd/display: Constify 'struct bin_attribute'" (Robert Foss) [RHEL-91332]
  - Revert "drm/sysfs: Constify 'struct bin_attribute'" (Robert Foss) [RHEL-91332]
  - drm: Move for_each_if() to util_macros.h for wider use (Robert Foss) [RHEL-91332]
  - redhat/configs: Add new configs from drm 6.15 backport (Robert Foss) [RHEL-91332]
  - Merge DRM changes from upstream v6.14..v6.15 (Robert Foss) [RHEL-91332]
  - udp: Fix memory accounting leak. (Xin Long) [RHEL-104094] {CVE-2025-22058}


author: Jarod Wilson <jarod@redhat.com> [5.14.0-606.el9]
changelog:
  - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104271] {CVE-2025-38211}
  - NFS: Return the file btime in the statx results when appropriate (Benjamin Coddington) [RHEL-90990]
  - nfs: Add timecreate to nfs inode (Benjamin Coddington) [RHEL-90990]
  - Expand the type of nfs_fattr->valid (Benjamin Coddington) [RHEL-90990]
  - perf/x86/intel: Support RDPMC metrics clear mode (Michael Petlan) [RHEL-47448]
  - igc: fix lock order in igc_ptp_reset (Corinna Vinschen) [RHEL-83575]
  - igc: set the RX packet buffer size for TSN mode (Corinna Vinschen) [RHEL-83575]
  - igc: use FIELD_PREP and GENMASK for existing RX packet buffer size (Corinna Vinschen) [RHEL-83575]
  - igc: optimize TX packet buffer utilization for TSN mode (Corinna Vinschen) [RHEL-83575]
  - igc: use FIELD_PREP and GENMASK for existing TX packet buffer size (Corinna Vinschen) [RHEL-83575]
  - igc: rename I225_RXPBSIZE_DEFAULT and I225_TXPBSIZE_DEFAULT (Corinna Vinschen) [RHEL-83575]
  - igc: rename xdp_get_tx_ring() for non-xdp usage (Corinna Vinschen) [RHEL-83575]
  - igc: enable HW vlan tag insertion/stripping by default (Corinna Vinschen) [RHEL-83575]
  - igc: add lock preventing multiple simultaneous PTM transactions (Corinna Vinschen) [RHEL-33242 RHEL-83575]
  - igc: cleanup PTP module if probe fails (Corinna Vinschen) [RHEL-33242 RHEL-83575]
  - igc: handle the IGC_PTP_ENABLED flag correctly (Corinna Vinschen) [RHEL-33242 RHEL-83575]
  - igc: move ktime snapshot into PTM retry loop (Corinna Vinschen) [RHEL-33242 RHEL-83575]
  - igc: increase wait time before retrying PTM (Corinna Vinschen) [RHEL-33242 RHEL-83575]
  - igc: fix PTM cycle trigger logic (Corinna Vinschen) [RHEL-33242 RHEL-83575]
  - treewide: Switch/rename to timer_delete[_sync]() (Corinna Vinschen) [RHEL-83575]
  - igc: Fix XSK queue NAPI ID mapping (Corinna Vinschen) [RHEL-83575]
  - igc: Set buffer type for empty frames in igc_init_empty_frame (Corinna Vinschen) [RHEL-83575]
  - igc: Fix HW RX timestamp when passed by ZC XDP (Corinna Vinschen) [RHEL-83575]
  - igc: Avoid unnecessary link down event in XDP_SETUP_PROG process (Corinna Vinschen) [RHEL-83575]
  - igc: Link queues to NAPI instances (Corinna Vinschen) [RHEL-83575]
  - igc: Link IRQs to NAPI instances (Corinna Vinschen) [RHEL-83575]
  - igc: Fix passing 0 to ERR_PTR in igc_xdp_run_prog() (Corinna Vinschen) [RHEL-83575]
  - igc: Allow hot-swapping XDP program (Corinna Vinschen) [RHEL-83575]
  - igc: return early when failing to read EECD register (Corinna Vinschen) [RHEL-83575]
  - igc: Remove unused igc_read/write_pcie_cap_reg (Corinna Vinschen) [RHEL-83575]
  - igc: Remove unused igc_read/write_pci_cfg wrappers (Corinna Vinschen) [RHEL-83575]
  - igc: Remove unused igc_acquire/release_nvm (Corinna Vinschen) [RHEL-83575]
  - igc: remove autoneg parameter from igc_mac_info (Corinna Vinschen) [RHEL-83575]
  - igc: fix build errors for PTP (Corinna Vinschen) [RHEL-83575]
  - ixgbe: add support for FW rollback mode (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add E610 implementation of FW recovery mode (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add FW API version check (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add support for devlink reload (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add device flash update via devlink (Corinna Vinschen) [RHEL-99401]
  - ixgbe: extend .info_get() with stored versions (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add E610 functions getting PBA and FW ver info (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add .info_get extension specific for E610 devices (Corinna Vinschen) [RHEL-99401]
  - ixgbe: read the netlist version information (Corinna Vinschen) [RHEL-99401]
  - ixgbe: read the OROM version information (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add E610 functions for acquiring flash data (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add handler for devlink .info_get() (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add initial devlink support (Corinna Vinschen) [RHEL-99401]
  - ixgbe: wrap netdev_priv() usage (Corinna Vinschen) [RHEL-99401]
  - ixgbe: Fix unreachable retry logic in combined and byte I2C write functions (Corinna Vinschen) [RHEL-99401]
  - treewide: Switch/rename to timer_delete[_sync]() (Corinna Vinschen) [RHEL-99401]
  - ixgbe: fix media type detection for E610 device (Corinna Vinschen) [RHEL-86539 RHEL-99401]
  - ixgbe: add support for thermal sensor event reception (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add PTP support for E610 device (Corinna Vinschen) [RHEL-99401]
  - ixgbe: fix media cage present detection for E610 device (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Fix possible skb NULL pointer dereference (Corinna Vinschen) [RHEL-99401]
  - ixgbevf: Fix passing 0 to ERR_PTR in ixgbevf_run_xdp() (Corinna Vinschen) [RHEL-99401]
  - ixgbe: Fix passing 0 to ERR_PTR in ixgbe_run_xdp() (Corinna Vinschen) [RHEL-99401]
  - ixgbevf: Remove unused ixgbevf_hv_mbx_ops (Corinna Vinschen) [RHEL-99401]
  - ixgbevf: Add support for Intel(R) E610 device (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - PCI: Add PCI_VDEVICE_SUB helper macro (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Enable link management in E610 device (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Clean up the E610 link management related code (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Add ixgbe_x540 multiple header inclusion protection (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Add support for EEPROM dump in E610 device (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Add support for NVM handling in E610 device (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Add link management support for E610 device (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Add support for E610 device capabilities detection (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Add support for E610 FW Admin Command Interface (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Correct BASE-BX10 compliance code (Corinna Vinschen) [RHEL-99401]
  - ixgbe: downgrade logging of unsupported VF API version to debug (Corinna Vinschen) [RHEL-99401]
  - ixgbe: Break include dependency cycle (Corinna Vinschen) [RHEL-99401]
  - arch: x86: add IPC mailbox accessor function and add SoC register access (CKI Backport Bot) [RHEL-107008]
  - ASoC: SDCA: Allow read-only controls to be deferrable (Jaroslav Kysela) [RHEL-101627]
  - ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask() (Jaroslav Kysela) [RHEL-101627]
  - ASoC: SDCA: Fixup some kernel doc errors (Jaroslav Kysela) [RHEL-101627]
  - ASoC: SDCA: Add missing default in switch in entity_pde_event() (Jaroslav Kysela) [RHEL-101627]
  - ASoC: ops: dynamically allocate struct snd_ctl_elem_value (Jaroslav Kysela) [RHEL-101627]
  - ASoC: amd: acp: Fix pointer assignments for snd_soc_acpi_mach structures (Jaroslav Kysela) [RHEL-101627]
  - ASoC: SDCA: Update memory allocations to zero initialise (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Fix mute LED mask on HP OMEN 16 laptop (Jaroslav Kysela) [RHEL-101627]
  - sof-client-ipc-flood-test: don't mess with ->d_name (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Add support for ASUS NUC using CS35L41 HDA (Jaroslav Kysela) [RHEL-101627]
  - ALSA: compress_offload: tighten ioctl command number checks (Jaroslav Kysela) [RHEL-101627]
  - soundwire: Revert "soundwire: qcom: Add set_channel_map api support" (Jaroslav Kysela) [RHEL-101627] {CVE-2025-38486}
  - ALSA: hda/realtek: Add quirk for ASUS ROG Strix G712LWS (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek - Fix mute LED for HP Victus 16-r0xxx (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Add quirks for some Clevo laptops (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100 (Jaroslav Kysela) [RHEL-101627]
  - ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 6 G1a (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Add mic-mute LED setup for ASUS UM5606 (Jaroslav Kysela) [RHEL-101627]
  - ASoC: rt721-sdca: fix boost gain calculation error (Jaroslav Kysela) [RHEL-101627]
  - ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak. (Jaroslav Kysela) [RHEL-101627] {CVE-2025-38438}
  - ASoC: Intel: sof-function-topology-lib: Print out the unsupported dmic count (Jaroslav Kysela) [RHEL-101627]
  - ASoC: fsl_sai: Force a software reset when starting in consumer mode (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek - Add mute LED support for HP Victus 15-fb2xxx (Jaroslav Kysela) [RHEL-101627]
  - ALSA: ad1816a: Fix potential NULL pointer deref in snd_card_ad1816a_pnp() (Jaroslav Kysela) [RHEL-101627] {CVE-2025-38454}
  - ASoC: cs35l56: probe() should fail if the device ID is not recognized (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: soc-acpi: arl: Correct order of cs42l43 matches (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: soc-acpi-intel-arl-match: set get_function_tplg_files ops (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: add sof_sdw_get_tplg_files ops (Jaroslav Kysela) [RHEL-101627]
  - ASoC: soc-acpi: add get_function_tplg_files ops (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: SND_SOC_INTEL_SOF_BOARD_HELPERS select SND_SOC_ACPI_INTEL_MATCH (Jaroslav Kysela) [RHEL-101627]
  - ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode (Jaroslav Kysela) [RHEL-101627]
  - ASoC: amd: yc: update quirk data for HP Victus (Jaroslav Kysela) [RHEL-101627]
  - ASoC: amd: yc: Add quirk for MSI Bravo 17 D7VF internal mic (Jaroslav Kysela) [RHEL-101627]
  - ALSA: sb: Force to disable DMAs once when DMA mode is changed (Jaroslav Kysela) [RHEL-101627]
  - ALSA: sb: Don't allow changing the DMA mode during operations (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR (Jaroslav Kysela) [RHEL-101627]
  - ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() (Jaroslav Kysela) [RHEL-101627] {CVE-2025-38249}
  - ASoC: amd: yc: Add DMI quirk for Lenovo IdeaPad Slim 5 15 (Jaroslav Kysela) [RHEL-101627]
  - ASoC: codecs: wcd9335: Fix missing free of regulator supplies (Jaroslav Kysela) [RHEL-101627] {CVE-2025-38259}
  - ASoC: codec: wcd9335: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-101627]
  - ALSA: usb-audio: Add a quirk for Lenovo Thinkpad Thunderbolt 3 dock (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda: Add new pci id for AMD GPU display HD audio controller (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda: Ignore unsol events for cards being shut down (Jaroslav Kysela) [RHEL-101627]
  - ASoC: rt1320: fix speaker noise when volume bar is 100% (Jaroslav Kysela) [RHEL-101627]
  - soundwire: amd: add check for status update registers (Jaroslav Kysela) [RHEL-101627]
  - soundwire: amd: fix for clearing command status register (Jaroslav Kysela) [RHEL-101627]
  - ASoC: amd: ps: fix for soundwire failures during hibernation exit sequence (Jaroslav Kysela) [RHEL-101627]
  - soundwire: amd: cancel pending slave status handling workqueue during remove sequence (Jaroslav Kysela) [RHEL-101627]
  - soundwire: amd: serialize amd manager resume sequence during pm_prepare (Jaroslav Kysela) [RHEL-101627]
  - soundwire: amd: fix for handling slave alerts after link is down (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Add quirk for Asus GU605C (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X513EA (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek - Add mute LED support for HP Victus 16-s1xxx and HP Victus 15-fa1xxx (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/intel: Add Thinkpad E15 to PM deny list (Jaroslav Kysela) [RHEL-101627]
  - ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the KTMicro sound card (Jaroslav Kysela) [RHEL-101627]
  - ASoC: tegra210_ahub: Add check to of_device_get_match_data() (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda: cs35l41: Fix swapped l/r audio channels for Acer Helios laptops (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Add support for Acer Helios Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-101627]
  - ASoC: intel/sdw_utils: Assign initial value in asoc_sdw_rt_amp_spk_rtd_init() (Jaroslav Kysela) [RHEL-101627]
  - ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change (Jaroslav Kysela) [RHEL-101627]
  - ASoC: amd: yc: Add quirk for Lenovo Yoga Pro 7 14ASP9 (Jaroslav Kysela) [RHEL-101627]
  - ASoC: codecs: wcd937x: Drop unused buck_supply (Jaroslav Kysela) [RHEL-101627]
  - ASoC: codecs: wcd9375: Fix double free of regulator supplies (Jaroslav Kysela) [RHEL-101627] {CVE-2025-38423}
  - ASoC: amd: sof_amd_sdw: Fix unlikely uninitialized variable use in create_sdw_dailinks() (Jaroslav Kysela) [RHEL-101627]
  - ASoC: amd: amd_sdw: Fix unlikely uninitialized variable use in create_sdw_dailinks() (Jaroslav Kysela) [RHEL-101627]
  - ASoC: meson: meson-card-utils: use of_property_present() for DT parsing (Jaroslav Kysela) [RHEL-101627]
  - ASoC: qcom: sdm845: Add error handling in sdm845_slim_snd_hw_params() (Jaroslav Kysela) [RHEL-101627]
  - ALSA: usb-audio: Add implicit feedback quirk for RODE AI-1 (Jaroslav Kysela) [RHEL-101627]
  - ASoC: ti: omap-hdmi: Re-add dai_link->platform to fix card init (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: avs: Verify content returned by parse_int_array() (Jaroslav Kysela) [RHEL-101627] {CVE-2025-38307}
  - ASoC: Intel: avs: Relocate DSP status registers (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: avs: Read HW capabilities when possible (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: avs: Ignore Vendor-space manipulation for ACE (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: avs: Fix PPLCxFMT calculation (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: avs: PCM operations for LNL-based platforms (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda: Allow to fetch hlink by ID (Jaroslav Kysela) [RHEL-101627]
  - soundwire: only compute port params in specific stream states (Jaroslav Kysela) [RHEL-101627]
  - ALSA: core: fix up bus match const issues. (Jaroslav Kysela) [RHEL-101627]
  - ASoC: apple: mca: Constrain channels according to TDM mask (Jaroslav Kysela) [RHEL-101627]
  - ASoC: SOF: amd: add missing acp descriptor field (Jaroslav Kysela) [RHEL-101627]
  - ASoC: SOF: ipc4-pcm: Adjust pipeline_list->pipelines allocation type (Jaroslav Kysela) [RHEL-101627]
  - ASoC: tas2764: Enable main IRQs (Jaroslav Kysela) [RHEL-101627]
  - ASoC: tas2764: Reinit cache on part reset (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: avs: Fix deadlock when the failing IPC is SET_D0IX (Jaroslav Kysela) [RHEL-101627]
  - ASoC: codecs: hda: Fix RPM usage count underflow (Jaroslav Kysela) [RHEL-101627]
  - ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108151] {CVE-2025-38417}
  - i40e: When removing VF MAC filters, only check PF-set MAC (Jamie Bainbridge) [RHEL-98540]
  - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107693]
  - cpuidle: Init cpuidle only for present CPUs (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Update documentation after get_typical_interval() changes (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Update documentation after previous changes (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Avoid discarding useful information (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Eliminate outliers on both ends of the sample set (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Tweak threshold use in get_typical_interval() (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Use one loop for average and variance computations (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Drop a redundant local variable (Mark Langsdorf) [RHEL-87863]
  - cpuidle: psci: Add trace for PSCI domain idle (Mark Langsdorf) [RHEL-87863]
  - cpuidle: psci: Activate GENPD_FLAG_ACTIVE_WAKEUP with OSI (Mark Langsdorf) [RHEL-87863]
  - powerpc/machdep: Drop include of dma-mapping.h (Mark Langsdorf) [RHEL-87863]
  - cpuidle: Correct some typos in comments (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Remove iowait influence (Mark Langsdorf) [RHEL-87863]
  - scsi: aacraid: Stop using PCI_IRQ_AFFINITY (John Meneghini) [RHEL-41080]
  - net: add helpers for EEE configuration (CKI Backport Bot) [RHEL-107009]
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (CKI Backport Bot) [RHEL-93557] {CVE-2025-22121}
  - ext4: introduce ITAIL helper (CKI Backport Bot) [RHEL-93557] {CVE-2025-22121}


author: Jarod Wilson <jarod@redhat.com> [5.14.0-607.el9]
changelog:
  - drm/vmwgfx: Fix guests running with TDX/SEV (Jocelyn Falempe) [RHEL-108036]
  - NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Benjamin Coddington) [RHEL-99742]
  - Squashfs: sanity check symbolic link size (CKI Backport Bot) [RHEL-59303] {CVE-2024-46744}
  - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101247] {CVE-2025-38085}
  - mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101283] {CVE-2025-38084}
  - mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101283]
  - net/mlx5: Reset bw_share field when changing a node's parent (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - IB/mlx5: Fix potential deadlock in MR deregistration (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: reduce stack usage in mlx5_ib_ufile_hw_cleanup (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Fix number of lanes to UNKNOWN when using data_rate_oper (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Reuse per-RQ XDP buffer to avoid stack zeroing overhead (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-94893]
  - net/mlx5e: Disable MACsec offload for uplink representor profile (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: E-switch, Fix error handling for enabling roce (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Fix lock order in mlx5e_tx_reporter_ptpsq_unhealthy_recover (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: TC, Continue the attr process even if encap entry is invalid (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: E-Switch, Initialize MAC Address for Default GID (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Use custom tunnel header for vxlan gbp (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Move ttc allocation after switch case to prevent leaks (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table() (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-37888}
  - RDMA/mlx5: Fix compilation warning when USER_ACCESS isn't set (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - treewide: Switch/rename to timer_delete[_sync]() (mlx5) (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: SHAMPO, Make reserved size independent of page size (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix calculation of total invalidated pages (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-22086}
  - RDMA/mlx5: Fix page_size variable overflow (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83386 RHEL-99321] {CVE-2025-22091}
  - RDMA/mlx5: Drop access_flags from _mlx5_mr_cache_alloc() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix cache entry update on dereg error (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix MR cache initialization error flow (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Support optional-counters binding for QPs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Compile fs.c regardless of INFINIBAND_USER_ACCESS config (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Add optional counters for RDMA_TX/RX_packets/bytes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Expose RDMA TRANSPORT flow table types to userspace (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Check enabled UCAPs when creating ucontext (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Create UCAP char devices for supported device capabilities (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Reorder capability check last (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Start health poll after enable hca (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: LAG, reload representors on LAG creation failure (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Fix ethtool -N flow-type ip4 to RSS context (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: TC, Don't offload CT commit if it's the last action (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: CT: Filter legacy rules that are unrelated to nic (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Update pfnum retrieval for devlink port attributes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fw reset, check bridge accessibility at earlier stage (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Lag, use port selection tables when available (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: TX, Utilize WQ fragments edge for multi-packet WQEs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Always select CONFIG_PAGE_POOL_STATS (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Use right API to free bitmap memory (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Remove NULL check before dev_{put, hold} (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Expose port reset cycle recovery counter via ethtool (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Get counter group size by FW capability (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Access PHY layer counter group as other counter groups (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Ensure each counter group uses its PCAM bit (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, log the unsupported mask in definer (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, use list_move() instead of del/add (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, remove unused code for alias flow tables (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add support for setting parent of nodes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Preserve rate settings when creating a rate node (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Introduce hierarchy level tracking on scheduling nodes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Rename devlink rate parent set function for leaf nodes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add support for dest flow sampler HWS action (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add support for flow meters HWS action (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add API for sharing HWS action by refcount (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add IFC bits for PPCNT recovery counters group (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add RDMA TRANSPORT steering domain support (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Query ADV_RDMA capabilities (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Limit non-privileged commands (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Allow the throttle mechanism to be more dynamic (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add RDMA_CTRL HW capabilities (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Avoid unnecessary use of comma operator (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Properly match IPsec subnet addresses (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Separate address related variables to be in struct (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Lag, Enable Multiport E-Switch offloads on 8 ports LAG (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Enable lanes configuration when auto-negotiation is off (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Refactor link speed handling with mlx5_link_info struct (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Relocate function declarations from port.h to mlx5_core.h (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add trust lockdown error to health syndrome print function (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Expose crr in health buffer (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Log health buffer data on any syndrome (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Avoid report two health errors on same syndrome (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Remove newline at the end of a netlink error message (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Avoid a hundred -Wflex-array-member-not-at-end warnings (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Change POOL_NEXT_SIZE define value and make it global (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add new health syndrome error and crr bit offset (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Symmetric OR-XOR RSS hash control (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Use secs_to_jiffies() instead of msecs_to_jiffies() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Support RX xfrm state selector's UPSPEC for packet offload (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Add pass flow group for IPSec RX status table (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Add num_reserved_entries param for ipsec_ft_create() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Skip IPSec RX policy check for crypto offload (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Move IPSec policy check after decryption (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Add correct match to check IPSec syndromes for switchdev mode (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Change the destination of IPSec RX SA miss rule (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Add helper function to update IPSec default destination (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Separate extended link modes request from link modes type selection (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Change eth_proto parameter naming (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Introduce ptys2ethtool_process_link() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Refactor ptys2ethtool_adver_link() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Bridge, correct config option description (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add sensor name to temperature event message (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Modify LSB bitmask in temperature event to include only the first bit (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Prefix temperature event bitmap with '0x' for clarity (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Apply rate-limiting to high temperature warning (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: XDP, Enable TX side XDP multi-buffer support (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Expose RSS via devlink rx reporter diagnose (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Add direct TIRs to devlink rx reporter diagnose (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Move RQs diagnose to a dedicated function (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Expose ICM consumption per function (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Rename and move mlx5_esw_query_vport_vhca_id (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: set the tx_queue_len for pfifo_fast (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: reduce rep rxq depth to 256 for ECPF (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: reduce the max log mpwrq sz for ECPF and reps (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Remove unused mlx5e_tc_flow_action struct (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Remove stray semicolon in LAG port selection table creation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Support FEC settings for 200G per lane link modes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add support for 200Gbps per lane link modes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Add devcom component for the clock shared by functions (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Remove unused mlx5dr_domain_sync (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Handle errors returned from mlx5r_ib_rate() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Bridge, fix the crash caused by LAG state check (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21970}
  - net/mlx5: Lag, Check shared fdb before creating MultiPort E-Switch (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Fix incorrect IRQ pool usage when releasing IRQs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, Rightsize bwc matcher priority (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: DR, use the right action structs for STEv3 (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: handle errors in mlx5_chains_create_table() (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21975}
  - net/mlx5: Fill out devlink dev info only for PFs (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-93397]
  - net/mlx5: IRQ, Fix null string in debug print (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Restore missing trace event when enabling vport QoS (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Fix vport QoS cleanup on error (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21882}
  - RDMA/mlx5: Fix bind QP error cleanup flow (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix AH static rate parsing (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix a race for DMABUF MR which can lead to CQE with error (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - IB/mlx5: Set and get correct qp_num for a DCT QP (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix the recovery flow of the UMR QP (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21892}
  - net/mlx5e: add missing cpu_to_node to kvzalloc_node in mlx5e_open_xdpredirect_sq (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21717}
  - RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21732}
  - RDMA/mlx5: Fix indirect mkey ODP page count (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix link status down event for MPV (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Handle link status event only for LAG device (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Extend ODP statistics with operation count (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fix unintentional sign extension on shift of dest_attr->vport.vhca_id (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: CT: Offload connections with hardware steering rules (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: CT: Make mlx5_ct_fs_smfs_ct_validate_flow_rule reusable (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: CT: Add initial support for Hardware Steering (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, rework the check if matcher size can be increased (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add nic_cap_reg and vhca_icm_ctrl registers (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: SHAMPO: Introduce new SHAMPO specific HCA caps (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Update mlx5_ifc to support FEC for 200G per lane link modes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, update flow - support through bigger action RTC (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, update flow - remove the use of dual RTCs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS to steering mode options (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS get capabilities (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, set create match definer to not supported by HWS (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add support for dest vport HWS action (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS fte API functions (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add dest table cache (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, manage flow counters HWS action sharing by refcount (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS modify header API function (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS packet reformat API function (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS actions pool (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS flow group API functions (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS flow table API functions (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS root namespace functions (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Update TX ESN context for IPSec hardware offload (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: use do_aux_work for PHC overflow checks (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, set timeout on polling for completion (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, support flow sampler destination (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, use the right size when writing arg data (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, handle returned error value in pool alloc (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, fix definer's HWS_SET32 macro for negative offset (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21800}
  - net/mlx5: HWS, separate SQ that HWS uses from the usual traffic SQs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, num_of_rules counter on matcher should be atomic (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, reduce memory consumption of a matcher struct (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, remove wrong deletion of the miss table list (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, change error flow on matcher disconnect (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21751}
  - net/mlx5: HWS, add error message on failure to move rules (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, simplify allocations as we support only FDB (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, denote how refcounts are protected (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, remove implementation of unused FW commands (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, remove the use of duplicated structs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, Add support for RDMA RX steering over IB link layer (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Remove PTM support log message (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: DR, add support for ConnectX-8 steering (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: DR, expand SWS STE callbacks and consolidate common structs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, do not initialize native API queues (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, no need to expose mlx5hws_send_queues_open/close (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, retry insertion to hash table on EBUSY (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add mlx5_fs_pool API (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add counter object to flow destination (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: LAG, Support LAG over Multi-Host NICs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: LAG, Refactor lag logic (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Report rx_discards_phy via rx_dropped (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add device cap abs_native_port_num (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Add ifc support for cross-esw scheduling (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add support for new scheduling elements (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add ConnectX-8 device to ifc (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: ifc: Reorganize mlx5_ifc_flow_table_context_bits (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Always start IPsec sequence number from 1 (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Rely on reqid in IPsec tunnel mode (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21674}
  - net/mlx5: Clear port select structure when fail to create (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21675}
  - net/mlx5: SF, Fix add port error handling (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Fix a lockdep warning as part of the write combining test (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Fix RDMA TX steering prio (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Fix variable not being completed when function returns (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21662}
  - net/mlx5e: Keep netdev when leave switchdev for devlink set legacy only (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Skip restore TC rules for vport rep without loaded flag (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2024-57801}
  - net/mlx5e: macsec: Maintain TX SA from encoding_sa (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: DR, select MSIX vector 0 for completion queue creation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Enable multiplane mode only when it is supported (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Enforce same type port association for multiport RoCE (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: DR, prevent potential error pointer dereference (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2024-56660}
  - net/mlx5: E-Switch, Fix switching to switchdev mode in MPV (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: E-Switch, Fix switching to switchdev mode with IB device disabled (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Add implementation for ufile_hw_cleanup device operation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Support querying per-plane IB PortCounters (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Support OOO RX WQE consumption (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Introduce data placement ordering bits (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: SHAMPO, Rework header allocation loop (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: SHAMPO, Drop info array (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: SHAMPO, Change frag page setup order during allocation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: SHAMPO, Fix page_index calculation inconsistency (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: SHAMPO, Simplify UMR allocation for headers (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Make vport QoS enablement more flexible for future extensions (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Integrate esw_qos_vport_enable logic into rate operations (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Generalize scheduling element operations (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Refactor scheduling element configuration bitmasks (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Generalize max_rate and min_rate setting for nodes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Simplify QoS normalization by removing error handling (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: E-switch, refactor eswitch mode change (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - mlx5/core: deduplicate {mlx5_,}eq_update_ci() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - mlx5/core: relax memory barrier in eq_update_ci() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - mlx5/core: Schedule EQ comp tasklet only if necessary (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: do not create xdp_redirect for non-uplink rep (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: move XDP_REDIRECT sq to dynamic allocation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, renamed the files in accordance with naming convention (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: DR, moved all the SWS code into a separate directory (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Rework esw qos domain init and cleanup (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: DPLL, Add clock quality level op implementation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - mlx5: simplify EQ interrupt polling logic (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - mlx5: fix typo in "mlx5_cqwq_get_cqe_enahnced_comp" (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Update features on ring size change (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Update features on MTU change (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: unique names for per device caches (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, rename modify header struct member action (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, rename packet reformat struct member action (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Only create VEPA flow table when in VEPA mode (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add sync reset drop mode support (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Generalize QoS operations for nodes and vports (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Simplify QoS scheduling element configuration (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Remove vport QoS enabled flag (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Refactor vport QoS to use scheduling node structure (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Refactor vport scheduling element creation function (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Introduce node struct and rename group terminology to node (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Rename vport QoS group reference to parent (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Restrict domain list insertion to root TSAR ancestors (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add parent group support in rate group structure (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Introduce node type to rate group structure (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Refactor QoS group scheduling element creation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add support check for TSAR types in QoS scheduling (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Unify QoS element type checks across NIC and E-Switch (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Refactor locking to a qos domain mutex (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Store rate groups in a qos domain (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Rename rate group 'list' as 'parent_entry' (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Add an explicit 'dev' to vport trace calls (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Store the eswitch in a mlx5_esw_rate_group (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Drop 'esw' param from vport qos functions (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Always create group0 (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Maintain rate group vport members in a list (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Refactor and document bw_share calculation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Consistently name vport vars as 'vport' (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Rename vport 'tsar' into 'sched_elem'. (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Flesh out element_attributes in mlx5_ifc.h (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: hw counters: Remove mlx5_fc_create_ex (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: hw counters: Don't maintain a counter count (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: hw counters: Drop unneeded cacheline alignment (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: hw counters: Replace IDR+lists with xarray (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: hw counters: Use kvmalloc for bulk query buffer (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: hw counters: Make fc_stats & fc_pool private (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - perf script: perf script tests fails with segfault (Jakub Brnak) [RHEL-71129]
  - tracing/kprobes: Check whether get_kretprobe() returns NULL in kretprobe_dispatcher() (Jerome Marchand) [RHEL-101938]
  - treewide: Switch/rename to timer_delete[_sync]() (mlx4) (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - eth: mlx4: select PAGE_POOL (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - eth: mlx4: use the page pool for Rx buffers (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - eth: mlx4: remove the local XDP fast-recycling ring (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - eth: mlx4: don't try to complete XDP frames in netpoll (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - eth: mlx4: create a page pool for Rx (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - net/mlx4_core: Avoid impossible mlx4_db_alloc() order value (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - mlx4: Remove unused functions (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - RDMA/mlx4: Support report_port_event() ops (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - RDMA/mlx4: Use DMA iterator to write MTT (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - RDMA/mlx4: Use ib_umem_find_best_pgsz() to calculate MTT size (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - RDMA/mlx4: Avoid false error about access to uninitialized gids array (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-109507]
  - smb3: fix for slab out of bounds on mount to ksmbd (Paulo Alcantara) [RHEL-109507]
  - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-109507]
  - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-109507]
  - smb: convert to ctime accessor functions (Paulo Alcantara) [RHEL-109507]
  - cifs: Fix null-ptr-deref by static initializing global lock (Paulo Alcantara) [RHEL-109507]
  - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-109507]
  - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-109507]
  - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-109507]
  - smb: client: fix creating symlinks under POSIX mounts (Paulo Alcantara) [RHEL-109507]
  - smb: client: default to nonativesocket under POSIX mounts (Paulo Alcantara) [RHEL-109507]
  - smb: client: set symlink type as native for POSIX mounts (Paulo Alcantara) [RHEL-109507]
  - smb3 client: add way to show directory leases for improved debugging (Paulo Alcantara) [RHEL-109507]
  - smb: client: get rid of kstrdup() when parsing iocharset mount option (Paulo Alcantara) [RHEL-109507]
  - smb: client: get rid of kstrdup() when parsing domain mount option (Paulo Alcantara) [RHEL-109507]
  - smb: client: get rid of kstrdup() when parsing pass2 mount option (Paulo Alcantara) [RHEL-109507]
  - smb: client: get rid of kstrdup() when parsing pass mount option (Paulo Alcantara) [RHEL-109507]
  - smb: client: get rid of kstrdup() when parsing user mount option (Paulo Alcantara) [RHEL-109507]
  - cifs: Add support for creating reparse points over SMB1 (Paulo Alcantara) [RHEL-109507]
  - cifs: Do not query WSL EAs for native SMB symlink (Paulo Alcantara) [RHEL-109507]
  - cifs: Optimize CIFSFindFirst() response when not searching (Paulo Alcantara) [RHEL-109507]
  - cifs: Fix calling CIFSFindFirst() for root path without msearch (Paulo Alcantara) [RHEL-109507]
  - cifs: add new field to track the last access time of cfid (Paulo Alcantara) [RHEL-109507]
  - smb: change return type of cached_dir_lease_break() to bool (Paulo Alcantara) [RHEL-109507]
  - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109507]
  - smb: invalidate and close cached directory when creating child entries (Paulo Alcantara) [RHEL-109507]
  - smb: client: use ParentLeaseKey in cifs_do_create (Paulo Alcantara) [RHEL-109507]
  - smb: client: use ParentLeaseKey in open_cached_dir (Paulo Alcantara) [RHEL-109507]
  - smb: client: add ParentLeaseKey support (Paulo Alcantara) [RHEL-109507]
  - net: openvswitch: allow providing upcall pid for the 'execute' command (Aaron Conole) [RHEL-84596]
  - net: netlink: add nla_get_*_default() accessors (Aaron Conole) [RHEL-84596]
  - benet: fix BUG when creating VFs (Michal Schmidt) [RHEL-106952]
  - eth: bnxt: fix missing ring index trim on error path (Michal Schmidt) [RHEL-107291] {CVE-2025-37873}
  - treewide: Switch/rename to timer_delete[_sync]() (bnxt) (Michal Schmidt) [RHEL-107291]
  - eth: bnxt: fix memory leak in queue reset (Michal Schmidt) [RHEL-107291]
  - eth: bnxt: fix kernel panic in the bnxt_get_queue_stats{rx | tx} (Michal Schmidt) [RHEL-107291] {CVE-2025-21973}
  - eth: bnxt: do not update checksum in bnxt_xdp_build_skb() (Michal Schmidt) [RHEL-107291] {CVE-2025-21960}
  - eth: bnxt: fix out-of-range access of vnic_info array (Michal Schmidt) [RHEL-107291] {CVE-2025-22112}
  - eth: bnxt: do not use BNXT_VNIC_NTUPLE unconditionally in queue restart logic (Michal Schmidt) [RHEL-107291]
  - eth: bnxt: return fail if interface is down in bnxt_queue_mem_alloc() (Michal Schmidt) [RHEL-107291] {CVE-2025-21974}
  - eth: bnxt: fix truesize for mb-xdp-pass case (Michal Schmidt) [RHEL-107291 RHEL-87499] {CVE-2025-21961}
  - net: ethtool: populate the default HDS params in the core (bnxt) (Michal Schmidt) [RHEL-107291]
  - eth: bnxt: fix string truncation warning in FW version (Michal Schmidt) [RHEL-107291]
  - eth: bnxt: always recalculate features after XDP clearing, fix null-deref (Michal Schmidt) [RHEL-107291] {CVE-2025-21682}
  - net: bnxt: use ethtool string helpers (Michal Schmidt) [RHEL-107291]
  - eth: Fix typo 'accelaration'. 'exprienced' and 'rewritting' (bnxt) (Michal Schmidt) [RHEL-107291]
  - smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-102433]
  - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-102433]
  - drm/amd/display: Fix AMDGPU_MAX_BL_LEVEL value (Robert Foss) [RHEL-75952]
  - drm/amd/display: Export full brightness range to userspace (Robert Foss) [RHEL-75952]
  - drm/amd/display: Optimize custom brightness curve (Robert Foss) [RHEL-75952]
  - drm/amd/display: Only read ACPI backlight caps once (Robert Foss) [RHEL-75952]
  - drm/amd/display: Fix default DC and AC levels (Robert Foss) [RHEL-75952]
  - drm/amd/display: Add debugging message for brightness caps (Robert Foss) [RHEL-75952]
  - drm/amd/display: Get LTTPR IEEE OUI/Device ID From Closest LTTPR To Host (Robert Foss) [RHEL-75952]
  - drm/amd/display: Add early 8b/10b channel equalization test pattern sequence (Robert Foss) [RHEL-75952]
  - drm/amdgpu/mes: add missing locking in helper functions (Robert Foss) [RHEL-75952]
  - drm/amd/display: Fix mpv playback corruption on weston (Robert Foss) [RHEL-75952]
  - drm/amd/display: Add dc cap for dp tunneling (Robert Foss) [RHEL-75952]
  - drm/amd/display: Add more checks for DSC / HUBP ONO guarantees (Robert Foss) [RHEL-75952]
  - drm/amdgpu: add kicker fws loading for gfx11/smu13/psp13 (Robert Foss) [RHEL-75952]
  - drm/amdgpu: switch job hw_fence to amdgpu_fence (Robert Foss) [RHEL-75952]
  - drm/amdgpu: Fix SDMA UTC_L1 handling during start/stop sequences (Robert Foss) [RHEL-75952]
  - drm/i915/dsi: Fix off by one in BXT_MIPI_TRANS_VTOTAL (Robert Foss) [RHEL-75952]
  - drm/xe: Fix early wedge on GuC load failure (Robert Foss) [RHEL-75952]
  - drm/xe: Fix taking invalid lock on wedge (Robert Foss) [RHEL-75952]
  - drm/xe: Fix memset on iomem (Robert Foss) [RHEL-75952]
  - drm/amd/display: Check dce_hwseq before dereferencing it (Robert Foss) [RHEL-75952]
  - drm/amdgpu: Add kicker device detection (Robert Foss) [RHEL-75952]
  - drm/amdgpu: VCN v5_0_1 to prevent FW checking RB during DPG pause (Robert Foss) [RHEL-75952]
  - drm/amd/display: Fix RMCM programming seq errors (Robert Foss) [RHEL-75952]
  - drm/xe/guc_submit: add back fix (Robert Foss) [RHEL-75952]
  - drm/xe/sched: stop re-submitting signalled jobs (Robert Foss) [RHEL-75952]
  - drm/xe/vm: move rebind_work init earlier (Robert Foss) [RHEL-75952]
  - drm/amd/display: Correct non-OLED pre_T11_delay. (Robert Foss) [RHEL-75952]
  - drm/amdgpu: disable workload profile switching when OD is enabled (Robert Foss) [RHEL-75952]
  - drm/amdgpu: amdgpu_vram_mgr_new(): Clamp lpfn to total vram (Robert Foss) [RHEL-75952]
  - drm/amd/display: Add null pointer check for get_first_active_display() (Robert Foss) [RHEL-75952]
  - drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready (Robert Foss) [RHEL-75952]
  - drm/bridge: cdns-dsi: Check return value when getting default PHY config (Robert Foss) [RHEL-75952]
  - drm/bridge: cdns-dsi: Fix connecting to next bridge (Robert Foss) [RHEL-75952]
  - drm/bridge: cdns-dsi: Fix phy de-init and flag it so (Robert Foss) [RHEL-75952]
  - drm/bridge: cdns-dsi: Fix the clock variable for mode_valid() (Robert Foss) [RHEL-75952]
  - drm/i915/dp_mst: Work around Thunderbolt sink disconnect after SINK_COUNT_ESI read (Robert Foss) [RHEL-75952]
  - drm/i915/ptl: Use everywhere the correct DDI port clock select mask (Robert Foss) [RHEL-75952]
  - drm/amdkfd: Fix race in GWS queue scheduling (Robert Foss) [RHEL-75952]
  - drm/udl: Unregister device before cleaning up on disconnect (Robert Foss) [RHEL-75952]
  - drm/tegra: Fix a possible null pointer dereference (Robert Foss) [RHEL-75952]
  - drm/tegra: Assign plane type before registration (Robert Foss) [RHEL-75952]
  - drm/simpledrm: Do not upcast in release helpers (Robert Foss) [RHEL-75952]
  - drm/panel: simple: Tianma TM070JDHG34-00: add delays (Robert Foss) [RHEL-75952]
  - drm/cirrus-qemu: Fix pitch programming (Robert Foss) [RHEL-75952]
  - drm/ast: Fix comment on modeset lock (Robert Foss) [RHEL-75952]
  - drm/xe: Process deferred GGTT node removals on device unwind (Robert Foss) [RHEL-75952]
  - drm/xe/guc: Explicitly exit CT safe mode on unwind (Robert Foss) [RHEL-75952]
  - drm/bridge: ti-sn65dsi86: Add HPD for DisplayPort connector type (Robert Foss) [RHEL-75952]
  - drm/bridge: ti-sn65dsi86: make use of debugfs_init callback (Robert Foss) [RHEL-75952]
  - drm/i915: fix build error some more (Robert Foss) [RHEL-75952]
  - drm/amd: Adjust output for discovery error handling (Robert Foss) [RHEL-75952]
  - drm: writeback: Fix drm_writeback_connector_cleanup signature (Robert Foss) [RHEL-75952]
  - drm/xe: move DPT l2 flush to a more sensible place (Robert Foss) [RHEL-75952]
  - drm/xe: Move DSB l2 flush to a more sensible place (Robert Foss) [RHEL-75952]
  - drm/i915/snps_hdmi_pll: Fix 64-bit divisor truncation by using div64_u64 (Robert Foss) [RHEL-75952]
  - drm/xe/display: Add check for alloc_ordered_workqueue() (Robert Foss) [RHEL-75952]
  - drm/amdgpu/mes: add compatibility checks for set_hw_resource_1 (Robert Foss) [RHEL-75952]
  - drm/amd/display: Add sanity checks for drm_edid_raw() (Robert Foss) [RHEL-75952]
  - drm/i915/display: Add check for alloc_ordered_workqueue() and alloc_workqueue() (Robert Foss) [RHEL-75952]
  - Revert "drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1" (Robert Foss) [RHEL-75952]
  - drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1 (Robert Foss) [RHEL-75952]
  - drm/scheduler: signal scheduled fence when kill job (Robert Foss) [RHEL-75952]
  - drm/amdgpu: seq64 memory unmap uses uninterruptible lock (Robert Foss) [RHEL-75952]
  - drm/amdgpu/vcn2.5: read back register after written (Robert Foss) [RHEL-75952]
  - drm/amdgpu/vcn3: read back register after written (Robert Foss) [RHEL-75952]
  - drm/amdgpu/vcn4: read back register after written (Robert Foss) [RHEL-75952]
  - drm/amdgpu/vcn5.0.1: read back register after written (Robert Foss) [RHEL-75952]
  - amd/amdkfd: fix a kfd_process ref leak (Robert Foss) [RHEL-75952]
  - Revert "drm/amd/display: Fix VUpdate offset calculations for dcn401" (Robert Foss) [RHEL-75952]
  - drm/xe/bmg: Update Wa_16023588340 (Robert Foss) [RHEL-75952]
  - drm/amdkfd: move SDMA queue reset capability check to node_show (Robert Foss) [RHEL-75952]
  - drm/i915/pmu: Fix build error with GCOV and AutoFDO enabled (Robert Foss) [RHEL-75952]
  - drm/nouveau/bl: increase buffer size to avoid truncate warning (Robert Foss) [RHEL-75952]
  - drm/ssd130x: fix ssd132x_clear_screen() columns (Robert Foss) [RHEL-75952]
  - drm/xe/svm: Fix regression disallowing 64K SVM migration (Robert Foss) [RHEL-75952]
  - drm/appletbdrm: Make appletbdrm depend on X86 (Robert Foss) [RHEL-75952]
  - udmabuf: use sgtable-based scatterlist wrappers (Robert Foss) [RHEL-75952]
  - drm/panel: simple: Add POWERTIP PH128800T004-ZZA01 panel entry (Robert Foss) [RHEL-75952]
  - drm/xe/uc: Remove static from loop variable (Robert Foss) [RHEL-75952]
  - drm/amdgpu: Add indirect L1_TLB_CNTL reg programming for VFs (Robert Foss) [RHEL-75952]
  - drm/amdkfd: Set SDMA_RLCx_IB_CNTL/SWITCH_INSIDE_IB (Robert Foss) [RHEL-75952]
  - drm/amd/display: Restructure DMI quirks (Robert Foss) [RHEL-75952]
  - drm/amd/display: Correct prefetch calculation (Robert Foss) [RHEL-75952]
  - drm/amd/pm: Reset SMU v13.0.x custom settings (Robert Foss) [RHEL-75952]
  - drm/amd/display: Fix VUpdate offset calculations for dcn401 (Robert Foss) [RHEL-75952]
  - drm/amdgpu/gfx9: fix CSIB handling (Robert Foss) [RHEL-75952]
  - drm/amd/display: disable EASF narrow filter sharpening (Robert Foss) [RHEL-75952]
  - drm/amdgpu/gfx8: fix CSIB handling (Robert Foss) [RHEL-75952]
  - drm/amdgpu: Disallow partition query during reset (Robert Foss) [RHEL-75952]
  - drm/amdgpu: fix MES GFX mask (Robert Foss) [RHEL-75952]
  - drm/amd/display: Fix Vertical Interrupt definitions for dcn32, dcn401 (Robert Foss) [RHEL-75952]
  - drm/amd/display: Correct SSC enable detection for DCN351 (Robert Foss) [RHEL-75952]
  - drm/amd/display: Update IPS sequential_ono requirement checks (Robert Foss) [RHEL-75952]
  - drm/xe/vf: Fix guc_info debugfs for VFs (Robert Foss) [RHEL-75952]
  - drm/xe: Use copy_from_user() instead of __copy_from_user() (Robert Foss) [RHEL-75952]
  - drm/amdgpu/gfx7: fix CSIB handling (Robert Foss) [RHEL-75952]
  - drm/ttm/tests: fix incorrect assert in ttm_bo_unreserve_bulk() (Robert Foss) [RHEL-75952]
  - drm/amd/display: fix zero value for APU watermark_c (Robert Foss) [RHEL-75952]
  - drm: panel-orientation-quirks: Add ZOTAC Gaming Zone (Robert Foss) [RHEL-75952]
  - drm/amdgpu/gfx10: fix CSIB handling (Robert Foss) [RHEL-75952]
  - drm/amd/display: Do Not Consider DSC if Valid Config Not Found (Robert Foss) [RHEL-75952]
  - drm/amdgpu: Add basic validation for RAS header (Robert Foss) [RHEL-75952]
  - drm/amd/display: Skip to enable dsc if it has been off (Robert Foss) [RHEL-75952]
  - drm/amd/display: Add NULL pointer checks in dm_force_atomic_commit() (Robert Foss) [RHEL-75952]
  - drm/nouveau/gsp: fix rm shutdown wait condition (Robert Foss) [RHEL-75952]
  - drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (Robert Foss) [RHEL-75952]
  - drm/nouveau: fix hibernate on disabled GPU (Robert Foss) [RHEL-75952]
  - drm/amdgpu/gfx11: fix CSIB handling (Robert Foss) [RHEL-75952]
  - drm/amdkfd: Drop workaround for GC v9.4.3 revID 0 (Robert Foss) [RHEL-75952]
  - drm/bridge: anx7625: change the gpiod_set_value API (Robert Foss) [RHEL-75952]
  - drm/panthor: Don't update MMU_INT_MASK in panthor_mmu_irq_handler() (Robert Foss) [RHEL-75952]
  - drm/bridge: anx7625: enable HPD interrupts (Robert Foss) [RHEL-75952]
  - drm/panel/sharp-ls043t1le01: Use _multi variants (Robert Foss) [RHEL-75952]
  - drm/bridge: analogix_dp: Add irq flag IRQF_NO_AUTOEN instead of calling disable_irq() (Robert Foss) [RHEL-75952]
  - drm/xe: Fix CFI violation when accessing sysfs files (Robert Foss) [RHEL-75952]
  - drm/amd/display: DCN32 null data check (Robert Foss) [RHEL-75952]
  - drm/amdgpu: Fix API status offset for MES queue reset (Robert Foss) [RHEL-75952]
  - drm/dp: add option to disable zero sized address only transactions. (Robert Foss) [RHEL-75952]
  - drm/amdgpu/gfx6: fix CSIB handling (Robert Foss) [RHEL-75952]
  - drm/bridge: select DRM_KMS_HELPER for AUX_BRIDGE (Robert Foss) [RHEL-75952]
  - drm/amd/display: disable DPP RCG before DPP CLK enable (Robert Foss) [RHEL-75952]
  - accel/ivpu: Fix warning in ivpu_gem_bo_free() (Robert Foss) [RHEL-75952]
  - accel/ivpu: Use dma_resv_lock() instead of a custom mutex (Robert Foss) [RHEL-75952]
  - accel/ivpu: Trigger device recovery on engine reset/resume failure (Robert Foss) [RHEL-75952]
  - accel/ivpu: Use firmware names from upstream repo (Robert Foss) [RHEL-75952]
  - accel/ivpu: Improve buffer object logging (Robert Foss) [RHEL-75952]
  - drm/xe/lrc: Use a temporary buffer for WA BB (Robert Foss) [RHEL-75952]
  - drm/xe/pxp: Clarify PXP queue creation behavior if PXP is not ready (Robert Foss) [RHEL-75952]
  - drm/xe/pxp: Use the correct define in the set_property_funcs array (Robert Foss) [RHEL-75952]
  - drm/xe: Rework eviction rejection of bound external bos (Robert Foss) [RHEL-75952]
  - drm/xe/vsec: fix CONFIG_INTEL_VSEC dependency (Robert Foss) [RHEL-75952]
  - drm/xe/vm: move xe_svm_init() earlier (Robert Foss) [RHEL-75952]
  - drm/panel-simple: fix the warnings for the Evervision VGG644804 (Robert Foss) [RHEL-75952]
  - drm/i915/display: Fix u32 overflow in SNPS PHY HDMI PLL setup (Robert Foss) [RHEL-75952]
  - drm/amdgpu/gfx10: Refine Cleaner Shader for GFX10.1.10 (Robert Foss) [RHEL-75952]
  - drm/i915/guc: Handle race condition where wakeref count drops below 0 (Robert Foss) [RHEL-75952]
  - drm/i915/psr: Fix using wrong mask in REG_FIELD_PREP (Robert Foss) [RHEL-75952]
  - drm/i915/guc: Check if expecting reply before decrementing outstanding_submission_g2h (Robert Foss) [RHEL-75952]
  - drm/bridge: analogix_dp: Fix clk-disable removal (Robert Foss) [RHEL-75952]
  - drm/bridge: analogix_dp: Add support to get panel from the DP AUX bus (Robert Foss) [RHEL-75952]
  - drm/bridge: analogix_dp: Remove CONFIG_PM related check in analogix_dp_bind()/analogix_dp_unbind() (Robert Foss) [RHEL-75952]
  - accel/ivpu: Reorder Doorbell Unregister and Command Queue Destruction (Robert Foss) [RHEL-75952]
  - drm/bridge: analogix_dp: Remove the unnecessary calls to clk_disable_unprepare() during probing (Robert Foss) [RHEL-75952]
  - drm/connector: only call HDMI audio helper plugged cb if non-null (Robert Foss) [RHEL-75952]
  - drm/panic: Use a decimal fifo to avoid u64 by u64 divide (Robert Foss) [RHEL-75952]
  - drm/panic: clean Clippy warning (Robert Foss) [RHEL-75952]
  - drm/xe/guc: Make creation of SLPC debugfs files conditional (Robert Foss) [RHEL-75952]
  - drm/xe/guc: Don't expose GuC privileged debugfs files if VF (Robert Foss) [RHEL-75952]
  - drm/xe/guc: Refactor GuC debugfs initialization (Robert Foss) [RHEL-75952]
  - drm/i915/dp_mst: Use the correct connector while computing the link BPP limit on MST (Robert Foss) [RHEL-75952]
  - drm/amd/display: Don't check for NULL divisor in fixpt code (Robert Foss) [RHEL-75952]
  - drm/tegra: rgb: Fix the unbound reference count (Robert Foss) [RHEL-75952]
  - drm/vkms: Adjust vkms_state->active_planes allocation type (Robert Foss) [RHEL-75952]
  - drm: rcar-du: Fix memory leak in rcar_du_vsps_init() (Robert Foss) [RHEL-75952]
  - drm/bridge: lt9611uxc: Fix an error handling path in lt9611uxc_probe() (Robert Foss) [RHEL-75952]
  - drm/panel: samsung-sofef00: Drop s6e3fc2x01 support (Robert Foss) [RHEL-75952]
  - drm/amdgpu: Refine Cleaner Shader MEC firmware version for GFX10.1.x GPUs (Robert Foss) [RHEL-75952]
  - drm/panthor: Fix the panthor_gpu_coherency_init() error path (Robert Foss) [RHEL-75952]
  - drm/panthor: Update panthor_mmu::irq::mask when needed (Robert Foss) [RHEL-75952]
  - drm/panthor: Call panthor_gpu_coherency_init() after PM resume() (Robert Foss) [RHEL-75952]
  - drm/panthor: Fix GPU_COHERENCY_ACE[_LITE] definitions (Robert Foss) [RHEL-75952]
  - drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table (Robert Foss) [RHEL-75952]
  - drm/xe/d3cold: Set power state to D3Cold during s2idle/s3 (Robert Foss) [RHEL-75952]
  - drm/vmwgfx: Fix dumb buffer leak (Robert Foss) [RHEL-75952]
  - drm/ci: fix merge request rules (Robert Foss) [RHEL-75952]
  - drm/vmwgfx: Add error path for xa_store in vmw_bo_add_detached_resource (Robert Foss) [RHEL-75952]
  - drm/vmwgfx: Add seqno waiter for sync_files (Robert Foss) [RHEL-75952]
  - Revert "drm/amd/display: more liberal vmin/vmax update for freesync" (Robert Foss) [RHEL-75952]
  - drm/amdkfd: add hqd_sdma_get_doorbell callbacks for gfx7/8 (Robert Foss) [RHEL-75952]
  - Revert "drm/amd/display: pause the workload setting in dm" (Robert Foss) [RHEL-75952]
  - audit,module: restore audit logging in load failure case (Richard Guy Briggs) [RHEL-52839]
  - hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Li Tian) [RHEL-89165]
  - Enable the gs_usb CAN bus driver (Radu Rendec) [RHEL-83402]
  - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-103348]
  - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-103348]


author: Jarod Wilson <jarod@redhat.com> [5.14.0-608.el9]
changelog:
  - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (CKI Backport Bot) [RHEL-108385]
  - enic: fix incorrect MTU comparison in enic_change_mtu() (CKI Backport Bot) [RHEL-108264]
  - net/enic: Allow at least 8 RQs to always be used (CKI Backport Bot) [RHEL-108264]
  - tpm: tis: Double the timeout B to 4s (Štěpán Horáček) [RHEL-72765]
  - char: tpm: tpm-buf: Add sanity check fallback in read helpers (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Fix timeout handling when waiting for TPM status (Štěpán Horáček) [RHEL-72765]
  - tpm: do not start chip while suspended (Štěpán Horáček) [RHEL-72765]
  - tpm: ibmvtpm: Set TPM_OPS_AUTO_STARTUP flag on driver (Štěpán Horáček) [RHEL-72765]
  - tpm_tis: Explicitly check for error code (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: correct tpm_tis_flags enumeration values (Štěpán Horáček) [RHEL-72765]
  - tpm_tis: Use tpm_chip_{start,stop} decoration inside tpm_tis_resume (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Claim locality when interrupts are reenabled on resume (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Claim locality in interrupt handler (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Request threaded interrupt handler (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm: Implement usage counter for locality (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: do not check for the active locality in interrupt handler (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Move interrupt mask checks into own function (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Only handle supported interrupts (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Claim locality before writing interrupt registers (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Do not skip reset of original interrupt vector (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Avoid cache incoherency in test for interrupts (Štěpán Horáček) [RHEL-72765]
  - redhat/configs: sync CONFIG_SND_HDA_ACPI with ARK (Marcin Juszkiewicz) [RHEL-102695]
  - ALSA: hda: acpi: Make driver's match data const static (Marcin Juszkiewicz) [RHEL-102695]
  - ALSA: hda: acpi: Use SYSTEM_SLEEP_PM_OPS() (Marcin Juszkiewicz) [RHEL-102695]
  - ALSA: hda: Add missing NVIDIA HDA codec IDs (Marcin Juszkiewicz) [RHEL-102695]
  - ALSA: hda - Add new driver for HDA controllers listed via (Marcin Juszkiewicz) [RHEL-102695]
  - ALSA: hda/tegra: Add Tegra264 support (Marcin Juszkiewicz) [RHEL-102695]
  - net: clear the dst when changing skb protocol (Felix Maurer) [RHEL-84579]
  - bpf: Revert "bpf: remove unnecessary rcu_read_{lock,unlock}() in multi-uprobe attach logic" (Felix Maurer) [RHEL-84579]
  - bpf, sockmap: Avoid using sk_socket after free when sending (Felix Maurer) [RHEL-84579]
  - xsk: fix an integer overflow in xp_create_and_assign_umem() (Felix Maurer) [RHEL-84579 RHEL-87910] {CVE-2025-21997}
  - bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-101009 RHEL-84579] {CVE-2025-21867}
  - bpf: sockmap, fix proto update hook to avoid dup calls (Felix Maurer) [RHEL-84579]
  - bpf: syzkaller found null ptr deref in unix_bpf proto add (Felix Maurer) [RHEL-84579]
  - xsk: Fix xsk_diag use-after-free error during socket cleanup (Felix Maurer) [RHEL-84579]
  - net: atlantic: generate software timestamp just before the doorbell (Izabela Bakollari) [RHEL-105362]
  - net: aquantia: Use HWMON_CHANNEL_INFO macro to simplify code (Izabela Bakollari) [RHEL-105362]
  - net: atlantic: Avoid -Wflex-array-member-not-at-end warnings (Izabela Bakollari) [RHEL-105362]
  - net: atlantic: fix warning during hot unplug (Izabela Bakollari) [RHEL-105362]
  - net: atlantic: support reading SFP module info (Izabela Bakollari) [RHEL-105362]
  - ethtool: Block setting of symmetric RSS when non-symmetric rx-flow-hash is requested (CKI Backport Bot) [RHEL-107024]


author: Jarod Wilson <jarod@redhat.com> [5.14.0-609.el9]
changelog:
  - udmabuf: Restore ubuf->unpin_list initialization (José Expósito) [RHEL-109567]
  - i40e: report VF tx_dropped with tx_errors instead of tx_discards (Dennis Chen) [RHEL-79910]
  - ima: annotate iint mutex to avoid lockdep false positive warnings JIRA: https://issues.redhat.com/browse/RHEL-59837 (Aaron Brookner)
  - i2c: mlxbf: avoid 64-bit division (Steve Dunnagan) [RHEL-103885]
  - i2c-mlxbf: Improve I2C bus timing configuration (Steve Dunnagan) [RHEL-103885]
  - i2c-mlxbf: Add repeated start condition support (Steve Dunnagan) [RHEL-103885]
  - i2c: mlxbf: Use str_read_write() helper (Steve Dunnagan) [RHEL-103885]
  - i2c: mlxbf: Use readl_poll_timeout_atomic() for polling (Steve Dunnagan) [RHEL-103885]
  - scsi: ufs: core: Fix use-after free in init error and remove paths (Jared Kangas) [RHEL-84800] {CVE-2025-21739}
  - scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove() (Jared Kangas) [RHEL-84800]
  - scsi: ufs: pltfrm: Drop PM runtime reference count after ufshcd_remove() (Jared Kangas) [RHEL-84800]
  - scsi: ufs: pltfrm: Disable runtime PM during removal of glue drivers (Jared Kangas) [RHEL-84800]
  - scsi: ufs: qcom: Only free platform MSIs when ESI is enabled (Jared Kangas) [RHEL-84800]
  - scsi: ufs: Convert all platform drivers to return void (Jared Kangas) [RHEL-84800]
  - seqcount: replace smp_rmb() in read_seqcount() with load acquire (Čestmír Kalina) [RHEL-79880]
  - locking/ww_mutex/test: add MODULE_DESCRIPTION() (Čestmír Kalina) [RHEL-79880]
  - lockdep: suggest the fix for "lockdep bfs error:-1" on print_bfs_bug (Čestmír Kalina) [RHEL-79880]
  - lockdep: Use str_plural() to fix Coccinelle warning (Čestmír Kalina) [RHEL-79880]
  - lockdep: fix deadlock issue between lockdep and rcu (Čestmír Kalina) [RHEL-79880]
  - lockdep: Mark emergency sections in lockdep splats (Čestmír Kalina) [RHEL-79880]
  - locking/rwsem: Move is_rwsem_reader_owned() and rwsem_owner() under  CONFIG_DEBUG_RWSEMS (Čestmír Kalina) [RHEL-79880]
  - selftests: net/forwarding: test purge of active DWRR classes (Ivan Vecera) [RHEL-107487]
  - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107487]
  - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107487] {CVE-2025-38107}


author: Jarod Wilson <jarod@redhat.com> [5.14.0-610.el9]
changelog:
  - HID: Intel-thc-hid: Intel-quicki2c: Enhance QuickI2C reset flow (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: pass correct arguments to acpi_evaluate_object (Benjamin Tissoires) [RHEL-65754]
  - HID: Intel-thc-hid: Intel-quickspi: Correct device state names gramatically (Benjamin Tissoires) [RHEL-65754]
  - HID: Intel-thc-hid: Intel-quickspi: Correct device state after S4 (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: Fix spelling mistake "intput" -> "input" (Benjamin Tissoires) [RHEL-65754]
  - Hid: Intel-thc-hid: Intel-thc: Fix "dubious: !x | !y" issue (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: Remove deprecated PCI API calls (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc: fix CONFIG_HID dependency (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: fix build errors in um mode (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: fix potential memory corruption (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Fix error code in thc_i2c_subip_init() (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: Add PM implementation (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: Complete THC QuickI2C driver (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: Add HIDI2C protocol implementation (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: Add THC QuickI2C ACPI interfaces (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: Add THC QuickI2C driver hid layer (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: Add THC QuickI2C driver skeleton (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quickspi: Add PM implementation (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quickspi: Complete THC QuickSPI driver (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quickspi: Add HIDSPI protocol implementation (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quickspi: Add THC QuickSPI ACPI interfaces (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quickspi: Add THC QuickSPI driver hid layer (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quickspi: Add THC QuickSPI driver skeleton (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add THC I2C config interfaces (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add THC SPI config interfaces (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add THC interrupt handler (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add THC LTR interfaces (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add THC DMA interfaces (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add APIs for interrupt (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add THC PIO operation APIs (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add THC registers definition (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: Add basic THC driver skeleton (Benjamin Tissoires) [RHEL-65754]
  - HID: THC: Add documentation (Benjamin Tissoires) [RHEL-65754]
  - kernel.spec: add '-e' option to %preun for kernel-core and kernel-uki-virt (Xuemin Li) [RHEL-107668]
  - loop: use kiocb helpers to fix lockdep warning (Ming Lei) [RHEL-104374]
  - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106648] {CVE-2025-38464}


author: Jarod Wilson <jarod@redhat.com> [5.14.0-611.el9]
changelog:
  - HID: wacom: fix crash in wacom_aes_battery_handler() (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: fix kobject reference count leak (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: fix memory leak on sysfs attribute creation failure (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: fix memory leak on kobject creation failure (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: fix shift OOB in kfifo allocation for zero pktlen (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: fix memory leak on size mismatch in wacom_wac_queue_flush() (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: handle kzalloc() allocation failure in wacom_wac_queue_flush() (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Remove static WACOM_PKGLEN_MAX limit (Benjamin Tissoires) [RHEL-102058]
  - HID: Wacom: Add PCI Wacom device support (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Status luminance properties should set brightness of all LEDs (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Improve behavior of non-standard LED brightness values (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: fix when get product name maybe null pointer (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Interpret tilt data from Intuos Pro BT as signed values (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Set eraser status when either 'Eraser' or 'Invert' usage is set (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Support devices with two touchrings (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Add preliminary support for high-resolution wheel scrolling (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Support touchrings with relative motion (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Improve warning for tablets falling back to default resolution (Benjamin Tissoires) [RHEL-102058]
  - sched: Change nr_uninterruptible type to unsigned long (Phil Auld) [RHEL-107437]
  - sched/core: Fix migrate_swap() vs. hotplug (Phil Auld) [RHEL-107437]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-612.el9]
changelog:
  - redhat: bump RHEL_MINOR to 8 (Patrick Talbert)
  - x86/cpu: Add new Intel CPU model numbers for Wildcatlake and Novalake (David Arcari) [RHEL-95631]
  - x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores (David Arcari) [RHEL-95631]
  - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105605]
  - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105598]
  - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105598]
  - net/smc: Fix lookup of netdev by using ib_device_get_netdev() (Mete Durlu) [RHEL-102713]
  - ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-104667]
  - net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-104667]
  - ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-104119]
  - ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-104119]
  - ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-104119]
  - memory: tegra: Fix indentation (Marcin Juszkiewicz) [RHEL-26426]
  - memory: tegra: Add BPMP and ICC info for DLA clients (Marcin Juszkiewicz) [RHEL-26426]
  - memory: tegra: Correct DLA client names (Marcin Juszkiewicz) [RHEL-26426]
  - soc/tegra: pmc: Add SD wake event for Tegra234 (Marcin Juszkiewicz) [RHEL-26405]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-613.el9]
changelog:
  - x86/cpu: Remove useless work in detect_tme_early() (Frank Liang) [RHEL-111095]
  - x86/cpu: Clear TME feature flag if TME is not enabled by BIOS (Frank Liang) [RHEL-111095]
  - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110206]
  - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110235]
  - Makefile: add $(srctree) to dependency of compile_commands.json target (Herton R. Krzesinski) [RHEL-107194]
  - kbuild: scripts/gdb: bring the "abspath" back (Herton R. Krzesinski) [RHEL-107194]
  - kbuild: Use $(obj)/%.cc to fix host C++ module builds (Herton R. Krzesinski) [RHEL-107194]
  - kbuild: scripts/gdb: Replace missed $(srctree)/$(src) w/ $(src) (Herton R. Krzesinski) [RHEL-107194]
  - kbuild: use $(src) instead of $(srctree)/$(src) for source directory (Herton R. Krzesinski) [RHEL-107194]
  - kbuild: use $(obj)/ instead of $(src)/ for common pattern rules (Herton R. Krzesinski) [RHEL-107194]
  - kbuild: do not add $(srctree) or $(objtree) to header search paths (Herton R. Krzesinski) [RHEL-107194]
  - arch: use $(obj)/ instead of $(src)/ for preprocessed linker scripts (Herton R. Krzesinski) [RHEL-107194]
  - arm64: vdso32: Remove unused vdso32-offsets.h (Herton R. Krzesinski) [RHEL-107194]
  - staging: vc04_services: interface: Drop include Makefile directive (Herton R. Krzesinski) [RHEL-107194]
  - staging: vc04_services: vchiq-mmal: Drop include Makefile directive (Herton R. Krzesinski) [RHEL-107194]
  - staging: vc04_services: bcm2835-camera: Drop include Makefile directive (Herton R. Krzesinski) [RHEL-107194]
  - staging: vc04_services: bcm2835-audio: Drop include Makefile directive (Herton R. Krzesinski) [RHEL-107194]
  - certs: check-in the default x509 config file (Herton R. Krzesinski) [RHEL-107194]
  - sparc: move the install rule to arch/sparc/Makefile (Herton R. Krzesinski) [RHEL-107194]
  - riscv: move the (z)install rules to arch/riscv/Makefile (Herton R. Krzesinski) [RHEL-107194]
  - powerpc: move the install rule to arch/powerpc/Makefile (Herton R. Krzesinski) [RHEL-107194]
  - powerpc: make the install target not depend on any build artifact (Herton R. Krzesinski) [RHEL-107194]
  - powerpc: remove unused zInstall target from arch/powerpc/boot/Makefile (Herton R. Krzesinski) [RHEL-107194]
  - nios2: move the install rule to arch/nios2/Makefile (Herton R. Krzesinski) [RHEL-107194]
  - ARM: 9102/1: move theinstall rules to arch/arm/Makefile (Herton R. Krzesinski) [RHEL-107194]
  - dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-105063]
  - dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-105063]
  - redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-105063]
  - redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-105063]
  - dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-105063]
  - spi: Introduce spi_get_device_match_data() helper (Ivan Vecera) [RHEL-105063]
  - dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-105063]
  - dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-105063]
  - tpm_crb_ffa: Remove unused export (Marcin Juszkiewicz) [RHEL-102691]
  - redhat/configs: enable CONFIG_TCG_ARM_CRB_FFA on aarch64 (Marcin Juszkiewicz) [RHEL-102691]
  - tpm: Do not remap from ACPI resources again for Pluton TPM (Marcin Juszkiewicz) [RHEL-102691]
  - tpm_crb: ffa_tpm: Implement driver compliant to CRB over FF-A (Marcin Juszkiewicz) [RHEL-102691]
  - ACPICA: Add start method for ARM FF-A (Marcin Juszkiewicz) [RHEL-102691]
  - tpm_crb: Add support for the ARM FF-A start method (Marcin Juszkiewicz) [RHEL-102691]
  - tpm_crb: Clean-up and refactor check for idle support (Marcin Juszkiewicz) [RHEL-102691]
  - tpm_crb: Fix an error handling path in crb_acpi_add() (Marcin Juszkiewicz) [RHEL-102691]
  - tpm_crb: Add support for CRB devices based on Pluton (Marcin Juszkiewicz) [RHEL-102691]
  - Documentation: tpm: Add documentation for the CRB FF-A interface (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix the missing entry in struct ffa_indirect_msg_hdr (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Replace mutex with rwlock to avoid sleep in atomic context (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Move memory allocation outside the mutex locking (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix memory leak by freeing notifier callback node (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Skip Rx buffer ownership release if not acquired (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Set dma_mask for ffa devices (Marcin Juszkiewicz) [RHEL-102691] {CVE-2025-38043}
  - firmware: arm_ffa: Skip the first/partition ID when parsing vCPU list (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Explicitly cast return value from NOTIFICATION_INFO_GET (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Explicitly cast return value from FFA_VERSION before comparison (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Handle ffa_notification_get correctly at virtual FF-A instance (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Allow multiple UUIDs per partition to register SRI callback (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for handling framework notifications (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for {un,}registration of framework notifications (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Stash ffa_device instead of notify_type in notifier_cb_info (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Refactoring to prepare for framework notification support (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Remove unnecessary declaration of ffa_partitions_cleanup() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Reject higher major version as incompatible (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Upgrade FF-A version to v1.2 in the driver (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for passing UUID in FFA_MSG_SEND2 (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Unregister the FF-A devices when cleaning up the partitions (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Handle the presence of host partition in the partition info (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Refactor addition of partition information into XArray (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix big-endian support in __ffa_partition_info_regs_get() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix big-endian support in __ffa_partition_info_get() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Align sync_send_receive{,2} function prototypes (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Replace UUID buffer to standard UUID format (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Replace SCMI by FF-A in the macro (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix the race around setting ffa_dev->properties (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Avoid string-fortify warning caused by memcpy() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Avoid string-fortify warning in export_uuid() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fetch the Rx/Tx buffer size using ffa_features() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for FFA_YIELD in direct messaging (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for FFA_MSG_SEND_DIRECT_{REQ,RESP}2 (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for FFA_PARTITION_INFO_GET_REGS (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Move the function ffa_features() earlier (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Update the FF-A command list with v1.2 additions (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Some coding style fixes (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Split bus and driver into distinct modules (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Move the FF-A v1.0 NULL UUID workaround to bus notifier (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Avoid queuing work when running on the worker queue (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix memory corruption in ffa_msg_send2() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for FFA_MSG_SEND2 (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Stash the partition properties for query purposes (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix kernel warning about incorrect SRI/NPI (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for handling notification pending interrupt(NPI) (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Refactor SRI handling in prepartion to add NPI support (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Skip creation of the notification bitmaps (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix the partition ID check in ffa_notification_info_get() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Handle partitions setup failures (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Use xa_insert() and check for result (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Simplify ffa_partitions_cleanup() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Check xa_load() return value (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add missing rwlock_init() for the driver partition (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add missing rwlock_init() in ffa_setup_partitions() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix ffa_notification_info_get() IDs handling (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix the size of the allocation in ffa_partitions_cleanup() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix FFA notifications cleanup path (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add checks for the notification enabled state (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Setup the partitions after the notification initialisation (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Allow FF-A initialisation even when notification fails (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Upgrade the driver version to v1.1 (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Update memory descriptor to support v1.1 format (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Switch to using ffa_mem_desc_offset() accessor (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Simplify the computation of transmit and fragment length (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add notification handling mechanism (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add interface to send a notification to a given partition (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add interfaces to request notification callbacks (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add schedule receiver callback mechanism (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Initial support for scheduler receiver interrupt (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Implement the NOTIFICATION_INFO_GET interface (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Implement the FFA_NOTIFICATION_GET interface (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Implement the FFA_NOTIFICATION_SET interface (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Implement the FFA_RUN interface (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Implement the notification bind and unbind interface (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Implement notification bitmap create and destroy interfaces (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Update the FF-A command list with v1.1 additions (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Emit modalias for FF-A devices (Marcin Juszkiewicz) [RHEL-102691]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-614.el9]
changelog:
  - ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-111532]
  - EDAC/bluefield: Don't use bluefield_edac_readl() result on error (Jennifer Berringer) [RHEL-103881]
  - EDAC/bluefield: Use Arm SMC for EMI access on BlueField-2 (Jennifer Berringer) [RHEL-103881]
  - powerpc/pseries: Correct secvar format representation for static key management (Mamatha Inamdar) [RHEL-101853]
  - powerpc/secvar: Expose secvars relevant to the key management mode (Mamatha Inamdar) [RHEL-101853]
  - integrity/platform_certs: Allow loading of keys in the static key management mode (Mamatha Inamdar) [RHEL-101853]
  - s390/hypfs: Enable limited access during lockdown (Mete Durlu) [RHEL-111204]
  - s390/hypfs: Avoid unnecessary ioctl registration in debugfs (Mete Durlu) [RHEL-111204]
  - x86/CPU/AMD: Add X86_FEATURE_ZEN6 (David Arcari) [RHEL-106912]
  - x86/cpufeatures: Free up unused feature bits (David Arcari) [RHEL-106912]
  - x86/CPU/AMD: Ignore invalid reset reason value (David Arcari) [RHEL-103591]
  - PCI/ASPM: Fix link state exit during switch upstream function removal (Marcin Juszkiewicz) [RHEL-102694]
  - PCI/ASPM: Fix L1SS saving (Marcin Juszkiewicz) [RHEL-102694]
  - PCI/ASPM: Save parent L1SS config in pci_save_aspm_l1ss_state() (Marcin Juszkiewicz) [RHEL-102694]
  - PCI/ASPM: Add notes about enabling PCI-PM L1SS to pci_enable_link_state(_locked) (Marcin Juszkiewicz) [RHEL-102694]
  - PCI/ASPM: Disable L1 before disabling L1 PM Substates (Marcin Juszkiewicz) [RHEL-102694]
  - x86/cpufeatures: Add X86_FEATURE_AMD_WORKLOAD_CLASS feature bit (David Arcari) [RHEL-105422]
  - cpufreq/amd-pstate: Avoid shadowing ret in amd_pstate_ut_check_driver() (David Arcari) [RHEL-105422]
  - cpufreq/amd-pstate: Disable preferred cores on designs with workload classification (David Arcari) [RHEL-105422]
  - amd-pstate-ut: Reset amd-pstate driver mode after running selftests (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Modify cppc_get_auto_sel_caps() to cppc_get_auto_sel() (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Adjust return code for inline functions in !CONFIG_ACPI_CPPC_LIB (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Refactor register value get and set ABIs (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Add cppc_set_reg_val() (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Extract cppc_get_reg_val_in_pcc() (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Rename cppc_get_perf() to cppc_get_reg_val() (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Optimize cppc_get_perf() (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Add IS_OPTIONAL_CPC_REG macro to judge if a cpc_reg is optional (David Arcari) [RHEL-105422]
  - cpufreq/amd-pstate: Add support for the "Requested CPU Min frequency" BIOS option (David Arcari) [RHEL-105422]
  - cpufreq/amd-pstate: Add offline, online and suspend callbacks for amd_pstate_driver (David Arcari) [RHEL-105422]
  - cpufreq/amd-pstate: Move max_perf limiting in amd_pstate_update (David Arcari) [RHEL-105422]
  - cpufreq/amd-pstate: Use scope based cleanup for cpufreq_policy refs [partial] (David Arcari) [RHEL-105422]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-615.el9]
changelog:
  - ACPI: processor: Rescan "dead" SMT siblings during initialization (David Arcari) [RHEL-113139]
  - intel_idle: Allow loading ACPI tables for any family (David Arcari) [RHEL-113139]
  - intel_idle: Update arguments of mwait_idle_with_hints() (David Arcari) [RHEL-113139]
  - intel_idle: Rescan "dead" SMT siblings during initialization (David Arcari) [RHEL-113139]
  - x86/smp: PM/hibernate: Split arch_resume_nosmt() (David Arcari) [RHEL-113139]
  - intel_idle: Use subsys_initcall_sync() for initialization (David Arcari) [RHEL-113139]
  - intel_idle: Add C1 demotion on/off sysfs knob (David Arcari) [RHEL-113139]
  - tools/power turbostat: version 2025.09.09 (David Arcari) [RHEL-110614]
  - tools/power turbostat: Handle non-root legacy-uncore sysfs permissions (David Arcari) [RHEL-110614]
  - tools/power turbostat: standardize PER_THREAD_PARAMS (David Arcari) [RHEL-110614]
  - tools/power turbostat: Fix DMR support (David Arcari) [RHEL-110614]
  - tools/power turbostat: add format "average" for external attributes (David Arcari) [RHEL-110614]
  - tools/power turbostat: delete GET_PKG() (David Arcari) [RHEL-110614]
  - tools/power turbostat: probe and display L3 cache topology (David Arcari) [RHEL-110614]
  - tools/power turbostat: Support more than 64 built-in-counters (David Arcari) [RHEL-110614]
  - tools/power turbostat.8: Document Totl%C0, Any%C0, GFX%C0, CPUGFX% columns (David Arcari) [RHEL-110614]
  - tools/power turbostat: Fix bogus SysWatt for forked program (David Arcari) [RHEL-110614]
  - tools/power turbostat: Handle cap_get_proc() ENOSYS (David Arcari) [RHEL-110614]
  - tools/power turbostat: Fix build with musl (David Arcari) [RHEL-110614]
  - tools/power turbostat: verify arguments to params --show and --hide (David Arcari) [RHEL-110614]
  - tools/power turbostat: regression fix: --show C1E% (David Arcari) [RHEL-110614]
  - tools/power turbostat: version 2025.06.08 (David Arcari) [RHEL-110614]
  - tools/power turbostat: Add initial support for BartlettLake (David Arcari) [RHEL-110614]
  - tools/power turbostat: Add initial support for DMR (David Arcari) [RHEL-110614]
  - tools/power turbostat: Dump RAPL sysfs info (David Arcari) [RHEL-110614]
  - tools/power turbostat: Avoid probing the same perf counters (David Arcari) [RHEL-110614]
  - tools/power turbostat: Allow probing RAPL with platform_features->rapl_msrs cleared (David Arcari) [RHEL-110614]
  - tools/power turbostat: Clean up add perf/msr counter logic (David Arcari) [RHEL-110614]
  - tools/power turbostat: Introduce add_msr_counter() (David Arcari) [RHEL-110614]
  - tools/power turbostat: Remove add_msr_perf_counter_() (David Arcari) [RHEL-110614]
  - tools/power turbostat: Remove add_cstate_perf_counter_() (David Arcari) [RHEL-110614]
  - tools/power turbostat: Remove add_rapl_perf_counter_() (David Arcari) [RHEL-110614]
  - tools/power turbostat: Quit early for unsupported RAPL counters (David Arcari) [RHEL-110614]
  - tools/power turbostat: Always check rapl_joules flag (David Arcari) [RHEL-110614]
  - tools/power turbostat: Fix AMD package-energy reporting (David Arcari) [RHEL-110614]
  - tools/power turbostat: Fix RAPL_GFX_ALL typo (David Arcari) [RHEL-110614]
  - tools/power turbostat: Add Android support for MSR device handling (David Arcari) [RHEL-110614]
  - tools/power turbostat.8: pm_domain wording fix (David Arcari) [RHEL-110614]
  - tools/power turbostat.8: fix typo: idle_pct should be pct_idle (David Arcari) [RHEL-110614]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-616.el9]
changelog:
  - PM: EM: Add function for registering a PD without capacity update (David Arcari) [RHEL-112493]
  - cpufreq: intel_pstate: Support Clearwater Forest OOB mode (David Arcari) [RHEL-112493]
  - cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode (David Arcari) [RHEL-112493]
  - cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode (David Arcari) [RHEL-112493]
  - cpufreq: intel_pstate: EAS: Increase cost for CPUs using L3 cache (David Arcari) [RHEL-112493]
  - cpufreq: intel_pstate: EAS support for hybrid platforms (David Arcari) [RHEL-112493]
  - arch_topology: Relocate cpu_scale to topology.[h|c] (David Arcari) [RHEL-112493]
  - arch_topology: Make register_cpu_capacity_sysctl() tolerant to late CPUs (David Arcari) [RHEL-112493]
  - PM: EM: Introduce em_adjust_cpu_capacity() (David Arcari) [RHEL-112493]
  - PM: EM: Move CPU capacity check to em_adjust_new_capacity() (David Arcari) [RHEL-112493]
  - PM: EM: Fix potential division-by-zero error in em_compute_costs() (David Arcari) [RHEL-112493]
  - PM: EM: Address RCU-related sparse warnings (David Arcari) [RHEL-112493]
  - PM: EM: Consify two parameters of em_dev_register_perf_domain() (David Arcari) [RHEL-112493]
  - PM: EM: use kfree_rcu() to simplify the code (David Arcari) [RHEL-112493]
  - PM: EM: Slightly reduce em_check_capacity_update() overhead (David Arcari) [RHEL-112493]
  - PM: EM: Drop unused parameter from em_adjust_new_capacity() (David Arcari) [RHEL-112493]
  - PM: EM: Move sched domains rebuild function from schedutil to EM (David Arcari) [RHEL-112493]
  - PM: EM: Add min/max available performance state limits (David Arcari) [RHEL-112493]
  - PM: EM: Refactor em_adjust_new_capacity() (David Arcari) [RHEL-112493]
  - PM: EM: fix wrong utilization estimation in em_cpu_energy() (David Arcari) [RHEL-112493]
  - PM: EM: Force device drivers to provide power in uW (David Arcari) [RHEL-112493]
  - PM: EM: Fix nr_states warnings in static checks (David Arcari) [RHEL-112493]
  - PM: EM: Add em_dev_compute_costs() (David Arcari) [RHEL-112493]
  - PM: EM: Remove old table (David Arcari) [RHEL-112493]
  - PM: EM: Change debugfs configuration to use runtime EM table data (David Arcari) [RHEL-112493]
  - PM: EM: Optimize em_cpu_energy() and remove division (David Arcari) [RHEL-112493]
  - PM: EM: Support late CPUs booting and capacity adjustment (David Arcari) [RHEL-112493]
  - PM: EM: Add performance field to struct em_perf_state and optimize (David Arcari) [RHEL-112493]
  - PM: EM: Add em_perf_state_from_pd() to get performance states table (David Arcari) [RHEL-112493]
  - PM: EM: Introduce em_dev_update_perf_domain() for EM updates (David Arcari) [RHEL-112493]
  - PM: EM: Add functions for memory allocations for new EM tables (David Arcari) [RHEL-112493]
  - PM: EM: Use runtime modified EM for CPUs energy estimation in EAS (David Arcari) [RHEL-112493]
  - PM: EM: Introduce runtime modifiable table (David Arcari) [RHEL-112493]
  - PM: EM: Split the allocation and initialization of the EM table (David Arcari) [RHEL-112493]
  - PM: EM: Check if the get_cost() callback is present in em_compute_costs() (David Arcari) [RHEL-112493]
  - PM: EM: Introduce em_compute_costs() (David Arcari) [RHEL-112493]
  - PM: EM: Refactor em_pd_get_efficient_state() to be more flexible (David Arcari) [RHEL-112493]
  - PM: EM: Find first CPU active while updating OPP efficiency (David Arcari) [RHEL-112493]
  - PM: EM: Extend em_cpufreq_update_efficiencies() argument list (David Arcari) [RHEL-112493]
  - PM: EM: Add missing newline for the message log (David Arcari) [RHEL-112493]
  - PM: EM: fix memory leak with using debugfs_lookup() (David Arcari) [RHEL-112493]
  - PM: EM: fix kernel-doc comments (David Arcari) [RHEL-112493]
  - cpufreq: intel_pstate: Populate the cpu_capacity sysfs entries (David Arcari) [RHEL-112493]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-617.el9]
changelog:
  - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113331] {CVE-2025-38718}
  - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-109212]
  - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-109212]
  - platform/x86/intel/pmc: Fix Arrow Lake U/H NPU PCI ID (David Arcari) [RHEL-23894]
  - drm/virtio: implement virtio_gpu_shutdown (Gerd Hoffmann) [RHEL-109504]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-618.el9]
changelog:
  - x86/hyperv: Fix kdump on Azure CVMs (Vitaly Kuznetsov) [RHEL-70228]
  - hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-109583]
  - RDMA/mana_ib: add support of multiple ports (Maxim Levitsky) [RHEL-109583]
  - RDMA/mana_ib: add additional port counters (Maxim Levitsky) [RHEL-109583]
  - RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-109583]
  - net: mana: fix spelling for mana_gd_deregiser_irq() (Maxim Levitsky) [RHEL-109583]
  - net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-109583]
  - net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-109583]
  - net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-109583]
  - net: mana: Allocate MSI-X vectors dynamically (Maxim Levitsky) [RHEL-109583]
  - net: mana: Allow irq_setup() to skip cpus for affinity (Maxim Levitsky) [RHEL-109583]
  - net: mana: explain irq_setup() algorithm (Maxim Levitsky) [RHEL-109583]
  - PCI: hv: Allow dynamic MSI-X vector allocation (Maxim Levitsky) [RHEL-109583]
  - PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Maxim Levitsky) [RHEL-109583]
  - net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-109583]
  - RDMA/mana_ib: Add device statistics support (Maxim Levitsky) [RHEL-109583]
  - net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-109583]
  - net: mana: Fix warnings for missing export.h header inclusion (Maxim Levitsky) [RHEL-109583]
  - net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-109583]
  - tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-101033]
  - watchdog/hpwdt: Support Suspend and Resume (Joseph Szczypek) [RHEL-104148]
  - watchdog/hpwdt: Remove unused variable (Joseph Szczypek) [RHEL-104148]
  - watchdog/hpwdt: Remove redundant test. (Joseph Szczypek) [RHEL-104148]
  - watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO (Joseph Szczypek) [RHEL-104148]
  - NFSv4/flexfiles: Fix layout merge mirror check. (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Clear NFS_CAP_OPEN_XOR and NFS_CAP_DELEGTIME if not supported (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set (Benjamin Coddington) [RHEL-108616]
  - NFS: Fix a race when updating an existing write (Benjamin Coddington) [RHEL-108616]
  - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Benjamin Coddington) [RHEL-108616]
  - SUNRPC: call xs_sock_process_cmsg for all cmsg (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Don't clear capabilities that won't be reset (Benjamin Coddington) [RHEL-108616]
  - sunrpc: fix handling of server side tls alerts (Benjamin Coddington) [RHEL-108616]
  - NFS: Fix the setting of capabilities when automounting a new filesystem (Benjamin Coddington) [RHEL-108616]
  - sunrpc: fix client side handling of tls alerts (Benjamin Coddington) [RHEL-108616]
  - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (Benjamin Coddington) [RHEL-108616]
  - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Benjamin Coddington) [RHEL-108616]
  - NFSD: detect mismatch of file handle and delegation stateid in OPEN op (Benjamin Coddington) [RHEL-108616]
  - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Benjamin Coddington) [RHEL-108616]
  - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Benjamin Coddington) [RHEL-108616]
  - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Benjamin Coddington) [RHEL-108616]
  - nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. (Benjamin Coddington) [RHEL-108616]
  - nfsd: use threads array as-is in netlink interface (Benjamin Coddington) [RHEL-108616]
  - SUNRPC: Prevent hang on NFS mount with xprtsec=[m]tls (Benjamin Coddington) [RHEL-108616]
  - nfs: ignore SB_RDONLY when remounting nfs (Benjamin Coddington) [RHEL-108616]
  - fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio() (Benjamin Coddington) [RHEL-108616]
  - NFSv4/pnfs: Reset the layout state after a layoutreturn (Benjamin Coddington) [RHEL-108616]
  - svcrdma: Reduce the number of rdma_rw contexts per-QP (Benjamin Coddington) [RHEL-108616]
  - nfsd: Initialize ssc before laundromat_work to prevent NULL dereference (Benjamin Coddington) [RHEL-108616]
  - NFSD: unregister filesystem in case genl_register_family() fails (Benjamin Coddington) [RHEL-108616]
  - nfs: handle failure of nfs_get_lock_context in unlock path (Benjamin Coddington) [RHEL-108616]
  - nfs: add missing selections of CONFIG_CRC32 (Benjamin Coddington) [RHEL-108616]
  - nfs: Add missing release on error in nfs_lock_and_join_requests() (Benjamin Coddington) [RHEL-108616]
  - NFS: Shut down the nfs_client only after all the superblocks (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Avoid unnecessary scans of filesystems for delayed delegations (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Avoid unnecessary scans of filesystems for expired delegations (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Avoid unnecessary scans of filesystems for returning delegations (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Don't trigger uneccessary scans for return-on-close delegations (Benjamin Coddington) [RHEL-108616]
  - NFSD: Fix callback decoder status codes (Benjamin Coddington) [RHEL-108616]
  - NFSD: Never return NFS4ERR_FILE_OPEN when removing a directory (Benjamin Coddington) [RHEL-108616]
  - nfsd: move error choice for incorrect object types to version-specific code. (Benjamin Coddington) [RHEL-108616]
  - nfsd: be more systematic about selecting error codes for internal use. (Benjamin Coddington) [RHEL-108616]
  - nfsd: Move error code mapping to per-version proc code. (Benjamin Coddington) [RHEL-108616]
  - NFSD: nfsd_unlink() clobbers non-zero status returned from fh_fill_pre_attrs() (Benjamin Coddington) [RHEL-108616]
  - NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up (Benjamin Coddington) [RHEL-108616]
  - nfsd: fix management of listener transports (Benjamin Coddington) [RHEL-108616]
  - NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (Benjamin Coddington) [RHEL-108616]
  - sunrpc: suppress warnings for unused procfs functions (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Fix a deadlock when recovering state on a sillyrenamed file (Benjamin Coddington) [RHEL-108616]
  - SUNRPC: Prevent looping due to rpc_signal_task() races (Benjamin Coddington) [RHEL-108616]
  - SUNRPC: convert RPC_TASK_* constants to enum (Benjamin Coddington) [RHEL-108616]
  - NFS: Adjust delegated timestamps for O_DIRECT reads and writes (Benjamin Coddington) [RHEL-108616]
  - NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE (Benjamin Coddington) [RHEL-108616]
  - NFSv4.2: fix COPY_NOTIFY xdr buf size calculation (Benjamin Coddington) [RHEL-108616]
  - NFSD: Insulate nfsd4_encode_read_plus_data() from page boundaries in the encode buffer (Benjamin Coddington) [RHEL-108616]
  - NFSD: Insulate nfsd4_encode_read_plus() from page boundaries in the encode buffer (Benjamin Coddington) [RHEL-108616]
  - NFSD: Insulate nfsd4_encode_read() from page boundaries in the encode buffer (Benjamin Coddington) [RHEL-108616]
  - NFSD: Fix CB_GETATTR status fix (Benjamin Coddington) [RHEL-108616]
  - NFSD: fix decoding in nfs4_xdr_dec_cb_getattr (Benjamin Coddington) [RHEL-108616]
  - nfsd: fix legacy client tracking initialization (Benjamin Coddington) [RHEL-108616]
  - nfs: clear SB_RDONLY before getting superblock (Benjamin Coddington) [RHEL-108616]
  - nfs: ignore SB_RDONLY when mounting nfs (Benjamin Coddington) [RHEL-108616]
  - platform/x86/amd/hsmp: Ensure success even if hwmon registration fails (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Enhance the print messages to prevent confusion (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Use IS_ENABLED() instead of IS_REACHABLE() (David Arcari) [RHEL-102859]
  - x86/platform/amd: replace down_timeout() with down_interruptible() (David Arcari) [RHEL-102859]
  - x86/platform/amd: move final timeout check to after final sleep (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: fix building with CONFIG_HWMON=m (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: acpi: Add sysfs files to display HSMP telemetry (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Report power via hwmon sensors (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Use a single DRIVER_VERSION for all hsmp modules (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Make amd_hsmp and hsmp_acpi as mutually exclusive drivers (David Arcari) [RHEL-102859]
  - x86/platform/amd: Move the <asm/amd_node.h> header to <asm/amd/node.h> (David Arcari) [RHEL-102859]
  - x86/platform/amd: Clean up the <asm/amd/hsmp.h> header guards a bit (David Arcari) [RHEL-102859]
  - x86/platform/amd: Move the <asm/amd_hsmp.h> header to <asm/amd/hsmp.h> (David Arcari) [RHEL-102859]
  - x86/amd_node, platform/x86/amd/hsmp: Have HSMP use SMN through AMD_NODE (David Arcari) [RHEL-102859]
  - x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (David Arcari) [RHEL-102859]
  - x86/amd_node: Use defines for SMN register offsets (David Arcari) [RHEL-102859]
  - x86/amd_node: Remove dependency on AMD_NB (David Arcari) [RHEL-102859]
  - x86/amd_node: Update __amd_smn_rw() error paths (David Arcari) [RHEL-102859]
  - x86/amd_nb: Move SMN access code to a new amd_node driver (David Arcari) [RHEL-102859]
  - x86/amd_nb, hwmon: (k10temp): Simplify amd_pci_dev_to_node_id() (David Arcari) [RHEL-102859]
  - x86/amd_nb: Simplify function 3 search (David Arcari) [RHEL-102859]
  - x86/amd_nb: Use topology info to get AMD node count (David Arcari) [RHEL-102859]
  - x86/amd_nb: Simplify root device search (David Arcari) [RHEL-102859]
  - x86/amd_nb: Simplify function 4 search (David Arcari) [RHEL-102859]
  - x86: Start moving AMD node functionality out of AMD_NB (David Arcari) [RHEL-102859]
  - x86/amd_nb: Clean up early_is_amd_nb() (David Arcari) [RHEL-102859]
  - x86/amd_nb: Restrict init function to AMD-based systems (David Arcari) [RHEL-102859]
  - x86/amd_nb: Add new PCI ID for AMD family 1Ah model 20h (David Arcari) [RHEL-102859]
  - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h (David Arcari) [RHEL-102859]
  - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h (David Arcari) [RHEL-102859]
  - x86/amd_nb: Enhance SMN access error checking (David Arcari) [RHEL-102859]
  - hwmon: (k10temp) Check return value of amd_smn_read() (David Arcari) [RHEL-102859]
  - EDAC/amd64: Remove unused register accesses (David Arcari) [RHEL-102859]
  - EDAC/amd64: Check return value of amd_smn_read() (David Arcari) [RHEL-102859]
  - x86/amd_nb: Check for invalid SMN reads (David Arcari) [RHEL-102859]
  - x86/amd_nb: Add new PCI IDs for AMD family 0x1a (David Arcari) [RHEL-102859]
  - platform/x86: amd: Use *-y instead of *-objs in Makefiles [partial] (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Add support for HSMP protocol version 7 messages (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Change the error type (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Add new error code and error logs (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: mark hsmp_msg_desc_table[] as maybe_unused (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Make hsmp_pdev static instead of global (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Use dev_groups in the driver structure (David Arcari) [RHEL-102859]
  - sysfs: Fix crash on empty group attributes array (David Arcari) [RHEL-102859]
  - sysfs: Introduce a mechanism to hide static attribute_groups (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Use name space while exporting module symbols (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Create separate ACPI, plat and common drivers (David Arcari) [RHEL-102859]
  - redhat/configs: Enable CONFIG_AMD_HSMP_ACPI and CONFIG_AMD_HSMP_PLAT on RHEL (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Change generic plat_dev name to hsmp_pdev (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Move ACPI code to acpi.c (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Move platform device specific code to plat.c (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Move structure and macros to header file (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Convert amd_hsmp_rdwr() to a function pointer (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Create wrapper function init_acpi() (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Create hsmp/ directory (David Arcari) [RHEL-102859]
  - Documentation/x86/amd/hsmp: Updating urls (David Arcari) [RHEL-102859]
  - netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (Florian Westphal) [RHEL-106430] {CVE-2025-38472}
  - s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113557] {CVE-2025-39694}
  - ipv6: mcast: Delay put pmc->idev in mld_del_delrec() (Hangbin Liu) [RHEL-111150] {CVE-2025-38550}
  - devlink: add reserved fields to devlink_*_ops (Petr Oros) [RHEL-111906]
  - ixgbe: prevent from unwanted interface name changes (CKI Backport Bot) [RHEL-109607]
  - devlink: let driver opt out of automatic phys_port_name generation (CKI Backport Bot) [RHEL-109607]
  - xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CKI Backport Bot) [RHEL-109528] {CVE-2025-38500}
  - dpll: add reserved fields to dpll_device_ops and dpll_pin_ops structs (Ivan Vecera) [RHEL-111904]
  - ice: use fixed adapter index for E825C embedded devices (Michal Schmidt) [RHEL-104010]
  - net: openvswitch: remove misbehaving actions length check (Aaron Conole) [RHEL-83440]
  - irdma: free iwdev->rf after removing MSI-X (Kamal Heib) [RHEL-103278 RHEL-95816]
  - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113332] {CVE-2025-38718}
  - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112247] {CVE-2023-53125}
  - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112247] {CVE-2023-53125}
  - cpufreq: Move endif to the end of Kconfig file (Mark Langsdorf) [RHEL-112816]
  - cpufreq: Move CPPC configs to common Kconfig and add RISC-V (Mark Langsdorf) [RHEL-112816]
  - HID: core: Harden s32ton() against conversion to 0 bits (Benjamin Tissoires) [RHEL-111034] {CVE-2025-38556}
  - HID: stop exporting hid_snto32() (Benjamin Tissoires) [RHEL-111034] {CVE-2025-38556}
  - HID: simplify snto32() (Benjamin Tissoires) [RHEL-111034] {CVE-2025-38556}
  - redhat: set defaults for RHEL 9.7 (Augusto Caringi)
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112783] {CVE-2025-38352}
  - fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110312] {CVE-2025-38396}
  - idpf: convert control queue mutex to a spinlock (Michal Schmidt) [RHEL-106051] {CVE-2025-38392}
  - redhat/configs: Enable CONFIG_MITIGATION_TSA for x86 (Waiman Long) [RHEL-83897]
  - x86/process: Move the buffer clearing before MONITOR (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - x86/microcode/AMD: Add TSA microcode SHAs (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - KVM: SVM: Advertise TSA CPUID bits to guests (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - x86/bugs: Add a Transient Scheduler Attacks mitigation (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - x86/bugs: Rename MDS machinery to something more generic (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - x86/idle: Use MONITOR and MWAIT mnemonics in <asm/mwait.h> (Waiman Long) [RHEL-83897]
  - x86/idle: Remove .s output beautifying delimiters from simpler asm() templates (Waiman Long) [RHEL-83897]
  - x86/idle: Standardize argument types for MONITOR{,X} and MWAIT{,X} instruction wrappers on 'u32' (Waiman Long) [RHEL-83897]
  - x86/idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in mwait_idle_with_hints() and  prefer_mwait_c1_over_halt() (Waiman Long) [RHEL-83897]
  - x86/bugs: Rename mmio_stale_data_clear to cpu_buf_vm_clear (Waiman Long) [RHEL-83897]
  - x86/microcode: Consolidate the loader enablement checking (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-83897] {CVE-2025-22047}
  - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Get rid of the _load_microcode_amd() forward declaration (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Remove unused save_microcode_in_initrd_amd() declarations (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Remove ugly linebreak in __verify_patch_section() signature (Waiman Long) [RHEL-83897]
  - x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Remove ret local var in early_apply_microcode() (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Return bool from find_blobs_in_containers() (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-83897]
  - x86/CPU/AMD: Terminate the erratum_1386_microcode array (Waiman Long) [RHEL-83897] {CVE-2024-56721}
  - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-83897]
  - x86/cpu: Fix formatting of cpuid_bits[] in scattered.c (Waiman Long) [RHEL-83897]
  - x86/cpufeatures: Add X86_FEATURE_AMD_WORKLOAD_CLASS feature bit (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-83897]
  - x86/bugs: Use code segment selector for VERW operand (Waiman Long) [RHEL-83897] {CVE-2024-50072}
  - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-83897]
  - x86/CPU/AMD: Improve the erratum 1386 workaround (Waiman Long) [RHEL-83897]
  - x86: Add a comment about the "magic" behind shadow sti before mwait (Waiman Long) [RHEL-83897]
  - x86/bugs: Revert "Reverse instruction order of CLEAR_CPU_BUFFERS" (Waiman Long) [RHEL-83897]
  - scsi: mpt3sas: Fix a fw_event memory leak (Tomas Henzl) [RHEL-108656]
  - Revert "drm/gem-dma: Use dma_buf from GEM object instance" (Robert Foss) [RHEL-106696]
  - Revert "drm/gem-framebuffer: Use dma_buf from GEM object instance" (Robert Foss) [RHEL-106696]
  - Revert "drm/prime: Use dma_buf from GEM object instance" (Robert Foss) [RHEL-106696]
  - drm/framebuffer: Acquire internal references on GEM handles (Robert Foss) [RHEL-106696]
  - drm/gem: Acquire references on GEM handles for framebuffers (CKI Backport Bot) [RHEL-106696] {CVE-2025-38449}
  - Revert "e1000e: change k1 configuration on MTP and later platforms" (Michal Schmidt) [RHEL-110519]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-619.el9]
changelog:
  - platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (David Arcari) [RHEL-110754]
  - io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114337] {CVE-2025-39698}
  - bpf: Fix uninitialized values in BPF_{CORE,PROBE}_READ (Viktor Malik) [RHEL-100278]
  - mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109448]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-620.el9]
changelog:
  - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107304] {CVE-2025-38498}
  - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107304] {CVE-2025-38498}
  - selftests: netfilter: skip br_netfilter queue tests if kernel is tainted (Waiman Long) [RHEL-107520]
  - fhandle: do_handle_open() should get FD with user flags (Waiman Long) [RHEL-107520]
  - Documentation/sysctl: coredump: add %F for pidfd number (Waiman Long) [RHEL-107520]
  - pidfs: never refuse ppid == 0 in PIDFD_GET_INFO (Waiman Long) [RHEL-107520]
  - fs/fhandle.c: fix a race in call of has_locked_children() (Waiman Long) [RHEL-107520] {CVE-2025-38306}
  - coredump: hand a pidfd to the usermode coredump helper (Waiman Long) [RHEL-107520]
  - coredump: fix error handling for replace_fd() (Waiman Long) [RHEL-107520]
  - pidfs: move O_RDWR into pidfs_alloc_file() (Waiman Long) [RHEL-107520]
  - pidfs/selftests: ensure correct headers for ioctl handling (Waiman Long) [RHEL-107520]
  - selftests/pidfd: fix header inclusion (Waiman Long) [RHEL-107520]
  - pidfs: improve ioctl handling (Waiman Long) [RHEL-107520]
  - selftests: remove unneeded include (Waiman Long) [RHEL-107520]
  - pidfs: allow bind-mounts (Waiman Long) [RHEL-107520]
  - pidfs: lookup pid through rbtree (Waiman Long) [RHEL-107520]
  - pidfs: check for valid ioctl commands (Waiman Long) [RHEL-107520]
  - pidfs: implement file handle support (Waiman Long) [RHEL-107520]
  - exportfs: add permission method (Waiman Long) [RHEL-107520]
  - fhandle: pull CAP_DAC_READ_SEARCH check into may_decode_fh() (Waiman Long) [RHEL-107520]
  - exportfs: add open method (Waiman Long) [RHEL-107520]
  - fhandle: simplify error handling (Waiman Long) [RHEL-107520]
  - pseudofs: add support for export_ops (Waiman Long) [RHEL-107520]
  - pidfs: support FS_IOC_GETVERSION (Waiman Long) [RHEL-107520]
  - pidfs: remove 32bit inode number handling (Waiman Long) [RHEL-107520]
  - pidfs: rework inode number allocation (Waiman Long) [RHEL-107520]
  - fs: fix is_mnt_ns_file() (Waiman Long) [RHEL-107520]
  - pidfd: add ioctl to retrieve pid info (Waiman Long) [RHEL-107520]
  - pidfs: check for valid pid namespace (Waiman Long) [RHEL-107520]
  - rbtree: provide rb_find_rcu() / rb_find_add_rcu() (Waiman Long) [RHEL-107520]
  - file: add fput() cleanup helper (Waiman Long) [RHEL-107520]
  - libfs: fix get_stashed_dentry() (Waiman Long) [RHEL-107520] {CVE-2024-46801}
  - pidfs: add selftests for new namespace ioctls (Waiman Long) [RHEL-107520]
  - pidfs: handle kernels without namespaces cleanly (Waiman Long) [RHEL-107520]
  - pidfs: when time ns disabled add check for ioctl (Waiman Long) [RHEL-107520]
  - pidfs: allow retrieval of namespace file descriptors (Waiman Long) [RHEL-107520]
  - nsfs: add open_namespace() (Waiman Long) [RHEL-107520]
  - nsproxy: add helper to go from arbitrary namespace to ns_common (Waiman Long) [RHEL-107520]
  - nsproxy: add a cleanup helper for nsproxy (Waiman Long) [RHEL-107520]
  - file: add take_fd() cleanup helper (Waiman Long) [RHEL-107520]
  - path: add cleanup helper (Waiman Long) [RHEL-107520]
  - fhandle: relax open_by_handle_at() permission checks (Waiman Long) [RHEL-107520]
  - fs/pidfs: make 'lsof' happy with our inode changes (Waiman Long) [RHEL-107520]
  - selftests: pidfd: ksft_exit functions do not return (Waiman Long) [RHEL-107520]
  - fs: Annotate struct file_handle with __counted_by() and use struct_size() (Waiman Long) [RHEL-107520]
  - selftests/pidfd: Fix wrong expectation (Waiman Long) [RHEL-107520]
  - selftests/pidfd: Fix config for pidfd_setns_test (Waiman Long) [RHEL-107520]
  - pidfs: remove config option (Waiman Long) [RHEL-107520]
  - libfs: improve path_from_stashed() (Waiman Long) [RHEL-107520]
  - libfs: add stashed_dentry_prune() (Waiman Long) [RHEL-107520]
  - libfs: improve path_from_stashed() helper (Waiman Long) [RHEL-107520]
  - pidfs: convert to path_from_stashed() helper (Waiman Long) [RHEL-107520]
  - nsfs: convert to path_from_stashed() helper (Waiman Long) [RHEL-107520]
  - libfs: add path_from_stashed() (Waiman Long) [RHEL-107520]
  - pidfd: add pidfs (Waiman Long) [RHEL-107520]
  - pidfd: move struct pidfd_fops (Waiman Long) [RHEL-107520]
  - pidfd: allow to override signal scope in pidfd_send_signal() (Waiman Long) [RHEL-107520]
  - pidfd: change pidfd_send_signal() to respect PIDFD_THREAD (Waiman Long) [RHEL-107520]
  - signal: fill in si_code in prepare_kill_siginfo() (Waiman Long) [RHEL-107520]
  - selftests: add ESRCH tests for pidfd_getfd() (Waiman Long) [RHEL-107520]
  - pidfd: getfd should always report ESRCH if a task is exiting (Waiman Long) [RHEL-107520]
  - pidfd: clone: allow CLONE_THREAD | CLONE_PIDFD together (Waiman Long) [RHEL-107520]
  - pidfd: change do_notify_pidfd() to use __wake_up(poll_to_key(EPOLLIN)) (Waiman Long) [RHEL-107520]
  - pid: kill the obsolete PIDTYPE_PID code in transfer_pid() (Waiman Long) [RHEL-107520]
  - pidfd: kill the no longer needed do_notify_pidfd() in de_thread() (Waiman Long) [RHEL-107520]
  - pidfd_poll: report POLLHUP when pid_task() == NULL (Waiman Long) [RHEL-107520]
  - pidfd: implement PIDFD_THREAD flag for pidfd_open() (Waiman Long) [RHEL-107520]
  - pidfd: don't do_notify_pidfd() if !thread_group_empty() (Waiman Long) [RHEL-107520]
  - pidfd: cleanup the usage of __pidfd_prepare's flags (Waiman Long) [RHEL-107520]
  - fork: Using clone_flags for legacy clone check (Waiman Long) [RHEL-107520]
  - __kill_pgrp_info: simplify the calculation of return value (Waiman Long) [RHEL-107520]
  - selftests/pidfd: Fix ksft print formats (Waiman Long) [RHEL-107520]
  - fs: convert core infrastructure to new timestamp accessors (Waiman Long) [RHEL-107520]
  - fs: new accessor methods for atime and mtime (Waiman Long) [RHEL-107520]
  - nsproxy: Convert nsproxy.count to refcount_t (Waiman Long) [RHEL-107520]
  - kernfs: convert to ctime accessor functions (Waiman Long) [RHEL-107520]
  - selftest: pidfd: Omit long and repeating outputs (Waiman Long) [RHEL-107520]
  - convert setns(2) to fdget()/fdput() (Waiman Long) [RHEL-107520]
  - fs: consolidate duplicate dt_type helpers (Waiman Long) [RHEL-107520]
  - Update relatime comments to include equality (Waiman Long) [RHEL-107520]
  - fork: use pidfd_prepare() (Waiman Long) [RHEL-107520]
  - pid: add pidfd_prepare() (Waiman Long) [RHEL-107520]
  - fork: allow CLONE_NEWTIME in clone3 flags (Waiman Long) [RHEL-107520]
  - selftests: pidfd: Fix incorrect kernel headers search path (Waiman Long) [RHEL-107520]
  - core_pattern: add CPU specifier (Waiman Long) [RHEL-107520]
  - selftests/pidfd_test: Remove the erroneous ',' (Waiman Long) [RHEL-107520]
  - selftests: pidfd: Fix compling warnings (Waiman Long) [RHEL-107520]
  - ksefltests: pidfd: Fix wait_states: Test terminated by timeout (Waiman Long) [RHEL-107520]
  - fork: remove duplicate included header files (Waiman Long) [RHEL-107520]
  - signal: Drop signals received after a fatal signal has been processed (Waiman Long) [RHEL-107520]
  - signal: Guarantee that SIGNAL_GROUP_EXIT is set on process exit (Waiman Long) [RHEL-107520]
  - signal: Ensure SIGNAL_GROUP_EXIT gets set in do_group_exit (Waiman Long) [RHEL-107520]
  - dynamic_dname(): drop unused dentry argument (Waiman Long) [RHEL-107520]
  - fork: Explicitly set PF_KTHREAD (Waiman Long) [RHEL-107520]
  - selftests: fix an unused variable warning in pidfd selftest (Waiman Long) [RHEL-107520]
  - selftests: fixup build warnings in pidfd / clone3 tests (Waiman Long) [RHEL-107520]
  - pidfd: fix test failure due to stack overflow on some arches (Waiman Long) [RHEL-107520]
  - kernel/fork.c: unshare(): use swap() to make code cleaner (Waiman Long) [RHEL-107520]
  - kernel/fork.c: unexport get_{mm,task}_exe_file (Waiman Long) [RHEL-107520]
  - kernel/pid.c: implement additional checks upon pidfd_create() parameters (Waiman Long) [RHEL-107520]
  - arm64: debug: remove debug exception registration infrastructure (Luis Claudio R. Goncalves) [RHEL-65658]
  - trap: cleanup trap_init() (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: split bkpt32 exception entry (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: split brk64 exception entry (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: split hardware watchpoint exception entry (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: split single stepping exception entry (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: refactor reinstall_suspended_bps() (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: split hardware breakpoint exception entry (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: entry: Add entry and exit functions for debug exceptions (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: remove break/step handler registration infrastructure (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: call step handlers statically (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: call software breakpoint handlers statically (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: kretprobes: acquire the regs via a BRK exception (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: kprobes: Return DBG_HOOK_ERROR if kprobes can not handle a BRK (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: Return early when break handler is found on linked-list (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: refactor aarch32_break_handler() (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: clean up single_step_handler logic (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386 (Jeremy Linton) [RHEL-108306]
  - arm64: errata: Expand speculative SSBS workaround once more (Jeremy Linton) [RHEL-108306]
  - arm64: errata: Expand speculative SSBS workaround (again) (Jeremy Linton) [RHEL-108306]
  - tools headers arm64: Sync arm64's cputype.h with the kernel sources (Jeremy Linton) [RHEL-108306]
  - arm64: cputype: Add Neoverse-N3 definitions (Jeremy Linton) [RHEL-108306]
  - arm64: cputype: Add Cortex-A725 definitions (Jeremy Linton) [RHEL-108306]
  - arm64: cputype: Add Cortex-X1C definitions (Jeremy Linton) [RHEL-108306]
  - EDAC/amd64: Correct number of UMCs for family 19h models 70h-7fh (Joel Savitz) [RHEL-102251]


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-10
changelog:
  - Add conflicts of kernel-srpm-macros with kernel-rpm-macros < 185-9
    as macros.kmp, kmodtool, and rpmsort were moved from the latter
    to the former.


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-11
changelog:
  - Work around a change in type of __crc_* symbols for some kmods printed by nm
    on ppc64le and s390x
  - Resolves: #2055464


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-13
changelog:
  - Handle symvers.xz in kabi.attr (#2209253).
  - Fix indirect __crc_* sumbols parsing in find-provides.ksyms
    and find-requires.ksyms to avoid matching multiple sections
    producing bogus duplicate provides for kmods that have both __kcrctab
    and __kcrctab_gpl sections (#2115811, #2178935).
  - Call "readelf -R" on a correct section in find-requires.ksyms.
  - Rewrite section data extraction in find-provides.ksyms and find-requires.ksyms
    to avoid garbage at the end of extracted sections, causing unnecessary awk
    complaints (#2115811).
  - Perform section parsing inside the awk script in find-provides.ksyms
    and find-requires.ksyms to avoid hitting command line argument limit
    when handling large .rodata sections (#2178935).


author: Tomas Halman <thalman@redhat.com> - 1.3-1
changelog:
  - Rebase to version 1.3
  - Resolves: RHEL-3336 - khci won't work with Quarkus-based Keycloak due to missing /auth path


author: Sergio Correia <scorreia@redhat.com> - 7.3.0-15
changelog:
  - Use TLS on revocation notification webhook
  - Include system installed CA certificates when verifying webhook
     server certificate
  - Include the CA certificates added via configuration file option
    'trusted_server_ca'
    Resolves: RHEL-78057
    Resolves: RHEL-78313
    Resolves: RHEL-78316


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Set supplementary groups when dropping privileges
  - Show more descriptive error messages on missing files errors
  - Create /usr/libexec/keylime directory


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Use classic release instead of autorelease macro
  - Use classic changelog instead of autochangelog macro


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
    Resolves: rhbz#2151513
  - Remove invalid password expiry warning
    Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
    Resolves: rhbz#2063838
  - New upstream version (1.20.1)
    Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
    Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Julien Rische <jrische@redhat.com> - 1.21.1-9
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88704
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88048
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-82647


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.6-1
changelog:
  - Rebase to non-beta version, because upstream says it should to be used
    https://github.com/ksh93/ksh/issues/667#issuecomment-1653665697
  - fix acl test case regression
    Resolves: #2034188


author: Mike FABIAN <mfabian@redhat.com> - 0.0.51-1
changelog:
  - Parse stuff in glibc locale names after @ which is not a script as a variant
  - Add ckb_IQ.UTF-8 locale


author: Mike FABIAN <mfabian@redhat.com> - 0.0.52-1
changelog:
  - Update to 0.0.52
  - add list_common_keyboards() to public api by Sundeep ANAND <suanand@redhat.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.53-1
changelog:
  - Update to 0.0.53
  - Capitalize the return values of language_name() and territory_name()
    (See: https://github.com/rhinstaller/anaconda/pull/2837).
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Mike FABIAN <mfabian@redhat.com> - 0.0.54-1
changelog:
  - Update to 0.0.54
  - add list_common_languages derived from gnome-control-center
    by Sundeep ANAND <suanand@redhat.com>


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-2
changelog:
  - Rebuild with openssl3, presumably in a buildroot with xmlsec1
    linked against openssl3
  - Resolves: rhbz#1962052 - lasso: Port to OpenSSL 3.0


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-4
changelog:
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-5
changelog:
  - Don't run configure twice
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-6
changelog:
  - Resolves: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-9
changelog:
  - Bump the test timeout again
  - Related: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Petr Menšík <pemensik@redhat.com> - 1.7.1-2
changelog:
  - Use make_build and make_install macro instead of make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Lescak <rlescak@redhat.com> - 1.7.1-9
changelog:
  - Fix for CVE-2020-19860 ldns: heap overread vulnerability (#2051211)
  - Added also patch for deprecated distutils Python module used in build


author: Matej Matuska <mmatuska@redhat.com> - 0.18.0-4
changelog:
  - Bump leapp-framework to 6.0
  - Bump leapp-framework-dependencies to 6
  - Require python3-PyYAML
  - [Technical preview] Introduce configurability for leapp actors
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-1
changelog:
  - Rebase to new upstream version 0.19.0
  - Add possibility to use a specified execution context for snactor run in an existing leapp.db
  - Increase limits on the number of opened file descriptors and maximum size
    of manipulated files when running leapp
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-2
changelog:
  - Bump leapp-framework to 6.1
  - Create the /var/lib/leapp directory automatically if missing
  - Recognize configuration files with the .yaml suffix only
  - Fix CLI: allow to set falsy values as default for leapp's command options
  - Resolves: RHEL-86225


author: Matej Matuska <mmatuska@redhat.com> - 0.21.0-4
changelog:
  - Require leapp-framework 6.0+
  - Update leapp-deps package to satisfy leapp-framework-dependencies 6
  - Add dependency on libdb-utils
  - Enable upgrade for systems with LUKS bound to Clevis with TPM 2.0 token
  - Adjust resource limitations for leapp to be able to perform the upgrade
  - Cap max size of the sparse files to 1TiB for storage with large amount of free space
  - Check that detected Intel CPU microarchitecture is supported on target system
  - Fix the report when handling broken parsing of kernel cmdline
  - Generate proper error message instead of ModelViolationError when parsing invalid repository definition
  - Handle default kernel cmdline when multiple boot entries for the default kernel are defined
  - Migrate Ruby IRB during the upgrade
  - Migrate pam_userdb backend during the upgrade
  - Skip checking of (PKI) `directory-hash` dir to speedup the upgrade process and clean logs
  - Update leapp upgrade data files
  - Resolves: RHEL-57043


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-5
changelog:
  - Obsolete RHEL9 GPG key signed with SHA1
  - Activate LVM VGs with `--sysinit` option to correct the use in the upgrade initramfs
  - Fix output of commands executed inside systemd-nspawn containers
  - Fix pes events scanner crashing when there are duplicate packages in the received instructions
  - Fix pes events scanner not respecting user’s transaction configuration
  - Fix remediation instructions for deprecated NM configuration
  - Fix storage scanner crashing when command outputs contain colon character
  - Minor improvements in preupgrade reports
  - Resolves: RHEL-57043, RHEL-31428, RHEL-33373, RHEL-69829, RHEL-71517


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-6
changelog:
  - Detect XFS file systems with problematic parameters
  - Raise an inhibitor if unsupported target version supplied instead of error
  - Prevent a possible crash with LiveMode when adding the upgrade boot entry on systems with LVM
  - Resolves: RHEL-57043, RHEL-52309, RHEL-60034


author: Petr Stodulka <pstodulk@redhat.com> - 0.22.0-1
changelog:
  - Rebase to new upstream 0.22.0
  - Minor updates in generated reports
  - Cover upgrades for MySQL and PostgreSQL databases
  - Detect OpenSSL engines configured in /etc/pki/tls/openssl.cnf
  - Detect deprecated network-scripts (ifcfg) files
  - Detect whether subscribed systems are using SCA
  - Inform user about Libdb removal if present
  - Check and handle upgrades with custom crypto policies
  - Update checks for SAP HANA
  - Resolves: RHEL-57043, RHEL-35618, RHEL-36661, RHEL-62689, RHEL-68309, RHEL-69831, RHEL-77169, RHEL-78396


author: Petr Stodulka <pstodulk@redhat.com> - 0.22.0-2
changelog:
  - Require leapp-framework >= 6.1
  - Simplified use of the LiveMode experimental feature with additional enhancements
  - Ensure the leapp-upgrade-el9toel10 RPM is not touched during the upgrade transaction
  - Create proper error message when swap of RHUI clients fails
  - Fix the check of deprecated PCI devices and drivers
  - Add RHEL 10.1 product certificates
  - Gracefully handle CentOS OS versioning style
  - Introduced the --enable-experimental-feature to simplify use of experimental features
  - Manage RPM GPG keys during the upgrade respecting used linux distributions
  - Prevent a crach during post-upgrade phases when no custom SELinux modules needs to be migrated
  - Update leapp upgrade data files
  - Minor fixes in reports
  - Resolves: RHEL-49402, RHEL-72544, RHEL-77175, RHEL-80334, RHEL-80335, RHEL-80336, RHEL-80550, RHEL-86689


author: Karolina Kula <kkula@redhat.com> - 0.22.0-3
changelog:
  - Fix parsing of the kernel cmdline
  - Require leapp data with provided_data_streams 4.0+
  - Respect the release_id of the OS when processing DNF repositories to apply correct mapping for CentOS Stream
  - Resolves: RHEL-80336


author: Karolina Kula <kkula@redhat.com> - 0.22.0-4
changelog:
  - Load DNF configuration correctly when using DNF libraries
  - Disable localpkg_gpgcheck during the upgrade if set to allow installation of bundled leapp and leapp-repository deps packages
  - Enable upgrades on systems using RHUI on AWS and Azure
  - Inhibit the upgrade if cgroups v1 are enabled on the system
  - The HybridImage model has been replaced by ConvertGrubenvTask
  - Check the input format of the target version properly
  - Resolves: RHEL-64910, RHEL-64911, RHEL-81212


author: Karolina Kula <kkula@redhat.com> - 0.23.0-1
changelog:
  - Rebase to new upstream 0.23.0
  - Enable in-place upgrades on CentOS Stream systems
  - Inhibit the upgrade on systems using deprecated network-legacy dracut module to prevent kernel panic
  - Introduce leapp-upgrade-el9toel10-fapolicyd subpackage with fapolicyd rules for in-place upgrades
  - Ignore Red Hat subscription-manager actions on non-RHEL distros
  - Add actors to migrate SSSD configuration
  - Update leapp upgrade data files
  - Resolves: RHEL-50847, RHEL-80333, RHEL-86226, RHEL-95975, RHEL-95982, RHEL-102591, RHEL-104389


author: José Expósito <jexposit@redhat.com> - 1.7.0-9
changelog:
  - Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
  - Fix CVE-2023-43786: stack exhaustion from infinite recursion in
    PutSubImage()
  - Fix CVE-2023-43787: integer overflow in XCreateImage() leading to
    a heap overflow


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: José Expósito <jexposit@redhat.com> - 3.5.13-9
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Tom Stellard <tstellar@redhat.com> - 2.2.53-6
changelog:
  - Spec file cleanups and build fix
  - Add BuildRequires: perl-FileHandle to fix make check
  - Add BuildRequres: gcc [1]
  - Use make_build [2] and make_install[3] macros
  - [1] https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_buildrequires_and_requires
  - [2] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - [3] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.16-1
changelog:
  - Update to 0.7.15
  - Add UPL short name to SPDX conversion
  - Allow parsing desktop files using as_app_parse_data()
  - Do not preserve restrictive permissions when installing AppStream files
  - Modernize the validation requirements
  - Remove relative path from icon names
  - Support loading YAML from as_store_from_bytes()
  - Update list of allowed metadata licences
  - Update the SPDX license list to v3.5


author: Richard Hughes <richard@hughsie.com> 0.7.17-1
changelog:
  - New upstream release
  - Add "icon-theme" as recognised component type
  - Fix CI by moving 'future' back a bit
  - Make default content rating values match OARS semantics
  - Properly initialize unique_id_mutex


author: Richard Hughes <richard@hughsie.com> 0.7.18-1
changelog:
  - New upstream release
  - Add content rating system APIs from gnome-software
  - Add "validate-version" command
  - Allow timestamp in the future in validate-relax
  - Don't ignore localized strings that are the same as original
  - Fix crash with invalid children of <ul/>
  - Properly initialize mutexes
  - Test launchable tags in validation


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-28856


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.3.0 base"


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base"


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-1
changelog:
  - Rebase to the latest upstream release 2.28
    Resolves: rhbz#2123346
  - Add dependency on device-mapper-multipath to libblockdev-mpath
    Resolves: rhbz#2121072
  - Fix spec issues found by rpminspect
    Resolves: rhbz#2116544


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-4
changelog:
  - nvme: Fix namespace identifiers
    Resolves: rhbz#2151535
  - nvme: Avoid sending NVME_IDENTIFY_CNS_NS_DESC_LIST on older devices
    Related: rhbz#2151535


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-5
changelog:
  - Allow resizing of inactive LVs with latest LVM
    Resolves: rhbz#2161181
  - Fix test_swapon_pagesize on systems with 64k pages
    Resolves: rhbz#2168220


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-14
changelog:
  - tests: Fix expected extended partition flags with new parted
    Related: rhbz#2109026
  - mdraid: Fix copy-paste error when checking return value
    Related: rhbz#2109026


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-19
changelog:
  - fix unpreserved file permissions (CVE-2022-32207)
  - fix HTTP compression denial of service (CVE-2022-32206)
  - fix FTP-KRB bad message verification (CVE-2022-32208)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-24
changelog:
  - fix SSH connection too eager reuse still (CVE-2023-27538)
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)
  - fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
  - fix TELNET option IAC injection (CVE-2023-27533)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-26
changelog:
  - unify the upload/method handling (CVE-2023-28322)
  - fix host name wildcard checking (CVE-2023-28321)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-28
changelog:
  - return error if hostname too long for remote resolve (CVE-2023-38545)
  - fix cookie injection with none file (CVE-2023-38546)
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-32
changelog:
  - make up incomplete patch for host name wildcard checking (RHEL-5675)
  - eliminate use of obsolete patch syntax (RHEL-65791)
  - http2: make sure pause is done on HTTP (RHEL-85847)


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: José Expósito <jexposit@redhat.com> - 2.4.123-2
changelog:
  - Revert upstream commit ffaa3ce144be ("2.4.122, Build Intel on all arches")
    libpciaccess is not available in RHEL 9 aarch64, ppc64le and s390x
    Resolves: https://issues.redhat.com/browse/RHEL-53869


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: Vishal Vijayraghavan <vvijayra AT redhat DOT com> - 1:2.1.3-1
changelog:
  - New release of liberation-fonts 2.1.3
  - Resolves:rh#1464310 : Tilded G not works with Liberation Sans and Serif


author: Michal Schmidt <mschmidt@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream release 1.15.1
  - Disable LTO on x86_64 due to memory issues (copied from Fedora)
  - Resolves: rhbz#2040454


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-3
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56809
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62935
  - Replace Jansson with json-c
    resolves: RHEL-65292


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-7
changelog:
  - Add --key all:... selector
    resolves: RHEL-19367
  - Add miscellaneous other upstream fixes since 1.50.1


author: Richard W.M. Jones <rjones@redhat.com> - 8.2-1
changelog:
  - Rebuild for RHEL AV 8.2.
  - Include ntfs-3g-system-compression plugin.
    resolves: rhbz#1705234, rhbz#1796073


author: Richard W.M. Jones <rjones@redhat.com> - 9.2-1
changelog:
  - Rebase to ntfs-3g 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789
    resolves: rhbz#2127235 rhbz#2127242
    (also 2127264 2127250 2127257)


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.19.3-6
changelog:
  - Add support for the Wacom Intuos Pro (RHEL-105483)
  - Rename existing patches for better order clarity


author: Robert Scheck <robert@fedoraproject.org> 1.5.2-5
changelog:
  - Don't ship API docs twice (devel and doc subpackages)
  - Reworked spec file to build libisoburn1 for RHEL >= 8


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.5.0-3
changelog:
  - Minor fixes for Python 3.12 compatibility
  - Fix Python unit tests to use the right assert methods
  - Explicitly BR python3-setuptools


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Michal Ruprich <mruprich@redhat.com> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Resolves: #1758843 - libmaxminddb-devel i686 can't be installed in parallel to x86_64
  - Fix for CVE-2020-28241


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.6-1
changelog:
  - Rebase to new stable branch version 1.12.6
    resolves: rhbz#2059288
  - New tool: nbddump
  - nbdcopy: Use preferred block size for copying
    related: rhbz#2047660
  - Fix remote TLS failures
    resolves: rhbz#2111524
    (and 2111813)


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: Adrian Reber <areber@redhat.com> - 1.2-5
changelog:
  - Repack tarball to remove problematic license from unused code
  - Apply fixes for warnings found by gcc -fanalyzer


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Remi Collet <remi@remirepo.net> - 0.11.0-1
changelog:
  - update to 0.11.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/665


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.5.2-5
changelog:
  - replace use of ucpp with gcc cpp
  - Resolves: tdf#132739 two html style tags where there should be just one


author: Daiki Ueno <dueno@redhat.com> - 4.9-2
changelog:
  - Fix CVE-2023-23009: remote DoS via crafted TS payload with an
    incorrect selector length (rhbz#2173674)


author: Sahana Prasad <sahana@redhat.com> - 4.9-3
changelog:
  - Fix CVE-2023-30570:Malicious IKEv1 Aggressive Mode packets can crash
    libreswan
  - Resolves: rhbz#2187171


author: Sahana Prasad <sahana@redhat.com> - 4.9-5
changelog:
  - Just bumping up the version to include bugs for CVE-2023-2295. There is no
    code fix for it. Fix for it is including the code fix for CVE-2023-30570.
  - Fix CVE-2023-2295 Regression of CVE-2023-30570 fixes in the
    Red Hat Enterprise Linux
  - Resolves: rhbz#2189777, rhbz#2190148


author: Daiki Ueno <dueno@redhat.com> - 4.15-2
changelog:
  - Fix auto=ondemand connection initialization with TCP (RHEL-51879)
  - Make use of Netlink extack for additional error reporting (RHEL-51881)


author: Daiki Ueno <dueno@redhat.com> - 4.15-4
changelog:
  - pluto: fix refcounting of whack FD at CREATE_CHILD_SA request (RHEL-61461)
  - pluto: ignore CREATE_CHILD_SA request if crypto is in progress (RHEL-61461)


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.99.20-1
changelog:
  - 1900160 - sane-airscan-0.99.20 is available
  - 1897935 - Crash on libsane-airscan when trying to activate scanner


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.3.1-3
changelog:
  - Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets
    rhbz#1902232


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.4.0-3
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
    Resolves: rhbz#1970826 rhbz#1970839 rhbz#1970857 rhbz#1970847


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.31-6
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985029)


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-9
changelog:
  - Add patches for CVE-2024-52530, CVE-2024-52531, and CVE-2024-52532
    Resolves: RHEL-67069
    Resolves: RHEL-67081


author: Kalev Lember <klember@redhat.com> - 2.72.0-2
changelog:
  - Tighten soname globs
  - Avoid automatic requires on sysprof-devel package
  - Update required glib2 version


author: Kalev Lember <klember@redhat.com> - 2.72.0-5
changelog:
  - Don't try to avoid sysprof dep any more now that sysprof-capture-devel is
    split out to a separate subpackage


author: Norbert pocs <npocs@redhat.com> - 0.10.4-1
changelog:
  - Rebase to version 0.10.4
  - Add pkcs11 support
  - Disallow ssh-rsa key in FIPS mode
  - Fix openssl KDF check at build
  - ChangeLog was renamed to CHANGELOG
  - Resolves: rhbz#2068475, rhbz#2026449, rhbz#2004021,
              rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-3
changelog:
  - Enable pkcs11 support
  - Fix broken libsofthsm path on i686
  - Add missing bugzilla references from the rebase commit
  - Related: rhbz#2026449
  - Resolves: rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Matej Mužila <mmuzila@redhat.com> 4.4.0-2
changelog:
  - Update to version 4.4.0
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354
    CVE-2022-1355


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Michal Hlavinka <mhlavink@redhat.com> - 4.4.0-14
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.3
changelog:
  - Add -Wno-error=deprecated-declarations, to ignore OpenSSL 3.0 deprecation warnings.
    Fixes: rhbz#1958054


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.5
changelog:
  - Fixes CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM
    Resolves: rhbz#1976814


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.7
changelog:
  - Fixes CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets
    Resolves: rhbz#1999303


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.1-3.20211126git1ff6fe1f43
changelog:
  - Backport "tpm2: Check size of buffer before accessing it" (CVE-2023-1017 & CVE-2023-1018)
    Resolves: rhbz#2173960
    Resolves: rhbz#2173967


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-8
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188916)
  - tests: Use stronger passphrases for LUKS tests (#2188750,#2188752)
  - integration-test: Fix scsi_debug cd drive read-only detection (#2211191)
  - lvm2: Improve uevent processing (#2031673)
  - tests: Mark test_job.UdisksJobTest.test_job as unstable (#2148844)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-4
changelog:
  - Fix a couple of issues found by Coverity (#1938890)
  - Ignore systemd "Extended Boot Loader" GPT partition


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-1
changelog:
  - Version 2.9.4 (#2010363)
  - CVE-2021-3802: Harden the default mount options for ext filesystems (#2004423)
  - Fix double free on daemon exit (unaligned fastbin chunk) (#2001549)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.5-1
changelog:
  - Update license to GPL-2.0 OR MIT
  - Add io_uring_prep_epoll_ctl()
  - Add io_uring_get_probe(), io_uring_get_probe_ring()
  - Add io_uring_register_probe()
  - Add io_uring_{register,unregister}_personality()
  - Add io_uring_prep_{recv,send}()
  - Add io_uring_prep_openat2()
  - Add io_uring_ring_dontfork()
  - Add io_uring_prep_read() and io_uring_prep_write()
  - Documentation fixes and improvements


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.6-1
changelog:
  - add io_uring_prep_splice()
  - add io_uring_prep_provide_buffers()
  - add io_uring_prep_remove_buffers()
  - add io_uring_register_eventfd_async()
  - reinstate io_uring_unregister_eventfd() (it was accidentally removed in 0.4)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.7-1
changelog:
  - Add io_uring_cq_eventfd_toggle() helper for new IORING_CQ_EVENTFD_DISABLED flag
  - Add IORING_OP_TEE
  - Documentation fixes and improvements


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-2
changelog:
  - util: Fix typo in virNetDevOpenvswitchInterfaceSetQos (RHEL-69938)
  - qemu: tpm: do not update profile name for transient domains (RHEL-71072)
  - qemu: Enable I/O APIC if needed (RHEL-65844)
  - cpu_map: Sort data files in meson.build (RHEL-70052)
  - sync_qemu_models_i386: Update meson.build (RHEL-70052)
  - sync_qemu_models_i386: Generate missing -v1 variants (RHEL-70052)
  - cpu_map: Add 486-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium2-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium3-v1 CPU model (RHEL-70052)
  - cpu_map: Add coreduo-v1 CPU model (RHEL-70052)
  - cpu_map: Add n270-v1 CPU model (RHEL-70052)
  - cpu_map: Add core2duo-v1 CPU model (RHEL-70052)
  - cpu_map: Add qemu32-v1 CPU model (RHEL-70052)
  - cpu_map: Add kvm32-v1 CPU model (RHEL-70052)
  - cpu_map: Add qemu64-v1 CPU model (RHEL-70052)
  - cpu_map: Add kvm64-v1 CPU model (RHEL-70052)
  - cpu_map: Add Conroe-v1 CPU model (RHEL-70052)
  - cpu_map: Add Penryn-v1 CPU model (RHEL-70052)
  - cpu_map: Add KnightsMill-v1 CPU model (RHEL-70052)
  - cpu_map: Add athlon-v1 CPU model (RHEL-70052)
  - cpu_map: Add phenom-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G1-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G2-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G3-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G4-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G5-v1 CPU model (RHEL-70052)
  - cpu_map: Add EPYC-Genoa-v1 CPU model (RHEL-70052)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-4
changelog:
  - conf, docs: Add support for direct and extended tlbflush features (RHEL-7122)
  - qemu: Add support for direct and extended tlbflush features (RHEL-7122)
  - conf: refactor hyperv features formatting (RHEL-7122)
  - conf: Adjust hyperv tlbflush formatting (RHEL-7122)
  - qemu_migration: Do not consider post-copy active in postcopy-recover (RHEL-73085)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-5
changelog:
  - qemu: allow migration of guest with mdev vGPU to VF vGPU (RHEL-68064)
  - storage_file: Refuse qcow2 images with empty string as 'data_file' (RHEL-73504)
  - virstoragetest: Add case for qcow2 image with empty string as 'data_file' (RHEL-73504)
  - qemu: snapshot: delete disk image only if parent snapshot is external (RHEL-74041)
  - storage_file: de-modularize the local file backend (RHEL-73507)
  - libvirt.spec: Move ownership of 'storage-file' backends directory to gluster (RHEL-73507)
  - qemu: re-use existing ActualNetDef for more interface types during update-device (RHEL-7036)
  - tools: ssh-proxy: Check for domain status before parsing its CID (RHEL-75577)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-6
changelog:
  - build: Bump minimum glib2 version to 2.66.0 (RHEL-77884)
  - qemuProcessHandleIOError: Refactor to extract 'priv' instead of 'driver' (RHEL-77884)
  - qemu: Handle quirks of 'device' field of BLOCK_IO_ERROR event in monitor code (RHEL-77884)
  - qemu: Rename 'diskAlias' to 'device' in qemu IO error event handling (RHEL-77884)
  - qemuProcessHandleIOError: Rename local variables (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Do not munge 'reason' field of IO error event (RHEL-77884)
  - qemuProcessHandleIOError: Prefer lookup by node name (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Propagate new 'qom-path' field (RHEL-77884)
  - virStorageSource: Add fields for storing last I/O error message (RHEL-77884)
  - qemuProcessHandleIOError: Populate I/O error reason to virStorageSource (RHEL-77884)
  - qemuProcessHandleIOError: Log IO errors in the VM log file (RHEL-77884)
  - libxlDomainGetMessages: Add existing flags to 'virCheckFlags' (RHEL-77884)
  - virDomainObjGetMessages: Refactor using GPtrArray (RHEL-77884)
  - virDomainGetMessages: Introduce VIR_DOMAIN_MESSAGE_IOERRORS (RHEL-77884)
  - include: libvirt-domain: Reword documentation for @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - include: libvirt-domain: Add 'message' @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - qemuSnapshotForEachQcow2: Don't initialize 'nrollback' (RHEL-73315)
  - qemu: process: Export qemuPrepareNVRAM for use in snapshot code (RHEL-73315)
  - qemu: snapshot: Ensure that NVRAM image exists when taking inactive internal snapshot (RHEL-73315)
  - qemuxmlconftest: Allow testing of the 'writable' flag for passed FDs for disks (RHEL-37519)
  - qemuxmlconftest: Add testing of FDs with 'writable' flag in 'disk-source-fd' (RHEL-37519)
  - qemu: domain: Initialize FD passthrough for a virStorageSource before using it (RHEL-37519)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-7
changelog:
  - qemu_migration: Refactor qemuMigrationSrcRestoreDomainState (RHEL-79168)
  - qemu_migration: Do not automatically resume domain after I/O error (RHEL-79168)
  - qemucapabilitiestest: Add data for the qemu-10.0 dev cycle on x86_64 (RHEL-79095)
  - qemucapabilitiestest: Update 'caps_10.0.0_x86_64' to 'v9.2.0-1636-gffaf7f0376' (RHEL-79095)
  - qemu: capabilies: Introduce QEMU_CAPS_BLOCKDEV_SET_ACTIVE (RHEL-79095)
  - qemu: monitor: Add monitor backend for 'blockdev-set-active' (RHEL-79095)
  - qemu: migration: Reactivate block nodes after migration if VM is left paused (RHEL-79095)
  - conf: change virDomainHostdevInsert() to return void (RHEL-69455)
  - qemu: fix qemu validation to forbid guest-side IP address for type='vdpa' (RHEL-69455)
  - qemu: validate that model is virtio for vhostuser and vdpa interfaces in the same place (RHEL-69455)
  - qemu: automatically set model type='virtio' for interface type='vhostuser' (RHEL-69455)
  - qemu: do all vhostuser attribute validation in qemu driver (RHEL-69455)
  - conf/qemu: make <source> element *almost* optional for type=vhostuser (RHEL-69455)
  - qemu: use switch instead of if in qemuProcessPrepareDomainNetwork() (RHEL-69455)
  - qemu: make qemuPasstCreateSocketPath() public (RHEL-69455)
  - qemu: complete vhostuser + passt support (RHEL-69455)
  - qemu: fail validation if a domain def has vhostuser/passt but no shared mem (RHEL-69455)
  - docs: improve type='user' docs to higlight differences between SLIRP and passt (RHEL-69455)
  - docs: document using passt backend with <interface type='vhostuser'> (RHEL-69455)
  - utils: Canonicalize paths before comparing them (RHEL-79166)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-8
changelog:
  - remote: add sysusers file to create 'libvirt' group (RHEL-81749)
  - qemu: Avoid crash in qemuDomainCheckCPU with unknown host CPU (RHEL-81747)
  - qemu_snapshot: allow reverting to external disk only snapshot (RHEL-21549)
  - qemu: snapshot: error out early when reverting snapshot for VM with non-file disk (RHEL-30971)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-9
changelog:
  - util: introduce object for holding a system inhibitor lock (RHEL-83064)
  - src: convert drivers over to new virInhibitor APIs (RHEL-83064)
  - rpc: remove logind support for virNetDaemon (RHEL-83064)
  - util: fix off-by-1 in inhibitor constants (RHEL-83064)
  - util: don't attempt to acquire logind inhibitor if not requested (RHEL-83064)
  - network: Free inhibitor in networkStateCleanup() (RHEL-83064)
  - conf: introduce support for multiple ACPI tables (RHEL-81041)
  - src: validate permitted ACPI table types in libxl/qemu drivers (RHEL-81041)
  - src: introduce 'raw' and 'rawset' ACPI table types (RHEL-81041)
  - qemu: support 'raw' ACPI table type (RHEL-81041)
  - libxl: support 'rawset' ACPI table type (RHEL-81041)
  - conf: support MSDM ACPI table type (RHEL-81041)
  - qemu: support MSDM ACPI table type (RHEL-81041)
  - qemuxmlconftest: Include shared memory 'net-vhostuser' test cases (RHEL-84133)
  - qemuValidateDomainDeviceDefNetwork: Require shared memory for all vhost-user interfaces (RHEL-84133)
  - qemu: process: Remove un-updated 'qemuProcessStartWarnShmem' (RHEL-84133)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-10
changelog:
  - esxConnectListAllDomains: Don't propagate failure to lookup a single domain (RHEL-80606)
  - conf: parse interface/source/@dev for all interface types (with backend type='passt') (RHEL-82539)
  - libvirt-host: Clarify/fix description of the CPU frequency field (RHEL-86197)
  - virNodeGetInfo: Improve description of the case when fake data is reported (RHEL-86197)
  - manpages: virsh: Use disclaimer from 'virNodeGetInfo()' for 'virsh nodeinfo' (RHEL-86197)
  - esx: Accept empty "path" URI component same way as "/" (RHEL-86459)
  - qemu: Rename outgoingMigration parameter in various TPM functions (RHEL-86800)
  - qemu: Properly propagate migration state to TPM cleanup code (RHEL-86800)
  - qemuDomainBlockCopyCommon: Don't revoke access to file twice on failure (RHEL-7357)
  - qemuxmlconftest: Drop s390-default-cpu-...ccw-virtio-2.7 test cases (RHEL-72976)
  - tests: add capabilities for QEMU 10.0.0 on s390x (RHEL-72976)
  - qemu: Do NOT autoadd NUMA node for s390 (RHEL-72976)
  - qemu_command: Use qemuBuildVirtioDevProps() to build cmd line for virtio-mem and virtio-pmem (RHEL-72976)
  - qemuxmlconftest: Introduce memory-hotplug-virtio-mem-pci-s390x.xml (RHEL-72976)
  - qemu_caps: Introduce QEMU_CAPS_DEVICE_VIRTIO_MEM_CCW (RHEL-72976)
  - qemu: Validate virtio-mem-ccw (RHEL-72976)
  - qemu: Allow virtio-mem on CCW (RHEL-72976)
  - qemuxmlconftest: Introduce memory-hotplug-virtio-mem-ccw-s390x.xml (RHEL-72976)
  - qemu_domain_address: fix CCW virtio-mem hotplug (RHEL-72976)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-11
changelog:
  - Add load average information type into virDomainGetGuestInfo (RHEL-88447)
  - qemu_agent: Add qemuAgentGetLoadAvg() (RHEL-88447)
  - qemu: Add support for VIR_DOMAIN_GUEST_INFO_LOAD (RHEL-88447)
  - virsh: Add support for VIR_DOMAIN_GUEST_INFO_LOAD (RHEL-88447)
  - qemu_capabilities: Fetch caps for virtio-mem-ccw too (RHEL-87532)
  - cpu_map: Add avx10* CPU features (RHEL-87796)
  - cpu_map: Add GraniteRapids-v2 CPU model (RHEL-87796)
  - cpu_map: Add sha512, sm3, and sm4 CPU features (RHEL-87796)
  - virsh: Introduce new hypervisor-cpu-models command (RHEL-11435)
  - qemu: remove nonsensical sanity check in processNetdevStreamDisconnectedEvent() (RHEL-80169)
  - qemu: make processNetDevStreamDisconnectedEvent() reusable (RHEL-80169)
  - qemu: respond to NETDEV_VHOST_USER_DISCONNECTED event (RHEL-80169)
  - qemu: put vhost-user code that's special for passt in a helper function (RHEL-80169)
  - qemu: make passt+vhostuser reconnect behave identically to passt+user (RHEL-80169)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-12
changelog:
  - qemuMonitorJSONGetCPUModelExpansion: refactor parsing functions (RHEL-89415)
  - qemu: parse deprecated-props from query-cpu-model-expansion response (RHEL-89415)
  - qemu_capabilities: query deprecated features for host-model (RHEL-89415)
  - libvirt-domain: introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_DISABLE_DEPRECATED_FEATURES (RHEL-89415)
  - qemu_capabilities: filter deprecated features if requested (RHEL-89415)
  - virsh: add --disable-deprecated-features flag to domcapabilities (RHEL-89415)
  - conf: add deprecated_features attribute (RHEL-89415)
  - redhat: Restore hunks in tests/qemucapabilitiesdata/caps_10.0.0_s390x.* (RHEL-89415)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-14
changelog:
  - qemu: introduce QEMU_CAPS_AMD_IOMMU (RHEL-50560)
  - qemu: introduce QEMU_CAPS_PCI_ID (RHEL-50560)
  - docs: formatdomain: document intel-only IOMMU attributes (RHEL-50560)
  - qemu: add IOMMU model amd (RHEL-50560)
  - conf: add passthrough and xtsup attributes for IOMMU (RHEL-50560)
  - esx: Allow specifying different CA bundle for remote connections (RHEL-97440)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-15
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-106276)
  - qemu: sanitize blank lines in config file (RHEL-106276)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-106276)


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-2
changelog:
  - Drop libwacom-show-stylus, it's a debugging tool that requires extra
    dependencies that we shouldn't pull in everywhere (#2044710)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-4
changelog:
  - Add support for the Cintiq Pro 27 (RHEL-101886)
  - Add support for the Intuos Pro 3rd Gen series (RHEL-101881)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-5
changelog:
  - Rearrange the OSD buttons for the Intuos Pro 3rd Gen (RHEL-101881)
  - Use separate Ring/Ring2 assignments


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.8-17
changelog:
  - Use make macros, patch by Tom Stellard <tstellar@redhat.com>
    (https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro)
  - Update flags, enable LTO
  - Remove RANDFILE and increase default bits in ssleay.conf


author: David King <dking@redhat.com> - 2.9.13-10
changelog:
  - Fix CVE-2025-6021 (RHEL-96507)
  - Fix CVE-2025-49794 (RHEL-96405)
  - Fix CVE-2025-49796 (RHEL-96431)


author: Jakub Jelen <jjelen@redhat.com> - 1.1.33-4
changelog:
  - Do not build python bindings even if the python is available
  - Fix CVE-2019-13117 (#1728547)
  - Fix CVE-2019-13118 (#1728542)


author: Simo Sorce <simo@redhat.com> - 1.1.34-3
changelog:
  - Drop crypto dependency.
  - The "cryptography" implemented in exslt is outdated and bad supporting only
    insecure algorithms (RC4, SHA1, MD5, MD4), and should not be used anyway.


author: Michal Ruprich <mruprich@redhat.com> - 1.0.225-3
changelog:
  - Resolves: #1965253 - CVE-2021-28902 libyang: NULL pointer dereference in read_yin_container()
  - Resolves: #1965255 - CVE-2021-28903 libyang: recursive call to lyxml_parse_mem() lead to crash


author: Dan Horák <dan[at]danny.cz> - 2.2.0-10
changelog:
  - build with libzfcphbaapi as standalone library to avoid dependency on obsolete libhbaapi (#1922413)


author: Remi Collet <remi@remirepo.net> - 1.7.2-1
changelog:
  - update to 1.7.2
  - fix installation layout using merged patch from
    https://github.com/nih-at/libzip/pull/190


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "s390x-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j16  
    cd -


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-1
changelog:
  - update to 3.1.1 (#1979954 CVE-2021-3570 CVE-2021-3571)
  - add read-only UDS port
  - add option to set clockClass threshold
  - don't repeat some log messages in multi-port configuration
  - increase default TX timestamp timeout to 10 ms
  - limit unicast message rate per address and grant duration


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-6
changelog:
  - add support for VLAN over bond (#2120521)
  - handle EINTR when waiting for transmit timestamp (#2128786)
  - check for unexpected changes in frequency offset (#2150815)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (RHEL-2026 RHEL-2342 RHEL-12182 RHEL-15929)
  - fix ts2phc to handle large NMEA delay (RHEL-23208)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-3
changelog:
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-39387)
  - fix ts2phc to correctly handle leap seconds (RHEL-40216)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-40947)
  - add options to configure multicast IP addresses (RHEL-31178)
  - add holdover support to ts2phc (RHEL-50216)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58213 RHEL-57040)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60027)
  - support static sink clocks in phc2sys automatic mode (RHEL-62864)
  - don't require -O option without -a and -w in phc2sys (RHEL-69138)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-2
changelog:
  - add experimental option for external PPS in ts2phc automatic mode
    (RHEL-72468)
  - add command to set external grandmaster properties (RHEL-90585)
  - refresh link status on faults (RHEL-56168)


author: Vit Mojzis <vmojzis@redhat.com> - 1.0.18-3
changelog:
  - Added a patch to fix netinet/sctp.h not to be installed.
  - Added some fixes for kernel feature detection.
  - Updated to 1.0.18. [1568622]


author: Artem Egorenkov <aegorenk@redhat.com> - 3.6.0-7
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Sérgio Basto <sergio@serjux.com> - 2.14.1-1
changelog:
  - Update to 2.14.1
  - Disable javadoc (#1988896)
  - Build with jansi-2
  - Remove deps on slf4j-ext (no longer available in Fedora 35)


author: Frank Crawford <frank@crawford.emu.id.au> - 7.5.4-2
changelog:
  - Add requires for perl-diagnostics (#1893671) and perl-lib (#1893503)
  - Add other requires as nothing is now automatically supplied


author: Brian C. Lane <bcl@redhat.com> 34.9.16-1
changelog:
  - Makefile: Add local-srpm target to create a .src.rpm from HEAD (bcl)
    Related: rhbz#2088631
  - mkksiso: Fix s390x support (bcl)
    Related: rhbz#2088631
  - mkksiso: Remove use of os.path.join (bcl)
    Related: rhbz#2088631
  - Makefile: Add mkksiso to coverage report (bcl)
    Related: rhbz#2088631
  - setup.py: Install mkksiso to /usr/bin (bcl)
    Related: rhbz#2088631
  - mkksiso: Fix grub2 editing error (bcl)
    Related: rhbz#2088631
  - mkksiso: Rewrite to use xorriso features (bcl)
    Resolves: rhbz#2088631


author: Brian C. Lane <bcl@redhat.com> 34.9.17-1
changelog:
  - minimal.ks: Add include for architecture specific packages (bcl)
    Related: rhbz#2051548
  - livemedia.ks: Add include for architecture specific packages (bcl)
    Resolves: rhbz#2051548
  - tests: Add tests for mkksiso (bcl)
    Related: rhbz#2037015
  - mkksiso: Add kernel cmdline customization support (bcl)
    Resolves: rhbz#2037015
  - mkksiso: Move kickstart to --ks KICKSTART (bcl)
    Related: rhbz#2037015
  - mkksiso: Add helper functions for kernel cmdline modifications (bcl)
    Related: rhbz#2037015
  - lorax.spec: Fix changelog order (bcl)
    Resolves: rhbz#1972099


author: Brian C. Lane <bcl@redhat.com> 34.9.18-1
changelog:
  - mkksiso: Set u+rw permission on extracted files and directories (bcl)
    Related: rhbz#2088631
  - lorax.spec: Fix changelog (bcl)
    Resolves: rhbz#1972099


author: Brian C. Lane <bcl@redhat.com> 34.9.19-1
changelog:
  - mkksiso: Optionally support 3 arguments or --ks (bcl)
    Resolves: rhbz#2037015
  - mkksiso: Add -U to xorriso on ppc64le (bcl)
    Resolves: rhbz#2109665
  - mkksiso: Fix passing -iso-level to xorriso (bcl)
    Related: rhbz#2109665


author: Brian C. Lane <bcl@redhat.com> 34.9.20-1
changelog:
  - templates: Update runtime-* templates (bcl)
    Resolves: rhbz#2042057
  - templates: Update path to license files (bcl)
    Related: rhbz#2042057
  - templates: Update boot timeout to 5s (bcl)
    Related: rhbz#2042057


author: Brian C. Lane <bcl@redhat.com> 34.9.23-1
changelog:
  - rsyslog.conf: Set WorkDirectory to /var/lib/rsyslog (bcl)
    Resolves: rhbz#2158731
  - lorax.spec: fix changelog entry for 2132511 (bcl)
    Related: rhbz#2132511


author: Brian C. Lane <bcl@redhat.com> 34.9.26-1
changelog:
  - monitor: Skip repo errors involving CDROM/file source (bcl) (bcl)
    Resolves: RHEL-4658
  - rsyslog.conf: Update to use current config syntax (bcl) (bcl)
    Resolves: RHEL-46857


author: Brian C. Lane <bcl@redhat.com> 34.9.27-1
changelog:
  - New lorax documentation - 34.9.27 (bcl) (bcl)
    Related: RHEL-83208
  - mkksiso: Update to newer version supporting rebuilding efiboot.img (bcl)
    Resolves: RHEL-83208
  - livemedia-creator: Set 0755 permission on / cpio overlay (bcl) (bcl)
    Resolves: RHEL-83986


author: Brian C. Lane <bcl@redhat.com> 34.9.28-1
changelog:
  - templates.d: Synchronize with lorax-templates-rhel (bcl)
    Related: RHEL-54712
    Resolves: RHEL-69019
  - lorax: Change default rootfs size to 4GiB (bcl)
    Resolves: RHEL-95360


author: Brian C. Lane <bcl@redhat.com> 34.9.29-1
changelog:
  - templates: Synchronize with lorax-templates-rhel (bcl) (bcl)
    Resolves: RHEL-54712
  - Fix tzselect path in runtime-cleanup.tmpl (jikortus) (jikortus)
    Resolves: RHEL-100463
  - lorax.spec: Fix a wrong issue reference (bcl) (bcl)
    Related: RHEL-83986


author: Brian C. Lane <bcl@redhat.com> - 9.0-38
changelog:
  - tools: Add support for Jira RHEL-XXX issues (bcl)
    Related: RHEL-15122
  - Add setpriv as ostree containers dependency (bcl)
    Resolves: RHEL-15122


author: Brian C. Lane <bcl@redhat.com> - 9.6-1
changelog:
  - Bump release version to 9.6 (bcl)
    Related: RHEL-69011
  - runtime-cleanup: Newer glibc installs /usr/sbin/ldconfig (bcl)
    Resolves: RHEL-69011


author: Brian C. Lane <bcl@redhat.com> - 9.7-1
changelog:
  - Bump release version to 9.7 (bcl)
    Related: RHEL-91930
  - Add a boot menu for fips=1 (bcl)
    Resolves: RHEL-91930


author: Brian C. Lane <bcl@redhat.com> - 9.7-3
changelog:
  - live-install.tmpl: Fix broken single item tuple (bcl)
    Related: RHEL-108149
  - libvirt.tmpl: Fix use of xrange (bcl)
    Related: RHEL-108149
  - 80-rhel: Remove unused templates and config files (bcl)
    Resolves: RHEL-108149
  - Fix tzselect path in runtime-cleanup.tmpl (jikortus)
    Resolves: RHEL-101453


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: Tom Callaway <spot@fedoraproject.org> - 33.3.1-17
changelog:
  - hack this ancient beastie to work with lua 5.4
  - maintainer, please update this to the current upstream release at your earliest convenience


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: Miro Hrončok <mhroncok@redhat.com> - 1-3
changelog:
  - Modify several conditionals to support RHEL 9+ and drop ancient Fedora 17
  - Add explicit conflict with older lua-devel
  - Require rpm, not redhat-rpm-config


author: Marian Csontos <mcsontos@redhat.com> - 2.03.21-3
changelog:
  - Fix lvresize fail in case of multiple mountpoints.
  - Fix allocator for RAID LVs allocating multiple legs on single device.
  - Fix device id handling of WWIDs with trailing spaces.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.23-2
changelog:
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-2
changelog:
  - Fix SPDX License identifiers.
  - Fix input units for VDO LV's minimim_io_size.
  - Fix stripe count and validation for RAID LVs.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-5
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-5
changelog:
  - Revert the CMake change regarding the in-source builds for now
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug buildchnages to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers the CMAKE_INSTALL_PREFIX="%{_prefix}" option
  - Default to %cmake commands instead fo %make commands
  - Update the WITH_UNITTEST macro to the one upstream use now
  - Introduce macro to enable / disable testusite (and building of the *-test subpackage)


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-4
changelog:
  - Force the CMake change regarding the in-source builds also to F31 and F32
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug build changes to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers several other options which redudndant specification I removed in this commit
  - Default to %cmake commands instead of %make commands


author: Ondrej Dubaj <odubaj@redhat.com> - 3.0.1-1
changelog:
  - Rebase to new major version 3.0.1 (it's Beta version)
  - Removed documentation/ folder, as it was removed by upstream


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.0.3-1
changelog:
  - Rebase to 3.0.3
  - Temporarily disable generation of -javadoc.rpm, due to missing feature in xmvn,
    which leads to build crash


author: Christopher Tubbs <ctubbsii@fedoraproject.org> - 1:3.6.3-6
changelog:
  - Remove unneeded commons-logging from runtime class path (rhbz#1883751)
  - Also remove redundant commons-codec


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1:3.6.3-22
changelog:
  - Implement new non-conflicting Java bindings
  - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072


author: Alex Williamson <alex.williamson@redhat.com> - 0.57-1
changelog:
  - 13f1322e576c ("Remove systemd support")
  - d84a2737e79c ("Fix device udev tagging")
  - 68c92c7beaca ("Tag before generating spec file")
  - c34c4f1ade60 ("Update mdevctl.spec.in for lsmdev.8")
  - ed86d345aae0 ("Fix systemd UUID escaping")
  - d4e83f08161d ("Merge pull request #13 from cpaelzer/fix-lsmdev-man-page")
  - 3c0d285b75ab ("lsmdev - add the alternative name to the man page")


author: Alex Williamson <alex.williamson@redhat.com> - 0.61-1
changelog:
  - d7dfac5f5bfb ("Merge pull request #15 from cohuck/attr_sanity")
  - 28a9fa17b51e ("validate attribute names")


author: Cornelia Huck <cohuck@redhat.com> - 0.69-1
changelog:
  - a2621934aa37 ("Merge pull request #18 from cohuck/validate")
  - ffbcef5a1c84 ("Merge pull request #25 from etrunko/master")
  - 5ec75a83bf30 ("Remove never used 'available' option")
  - d49b0f0db6b3 ("Merge pull request #23 from eskultety/man-fix")
  - 4cfe37eb2d99 ("man: Point --verbose to the 'list' command rather than 'types'")
  - a0ae49eb7178 ("Merge pull request #17 from cohuck/install_symlinks")
  - 504beba6e8f9 ("Force symlink cretion")
  - 522c5ded00ff ("Fix attribute validation")


author: Alex Williamson <alex.williamson@redhat.com> - 0.78-1
changelog:
  - e029640033d3 ("Automatic version commit for tag 0.78")
  - e32f506656fd ("use standard bash path")
  - 70690b64401f ("avoid other tags spilling into the .spec changelog")
  - 70b89c18cf5b ("Merge pull request #31 from awilliam/20201113.0")
  - 80187bc9ba03 ("Merge pull request #30 from fiuczy/fix-error-cleanup")
  - 97ea8bbeefb7 ("mdevctl: fix cleanup on error when creating and removing mdev")
  - b45d33dfd36c ("version support")
  - 2b1c16ce6fb0 ("Fix attributes getting applied via start-parent-mdevs")
  - 25d5e8d24d57 ("mdevctl: fix cleanup on error when writing to attribute")


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: José Expósito <jexposit@redhat.com> - 24.2.8-2
changelog:
  - AMD Navi4x support
    Backport fixes for radeonsi and disable GFX12 on radv
    Resolves: https://issues.redhat.com/browse/RHEL-53419


author: Anusha Srivatsa <asrivats@redhat.com> - 25.0.7-2
changelog:
  - NV dGFX fix for firefox crashing
    Backport fixes for NV dGFX driver crashing firefox
    Resolves: https://issues.redhat.com/browse/RHEL-93219


author: Konstantin Kostiuk <kkostiuk@redhat.com> 104.0.2
changelog:
  - Set version to 104.0.2
  - BZ#2084608 - Fix mismatched allocation function
  - BZ#2084613 - qga-win: race condition in build


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.1
changelog:
  - Set version to 105.0.1
  - Remove redundant package
  - BZ#2090333 - [mingw-qemu-ga-win] qga command 'guest-get-fsinfo' can't query bus-type of USB


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.2
changelog:
  - Set version to 105.0.2
  - Fix wrong requires
  - Fix missing patch0002
  - Remove extra Summary
  - BZ#2090333 - [mingw-qemu-ga-win] qga command 'guest-get-fsinfo' can't query bus-type of USB


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.3
changelog:
  - Set version to 105.0.3
  - BZ#2090250 - mingw-qemu-ga-win: Add Provides: bundled() to rpm packages [rhel-9]


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.0
changelog:
  - Set version to 106.0.0
  - RHEL-408 - Add provides, obsoletes for mingw-qemu-ga-win
  - RHEL-385 - Rebase mingw-qemu-ga-win to QEMU 8.0


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.1
changelog:
  - Set version to 106.0.1
  - RHELPLAN-147763 - [mingw-qemu-ga-win] VSS DLL: Add logging mechanism
  - RHEL-581 - Use the SPDX vocabulary to specify the license


author: Konstantin Kostiuk <kkostiuk@redhat.com> 109.1.0
changelog:
  - RHEL-57013 - Rebase qemu-ga to 9.1.0
  - RHEL-57012 - guest agent public ssh injection api support for Windows
  - Set version to 109.1.0


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: Jakub Hrozek <jhrozek@redhat.com> - 0.17.0-6
changelog:
  - Related: rhbz#1986806 - CVE-2021-3639 mod_auth_mellon: Open Redirect
                            vulnerability in logout URLs


author: Tomas Halman <thalman@redhat.com> - 0.17.0-9
changelog:
  - Fixing mellon_create_metadata.sh script
    Resolves: RHEL-35898
  - Publishing diagnostic module in CRB repository
    Resolves: RHEL-33585


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-2
changelog:
  - Resolves: rhbz#2153656 - CVE-2022-23527 - Open Redirect in
    oidc_validate_redirect_url() using tab character


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-3
changelog:
  - Resolves: rhbz#2184145 - CVE-2023-28625 NULL pointer dereference
    when OIDCStripCookies is set and a crafted Cookie header is supplied


author: Tomas Halman <thalman@redhat.com> - 2.4.10-1
changelog:
  Rebase to 2.4.10 version improves `state cookies piling up` problem
    Resolves: RHEL-32450 Race condition in mod_auth_openidc filecache
    Resolves: RHEL-25422 mod_auth_openidc: DoS when using
              `OIDCSessionType client-cookie` and manipulating cookies
              (CVE-2024-24814)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.4.9.1-1
changelog:
  - Resolves: rhbz#1987223 - CVE-2021-32792 mod_auth_openidc: XSS when using
                             OIDCPreservePost On [rhel-9.0]
  - Resolves: rhbz#1987217 - CVE-2021-32791 mod_auth_openidc: hardcoded
                             static IV and AAD with a reused key in AES GCM
                             encryption [rhel-9.0]
  - Resolves: rhbz#1987204 - CVE-2021-32786 mod_auth_openidc: open redirect in
                             oidc_validate_redirect_url() [rhel-9.0]


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-1
changelog:
  - Resolves: rhbz#2001852 - CVE-2021-39191 mod_auth_openidc: open redirect
                             by supplying a crafted URL in the target_link_uri
                             parameter


author: Paul Howarth <paul@city-fan.org> - 2.3.9-24
changelog:
  - Drop EL-6 support
    - Use %license unconditionally
    - _httpd_* macros always available
    - Run directory is always /run on tmpfs
    - Assume httpd ≥ 2.4 filesystem layout
    - systemd-units always provided by systemd


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-26
changelog:
  - Resolves: #1958882 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-3
changelog:
  - Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
    in forward proxy configurations


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-5
changelog:
  - Resolves: #2177753 - CVE-2023-25690 httpd: HTTP request splitting with
    mod_rewrite and mod_proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.26-5
changelog:
  - Resolves: RHEL-108706 - CVE-2025-49630 httpd: untrusted input from a client
    causes an assertion to fail in the Apache mod_proxy_http2 module


author: Coty Sutherland <csutherl@redhat.com> - 1.2.48-20
changelog:
  - Cleanup spec file and remove .redhat-N suffix from release
  - Remove ap24 subpackage since we only need to build for one version of httpd


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-1
changelog:
  - Resolves: RHEL-25075 - new version 2.4.26
  - Resolves: RHEL-11838 - [RFE] add support of dns_01 challenge to mod_md
  - Resolves: RHEL-17462 - OCSP response rejected when nextUpdate field not set
  - Resolves: RHEL-17467 - mod_md should trigger the reissue of new pair
    key/certificate when OCSP reports a revoked status


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-27497 - Rebase to upstream 1.3.20.Final release


author: Fedora Release Engineering <releng@fedoraproject.org> - 2.9.3-10
changelog:
  - Resolves: #1930664 - RFE: Add a feature that can set a mod_security/libcurl
    timeout for retrieving the rules
  - rename mlogc to mod_security-mlogc


author: Luboš Uhliarik <luhliari@redhat.com> - 2.9.6-2
changelog:
  - Resolves: RHEL-93014 - mod_security: ModSecurity Has Possible DoS
    Vulnerability (CVE-2025-47947)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.9.6-3
changelog:
  - Resolves: RHEL-100098 - mod_security: ModSecurity Denial of Service
    Vulnerability (CVE-2025-48866)


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-2
changelog:
  - Resolves: RHEL-16358 - A form data, "会社"(Company in Japanese) is forbade
    with REQUEST-941-APPLICATION-ATTACK-XSS.conf of mod_security_crs


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-3
changelog:
  - Resolves: #RHEL-22733 - mod_security_crs - The rule id:913100 in the
    REQUEST-913-SCANNER-DETECTION.conf blocks requests  with "User-agent:
    urlgrabber/3.10 yum/3.4.3"


author: Jakub Kadlcik <frostyx@email.cz> 0.5-1
changelog:
  - Release for epel8 as well (frostyx@email.cz)
  - Require createrepo_c for the createrepo_mod package (frostyx@email.cz)
  - modulemd-merge: improve README.md file (frostyx@email.cz)
  - repo2module: improve README.md file (frostyx@email.cz)
  - dir2module: improve README.md file (frostyx@email.cz)
  - Improve README.md file (frostyx@email.cz)
  - createrepo_mod: improve README.md file (frostyx@email.cz)
  - Loosen the python3-libmodulemd dependency to just libmodulemd
    (frostyx@email.cz)
  - createrepo_mod: use just createrepo_c if it has built-in module support
    (frostyx@email.cz)
  - Explicitly depend on python3-setuptools (frostyx@email.cz)
  - createrepo_mod: dump modules.yaml into the correct directory
    (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6-1
changelog:
  - Generate manpages for all tools in this repository 
  - modulemd-generate-macros: add a tool for generating module-build-macros
  - modulemd_tools: add the first pieces of a python library (for internal usage only)


author: Jakub Kadlcik <frostyx@email.cz> 0.7-1
changelog:
  - Generate manpages on the fly
  - Automated test builds incl. Docker/Travis
  - Fix PEP8 in all tools
  - modulemd_tools: temporarily skip some tests on EPEL8 or Fedora
  - Drop libmodulemd dependency in favor of python3-libmodulemd


author: Jakub Kadlcik <frostyx@email.cz> 0.8-1
changelog:
  - modulemd_tools: drop python3-parameterized dependency (frostyx@email.cz)
  - Package modulemd_tools helper lib (fvalder@redhat.com)
  - Add modulemd-merge tests (fvalder@redhat.com)
  - Add createrepo_mod tests (fvalder@redhat.com)
  - Replace master in fedora releaser to rawhide (frostyx@email.cz)


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-4
changelog:
  - Generate profiles section and modulemd-defaults file
    Related: rhbz#1801747
  - Use autosetup to automatically apply patches


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-5
changelog:
  - Don't traceback because of a modular SRPM in the repo
    Related: rhbz#2227436
  - Replace deprecated LooseVersion
  - Fix tests for new libmodulemd version 2.15.0


author: Adam Jackson <ajax@redhat.com> - 2.3.4-25
changelog:
  - Fix invoking autogen/configure so the default CFLAGS actually get applied
    Resolves: rhbz#2044881


author: José Expósito <jexposit@redhat.com> - 2.3.4-28
changelog:
  - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer()
  - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap


author: Olivier Fourdan <ofourdan@redhat.com> - 2.3.4-30
changelog:
  - Keep drop-down menus on the same monitor as the pull-down button with
    Xinerama
    Resolves: RHEL-92832


author: Jan Horak <jhorak@redhat.com> - 1.9-28
changelog:
  - Removed NPAPI from the description, since is no longer supported in Mozilla
    products
    Resolves: rhbz#2041339


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Honggang Li <honli@redhat.com> - 5.7-3
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960479


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2015392


author: Davide Caratti <dcaratti@redhat.com> - 0.7-2
changelog:
  - add a simple sanity test and enable gating. Related: rhbz#1962741
  - don't overwrite global build options. Related: rhbz#1967697
  - fix 'check_conflicts' on multilib. Related: rhbz#1967697


author: Davide Caratti <dcaratti@redhat.com> - 0.8-2
changelog:
  - fix mptcpize to work also when protocol number is 0 (upstream issue #159)
    and when command resides in another file system (upstream issue #161)
    Related: rhbz#2015623


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 0.5.13-6
changelog:
  - updating line in /usr/lib/tmpfiles.d/munge.conf: /var/run/munge → /run/munge
  - add license tag
  - add requires logrotate


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.13-8
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Ray Strode <rstrode@redhat.com> - 40.9-18
changelog:
  - Don't allow applications on other workspaces to steal
    focus, unless their timestamps are pristine
    Resolves: RHEL-29537


author: Jonas Ådahl <jadahl@redhat.com>) - 40.9-20
changelog:
  - Fix positioning when using always-on-top windows
    Resolves: RHEL-45998
  - Improve handling of always-on-visible-workspace windows
    Resolves: RHEL-45366


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-22
changelog:
  - Fix crash when moving window while switching workspace
    Resolves: RHEL-62997
  - Improve app discovery for workspace logic
    Resolves: RHEL-63000


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.30-1
changelog:
  - Update to MySQL 8.0.30
  - Remove patches now upstream:
    chain certs, OpenSSL 3, s390 and robin hood
  - Add a new plugin


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.34-1
changelog:
  - Update to MySQL 8.0.34
  - Add patch from upstream bug#110569
  - Add patch to fix binlog format issue
  - Use --skip-combinations over --binlog-format=mixed
  - Add alignment patch upstream bug#110752


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Michal Schorm <mschorm@redhat.com> - 1.0.1-1
changelog:
  - Rebase to 1.0.1 release
    This release is just a sync-up with upstream selinux-policy
  - URL changed to a new upstream repository


author: Richard W.M. Jones <rjones@redhat.com> - 1.36.2-1
changelog:
  - Rebase to 1.36.2
    resolves: RHEL-14475
  - partition: Suggest alternate partition-sectorsize
    resolves: RHEL-19815


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-6
changelog:
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85510
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89353


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-10
changelog:
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95814


author: Richard W.M. Jones <rjones@redhat.com> - 1.34.2-1
changelog:
  - Rebase to 1.34.2
    resolves: rhbz#2168629
  - Backport nbdkit-curl-plugin "multi" interface support
    resolves: rhbz#2228131


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-9
changelog:
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141902) and (#2141906)
  - fix memory leak when ipv6 disable set to 1 (#2151540)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-14
changelog:
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26649)


author: Thomas Haller <thaller@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0 release
  - Drop NotShowIn=GNOME
  - Use wireless-security code from libnma
  - Add flatpak build configuration
  - applet: hide unmanaged ethernet devices in nm-applet
  - applet: fix Wi-Fi scan requests with appindicator
  - editor: fix drop down list for connection.secondaries


author: Steve Dickson <steved@redhat.com> 2.5.4-28
changelog:
  -  Makefile.am: allow mount.nfs to be writeable by owner (RHEL-68701)
  -  mount.nfs: retry NFSv3 mount after NFSv4 failure in auto negotiation (RHEL-68574)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-30
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-72823)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-64340)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-31
changelog:
  - nfsdcld: prevent from accessing /var/lib/nfs/nfsdcld in read-only file system during boot (RHEL-78177)
  - Replace functional gating tests with the ones from RHEL10 (RHEL-78110)
  - Add explicit version requirement for libnfsidmap (RHEL-78107)
  - Add --disable-sbin-override for when /sbin is a symlink (RHEL-69771)
  - Move remaining binaries from /sbin to /usr/sbin (RHEL-69771)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Steve Dickson <steved@redhat.com> 2.5.4-35
changelog:
  - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
  - nfsd: allow more than 64 backlogged connections (RHEL-87752)


author: Steve Dickson <steved@redhat.com> 2.5.4-37
changelog:
  - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
  - gssd: do not use krb5_cc_initialize (RHEL-85412)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-10
changelog:
  - Resolves: #1975747 - CVE-2021-3618 nginx: ALPACA: Application Layer Protocol
    Confusion - Analyzing and Mitigating Cracks in TLS Authentication


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-16
changelog:
  - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are
    vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-17
changelog:
  - bump package epoch to resolve RHEL-33939
  - Resolves: RHEL-33939 - Update path for nginx broken for existing CS
    installations


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-23
changelog:
  - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER
    at nginx with reverse-proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-24
changelog:
  - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause
    denial of service (CVE-2024-7347)
  - Resolves: RHEL-85556 - nginx: Memory disclosure in the
    ngx_http_mp4_module (CVE-2022-41742)
  - Resolves: RHEL-91446 - nginx: Memory corruption in the
    ngx_http_mp4_module (CVE-2022-41741)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-1
changelog:
  - Resolves: #2096174 - RFE: add nginx:1.22 module stream
  - switch to pcre2
  - add stream_geoip_module and stream_realip_module
  - enable kTLS support


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-4
changelog:
  - Resolves: #2170808 - Running nginx with systemctl and entering ssl
    private key's pass phrase
  - added new ssl_pass_phrase_dialog directive which enables setting
    external program for entering password for encrypted private key


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-5
changelog:
  - Resolves: RHEL-12737 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Matej Focko <mfocko@redhat.com> - 1.2.14-1
changelog:
  - New release 1.2.14 (Gris Ge)
  - bond: support changing bond mode (Gris Ge)
  - Reorganize the code structure (Gris Ge)
  - CI: Enable VRF and ethool pause test (Gris Ge)
  - CI: Upgrade the version of github action tasks (Gris Ge)
  - test: Fix ethtool link mode test on Ubuntu (Gris Ge)
  - Github CI: Install extra module of running kernel (Gris Ge)
  - macsec: add base_iface property (Fernando Fernandez Mancera)
  - macsec: add MACsec interface support (Fernando Fernandez Mancera)
  - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera)


author: Martin Osvald <mosvald@redhat.com> - 3:7.92-1
changelog:
  - New version 7.92
  - Resolves: #2180330 - Rebase nmap for TLS v1.3 support
  - Resolves: #2164833 - Remove duplicate tests


author: Ana Cabral <acabral@redhat.com> - 2.0.0-0.4.alpha3
changelog:
  - Upgrade to 2.0.0 alpha 3. Resolves: RHBZ#1996575
  - Remove connection renaming behaviour. Resolves: RHBZ#1998222
  - Add prefixes to OVS bridges and interfaces connections. Resolves: RHBZ#1998218
  - Improve OVS bridge start with nmstate. Resolves: RHBZ#1660250


author: Gris Ge <fge@redhat.com> - 2.2.38-1
changelog:
  - Upgrade to 2.2.38
  - Preserve current IP setting for multiconnect profile. RHEL-61890
  - Fix profile name changing. RHEL-59239
  - IPvlan support. RHEL-43438
  - Handle ipv6.method: ignore. RHEL-58406


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 2.2.40-1
changelog:
  - Upgrade to 2.2.40
  - Do not deactivate connection when removing routes. RHEL-70138
  - Use specific libnmstate logger. RHEL-72016
  - Do not deactivate connection if mptcp flags didn't change. RHEL-53211


author: Gris Ge <fge@redhat.com> - 2.2.41-1
changelog:
  - Upgrade to 2.2.41
  - Fix the lose of OVS DB system-id. RHEL-78652
  - Support overriding interface config. RHEL-59935


author: Mingyu Shi <mshi@redhat.com> - 2.2.43-1
changelog:
  - Upgrade to 2.2.43
  - Support for vlan-egress-priority-map configuration. RHEL-67631
  - Support FEC. RHEL-80725
  - Support quickack. RHEL-80418


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Refer route next hop interface by MAC. RHEL-32495
  - Support reapply on mac-ref interface. RHEL-87794


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91291
  - Support nmpolicy against down iface. RHEL-88989
  - Support removal VLAN connection with empty ifname. RHEL-93146


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-85787
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784
  - Support matching by PCI adress. RHEL-88993
  - Apply dispatch changes first. RHEL-101742
  - Fix SRIOV VF reference. RHEL-93180


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.49-1
changelog:
  - Upgrade to 2.2.49
  - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526
  - Fix setting DNS only with search or option. RHEL-104797


author: Mingyu Shi <mshi@redhat.com> - 2.2.50-1
changelog:
  - Upgrade to 2.2.50
  - Support MAC referring for VLAN in gen_conf. RHEL-110369
  - Introduce state: ignore for route. RHEL-107130
  - Support PCI address matching in gen_conf. RHEL-110369
  - Support MacSec interface in gen_conf. RHEL-110369


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.18.1-2
changelog:
  - Add back libs and v8-devel subpackages
  - Related: RHBZ#2121126
  - Record previously fixed CVE
  - Resolves: CVE-2021-44906


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.19.1-1
changelog:
  - Rebase to 16.19.1
  - Resolves: rhbz#2153714
  - Resolves: CVE-2023-23918 CVE-2023-23919 CVE-2023-23936 CVE-2023-24807 CVE-2023-23920
  - Resolves: CVE-2022-25881 CVE-2022-4904


author: Jan Staněk <jstanek@redhat.com> - 1:16.19.1-2
changelog:
  - Update bundled c-ares to 1.19.1
    Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.1-1
changelog:
  - Rebase to 16.20.1
    Resolves: rhbz#2188291
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2177781


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.2-5
changelog:
  - Backport patches for several CVEs.
    Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.7.0-1
changelog:
  - Update to latest release
  - Resolves CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
  - Resolves CVE-2022-29244
  - Resolves: RHBZ#2111009


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.8.0-1
changelog:
  - Update to latest release
  - Resolves: RHBZ#2111009
  - Provide undici and cjs-module-lexer + wasi-sdk sources
  - Resolves: RBHZ#2111861


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.14.2-1
changelog:
  - Rebase to 18.14.2
  - Resolves: #2159389
  - Resolves: CVE-2022-25881, CVE-2022-4904, CVE-2023-23936, CVE-2023-24807
  - Resolves: CVE-2023-23918, CVE-2023-23919, CVE-2023-23920


author: Jan Staněk <jstanek@redhat.com> - 1:18.16.1-1
changelog:
  - Rebase to 18.16.1
    Resolves: rhbz#2188292 rhbz#2187683
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2222285


author: Jan Staněk <jstanek@redhat.com> - 1:18.17.1-1
changelog:
  - Rebase to version 18.17.1
    Resolves: rhbz#2228940
    Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559
  - Specify proper OpenSSL configuration section build
    Related: rhbz#2226726


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:18.19.1-1
changelog:
  - Rebase to version 18.19.1
  - Fixes: CVE-2024-21892 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 (medium)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.8.1-1
changelog:
  - Update node and nghttp
  - Add fips patch
  - Fixes CVE-2023-44487 (nghttp)
  - Fixes CVE-2023-45143, CVE-2023-39331, CVE-2023-39332, CVE-2023-38552, CVE-2023-39333


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:20.11.1-1
changelog:
  - Rebase to version 20.11.1
  - Fixes: CVE-2024-21892 CVE-2024-21896 CVE-2024-22017 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 CVE-2024-21890 CVE-2024-21891 (medium)


author: Jan Staněk <jstanek@redhat.com> - 1:20.12.2-1
changelog:
  - Rebase to version 20.12.0
    Fixes CVE-2024-27983 CVE-2024-27982 CVE-2024-22025 (node)
    Fixes CVE-2024-25629 (c-ares)


author: Andrei Radchenko <aradchen@redhat.com>
changelog:
  - Update to version 20.18.2
    Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76363 RHEL-76554 RHEL-76540


author: Jan Staněk <jstanek@redhat.com> - 1:22.13.1-1
changelog:
  - Update to version 22.13.1
    Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76354


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.13.1-2
changelog:
  - Remove lua pretransaction script from spec file
    Resolves: RHEL-81122
  - Disable npm update notifications for users
    Resolves: RHEL-81079


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.13.1-2
changelog:
  - Remove obsolete lua pretransaction script from spec file
    Resolves: RHEL-81119
  - Disable npm update notifications for users
    Resolves: RHEL-81079


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-2
changelog:
  - Build with bootstrap by default due to old versions of dependencies available
  - Resolves: #2042995, #2042970, #2042981, #2042989
  - Resolves: #2029936, #2024890, #2014499, #2014135
  - Resolves: #2013834, #1945299


author: Jan Staněk <jstanek@redhat.com> - 16.16.0-1
changelog:
  - Rebase to version 16.16.0
    Resolves: RHBZ#2106290
    Resolves: CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
    Resolves: CVE-2022-29244


author: Jan Staněk <jstanek@redhat.com> - 2.0.3-6
changelog:
  - Rebase to 2.0.19
    Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469


author: Jan Staněk <jstanek@redhat.com> - 2.0.19-1
changelog:
  - Rebase to 2.0.19
    Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469
    Resolves: CVE-2020-7788


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.15-1
changelog:
  - Resolves: RHBZ#2005419
  - Resolves CVE-2020-28469
  - Rebase to newest version
  - Change source to npmjs.com


author: Stephen Gallagher <sgallagh@redhat.com> - 2021.06-1
changelog:
  - Update to 2021.06-1
  - bundler: Handle archaic license metadata
  - bundler: Warn about bundled dependencies with no license metadata


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-4
changelog:
  - FIPS review changes
  -   add PORT_SafeZero to avoid compiler optimizing a way zeroing memory.
  -   update the indicators for this release
  -   allow hashing of longer than int32 values in a single PKCS #11 call.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-5
changelog:
  - Pick up validated constant time implementations of p256, p384, and p521
    from upsream
  - More Fips indicator changes


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-2
changelog:
  - Fix MD-5 decode issue in pkcs #12
  - turn off policy processing for pkcs12 and smime
  - restore the rhel9 pkcs12 defaults for pk12util


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally remvoed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Andreas Schneider <asn@redhat.com> - 1.1.11-8
changelog:
  - resolves: rhbz#2028819 - Introduce nss_wrapper-libs package to allow install
                             smaller footprint


author: Jan Macku <jamacku@redhat.com> - 1.15-1
changelog:
  - spec: sync specfile with Fedora
  - makefile: Use rpmdev-bumpspec's legacy date option
  - Add feature to generate specfile entry, commit and archive


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jerry James <loganjerry@gmail.com> - 8.0.1-1
changelog:
  - Version 8.0.1
  - Add 0002-Catch-CompileException-in-test.patch to fix compilation of a test
  - Make generate-tarball.sh actually compress the tarball


author: Jindrich Novy <jnovy@redhat.com> - 1.2.5-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.5
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.6-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.6
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.8-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.8
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1.2.9-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.9
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 1.2.10-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.2.11-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.11
  - simplify spec
  - Resolves: RHEL-86603


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.5-1
changelog:
  - apply patch from Matthias Gerstner of the SUSE security team to fix a
    possible race condition in the mkhomedir helper (CVE-2020-10737)
  - only process SELinux contexts if SELinux is not disabled (Alexander Bokovoy)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.6-1
changelog:
  - update license on src/buffer.h
  - change /var/run -> /run in systemd service file (Orion Poplawski)


author: Zuzana Miklankova <zmiklank@redhat.com> - 1.9.0~beta1-1
changelog:
  - Rebase to 1.9-beta1
  - change of licences of ongres-scram and ongres-scram-javadoc to "BSD and MIT and ASL 2.0"


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Milan Crha <mcrha@redhat.com> - 2.3-38
changelog:
  - Related: #2013578 (Add patch to build against samba 4.15)
  - Avoid build time dependencies related to server, when it's not built


author: Karol Herbst <kherbst@redhat.com> - 3.0-0.20200512git5cc337c
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Bump CLHPP version to 2.0.11


author: Karol Herbst <kherbst@redhat.com> - 3.0-1.20200512gitd082d42
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Rework CLHPP handling as file is not downloadable anymore
  - Bump CLHPP version to 2.0.12


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71053)
  - Avoid SSL context cleanup during library destruction (RHEL-56502)


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - Update to 4.1.1
  - Enable psm2 support
  - fbtl-posix: link to common_ompio
  - Revert upstream commit c36d7459b6331c4d
  - Resolve: rhbz#1869443


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-4
changelog:
  - Fix potential invalid scan results in OpenSCAP (rhbz#2109485)
  - Remove oscap-remediate service (rhbz#2111358)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.7-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2159286)
  - Fix error when processing OVAL filters (rhbz#2126883)
  - Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2138884)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2217442)
  - Fix systemd* probes unit enumeration (rhbz#2219532)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-29172)
  - Fix OVAL results file name (RHEL-7050)
  - Add ability to define a limit of collected items (RHEL-4141)
  - Add ability to refine rules in autotailor (RHEL-1477)
  - Improve the formatting of Blueprint remediations (RHEL-1476)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.11-1
changelog:
  - Upgrade to the latest upstream release (RHEL-76355)
  - Introduce "oscap-im", a tool for building hardened bootable container images
  - Fix RPM probes in bootable container images build environment (RHEL-55251)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-11
changelog:
  - Initialize crypto API only once (rhbz#2020044)
  - Add support for Blueprint remediations (rhbz#2020052)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-12
changelog:
  - Allow using local files instead of remote resources (rhbz#2015518)
  - Add an alternative source of hostname (rhbz#2021509)
  - Lower memory limits and improve their checking (rhbz#2022362)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2041782)
  - Select and exclude groups of rules on the command line (rhbz#2020580, rhbz#2020581)
  - The boot-time remediation service for systemd's Offline Update mode


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-35
changelog:
  - Relax OpenSSH checks for OpenSSL version
    Resolves: RHEL-4734
  - Limit artificial delays in sshd while login using AD user
    Resolves: RHEL-2469
  - Move users/groups creation logic to sysusers.d fragments
    Resolves: RHEL-5222


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-36
changelog:
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Relax OpenSSH build-time checks for OpenSSL version
    Related: RHEL-4734
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-44
changelog:
  - Add extra help information on ssh early failure
    Resolves: RHEL-33809
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-52293
  - Allow duplicate Subsystem directive
    Resolves: RHEL-47112


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-45
changelog:
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465).
    Resolves: RHEL-78700


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-2
changelog:
  - OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9
    Resolves: RHEL-88910
  - PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9
    Resolves: RHEL-88912


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80854
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-95239


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-7
changelog:
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76756


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
changelog:
  - Rebasing OpenSSL to 3.5
    Resolves: RHEL-80854
    Resolves: RHEL-50208
    Resolves: RHEL-50210
    Resolves: RHEL-50211
    Resolves: RHEL-85954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-2
changelog:
  - OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9
    Resolves: RHEL-88910
  - PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9
    Resolves: RHEL-88912
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-89860
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-89861
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-89862
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-89859
  - Enable sslkeylog support
    Resolves: RHEL-90854


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80854


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-104236
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-104856


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-4
changelog:
  - Make openssl speed test signatures without errors
    Resolves: RHEL-95502
  - Build tests in check and without LTO
    Resolves: RHEL-111633


author: Benedikt Bongartz <bongartz@redhat.com> - 0.95.0
changelog:
  - add observability user that is part of the systemd-journal group
  - add opentelemetry collector config folder (`/etc/opentelemetry-collector/configs`)
  - add opentelemetry collector default config
  - add microshift manifests


author: Felix Kolwa <fkolwa@redhat.com> - 0.102.1-4
changelog:
  - Fix SELinux policy resource names
  - Use sources for SELinux resources in spec file
  - Bump revision


author: Felix Kolwa <fkolwa@redhat.com> - 0.107.0-1
changelog:
  - Version bump to 0.107.0
  - Reset release to 1
  - Update addresses the following CVEs:
  - CVE-2024-34155
  - CVE-2024-34156
  - CVE-2024-42368


author: Kseniia Nivnia <knivnia@redhat.com> - 0.107.0-2
changelog:
  - Bump revision
  - Update tarball name to match upstream
  - Upgrade the following tarball dependencies:
  - x/sys v0.23.0 to v0.29.0
  - x/crypto v0.26.0 to v0.32.0
  - x/net v0.28.0 to v0.33.0
  - x/sync v0.8.0 to v0.10.0
  - x/term v0.23.0 to v0.28.0
  - x/text v0.17.0 to v0.21.0
  - Update addresses the following CVEs:
  - CVE-2024-45338
  - CVE-2024-45337


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-3
changelog:
  - Bump revision
  - Update tarball golang from 1.21.0 to 1.22.11
  - Update addresses CVE-2024-45336
    Resolves: RHEL-79113


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-4
changelog:
  - Bump revision
  - Add runtime requirements for shadow-utils and util-linux to ensure successful creation of observability user on installation
  - Modify post-uninstallation stage to only delete delete the observability user on full uninstallation to prevent the user being deleted during upgrades
    Resolves: RHEL-81967


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-5
changelog:
  - Bump revision
  - Update Golang v1.22.11 to v1.23.0
  - Add toolchain go1.23.7
  - Update x/oauth2 v0.22.0 to v0.27.0
  - Update addresses CVE-2025-22868
    Resolves: RHEL-81359


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-6
changelog:
  - Bump revision
  - Update expr v1.16.9 to v1.17.0
  - Remove explicit go toolchain dependency
  - Update addresses CVE-2025-29786
    Resolves: RHEL-83841


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-7
changelog:
  - Bump revision
  - Update go-jose v4.0.2 to v4.0.5
  - Update testify v1.9.0 to v1.10.0
  - Update addresses CVE-2025-27144
    Resolves: RHEL-82967


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-8
changelog:
  - Bump revision
  - Update golang-jwt v5.2.1 to v5.2.2
  - Update addresses CVE-2025-30204
    Resolves: RHEL-85033


author: Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-1
changelog:
  - Collector version update
  - Go version update to v1.23.9
  - Update addresses CVE-2025-22871
    Resolves: RHEL-90050


author: Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-2
changelog:
  - Bump revision
  - Go version update to v1.24.4
  - Update addresses CVE-2025-4673
    Resolves: RHEL-105058


author: Matej Tyc <matyc@redhat.com> - 2.0.0-5
changelog:
  - Fix handling of content archives
    Resolves: rhbz#1996129
  - Fix handling of content fingerprint
    Resolves: rhbz#1993065
  - Fix crash when a previously selected hardening has been cancelled
    Resolves: rhbz#2014108
  - Pull latest translations


author: Matej Tyc <matyc@redhat.com> - 2.0.0-8
changelog:
  - Introduce unified help support
    Resolves: rhbz#2043512
  - Update translations
    Resolves: rhbz#2017374


author: Matej Tyc <matyc@redhat.com> - 2.0.0-9
changelog:
  - Introduce the firstboot remediation
    Resolves: rhbz#1999587
  - Add better error handling of installation using unsupported installation sources
    Resolves: rhbz#2042334


author: Matej Tyc <matyc@redhat.com> - 2.0.0-12
changelog:
  - Remove the firstboot remediation feature completely.
    We can't have it, while maintaining the standard UX.
    Resolves: rhbz#2065751


author: Matej Tyc <matyc@redhat.com> - 2.0.0-13
changelog:
  - Fix problems with handling multi-datastream archives
    Resolves: rhbz#2129846
  - Fix a crash when compulsively clicking in the GUI
    Resolves: rhbz#2127502


author: Jan Černý <jcerny@redhat.com> - 2.0.0-17
changelog:
  - Update translations (rhbz#2189526)
  - Fix tar file extraction (rhbz#2218875)
  - Fix conflict of tftp package with "network servers" group (rhbz#2172264)


author: Victor Toso <victortoso@redhat.com> - 20221130-1
changelog:
  - Update for new release (v20221130)
    Resolves: rhbz#2135751
  - Add rhel-8.8 and rhel-9.2 prereleases
    Related: rhbz#2135751


author: Colin Walters <walters@verbum.org> - 2024.4-3
changelog:
  - Backport
    https://github.com/ostreedev/ostree/pull/3205/commits/e47b37096343efa3bea8295f3f44c4dc90cc04e2


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.0-1
changelog:
  - common: Only check strndup behavior when replacement is used (Daiki Ueno)
  - Release 0.24.0 (Daiki Ueno)
  - Release 0.23.22 (Daiki Ueno)
  - rpc: Tighten attribute array check with manual enumeration (Daiki Ueno)
  - Check for SUN_LEN and provide fallback (Claes Nästén)
  - Do not define _XOPEN_SOURCE in compat.c on Solaris (Claes Nästén)
  - make autogen.sh a bit more portable (Claes Nästén)
  - rpc-server: Disable parsing CKF_ARRAY_ATTRIBUTE (Daiki Ueno)
  - Update README.md (Daiki Ueno)
  - README.md: Suggest using only meson sub-commands instead of ninja (Daiki Ueno)
  - p11-kit: Add missing <limits.h> include for SIZE_MAX (Daiki Ueno)
  - packit: drop synced_files (Tomas Tomecek)
  - packit: fedora renamed master branch to rawhide (Tomas Tomecek)
  - Fix minor typo (Yuri Chornoivan)
  - po: Add trust/trust.c to POTFILES.in (Daiki Ueno)
  - po: Update POTFILES.in (Daiki Ueno)
  - trust: Make more strings translatable (Daiki Ueno)
  - p11-kit: Make more strings translatable (Daiki Ueno)
  - common: Enable message translation in p11_tool_main (Daiki Ueno)
  - meson: Make sure to set PROJECT_NAME and ENABLE_NLS for 'nls' option (Daiki Ueno)
  - build: Add fuzz/meson.build in the distribution (Daiki Ueno)
  - fuzz: Move the directory out of build/ (Daiki Ueno)
  - Release all library/mock resources before exit (David Cook)
  - Add separate oss-fuzz Makefile target (David Cook)
  - Add build targets for future additional fuzzers (David Cook)
  - Build fuzzer target from meson/ninja (David Cook)
  - Explicit dependency for virtual-fixed-generated.h (David Cook)
  - Build fuzzer target from automake (David Cook)
  - rpc_fuzzer: Clean up buffer before exit (David Cook)
  - New set of fuzzer seeds (David Cook)
  - github: Remove unnecessary SRCDIR envvar (Daiki Ueno)
  - github: Use runuser instead of su for building and testing (Daiki Ueno)
  - github: Use composite action to simplify the main recipe (Daiki Ueno)
  - github: Use pre-built container image for building (Daiki Ueno)
  - README.md: Add GitHub workflow status (Daiki Ueno)
  - travis: Remove configurations other than FreeBSD (Daiki Ueno)
  - autotools: Fix for VPATH build (Daiki Ueno)
  - github actions: Initial CI setup (Anderson Toshiyuki Sasaki)
  - modules: p11_kit_initialize_module: Remove redundant module unref (Daiki Ueno)
  - server: Account for NUL byte at the end of Unix domain socket path (Daiki Ueno)
  - compat: Expose FreeBSD specific issetugid, getresuid, and getresgid (Daiki Ueno)
  - compat: Remove <unistd.h> inclusion from compat.h (Daiki Ueno)
  - compat: Avoid unused variables warning in fdwalk emulation (Daiki Ueno)
  - compat: Pacify ASan complaints on intentionally leaked buffer (Daiki Ueno)
  - meson: Link trust/client modules explicitly to -ldl (Daiki Ueno)
  - p11-kit/lists.c: Add stdint.h to fix compilation (Daniel Engberg)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - Use inclusive language on certificate distrust (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.2-1
changelog:
  - Update to new upstream release 0.25.2
    Resolves: RHEL-14834
  - Add IBM specific mechanisms and attributes
    Resolves: RHEL-10570


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.3-3
changelog:
  - Fix regression in trust where file creation fails for long cert labels
    Resolves: RHEL-58899
  - Fix usage message in p11-kit list-tokens command
    Resolves: RHEL-31810


author: Chris Lumens <clumens@redhat.com> - 2.1.7-2
changelog:
  - Rebase on upstream 2.1.7-rc4 release
  - Use systemd-sysusers to create user/group
  - Pacemaker Remote nodes can validate against later schema versions
  - Related: RHEL-17225
  - Resolves: RHEL-7665


author: Chris Lumens <clumens@redhat.com> - 2.1.7-3
changelog:
  - Rebase on upstream 2.1.7 final release
  - Fix documentation for Pacemaker Remote schema transfers
  - Do not check CIB feature set version when CIB_file is set
  - Consolidate attrd cache handling
  - Avoid duplicating option metadata across daemons
  - Related: RHEL-7665
  - Related: RHEL-13216
  - Resolves: RHEL-7702


author: Chris Lumens <clumens@redhat.com> - 2.1.7-4
changelog:
  - Properly validate attribute set type in pacemaker-attrd
  - Fix `crm_attribute -t nodes --node localhost`
  - Resolves: RHEL-13216
  - Resolves: RHEL-17225
  - Resolves: RHEL-23498


author: Chris Lumens <clumens@redhat.com> - 2.1.8-1
changelog:
  - Rebase on upstream 2.1.8-rc1 release
  - Fix a typo in the help output of pacemaker-fenced
  - Fix escaping characters in XML attribute output
  - Resolves: RHEL-25819
  - Resolves: RHEL-30822


author: Chris Lumens <clumens@redhat.com> - 2.1.8-2
changelog:
  - Rebase on upstream 2.1.8-rc4 release
  - Add ability to immediately shutdown system with PCMK_panic_action=
  - Fix a memory leak in the attribute daemon
  - Add ability to list options and parameters as parseable metadata
  - crm_verify now reports invalid fence level indexes
  - Fix an error in node ID handling in `crm_node -i`
  - Fix regression in attrd_updater output
  - Resolves: RHEL-39057
  - Resolves: RHEL-40117
  - Resolves: RHEL-23401
  - Resolves: RHEL-2996
  - Resolves: RHEL-47249
  - Resolves: RHEL-45935


author: Chris Lumens <clumens@redhat.com> - 2.1.9-1
changelog:
  - Rebase on upstream 2.1.9 final release
  - Use async communication to establish TLS connections
  - Fix regression in adding alerts to CIB
  - Fix a crash in command line tools when stderr is closed
  - Resolves: RHEL-61382
  - Resolves: RHEL-34276
  - Resolves: RHEL-55458
  - Resolves: RHEL-59043


author: Chris Lumens <clumens@redhat.com> - 2.1.10-1
changelog:
  - Rebase on upstream 2.1.10-rc1 release
  - Use dbus to detect completion of systemd resource start/stop actions
  - Add an option for controlling remote node fencing behavior
  - Related: RHEL-89134
  - Resolves: RHEL-86143
  - Resolves: RHEL-84018


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-14
changelog:
  - pam_lastlog: check localtime_r() return value. Resolves: #2130124
  - pam_faillock: clarify missing user faillock files after reboot. Resolves: #2126632
  - pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2126648


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-16
changelog:
  - libpam: use close_range() to close file descriptors. Resolves: RHEL-5099
  - fix formatting of audit messages. Resolves: RHEL-5100


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-18
changelog:
  - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
  - pam_access: handle hostnames in access.conf. Resolves: RHEL-22300


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-19
changelog:
  - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
    situations. CVE-2024-22365. Resolves: RHEL-21244


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-22
changelog:
  - pam_unix: always run the helper to obtain shadow password file entries.
    CVE-2024-10041. Resolves: RHEL-62879
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-23631 and RHEL-39943


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-24
changelog:
  - pam_unix: sync expiry checks with shadow. Resolves: RHEL-70519
  - pam.conf: remove tallylog. Resolves: RHEL-15324


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-26
changelog:
  - pam_unix: sync expiry checks with shadow.
    Resolves: RHEL-70519, RHEL-95475, RHEL-96955 and RHEL-96973
  - pam.conf: remove tallylog. Resolves: RHEL-15324
  - pam_namespace: fix potential privilege escalation.
    Resolves: CVE-2025-6020 and RHEL-96727


author: Alexander Bokovoy <abokovoy@redhat.com> - 6.11-1
changelog:
  - Update to v6.11 release
  - Resolves: rhbz#1876400 - CVE-2020-14342 - cifs-utils: shell command injection


author: Jonathan Lebon <jonathan@jlebon.com> - 6.11-2
changelog:
  - Split out -info subpackage for smb2-quota and smbinfo
    https://bugzilla.redhat.com/show_bug.cgi?id=1909288


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: Peng Wu <pwu@redhat.com> - 1.48.7-3
changelog:
  - Update pango-emoji-table.h for emoji 14 support
  - Add pango-update-emoji.patch
  - Resolves: #2119674


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.42.2-3
changelog:
  - Use pkgconfig to BR the required cairomm API/ABI version 1.0 (vs. 1.16); use
    cairomm1.0, which may be a virtual Provides, in the manual lib Requires


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-4
changelog:
  - Switch to copies instead of links for pasta: previous workaround unreliable
  - Resolves: RHELPLAN-155811


author: Lauren Chilton <lchilton@redhat.com> - 6.2.2-4
changelog:
  - Removed excess headers for pcp2openmetrics tool (RHEL-39159)
  - Fix pcp2openmetrics '-s' option (RHEL-39132)
  - Fix pcp2openmetrics timestamps in archive mode (RHEL-32983)
  - Fix pcp2openmetrics output to adhere to prometheus parser (RHEL-39293)


author: Nathan Scott <nathans@redhat.com> - 6.2.2-5
changelog:
  - Add rpm dependency on package providing ps(1) tool (RHEL-39491)
  - Update Java bytecode in pcp-testasuite package (RHEL-40718)


author: Nathan Scott <nathans@redhat.com> - 6.3.1-1
changelog:
  - New pcp-xsos utility for rapid system summaries (RHEL-30590)
  - Fix Upgrade scripts to not rewrite pmcd.conf (RHEL-40631)
  - Add new Hyper-V balloon usage metrics (RHEL-45715)
  - Auto-load pmdaproc in local context (RHEL-50941)
  - Fix a benign potential libpcp buffer overflow (RHEL-58914)
  - Fix pcp-zeroconf pmie.config write permission (RHEL-59366)
  - Rebase to latest stable version of PCP (RHEL-58953)


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Add proc PMDA access control for IO metrics (RHEL-60891)
  - Fix pmdastatsd segfaults within pmdaRehash (RHEL-57717)
  - Multiple hugepage size NUMA metric support (RHEL-45876)
  - Improve pcp-xsos command line diagnostics (RHEL-61597, RHEL-61598)
  - Add pmlogger_farm_check service selinux policy (RHEL-61885)
  - Fix v3 archive replay on big endian machines (RHEL-61501)
  - Rebase to latest stable version of PCP (RHEL-58953)


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039)
  - Fix a multilib regression in PCP header files (RHEL-93186)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories


author: Nathan Scott <nathans@redhat.com> - 5.3.0-1
changelog:
  - Added conditional lockdown policy access by pmdakvm (BZ 1940971)
  - Added spec file dependency on cyrus-sasl-scram (BZ 1942879)
  - Update to latest PCP sources (BZ 1957575)


author: Nathan Scott <nathans@redhat.com> - 5.3.0-2
changelog:
  - Improve pmchart duplicate archive diagnostics (BZ 1615718)
  - Save pmchart users prefered archive locations (BZ 1615742)
  - Remove libvarlink dependency from podman PMDA (BZ 1956608)
  - Correct pcp-testsuite file permissions (BZ 1922040)
  - Resolve pcp-testsuite linkage problems (BZ 1950263)


author: Nathan Scott <nathans@redhat.com> - 5.3.1-3
changelog:
  - Fix pmproxy parallel TLS requests bug (BZ 1947989)
  - Backport pmrep archive creation fix (BZ 1974266)
  - Related: rhbz#1957575


author: Mark Goodwin <mgoodwin@redhat.com> - 5.3.1-4
changelog:
  - Improve pmproxy and libpcp_web scalability (BZ 1975069)
  - Provide a pcp-ss(1) tool in pcp-system-tools (BZ 1879350)


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Petr Pisar <ppisar@redhat.com> - 10.36-4
changelog:
  - Fix a mismatch if \K was involved in a recursion
  - Restore single character repetition optimization in JIT (upstream bug #2698)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.37-1
changelog:
  - Rebase to the 10.37
  - libpcre2-posix.so.2* SONAME bump to libpcre2-posix.so.3*
  - Enable JIT for s390x arch
  - Patches upstreamed: Patch 1,2,3,4
  - Resolves: rhbz#1970765, BZ#1965025


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-471
changelog:
  - Make accessing environment by DynaLoader thread-safe
  - Use duplocale() if available
  - Fix fc() in Turkish locale
  - Fix croaking on "my $_" when "use utf8" is in effect (GH#18449)
  - Fix PERL_UNUSED_ARG() definition in XSUB.h
  - Add missing entries to perldiag (GH#18276)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-472
changelog:
  - Protect locale tests from LANGUAGE environment variable
  - Prevent the number of buckets in a hash from getting too large
  - Fix a memory leak when compiling a regular expression (GH#18604)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-474
changelog:
  - Fix dumping a hash entry of PL_strtab type
  - Fix an arithmetic left shift of a minimal integer value (GH#18639)


author: Paul Howarth <paul@city-fan.org> - 1.2000-1
changelog:
  - Update to 1.200
    - New release with no new features, just preparing for a series of bugfix
      releases
  - Specify all build dependencies
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.014-14
changelog:
  - Spec clean-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Use %{make_build} and %{make_install}
    - Fix permissions of installed files


author: Tom Callaway <spot@fedoraproject.org> - 0.44-1
changelog:
  - Update to 0.44
    - Support Perls with COW disabled
    - Bump B::COW requirement for testing
  - Disable tests until B::COW is packaged


author: Tom Stellard <tstellar@redhat.com> - 1.64-4
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Petr Pisar <ppisar@redhat.com> - 1.66-2
changelog:
  - Update DBD-SQLite-1.60-Unbundle-Test-NoWarnings.patch
  - Do not build-require unused Test::FailWarnings
  - Update the description


author: Tom Stellard <tstellar@redhat.com> - 1.642-7
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Paul Howarth <paul@city-fan.org> - 1:0.17029-1
changelog:
  - Update to 0.17029
    - Rebuild for order of 'NAME' and 'VERSION' sections in the generated POD
      documentation (VERSION used to appear before NAME)


author: Paul Howarth <paul@city-fan.org> - 1.002002-1
changelog:
  - Update to 1.002002
    - Fix bug in handling regexps in import lists; Exporter::Tiny allowed regexps
      like /foo/i but not /foo/; having trailing flags is now optional! (GH#6)
    - Tests would fail if 'PERL5OPT=-Mfeature=:5.18' environment variable was set;
      this is because bareword '-default' was being interpreted as the Perl
      'default' keyword (GH#5)
  - Unbundle newly-bundled test modules


author: Paul Howarth <paul@city-fan.org> - 1.16-18
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.72-21
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - IO::Socket::Utils CERT_asHash and CERT_create now support subject and
      issuer with multiple same parts (like multiple OU); in this case an array
      ref instead of a scalar is used as hash value (GH#95)


author: Michal Josef Špaček <mspacek@redhat.com> - 2.070-4
changelog:
  - Remove failing tests in openssl 3.0.0-alpha16. Related: rhbz#1968046
    - Provisional for mass rebuild of openssl3.


author: Paul Howarth <paul@city-fan.org> - 1.26-1
changelog:
  - Update to 1.26
    - BUILD: Update FAIL_POSIX warning message (GH#28)
    - TEST: t/07_taint.t: Use executable name as source of taintedness (GH#21)
    - OTHER: Typographic corrections (CPAN RT#60211, CPAN RT#86403)
    - Add Travis configuration


author: Paul Howarth <paul@city-fan.org> - 1.29-1
changelog:
  - Update to 1.29
    - Improved handling of shell commands on Windows, which should get us closer
      to resolving Win32-related issues; there should be no change of
      functionality on Unix-like platforms
    - Better workaround for bug in perl-5.8.9 (GH#23)
    - Add t/args.t
    - Modify t/win32.t
    - Added Travis and AppVeyor configuration files
    - Eliminated use of Dist::Zilla for build, using older, but more reliable and
      better understood (by maintainer) ExtUtils::MakeMaker-based configuration
    - Move author testing to xt/ directory


author: Emmanuel Seyman <emmanuel@seyman.fr> - 4.03-1
changelog:
  - Update to 4.03
  - Use %{make_install} instead of "make pure_install"
  - Use %{make_build} instead of make
  - Replace calls to %{__perl} with /usr/bin/perl
  - Pass NO_PACKLIST and NO_PERLLOCAL to Makefile.PL


author: Petr Pisar <ppisar@redhat.com> - 1:0.68-3
changelog:
  - Fix resolving localhost on loopback-only machines
    (https://github.com/perl-ldap/perl-ldap/pull/60)


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix failing installation in parallel make (GH#38)
    - Infrastructure improvements and tooling updates, lots of author tests with
      corresponding fixes added
    - Added slide and slideatatime functions
    - Documentation fixes (GH#21, GH#33, GH#34, CPAN RT#126029, CPAN RT#132043,
      CPAN RT#132940)
    - Bump List::MoreUtils::XS requirement to 0.430
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix parts of CPAN RT#123989: more $a/$b/$_ refcounting bugs
      - Since some bugs are simply reported wrong, dealing with them breaks more
        (including running code) than it solves - way too heavy to feel better...
    - Introduce functions slide and slideatatime
    - Toolchain fixes
    - Fix LANG=nb_NO.utf8 related str tests fails (CPAN RT#133128)
    - Fix typo (GH#7)
    - Fix parts of CPAN RT#132043: listcmp misbehave in XS implementation
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.70-1
changelog:
  - Update to 0.70
    - Protect ourselves from Module::Metadata parsing problems (CPAN RT#130939)
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.86-1
changelog:
  - Update to 0.86
    - Update PAUSE and ANDK keys to 2020
    - Update documentation pertaining to SHA1
    - Fix compatibility with Crypt::OpenPGP
  - Use mktemp to create temporary GPG directory


author: Paul Howarth <paul@city-fan.org> - 0.21-26
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.90-1
changelog:
  - Update to 1.90
    - Formalised libssl version support policy: all stable versions of OpenSSL
      in the 0.9.8-1.1.1 branches (with the exception of 0.9.8-0.9.8b) and all
      stable releases of LibreSSL in the 2.0-3.1 series are supported
    - The LibreSSL 3.2 series is not yet fully supported because its TLSv1.3
      implementation is not currently libssl-compatible
    - Added support for LibreSSL on Windows when built with Visual C++
    - Exposed P_X509_CRL_add_extensions, several SSL_CIPHER functions, and
      several stack functions
    - Fixed crashes in the callback functions CTX_set_next_proto_select_cb and
      CTX_set_alpn_select_cb
    - The test suite is now compatible with OpenSSL 1.1.1e onwards, as well as
      OpenSSL security level 2 (the default on many Linux distributions)


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-4
changelog:
  - Fix tests for openssl 3.0.0-alpha16. rhbz#1964854
    - Fix check across alpha1 vs alpha17
    - Change default alg for PEM_get_string_PrivateKey()
    - Different order in CA chain in some versions
    - Changed API of CTX_set_ciphersuites() and set_ciphersuites(), ignore
      unknown ciphers
    - Disable TLSv1 and TLSv1_1 usage in test


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-6
changelog:
  - Fix tests for openssl 3.0.0-beta1. rhbz#1964854
    - Add fix for t/05_passwd_cb.t
    - Update Net-SSLeay-1.90-openssl3.0.0-43_misc_functions.patch to accept beta version
  - Fix tab vs space in spec file
  - Update Net-SSLeay-1.90-openssl3.0.0-39_pkcs12.patch patch to upstream version


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-8
changelog:
  - Fix tests for openssl 3.0.0-beta2. rhbz#1992571
    - Add another fix for t/05_passwd_cb.t, because change in passphrase caching
  - Remove XXX in spec file


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.94-1
changelog:
  - Resolves: RHEL-40758
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list
  - Package tests


author: Paul Howarth <paul@city-fan.org> - 1.106-20
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build requirements
    - Drop support for building with Test::More < 0.88
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Use %license macro


author: Paul Howarth <paul@city-fan.org> - 1:0.38-458
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Tom Stellard <tstellar@redhat.com> - 3:1.54-441
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.29-6
changelog:
  - Spec file cleanups: Use make_build and make_install macros, use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.36-3
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Petr Pisar <ppisar@redhat.com> - 3:1.302177-1
changelog:
  - Update to 1.302177
    - Minor fix to author downstream test
    - No significant changes since the last trial
    - Fix Test::More's $TODO inside intercept (#862)


author: Paul Howarth <paul@city-fan.org> - 3:1.302180-1
changelog:
  - Update to 1.302180
    - Move try_sig_mask to the only module that uses it
    - Inherit warnings bitmask in cmp_ok string eval
    - Update copyright date
    - Improved API for intercept {} and what it returns
    - Bump minimum List::Util version (for uniq)


author: Paul Howarth <paul@city-fan.org> - 3:1.302181-1
changelog:
  - Update to 1.302181
    - Put try_sig_mask back where it goes (and add test to prevent this in the
      future)
    - Drop new List::Util requirement back down


author: Tom Stellard <tstellar@redhat.com> - 1.1-36
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Paul Howarth <paul@city-fan.org> - 1.30-1
changelog:
  - Update to 1.30
    - Breaking Change: Set $YAML::LoadBlessed default to false to make it more
      secure


author: Paul Howarth <paul@city-fan.org> - 1:0.238-1
changelog:
  - Update to 0.238
    - Move the prerequisite Test::More from being a runtime prerequisite to a
      test time / build time prerequisite (GH#11)


author: Filip Janus <fjanus@redhat.com> - 1.7.0-1
changelog:
  - Initial import for postgresql 15 module
  - Update to 1.7.0
  - Support postgresql 15
  - Related: #2128410


author: Remi Collet <rcollet@redhat.com> - 8.0.10-1
changelog:
  - rebase to 8.0.10 #1992513
  - compatibility with OpenSSL 3.0 #1992492
  - snmp:  add sha256 / sha512 security protocol #1936635
  - phar: implement openssl_256 and openssl_512 for phar signatures
  - phar: use sha256 signature by default


author: Remi Collet <rcollet@redhat.com> - 8.0.20-1
changelog:
  - rebase to 8.0.20 #2095752
  - clean unneeded dependency on useradd command #2095447
  - add upstream patch to initialize pcre before mbstring
  - retrieve tzdata version from /usr/share/zoneinfo/tzdata.zi


author: Remi Collet <rcollet@redhat.com> - 8.0.30-2
changelog:
  - Fix Leak partial content of the heap through heap buffer over-read
    CVE-2024-8929
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233
  - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
    CVE-2024-8927
  - Fix Logs from childrens may be altered
    CVE-2024-9026
  - Fix Erroneous parsing of multipart form data
    CVE-2024-8925
  - Fix filter bypass in filter_var FILTER_VALIDATE_URL
    CVE-2024-5458
  - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
    CVE-2024-2756
  - Fix password_verify can erroneously return true opening ATO risk
    CVE-2024-3096


author: Remi Collet <rcollet@redhat.com> - 8.0.30-3
changelog:
  - Fix libxml streams use wrong `content-type` header when requesting a redirected resource
    CVE-2025-1219
  - Fix Stream HTTP wrapper header check might omit basic auth header
    CVE-2025-1736
  - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes
    CVE-2025-1861
  - Fix Streams HTTP wrapper does not fail for headers without colon
    CVE-2025-1734
  - Fix Header parser of `http` stream wrapper does not handle folded headers
    CVE-2025-1217


author: Remi Collet <rcollet@redhat.com> - 8.1.6-2
changelog:
  - add upstream patch to initialize pcre before mbstring
  - add upstream patch to use more sha256 in openssl tests


author: Remi Collet <rcollet@redhat.com> - 8.2.13-1
changelog:
  - rebase to 8.2.13 RHEL-14699
  - add %__phpize and %__phpconfig macros
  - move httpd/nginx wants directives to config files in /etc
  - php-fpm.conf: move include directive after [global] section
    following upstream example, allowing overriding
  - use SPDX license IDs


author: Remi Collet <rcollet@redhat.com> - 8.3.12-1
changelog:
  - rebase to 8.3.12 RHEL-62189
  - enable command history in phpdbg
  - backport Argon2 password hashing in OpenSSL ext
  - build sockets extension statically
  - switch to nikic/php-parser version 5
  - openssl: always warn about missing curve_name


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Jakub Jelen <jjelen@redhat.com> - 1.1.1-2
changelog:
  - Move pinentry-tty to separate subpackage (#1782442)
  - Update the wrapper selecting the appropriate version (#1918969)


author: Neal Gompa <ngompa@centosproject.org> - 0.3.40-1
changelog:
  - Update to version 0.3.40 which drops media-session service for WirePlumber
    Resolves: rhbz#2022694


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 2.11.4-6
changelog:
  - Drop jackson-module-afterburner, jackson-module-guice, jackson-module-mrbean,
    jackson-module-osgi, jackson-module-paranamer, and jackson-module-javadoc


author: Alexander Scheel <ascheel@redhat.com> - 3.0.26-6
changelog:
  - CVE-2020-1695: Improper validation of response header in MediaTypeHeaderDelegate.java class
    Resolves: rh-bz#1845547


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 3.0.26-13
changelog:
  - Replace jboss-annotations-1.2-api with jakarta-annotations
  - Drop log4j dependency
  - Add jakarta-activation dependency


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.30-1
changelog:
  - Resolves: rhbz#1721684 Rebase pki-servlet-engine to 9.0.30
  - Update to JWS 5.3.0 distribution
  - Remove new dependencies that PKI doesn't need (and are not provided by RHEL 8)


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.43-1
changelog:
  - Update to JWS 5.5, and drop jakarta-saaj dependency
  - Updates to javapackages-local removed %add_maven_depmap which broke the build,
    so I removed most of the maven artifacts as they aren't very useful anyway
  - Cleaned up a few unnecessary patches


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.43-2
changelog:
  - Related: rhbz#1977948 Cleanup unused tomcat-juli.jar copy now that the maven artifacts have been removed


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-13.20200306git58a7289
changelog:
  - Add patches fixing crash on monitor hot(un)plug (rhbz#1809681)
  - Add patches fixing delay between gdm telling us to deactivate and
    us telling gdm it is ok to continue
  - Drop plymouth-plugin-throbgress sub-package, the spinfinity theme now
    uses the two-step plugin


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-14.20200306git58a7289
changelog:
  - New upstream git snapshot
  - Add RemainAfterExit=yes to plymouth's systemd service files (rhbz#1807771)
  - Fix the spinner / animation missing on shutdown and reboot


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-1.20210323git8a3c9bb
changelog:
  - Update to 0.9.5 + a bunch of extra fixes from git (new upstream git snapshot)
  - Fixes 1896929 - systemd complains about Unit configured to use KillMode=none


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-2.20210331git1ea1020
changelog:
  - New git snapshot
  - Fixes 1933378 - Bootsplash doesn't always fully clear on boot to console
  - Fixes 1941329 - Flickering plymouth on shutdown/reboot
  - Prune spec-file changelog a bit


author: Jindrich Novy <jnovy@redhat.com> - 5:5.2.2-1
changelog:
  - stick with the v5.2-rhel branch for RHEL
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/458f9b4)
  - Resolves: RHEL-60965


author: Jindrich Novy <jnovy@redhat.com> - 5:5.2.2-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/e40738b)
  - Resolves: RHEL-61858


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/5e3accd)
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/45c2d1f)
  - fixes "CVE-2025-27144 podman: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-9.7]"
  - Resolves: RHEL-80615


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9d2e54f)
  - fixes "Excessive memory leak due to uncontrolled accumulation of health.log entries in Podman 5.x"
  - Resolves: RHEL-83262


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/a994a04)
  - fixes "podman tests are failing"
  - Resolves: RHEL-86200


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/0ee1d49)
  - fixes "podman tests are failing - [RHEL-10.1.GA]"
  - Resolves: RHEL-88191


author: Jindrich Novy <jnovy@redhat.com> - 5:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 5:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.1.1-rhel
    (https://github.com/containers/podman/commit/fa692a6)
  - Related: #2097694


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-6
changelog:
  - convert catatonit dependency to soft dep as catatonit is
    no longer in Appstream but in CRB
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.2.0
    (https://github.com/containers/podman/commit/7fe5a419cfd2880df2028ad3d7fd9378a88a04f4)
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 2:4.5.1-3
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175074
  - Resolves: #2179966
  - Resolves: #2187322
  - Resolves: #2187383
  - Resolves: #2203702
  - Resolves: #2207522


author: Jindrich Novy <jnovy@redhat.com> - 2:4.5.1-5
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175071
  - Resolves: #2179950
  - Resolves: #2187318
  - Resolves: #2187366
  - Resolves: #2203681
  - Resolves: #2207512


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.0
    (https://github.com/containers/podman/commit/38e6fab9664c6e59b66e73523b307a56130316ae)


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/1b2fadd)
  - Resolves: #2232127


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/8bb0204)
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/ea33dce)
  - Related: #2176063


author: Petr Lautrbach <plautrba@redhat.com> - 3.4-3
changelog:
  - Run autorelabel in parallel by default
    https://fedoraproject.org/wiki/Changes/SELinux_Parallel_Autorelabel


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-2
changelog:
  - Improve man pages (RHEL-672)
  - Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)


author: Jan Rybar <jrybar@redhat.com> - 0.117-13
changelog:
  - session-monitor: watch sessions only
  - PolkitPermission: react on really changed sessions
  - allow polkit-pkla-compat to be uninstalled if no .pkla rules
  - Resolves: RHEL-39063


author: Marek Kasik <mkasik@redhat.com> - 21.01.0-11
changelog:
  - Backport fixes for issues found by Coverity Scan
  - and fix some of the new issues
  - Resolves: #1967967


author: Tomas Korbar <tkorbar@redhat.com> - 2:3.5.9-20
changelog:
  - Backport dns SRV record resolution feature (RFC6186)
    Resolves: rhbz#2134789
  - Fix building in ZUUL CI
    Resolves: rhbz#2193363


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.5.9-14
changelog:
  - Fixed cleanup crash when processing messages with whitespace only fullname
    Resolves: rhbz#1978901


author: Honza Horak <hhorak@redhat.com> - 13.3-6
changelog:
  - Do not provide pkgconfig(libpq) to not trick packages that actually require
    libpq-devel
    Resolves: #1980992


author: Filip Januš <fjanus@redhat.com> - 13.3-9
changelog:
  - Remove tests failing with openssl3, now pgp is tested only with
    supported ciphers
    Add postgresql-pgcrypto-openssl3-init.patch - Correctly init ciphers
    Add postgresql-pgcrypto-openssl3-tests.patch - disable unsupported
    ciphers in the test suite
    Related discussion: #2008773
    Resolves: #1964848


author: Marek Kulik <mkulik@redhat.com> - 13.5-1
changelog:
  - Update to 13.5 (#2023301)
    Remove patch postgresql-pgcrypto-openssl3-init.patch - Already in upstream


author: Masahiro Matsuya <mmatsuya@redhat.com> - 13.13-1
changelog:
  - Update to 13.13
  - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, and CVE-2023-39417
  - Resolves: RHEL-5567


author: Masahiro Matsuya <mmatsuya@redhat.com> - 15.5-1
changelog:
  - update to 15.5
  - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, CVE-2023-39417, and CVE-2023-39418


author: Filip Januš <fjanus@redhat.com> - 15.0-1
changelog:
  - Initial import for postgresql 15
  - Specfile is based on version locate in centos stream
    It reflects changes with libpq. This version of databse server
    will use private libpq library.
  - Resolves: #2128241


author: Filip Januš <fjanus@redhat.com> - 15.2-1
changelog:
  - Update to upstream version 15.2
  - Update postgresql-setup to 8.8
  - PostgreSQL systemd unit waits for the network to be up
  - Resolves: #2128241


author: Filip Janus <fjanus@redhat.com> - 16.0-1
changelog:
  - New postgresql stream - 16
  - Remove pdf documentation
  - Update postgresql-setup to 8.9
  - postmaster binary no more shipped
  - Resolves: RHEL-3636


author: Bastien Nocera <bnocera@redhat.com> - 0.8.1-2
changelog:
  + power-profiles-daemon-0.8.1-2
  - Remove linter, as apparently unwanted in check section
  - Resolves: rhbz#1947950


author: Kate Hsuan <hpa@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Support multi-drivers mode and amdgpu
  - Support dynamically adjusts amd-pstate EPP values between battery and AC modes.
  - Resolves: RHEL-23395


author: Adrian Reber <adrian@lisas.de> - 3.14.0-6
changelog:
  - Reintroduce the emacs subpackage to avoid file conflicts between
    protobuf-compiler.x86_64 and protobuf-compiler.i686
  - Disable LTO to fix annobin errors


author: Adrian Reber <areber@redhat.com> - 3.14.0-14
changelog:
  - Applied patch for CVE-2022-1941 (#RHEL-40872)
  - Applied patch to make emacs dependency optional (#RHEL-40572)


author: Jan Rybar <jrybar@redhat.com> - 3.6-16
changelog:
  - output is not redirected when ps_mem is killed
  - cmdline unwanted blank spaces fixed
  - Resolves: rhbz#2033997
  - Resolves: rhbz#2049743


author: Wim Taymans <wtaymans@redhat.com> - 15.0-1
changelog:
  - Update to 15.0
  - convert to meson build
  - esound, gconf, oss are no longer supported
  - Resolves: rhbz#1961581


author: Brian C. Lane <bcl@redhat.com> - 3.32.1-1
changelog:
  - Use .z version for new builds, start with 3.32.0 (bcl)
    Related: rhbz#1968762
  - tests: Use pykickstart/commands relative to the import (bcl)
    Related: rhbz#1968762


author: Brian C. Lane <bcl@redhat.com> - 3.32.2-1
changelog:
  - Add RHEL 9 handler (mkolman)
    Resolves: rhbz#1966730
  - Add RHEL 9 version for commands that had a RHEL version in the past (mkolman)
    Related: rhbz#1966730
  - Add RHEL 9 version for BTRFS related commands (mkolman)
    Related: rhbz#1966730


author: Brian C. Lane <bcl@redhat.com> - 3.32.4-1
changelog:
  - github: Add rhel9-branch to the list of branches (bcl)
    Related: rhbz#2054906
  - Fix validation of packages arguments (bcl)
    Resolves: rhbz#2054906


author: Brian C. Lane <bcl@redhat.com> - 3.32.5-1
changelog:
  - Tools should default to RHEL9 not DEVEL (bcl)
    Resolves: rhbz#2060779
  - Default to RHEL9 for docs and ksshell test. (bcl)
    Related: rhbz#2060779
  - Set default version to RHEL9 (bcl)
    Related: rhbz#2060779
  - Remove the --ignorebroken option from RHEL handlers (vponcova)
    Related: rhbz#2060779
  - Add the isRHEL function (vponcova)
    Related: rhbz#2060779


author: Brian C. Lane <bcl@redhat.com> - 3.32.6-1
changelog:
  - tests: Update ksvalidator tests to allow new wording for help output (bcl)
    Related: rhbz#2083269
  - rootpw: Use RHEL9 instead of F37 for new rootpw feature (bcl)
    Related: rhbz#2083269
  - rootpw: Add an --allow-ssh argument (bcl)
    Resolves: rhbz#2083269
  - github: Fix workflow to only send coverage for python 3.9 (bcl)
    Related: rhbz#2083269


author: Brian C. Lane <bcl@redhat.com> - 3.32.10-1
changelog:
  - Add DNS handling options to the network command (vslavik)
    Resolves: rhbz#2172531
  - whitelist_externals has changed to allowlist_externals (bcl)
    Related: rhbz#2172531


author: Brian C. Lane <bcl@redhat.com> - 3.32.11-1
changelog:
  - tox: Only run unit tests for python 3.6 (bcl)
    Related: RHEL-17662
  - Add conflict test between ostree sources (#2125655) (jkonecny)
    Related: RHEL-17662
  - Fix missing seen check for output generation (#2125655) (jkonecny)
    Related: RHEL-17662
  - Add new ostreecontainer command (#2125655) (jkonecny)
    Resolves: RHEL-17662
  - Check the conflicting commands automatically (vponcova)
    Related: RHEL-17662
  - Fix tests for conflicting commands (vponcova)
    Related: RHEL-17662
  - Add conflicting commands support (bcl)
    Related: RHEL-17662


author: Brian C. Lane <bcl@redhat.com> - 3.32.12-1
changelog:
  - Add support for inline certificates with `%certificate` section (k.koukiou)
    Resolves: RHEL-61432


author: Brian C. Lane <bcl@redhat.com> - 3.32.14-1
changelog:
  - Update %certificate section documentation (rvykydal)
    Related: RHEL-61432
  - Make %certificate section option --dir mandatory. (rvykydal)
    Resolves: RHEL-76501


author: Brian C. Lane <bcl@redhat.com> - 3.32.15-1
changelog:
  - workflows: run tests using only python 3.9 (bcl)
    Related: RHEL-75659
  - workflows: Switch to using ubuntu-latest (bcl)
    Related: RHEL-75659
  - Do not remove "md" prefix from RAID names (vtrefny)
    Resolves: RHEL-75659


author: Lumír Balhar <lbalhar@redhat.com> - 1.6.3-1
changelog:
  - Remove .dist-info directory at the end of %pyproject_buildrequires
  - An incomplete .dist-info directory in $PWD can confuse tests in %check


author: Miro Hrončok <mhroncok@redhat.com> - 1.7.0-1
changelog:
  - %pyproject_buildrequires: Redirect stdout to stderr via Shell
  - Dependencies are recorded to a text file that is catted at the end


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.0-1
changelog:
  - %pyproject_buildrequires: Add support for self-referential extras requirements
  - Deprecate the provisional %{pyproject_build_lib} macro
    See https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/thread/HMLOPAU3RZLXD4BOJHTIPKI3I4U6U7OE/


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.1-1
changelog:
  - On Python older than 3.11, use tomli instead of deprecated toml
  - Fix literal % handling in %{pyproject_files} on RPM 4.19


author: Python Maint <python-maint@redhat.com> - 1.10.0-1
changelog:
  - Add %_pyproject_check_import_allow_no_modules for automated environments
  - Fix handling of tox 4 provision without an explicit tox minversion
  - Fixes: rhbz#2240590


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.1-1
changelog:
  - Add a temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Related: rhbz#2284187


author: Miro Hrončok <mhroncok@redhat.com> - 1.13.0-1
changelog:
  - Properly escape weird characters from paths in %{pyproject_files} (RPM 4.19+ only)
  - Revert the temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Fixes: rhbz#1990879


author: Python Maint <python-maint@redhat.com> - 1.15.0-1
changelog:
  - Add a possibility to read runtime requirements from pyproject.toml [project] table
  - Fixes: rhbz#2261939
  - Don't generate a dependency on pip when %pyproject_buildrequires -N is used
  - Fixes: rhbz#2294510
  - Even when %_auto_set_build_flags is disabled, set all compiler flags when building wheels
  - Fixes: rhbz#2293616


author: Miro Hrončok <mhroncok@redhat.com> - 1.16.0-1
changelog:
  - %pyproject_buildrequires: Add support for dependency groups (PEP 735), via the -g flag
  - This is implied when used tox testenvs depend on dependency groups (requires tox 4.22+)
  - Fixes: rhbz#2318849


author: Miro Hrončok <miro@hroncok.cz> - 1.16.1-1
changelog:
  - Support for setuptools 70+
  - wheel is no longer generated as a dependency of the default build system


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.3.2-1
changelog:
  - Update %pyproject_build_lib to support setuptools 62.1.0 and later
  - %pyproject_buildrequires: When extension modules are built,
    support https://fedoraproject.org/wiki/Changes/Package_information_on_ELF_objects


author: Python Maint <python-maint@redhat.com> - 1.4.0-1
changelog:
  - %pyproject_save_files: Support License-Files installed into the *Root License Directory* from PEP 369
  - %pyproject_check_import: Import only the modules whose top-level names
    match any of the globs provided to %pyproject_save_files


author: Miro Hrončok <mhroncok@redhat.com> - 3.9-44
changelog:
  - Set $RPM_BUILD_ROOT in %{python3_...} macros
    to allow selecting alternate sysconfig install scheme based on that variable


author: Karolina Surma <ksurma@redhat.com> - 3.9-45
changelog:
  - Introduce -f (read from file) option to %py{3}_check_import
  - Introduce -t (filter top-level modules) option to %py{3}_check_import
  - Introduce -e (exclude module globs) option to %py{3}_check_import


author: Karolina Surma <ksurma@redhat.com> - 3.9-46
changelog:
  - Fix multiline arguments processing for %py_check_import
  - Fix %py_shebang_flags handling within %py_check_import
  - Process .pth files in buildroot's sitedirs in %py_check_import
  - Move import_all_modules.py from python-srpm-macros to python-rpm-macros


author: Miro Hrončok <mhroncok@redhat.com> - 3.9-47
changelog:
  - Set %__python3 value according to %python3_pkgversion
    I.e. when %python3_pkgversion is 3.12, %__python3 is /usr/bin/python3.12


author: Tomas Orsava <torsava@redhat.com> - 3.9-49
changelog:
  - Add lua helper functions to make it possible to automatically generate
    Obsoletes tags
  - Modify the %py_provides macro to also generate Obsoletes tags on CentOS/RHEL
  - Resolves: rhbz#1990421


author: Tomas Orsava <torsava@redhat.com> - 3.9-51
changelog:
  - Add Obsoletes tags with the python39- prefix for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.19-1
changelog:
  - Update to 3.9.19
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix tests for XMLPullParser with Expat with fixed CVE
  Resolves: RHEL-33679, RHEL-33691


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.21-1
changelog:
  - Update to 3.9.21
  - Security fix for CVE-2024-11168 and CVE-2024-9287
  Resolves: RHEL-64889
  Resolves: RHEL-69942


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.23-1
changelog:
  - Update to 3.9.23
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98051, RHEL-98024, RHEL-98242, RHEL-98193, RHEL-98218


author: Tomas Orsava <torsava@redhat.com> - 0.10.1-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Miro Hrončok <mhroncok@redhat.com> - 1.4.3-12
changelog:
  - Subpackage python2-appdirs has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.5.0-18
changelog:
  - Subpackage python2-augeas has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Pino Toscano <ptoscano@redhat.com> - 0.5.0-20
changelog:
  - Backport upstream commit d93e1563add8c40450556b7d74520439ee792bd9 to fix
    the discovery of location in the test
  - Execute the tests at build time
  - Add a simple gating test to execute the test script, and make it gating for
    the python-augeas source


author: Tomas Popela <tpopela@redhat.com> - 1.20.1-1
changelog:
  - Update to 1.20.1
  - Resolves: rhbz#2016905
  - Ship python3-cairo-devel in CRB
  - Resolves: rhbz#2053665


author: Miro Hrončok <mhroncok@redhat.com> - 5.0.6-19
changelog:
  - Subpackage python2-configobj has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Vendula Poncova <vponcova@redhat.com> - 0.4-1
changelog:
  - Replace the error register with the error mapper (vponcova)
  - Propagate additional arguments for the client handler factory (vponcova)
  - Propagate additional arguments in the class AddressedMessageBus (vponcova)
  - Generate the documentation (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.0-1
changelog:
  - Fix the documentation (vponcova)
  - Fix minor typos (yurchor)
  - Enable Codecov (vponcova)
  - Test the documentation build (vponcova)
  - Extend the documentation (vponcova)
  - Add configuration files for Read the Docs and Conda (vponcova)
  - Fix all warnings from the generated documentation (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.1-1
changelog:
  - Include tests and examples in the source distribution (vponcova)
  - Fix the pylint warning signature-differs (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.2-1
changelog:
  - Replace ABC with ABCMeta (vponcova)
  - Fix typing tests (vponcova)
  - Run tests on the latest CentOS (vponcova)
  - Install sphinx from PyPI (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.3-1
changelog:
  - Document differences between dasbus and pydbus (vponcova)
  - Improve the support for interface proxies in the service identifier (vponcova)
  - Improve the support for interface proxies in the message bus (vponcova)
  - Test the interface proxies (vponcova)
  - Make the message bus of a service identifier accessible (vponcova)
  - Fix the testing environment for Fedora Rawhide (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.4-1
changelog:
  - Handle all errors of the DBus call (vponcova)
  - Fix tests for handling DBus errors on the server side (vponcova)
  - Run packit smoke tests for all Fedora (jkonecny)
  - Fix packit archive creation (jkonecny)
  - Add possibility to change setup.py arguments (jkonecny)


author: Bryan Gurney <bgurney@redhat.com> - 0.8-4
changelog:
  - Remove check test
  - Remove BuildRequires for python3-dbus and python3-into-dbus-python
  - Resolves: rhbz#1986608


author: Bryan Gurney <bgurney@redhat.com> - 0.04-4
changelog:
  - Remove check test
  - Remove Requires and BuildRequires for python3-pyparsing
  - Resolves: rhbz#1986574


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-2
changelog:
  - Fix Python configuration for ELN/RHEL 9
  - Rework bconds for Python now that there are no Fedoras left that should
    use Python2


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-12
changelog:
  - Fix incorrect spanish translation file (RHEL-6394)
  - Fix for strange issue with binary garbage in smaps files (RHEL-6420, RhBug:2231923)


author: Petr Pisar <ppisar@redhat.com> - 4.3.0-14
changelog:
  - needs-restarting prefers to obtain a boot time from systemd to deal with
    RTCs running in local time (RHEL-14900)


author: Petr Pisar <ppisar@redhat.com> - 4.3.0-16
changelog:
  - Revert needs-restarting prefers to obtain a boot time from systemd to deal
    with RTCs running in local time (RHEL-39775)


author: Marek Blaha <mblaha@redhat.com> - 4.3.0-21
changelog:
  - reposync: Avoid multiple downloads of duplicate packages (RHEL-64320)
  - Fix bogus changelog entry date


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Bryan Gurney <bgurney@redhat.com> - 0.08-4
changelog:
  - Remove check test
  - Remove BuildRequires for python3-dbus-signature-pyparsing and python3-dbus
  - Resolves: rhbz#1986609


author: Chris Leech <cleech@redhat.com> - 6.2.1.9-18.gita65a472
changelog:
  - rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
  - new meson build system, sync with fedora packaging


author: Christian Glombek <cglombek@redhat.com> - 6.2.1.2-0.git802688d
changelog:
  - Update to upstream v2.1.2
  - Remove systemctl enable calls, as this is now handled by Fedora presets
  - per the guidelines
  - Remove initiator name generation, as this is now handled by an init service
  - Install ghost lockfile and dir to /run instead of /var
  - Rebased/fixed up patches
  - Fixed macros in comments and comments after macros
  - Merged service-file-tweaks.patch and
  - improve-systemd-service-files-for-boot-session-handl.patch
  - into unit-file-tweaks.patch 
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1493296
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1729740
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1834509


author: Chris Leech <cleech@redhat.com> - 6.2.1.2-1.git13e7f58
changelog:
  - iscsiadm overflow regression when discovering many targets at once
  - check for invalid session id during stop connection
  - add ability to attempt target logins asynchronously


author: Miro Hrončok <mhroncok@redhat.com> - 1.10-18
changelog:
  - Subpackage python2-jsonpointer has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Bryan Gurney <bgurney@redhat.com> - 0.15-5
changelog:
  - Remove check test
  - Remove BuildRequires and Requires for python3-justbases
  - Resolves: rhbz#1986913


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-1
changelog:
  - Rebased to libvirt-python-8.5.0 (rhbz#2060316)
  - The rebase also fixes the following bugs:
      rhbz#2092752


author: Miro Hrončok <mhroncok@redhat.com> - 4.6.2-1
changelog:
  - Update to 4.6.2
  - Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner
  - Fixes: rhbz#1855415
  - Fixes: rhbz#1901634


author: Petr Viktorin <pviktori@redhat.com> - 1.1.4-1
changelog:
  - Update to version 1.1.4
  - Avoids test warnings on Python 3.10
    Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1907474


author: Martin Kolman <mkolman@redhat.com> - 0.48-1
changelog:
  - Merge pull request #23 from poncovka/master-decode_bytes (mkolman)
  - Handle bytes and strings from RPM (#1764642) (vponcova)


author: Martin Kolman <mkolman@redhat.com> - 0.49-1
changelog:
  - Merge pull request #31 from jkonecny12/master-fix-make-archive (mkolman)
  - Fix make archive command after pot file removal (jkonecny)
  - Merge pull request #29 from jkonecny12/master-weblate-support (jkonecny)
  - Add Readme with description and translation badge (jkonecny)
  - Add pot file to the git ignore (jkonecny)
  - Pause release when making bumpver to check and solve translations (jkonecny)
  - Remove unused PREFIX from Makefile (jkonecny)
  - Remove Zanata (jkonecny)
  - Push translations to our translation repository (jkonecny)
  - Download translations from Weblate (jkonecny)
  - Remove pot file (jkonecny)
  - Merge pull request #24 from M4rtinK/master-fix_zanata_client_detection_in_makefile (mkolman)
  - Fix Zanata client detection in Makefile (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.50-1
changelog:
  - Merge pull request #33 from mzidek-gh/master (mkolman)
  - dump: Use exception's type and value when calculating hash (mzidek)


author: Tomas Orsava <torsava@redhat.com> - 4.7.1-9
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Use the modern way of filtering Provides not to interfere with modern Python
    RPM generators
  - Related: rhbz#1990421


author: Tom Stellard <tstellar@redhat.com> - 4.6.8-3
changelog:
  - Use make_build macro instead of just make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Miro Hrončok <mhroncok@redhat.com> - 0.10.6-9
changelog:
  - Subpackage python2-netifaces has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-2
changelog:
  - Limit BuildRequires to necessary minimum in Red Hat Enterprise Linux
  - Skip pytest in Red Hat Enterprise Linux
  - Do not build -doc subpackage for Red Hat Enterprise Linux


author: Jakub Hrozek <jhrozek@redhat.com> - 3.1.0-1
changelog:
  - Resolves: rhbz#1922352 - python-oauthlib requires python-mock
  - Update to upstream 3.1.0
  - Gets rid of obsolete python-nose dependency
  - Nuke the python2/python3 conditionals, let's only support python3


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.0-2
changelog:
  - Remove the python3-oauthlib+signedtoken package
  - When building, skip tests that require jwt
  - Resolves: rhbz#1966407 - Drop python-jwt dependency from python-oauthlib


author: Jakub Hrozek <jhrozek@redhat.com> - 3.1.1-1
changelog:
  - Resolves: rhbz#1935433 - python-oauthlib implements and/or uses the
                             deprecated SHA1 algorithm by default


author: TomasHalman <thalman@redhat.com> - 3.1.1-3
changelog:
  - Remove RSA support
  - Remove build dependency on blinker
    Resolves: rhbz#1984046 - python-oauthlib depends on jwt for RSA


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-4
changelog:
  - Make the python-pip-wheel subpackage versioned (python3-pip-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-5
changelog:
  - Conflict with old Python versions that use the old unversioned wheel location
  - Resolves: rhbz#1982668


author: Lokesh Mandvekar <lsm5@redhat.com> - 3:4.8.0.post1-1
changelog:
  - update to https://github.com/containers/podman-py/releases/tag/v4.8.0.post1
  - Related: Jira:RHEL-2112


author: Miro Hrončok <mhroncok@redhat.com> - 0.7.2-21
changelog:
  - Subpackage python2-prettytable has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomas Orsava <torsava@redhat.com> - 5.8.0-5
changelog:
  - Remove unnecessary test dependency on python3-mock
  - Remove unnecessary macro __provides_exclude_from


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.8.6-6
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Add manual Obsoletes for python39-psycopg2-doc
  - Related: rhbz#1990421


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Dominik Mierzejewski <rpm@greysector.net> - 0.26-1
changelog:
  - update to 0.26 (#1780153)
  - make main package archful to run tests on all arches
    (pythonN-pyelftools subpackages are still noarch)
  - run readelf tests on x86_64 only for now
  - rename binaries to conform to Python packaging guidelines
  - enable python3 subpackage for EPEL7
  - declare bundled old construct module instead of needlessly requiring it


author: Pavel Cahyna <pcahyna@redhat.com> - 1.5.29-1
changelog:
  - Updated to 1.5.29.
  - Avoid dependency on python-pbr, conditionalize docs build, to allow building in RHEL.
    Inspired by python-sushy.


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.4-1
changelog:
  - Use Decimal for Device.getSize() operations, return a
    float (#1801355)
  - Update the 'twine upload' line in the Makefile
  - Don't intentionally prohibit Python 2 usage (#67)
  - mips64 support


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.5-1
changelog:
  - Require at least libparted 3.3 and python 3.7 (dcantrell)
  - pedmodule.c: Fix partition enum flag handling (bcl)
  - Add support for chromeos_kernel and bls_boot partition flags (bcl)
  - Move exception declarations to _pedmodule.c (dcantrell)


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.7-1
changelog:
  - Upgrade to pyparted-3.11.7 (BZ#1890443)
  - Set PY_SSIZE_T_CLEAN for the build (bcl)
  - add nvme support
  - Update RELEASE file to make last step be "make pypi" (dcantrell)


author: David Cantrell <dcantrell@redhat.com> - 1:3.12.0-1
changelog:
  - Patch pyparted to handle PED_DISK_TYPE_PARTITION_TYPE_ID for the
    msdos disk type and PED_DISK_TYPE_PARTITION_TYPE_UUID for the gpt
    label
    Resolves: rhbz#2103243


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.3-3
changelog:
  - Replace pypi_name macro with srcname
  - Update BR’s
  - Run the doctests
  - Build documentation in a new -doc subpackage


author: Miro Hrončok <mhroncok@redhat.com> - 0.17.3-7
changelog:
  - Don't BuildRequire python3-hypothesis and exclude affected tests from %check
  - Resolves: rhbz#1928125


author: Miro Hrončok <mhroncok@redhat.com> - 3.4-6
changelog:
  - Subpackage python2-pyserial has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Charalampos Stratakis <cstratak@redhat.com> - 6.2.2-2
changelog:
  - Disable tests and documentation generation on RHEL9 to avoid pulling in dependencies
  - Drop redundant build dependency on wcwidth (unused since 6.0.0rc1)


author: Tony Asleson <tasleson@redhat.com> - 0.14.6-6
changelog:
  - Fix build failure
    Bad source: /builddir/build/SOURCES/pywbem-0.14.6.tar.gz: No such file or directory


author: Miro Hrončok <mhroncok@redhat.com> - 0.26-8
changelog:
  - Subpackage python2-pyxdg has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 6.1-10
changelog:
  - Resolves: #1935839 Remove python-imaging build requirements for RHEL
  - Run unit tests during build


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.0-11
changelog:
  - Don't use SIGNATURE_RSA
  - Related: #1935433 - python-oauthlib implements and/or uses the deprecated
                        SHA1 algorithm by default


author: Paul Belanger <pabelanger@redhat.com> - 0.5.4-1
changelog:
  - Initial package.
  - Forked from https://fedora.pkgs.org/rawhide/fedora-x86_64/python3-resolvelib-0.5.5-2.fc35.noarch.rpm.html however
    downgraded to 0.5.4 due to 0.5.5 being yanked from pypi.


author: Miro Hrončok <mhroncok@redhat.com> - 12-1
changelog:
  - Disable the dist generators for Python 2
  - https://fedoraproject.org/wiki/Changes/Disable_Python_2_Dist_RPM_Generators_and_Freeze_Python_2_Macros


author: Tomas Orsava <torsava@redhat.com> - 12-2
changelog:
  - scripts/pythondistdeps: Switch from using pkg_resources to importlib.metadata
    for reading the egg/dist-info metadata
  - The script no longer requires setuptools but instead requires packaging


author: Tomas Orsava <torsava@redhat.com> - 12-4
changelog:
  - scripts/pythondistdeps: Treat extras names case-insensitively and always
    output them in lower case (#1936875)


author: Miro Hrončok <mhroncok@redhat.com> - 12-5.1
changelog:
  - Do not generate setuptools requirement for console_scripts on Python 3.10+
  - See https://fedoraproject.org/wiki/Changes/Reduce_dependencies_on_python3-setuptools


author: Miro Hrončok <mhroncok@redhat.com> - 12-6
changelog:
  - Get rid of distutils deprecation warning (by not using it)
  - The distutils module is deprecated in Python 3.10+
  - https://www.python.org/dev/peps/pep-0632/


author: Tomas Orsava <torsava@redhat.com> - 12-8
changelog:
  - From `python3-foo` packages automatically generate `python3.X-foo` Obsoletes
    tags on CentOS/RHEL
  - Resolves: rhbz#1990421


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Andrea Claudi <aclaudi@redhat.com> - [2.4.4-4.el9]
changelog:
  - Don't build scapy-doc package on rhel (Andrea Claudi) [1973720]
  - Enable gating test on RHEL9 (Jianwen Ji) [1974642]


author: Andrea Claudi <aclaudi@redhat.com> - 2.5.0-1.el9
changelog:
  - Don't package scapy tests (Andrea Claudi)
  - Fix scapy compliance with pep-0440 (Andrea Claudi) [2162667]
  - New version 2.5.0 (Andrea Claudi) [RHEL-657]


author: Pavel Simovec <psimovec@redhat.com> - 1.9.3-2
changelog:
  - Apply upstream patch: MAINT:linalg:Adjust lwork/liwork changes OpenBLAS 0.3.26
  - Resolves: RHEL-70908


author: Packit Service <user-cont-team+packit-service@redhat.com> - 1.8-1
changelog:
  - New version - 1.8 (Jiri Konecny)
  - Add missing make command to spec file (Jiri Konecny)
  - Don't translate the prompt keys (Vendula Poncova)
  - Enable daily build for Anaconda-devel COPR repository (Jiri Konecny)
  - Use Fedora container registry instead of Dockerhub (Jiri Konecny)
  - Migrate COPR daily COPR builds to Packit (Jiri Konecny)
  - Test build on Fedora ELN (Jiri Konecny)
  - Remove packit get-current-action (Jiri Konecny)
  - Run tests in GitHub workflow (Martin Pitt)
  - Fix raise-missing-from (W0707) pylint warnings (Martin Pitt)
  - Fix pylint to check test code correctly (Jiri Konecny)
  - Use script to run unit tests (Jiri Konecny)
  - Use relative imports in tests (Jiri Konecny)
  - Change directory structure of unit tests (Jiri Konecny)
  - Fix documentation of _process_screen method (Jiri Konecny)
  - Fix pylint issues (Jiri Konecny)
  - Use pylint instead of pocketlint (Jiri Konecny)
  - Add coverage support (Jiri Konecny)
  - Make link to exmples directory in Readme (Jiri Konecny)
  - Fix homepage of the project in setup.py (Jiri Konecny)
  - Fix classifiers in setup.py (Jiri Konecny)
  - Add pypi-upload to Makefile (Jiri Konecny)
  - Use correct variant of the field (Jiri Konecny)
  - Propose Fedora update only to Fedora in development (Jiri Konecny)
  - Add upstream tag template to packit for releasing (Jiri Konecny)
  - Packit will download archive from Source0 if needed (Jiri Konecny)


author: Jiri Konecny <jkonecny@redhat.com> - 1.8.3-1
changelog:
  - Fix bumpver Makefile target (Jiri Konecny)
  - Add tests for UIScreen wide disabling of concurrency check (Jiri Konecny)
    Related: rhbz#2134889
  - Abstract registering signal handler in the InputHandler constructor (Jiri Konecny)
    Related: rhbz#2134889
  - Allow to disable concurrency check for all UIScreen inputs (Jiri Konecny)
    Resolves: rhbz#2134889
  - Add Makefile target for local container tests (Jiri Konecny)
  - Use localization from rhel-9 weblate translation component (Jiri Konecny)
  - Remove changelog from the upstream spec file (Jiri Konecny)
  - Fix spec file archive link (Jiri Konecny)
  - Include also documentation to the tarball (Jiri Konecny)
  - Rename doc directory to docs (Jiri Konecny)
  - Add explanations of what is included in the MANIFEST.in file (Jiri Konecny)
  - Update packit config to reflect new tag naming (Jiri Konecny)
  - Change tag name to just version (Jiri Konecny)
  - Fix GitHub workflow checkout (Jiri Konecny)
  - Switch to packit new fedora-latest alias (Jiri Konecny)
  - Disable duplicate-code in pylint test (Jiri Konecny)
  - Remove duplicate of code between event loops (Jiri Konecny)


