# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 3.0.6-1
changelog:
  - Update to 3.0.6
  - Resolves: RHEL-1681 - [RFE] Log buffering for all log types
  - Resolves: RHEL-5141 - [RFE] For each request, a ldap client can assign an
    identifier to be added in the logs
  - Resolves: RHEL-38917 - dscreate interactive install shows a traceback
    when mdb is selected
  - Resolves: RHEL-42485 - [RFE] pbkdf2 hardcoded parameters should be turned
    into configuration options
  - Resolves: RHEL-59513 - [RFE] Port logconv.pl to python
  - Resolves: RHEL-61253 - Make online import more robust
  - Resolves: RHEL-69819 - "Duplicated DN detected" errors when creating
    indexes or importing entries. [rhel-10.0]
  - Resolves: RHEL-70122 - Crash in attrlist_find() when the Account Policy
    plugin is enabled.
  - Resolves: RHEL-74149 - backup/restore broken
  - Resolves: RHEL-74154 - If an entry RDN is identical to the suffix, then
    Entryrdn gets broken during a reindex
  - Resolves: RHEL-74159 - Crash during bind when acct policy plugin does not
    have "alwaysrecordlogin" set
  - Resolves: RHEL-74164 - On replica consumer, account policy plugin fails
    to manage the last login history
  - Resolves: RHEL-76020 - IPA LDAP error code T3 when no exceeded time limit
    from a paged search result [rhel-10]
  - Resolves: RHEL-76838 - Unlocked and locked users having same error output
  - Resolves: RHEL-76841 - Healthcheck tool should warn admin about creating
    a substring index on membership attribute


author: Viktor Ashirov <vashirov@redhat.com> - 3.0.6-2
changelog:
  - Bump version to 3.0.6-3
  - Resolves: RHEL-5141 - [RFE] For each request, a ldap client can assign an
    identifier to be added in the logs
  - Resolves: RHEL-77948 - ns-slapd crashes with data directory ≥ 2 days old
    [rhel-10]
  - Resolves: RHEL-78342 - During import of entries without nsUniqueId, a
    supplier generates duplicate nsUniqueId (LMDB only)


author: Nathan Scott <nathans@redhat.com> - 0.11.8-1
changelog:
  - Update to latest upstream version.
  - Update spec file and resolve a build issue (BZ 2113091).
  - Switch to SPDX licensing.


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.52.0-1
changelog:
  - Update to 1.52.0
  - Always reset retries when unblocking children or ports (RHEL-80475)
  - Prevent the activation of unavailable OVS interfaces (RHEL-79829)
  - Fix crash in imagemode with SELinux enforced (RHEL-77157)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.2-1
changelog:
  - Update to 1.53.2 (dev)
  - Fix invalid memory access on Dnsconfd DBUS error (RHEL-83175)
  - Avoid getting transient hostname when "localhost" set in /etc/hostname (RHEL-55730)


author: Filip Pokrývka <fpokryvk@redhat.com> - 1:1.53.3-1
changelog:
  - Update to 1.53.3 (dev)
  - Add more IPv6 prefix delegation options (RHEL-81948)
  - Fix order of parsing port/controller properies in nmcli (RHEL-80273)
  - Improve interface activation logic (RHEL-80157)
  - Fix WireGuard IPv6 firewall rules (RHEL-79975)
  - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-78769)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.4-1
changelog:
  - Update to 1.53.4 (dev)
  - initrd: add new NBFT parser (RHEL-83058)
  - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
  - Support reapply on OVS settings (RHEL-86877)
  - Add support for configuring the loopback interface in nmtui (RHEL-70484)
  - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
  - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
  - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.90-1
changelog:
  - Update to 1.54.0 (rc1)
  - Devices not becoming managed sometimes (RHEL-89914)
  - Crash on _l3cfg_notify_cb (RHEL-92020)
  - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.91-1
changelog:
  - Update to 1.54.0 (rc2)
  - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
  - Fix a race condition in ovs tun interface (RHEL-17358)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.92-1
changelog:
  - Update to 1.54.0 (rc3)
  - Fix ipv6 static route deleted with dualstack (RHEL-102774)
  - Allow setting IP method to disabled in port connections (RHEL-90756)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.34-1
changelog:
  - Update to 2.0.34 (rhbz#2105023)
  - Resolve issues found by rpmdiff
    - add a patch to fix getaddrinfo detection to avoid using gethostbyname
    - add explicit Requires: on subpackages to avoid the need to test
      interoperability between the various combinations of old and new
      subpackages
  - Conditional Perl & Python module build, by default disabled


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.1.1-4
changelog:
  - wla-Disable-automatic-log-collector.patch [RHEL-35963]
  - Resolves: RHEL-35963
    ([Azure][WALA] Consider to disable Log collector [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.1.1-6
changelog:
  - wla-redhat-Use-NetworkManager-to-set-DHCP-hostnames-on-r.patch [RHEL-40966]
  - wla-redhat-Remove-all-waagent-unit-files-when-uninstalli.patch [RHEL-40966]
  - wla-redhat-Mark-directories-properly-in-the-files-list.patch [RHEL-40966]
  - wla-redhat-Remove-files-inside-WALA-services-directory.patch [RHEL-40966]
  - Resolves: RHEL-40966
    ([Azure][WALA][RHEL-10] Provisioning failed if no ifcfg-eth0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.1.1-7
changelog:
  - wla-skip-cgorup-monitor-2939.patch [RHEL-46713]
  - Resolves: RHEL-46713
    ([Azure][RHEL-10][WALA] waagent -collect-logs doesn't work and the log is confusing)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.1.1-9
changelog:
  - wla-redhat-Add-a-udev-rule-to-avoid-managing-slave-NICs-.patch [RHEL-68796]
  - Resolves: RHEL-68796
    (Please add `mana` to 99-azure-unmanaged-devices.conf of Azure image)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.1.1-10
changelog:
  - wla-redhat-Explicitly-list-udev-rule-requirements-in-the.patch [RHEL-84073]
  - wla-redhat-Include-10-azure-unmanaged-sriov.rules-into-i.patch [RHEL-84073]
  - Resolves: RHEL-84073
    ([Azure][ARM][RHEL-9] Kdump cannot save vmcore via ssh or nfs [rhel-10])


author: Temuri Doghonadze <temuri.doghonadze@gmail.com> - 2.3.1-9
changelog:
  - Backport Georgian locale from git
  - Note, it will not be needed after release of new version of acl


author: Radovan Sroka <rsroka@redhat.com> - 0.18.4-1
changelog:
  - aide-0.18.4 is available
  Resolves: rhbz#1910486
  - Please port your pcre dependency to pcre2. Pcre has been deprecated
  Resolves: rhbz#2128267


author: Radovan Sroka <rsroka@redhat.com> - 0.18.6-8
changelog:
  RHEL 10.0 ERRATUM
  - /boot/grub2/grubenv's timestamp is getting modified continuously due to "boot_success" implementation
  Resolves: RHEL-4320


author: Jaroslav Kysela <perex@perex.cz> - 1.2.7.1-4
changelog:
  - Enable avtp plugin - Peter Robinson <pbrobinson@fedoraproject.org>
  - Enable a52 and lavrate plugins - Yaakov Selkowitz <yselkowi@redhat.com>
  - Remove or soften excess dependendencies - Yaakov Selkowitz <yselkowi@redhat.com>
  - CI test & RHEL cleanups


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.25-1
changelog:
  - alternatives: fix possible buffer overrun
  - Translated using Weblate (Korean)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))


author: Jan Macku <jamacku@redhat.com> - 1.26-1
changelog:
  - fix(test): dot't call `basename` with empty string
  - spec: sort BuildRequires alphabetically
  - fix(test): remove dangling `rlPhase` fn call
  - ci: run tests using Packit and Testing Farm
  - build: update `.pot` file
  - ci: fix typo in test workflow
  - test: add support for running using tmt
  - Translated using Weblate (Czech)
  - Translated using Weblate (Punjabi)
  - build(deps): bump actions/upload-artifact from 3 to 4
  - build(deps): bump github/codeql-action from 2 to 3
  - leveldb: fix systemdActive()
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck
  - Translated using Weblate (Hungarian)
  - build(deps): bump actions/checkout from 3 to 4


author: Jan Macku <jamacku@redhat.com> - 1.27-1
changelog:
  - alternatives: properly handle chars with const in normalize_path
  - alternatives: use exit in main instead of return for critical failures
  - alternatives: fix leak
  - alternatives: fix leak
  - alternatives: fix possible overrun
  - alternatives: fix all the leaks of groups in readConfig
  - alternatives: fix all the leaks of read line in readConfig
  - alternatives: fix leak
  - alternatives: fix memory leak
  - alternatives: fix memory leak
  - alternatives: initialize parameters in main to NULL
  - alternatives: fix memory leak
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Update translation files
  - Translated using Weblate (Japanese)
  - Fix systemd dependency


author: Jan Macku <jamacku@redhat.com> - 1.29-1
changelog:
  - add basic mkosi config
  - remove not used directory from makefile
  - ntsysv: fix leaks
  - leveldb: security_context_t is deprecated
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - chkconfig: fix leak
  - chkconfig: fix leak
  - chkconfig: fix memory leak when deleting a service
  - leveldb: add destructors for service
  - leveldb: fix memory leak
  - leveldb.c: fix memory leak
  - chkconfig: fix leak
  - leveldb: fix memory leak
  - alternatives: ensure the current alt. is freed if parsing fails
  - alternatives: ensure the current group is freed
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Turkish)


author: Denys Vlasenko <dvlasenk@redhat.com> - 20241111-10
changelog:
  - Update linux-firmware to latest upstream (RHEL-65206)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7
  - cnm: update chips&media wave521c firmware.
  - mediatek MT7920: update bluetooth firmware to 20241104091246
  - linux-firmware: update firmware for MT7920 WiFi device
  - copy-firmware.sh: Run check_whence.py only if in a git repo
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
  - amdgpu: update DMCUB to v9.0.10.0 for DCN351
  - rtw89: 8852a: update fw to v0.13.36.2
  - rtw88: Add firmware v52.14.0 for RTL8812AU
  - i915: Update Xe2LPD DMC to v2.23
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7925)
  - linux-firmware: update firmware for MT7925 WiFi device
  - WHENCE: Add sof-tolg for mt8195
  - linux-firmware: Update firmware file for Intel BlazarI core
  - qcom: Add link for QCS6490 GPU firmware
  - qcom: update gpu firmwares for qcs615 chipset
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops
  - ath11k: move WCN6750 firmware to the device-specific subdir
  Resolves: RHEL-65206


author: Denys Vlasenko <dvlasenk@redhat.com> - 20241210-11
changelog:
  - [AMDCLIENT 10.0 Feature] amdgpu linux-firmware for the 2025 H mobile platform (RHEL-61604)
  - [AMDCLIENT 10.0 Feature] linux-firmware for a 2025 mobile platform (RHEL-61477)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - linux-firmware: Update firmware file for Intel BlazarU core
  - amdgpu: update dmcub 0.0.246.0 firmware
  - Add top level license file.
  - amdgpu: update raven firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update vcn 3.1.2 firmware
  - amdgpu: update vpe 6.1.3 firmware
  - amdgpu: update psp 14.0.4 firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vcn 4.0.6 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update psp 14.0.0 firmware
  - amdgpu: add vcn 5.0.0 firmware
  - amdgpu: add smu 14.0.3 firmware
  - amdgpu: add sdma 7.0.1 firmware
  - amdgpu: add psp 14.0.3 firmware
  - amdgpu: add gc 12.0.1 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update renoir firmware
  - amdgpu: add smu 14.0.2 firmware
  - amdgpu: add sdma 7.0.0 firmware
  - amdgpu: add psp 14.0.2 firmware
  - amdgpu: add gc 12.0.0 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - upstream amdnpu firmware
  - i915: Update Xe2LPD DMC to v2.24
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
  - iwlwifi: add Bz-gf FW for core89-91 release
  - amdgpu: update smu 13.0.10 firmware
  - amdgpu: update sdma 6.0.3 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: add smu 13.0.14 firmware
  - amdgpu: add sdma 4.4.5 firmware
  - amdgpu: add psp 13.0.14 firmware
  - amdgpu: add gc 9.4.4 firmware
  - amdgpu: update vcn 3.1.2 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update psp 14.0.4 firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vpe 6.1.1 firmware
  - amdgpu: update vcn 4.0.6 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update psp 14.0.0 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update sdma 4.4.2 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - ice: update ice DDP wireless_edge package to 1.3.20.0
  - ice: update ice DDP comms package to 1.3.52.0
  - ice: update ice DDP package to ice-1.3.41.0
  - amdgpu: update DMCUB to v9.0.10.0 for DCN314
  - amdgpu: update DMCUB to v9.0.10.0 for DCN351
  - linux-firmware: Update AMD cpu microcode
  - xe: Update GUC to v70.36.0 for BMG, LNL
  - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL
  - iwlwifi: add Bz-gf FW for core91-69 release
  - Merge https://github.com/zijun-hu/qca_btfw into qca
  - qcom: venus-5.4: add venus firmware file for qcs615
  - qcom: update venus firmware file for SC7280
  - QCA: Add 22 bluetooth firmware nvm files for QCA2066
  - mediatek MT7922: update bluetooth firmware to 20241106163512
  - mediatek MT7921: update bluetooth firmware to 20241106151414
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  - qcom: Add QDU100 firmware image files.
  - qcom: Update aic100 firmware files
  - dedup-firmware.sh: fix infinite loop for --verbose
  Resolves: RHEL-61604, RHEL-61477


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250121-12
changelog:
  - Update linux-firmware to latest upstream (RHEL-75551)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - mediatek MT7925: update bluetooth firmware to 20250113153307
  - linux-firmware: update firmware for MT7925 WiFi device
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update yellow carp firmware
  - qcom: correct licence information for SA8775P binaries
  - qcom: update SLPI firmware for RB5 board
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: add DSP firmware for SA8775p platform
  - qcom: correct venus firmware versions
  - qcom: add missing version information
  - linux-firmware: Update firmware (v10) for mt7988 internal
  - iwlwifi: add Bz FW for core90-93 release
  - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device
  - rtw89: 8852b: update fw to v0.29.29.8
  - rtw89: 8852c: update fw to v0.27.122.0
  - rtw89: 8922a: update fw to v0.35.54.0
  - rtw89: 8922a: update fw to v0.35.52.1 and stuffs
  - rtw89: 8852bt: update fw to v0.29.110.0
  - rtw89: 8852b: update fw to v0.29.29.7
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - amdgpu: update sdma 6.0.3 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update sdma 4.4.5 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vcn 4.0.6 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update renoir firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update vcn 4.0.3 firmware
  - amdgpu: update sdma 4.4.2 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - cirrus: cs35l56: Correct some links to address the correct amp instance
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105
  - Fix has_gnu_parallel function
  - rtl_bt: Add separate config for RLT8723CS Bluetooth part
  - amdgpu: revert VCN 3.1.2 firmware
  - amdgpu: revert yellow carp VCN firmware
  - amdgpu: revert sienna cichlid VCN firmware
  - amdgpu: revert navy flounder VCN firmware
  - amdgpu: revert dimgrey cavefish VCN firmware
  - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B
  - copy-firmware.sh: Fix typo in error message.
  - Add support to install files/symlinks in parallel.
  - Makefile: Remove obsolete/broken reference.
  - check_whence.py: Use a more portable shebang.
  - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E
  - cnm: update chips&media wave521c firmware.
  - WHENCE: Add "Info:" tag to text that's clearly not part of the license
  - rtl_nic: add firmware rtl8125bp-2
  - qcom: venus-5.4: update firmware binary for sc7180 and qcs615
  - cirrus: cs35l56: Correct filenames of SSID 17aa3832
  - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops
  - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43
  - rtl_nic: add firmware rtl8125d-2
  - Merge https://github.com/zijun-hu/qca_btfw into qca-bt
  Resolves: RHEL-75551


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250212-13
changelog:
  - Missing firmware for the enablement of TI AMP TAS2781 SPI driver (RHEL-78328)
  - MI325 GPU firmware (RHEL-78328)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - i915: Update Xe2LPD DMC to v2.28
  - ASoC: tas2781: Add regbin firmware by index for single device
  - WHENCE: qca: add missing version information
  - WHENCE: split generic QCA section into USB and serial sections
  - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D
  - iwlwifi: add Bz/gl FW for core93-123 release
  - iwlwifi: update ty/So/Ma firmwares for core93-123 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release
  - ASoC: tas2781: Add dsp firmware for new projects
  - amdgpu: DMCUB update for DCN401
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1
  - ath12k: QCN9274 hw2.0: update board-2.bin
  - ath11k: WCN6750 hw1.0: update board-2.bin
  - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - ath11k: QCA6698AQ hw2.1: add board-2.bin
  - ath11k: QCA6390 hw2.0: update board-2.bin
  - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
  - ath11k: QCA2066 hw2.1: update board-2.bin
  - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1
  - copy-firmware: Fix 'No such file or directory' error.
  - ath11k: add device-specific firmware for QCM6490 boards
  - qca: add more WCN3950 1.3 NVM files
  - qca: add firmware for WCN3950 chips
  - qca: move QCA6390 firmware to separate section
  - qca: restore licence information for WCN399x firmware
  - amdgpu: DMCUB updates for various ASICs
  - amdgpu: DMCUB updates forvarious AMDGPU ASICs
  - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750
  - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069
  - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  - linux-firmware: Update FW files for MRVL SD8997 chips
  - i915: Update Xe2LPD DMC to v2.27
  - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856
  - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650
  - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037
  - amdgpu: Update ISP FW for isp v4.1.1
  - trivial: contrib: wrap the process in try/except to catch server issues
  - trivial: contrib: use python-magic to detect encoding of emails
  - Merge https://github.com/che-jiang/qca_btfw into qca
  - QCA: Add Bluetooth firmware for QCA6698
  - amdgpu: revert DMCUB 3.1.4 firmware
  - amlogic: update firmware for w265s2
  Resolves: RHEL-78328, RHEL-78328


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250314-15
changelog:
  - accel: ivpu: Update firmware for NPU (RHEL-38586)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
  - rtw89: 8922a: update fw to v0.35.64.0
  - rtw89: 8922a: update fw to v0.35.63.0
  - rtw89: 8852c: update fw to v0.27.125.0
  - iwlwifi: add Bz/gl FW for core94-91 release
  - iwlwifi: update ty/So/Ma firmwares for core94-91 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
  - amdgpu: update psp 14.0.0 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update sdma 7.0.1 firmware
  - amdgpu: update gc 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vcn 3.1.2 firmware
  - amdgpu: update gc 10.3.6 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update picasso firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update gc 10.3.7 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update aldebaran firmware
  - qcom: Update gpu firmwares for qcs8300 chipset
  - linux-firmware: add firmware for qat_420xx devices
  - amdgpu: DMCUB updates for various ASICs
  - i915: Update Xe3LPD DMC to v2.20
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20250305133215
  - mediatek MT7920: update bluetooth firmware to 20250210151502
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - intel_vpu: Add firmware for 37xx and 40xx NPUs
  - QCA: Add Bluetooth firmwares for QCA2066 with USB transport
  - QCA: Add two bluetooth firmware nvm files for QCA2066
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
  - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
  - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
  - ASoC: tas2781: Update dsp firmware for Gemtree project
  - xe: Update GUC to v70.40.2 for BMG, LNL
  - amdgpu: DMCUB updates for various ASICs
  - amdgpu: DCUB update for DCN401 and DCN315
  - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
  - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
  - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - ath11k: QCA6698AQ hw2.1: update board-2.bin
  - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
  - linux-firmware: Update AMD SEV firmware
  - linux-firmware: update firmware for MT7920 WiFi device
  - qca: update WCN3988 firmware
  - amdgpu: Update ISP FW for isp v4.1.1
  - qcom: add firmware for Adreno A225
  - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
  - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - i915: Update Xe3LPD DMC to v2.17
  - ASoC: tas2781: Change regbin firmwares for single device
  Resolves: RHEL-38586


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250521-16
changelog:
  - accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
  - Add amdnpu linux firmware folder (RHEL-77950)
  - Introduce new PMF TA (RHEL-86837)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
  - Adjust QUPv3 driver name
  - cnm: Add Chips&Media wave633c firmware for NXP i.MX9
  - qcom: add QUPv3 firmware for QCM6490 platform
  - mediatek: Add mt8196 VCP firmware
  - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
  - nvidia: add GSP-RM version 570.144 firmware images
  - amdgpu: DMCUB updates for various ASICs
  - powervr: add firmware for Imagination Technologies BXS-4-64 GPU
  - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
  - brcmfmac: Add a couple of NanoPi devices
  - rtl_nic: add firmware rtl8127a-1
  - cnm: update chips&media wave521c firmware.
  - intel_vpu: Update NPU firmware
  - intel: avs: Update topology file for Digital Microphone Array
  - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
  - linux-firmware: Amphion: Update vpu firmware
  - amd_pmf: Update AMD PMF TA Firmware to v3.1
  - amdgpu: update dcn 4.01 firmware to 0.1.8.0
  - qcom: Add link for SM8350 GPU firmware
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20250425073330
  - rtw89: 8852c: add tables for dynamic antenna TXPWR
  - rtw89: 8922a: update fw to v0.35.71.0
  - brcm: Add NVRAM file for Radxa Rock Pi X mini PC
  - i915: Update Xe3LPD DMC to v2.23
  - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
  - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
  - ath12k: QCN9274 hw2.0: update board-2.bin
  - qcom: vpu: update video firmware binary for SA8775p
  - iwlwifi: add Bz/gl FW for core95-82 release
  - iwlwifi: update ty/So/Ma firmwares for core95-82 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
  - iwlwifi: add Bz-hr FW for core93-123 release
  - qcom: add QUPv3 firmware for QCS9100 platform
  - ASoC: tas2781: Swap channel for SPI projects.
  - bmi260: Add BMI260 IMU initial configuration data file
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
  - rtw89: 8922a: update element RF TXPWR to R40
  - rtw89: 8852c: update element RF TXPWR to R78
  - rtw89: 8852c: add fw v0.27.125.0 with format version 2
  - Revert "rtw89: 8852c: update fw to v0.27.125.0"
  - qcom: vpu: add video firmware binary for qcm6490
  - contrib: process_linux_firmware: set user agent
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update psp 14.0.0 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update psp 14.0.4 firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update smu 13.0.7 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update picasso firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update aldebaran firmware
  - amdgpu: update dcn 4.01 frmware to 0.1.6.0
  - intel: ish: Update license file for ISH
  - intel: avs: Update topology file for I2S Analog Devices 4567
  - intel: avs: Update topology file for I2S Realtek 5663
  - intel: avs: Update topology file for I2S Realtek 5640
  - intel: avs: Update topology file for I2S Realtek 5514
  - intel: avs: Update topology file for I2S Realtek 298
  - intel: avs: Update topology file for I2S Realtek 286
  - intel: avs: Update topology file for I2S Realtek 274
  - intel: avs: Update topology file for I2S Nuvoton 8825
  - intel: avs: Update topology file for I2S Maxim 98927
  - intel: avs: Update topology file for I2S Maxim 98373
  - intel: avs: Update topology file for I2S Maxim 98357a
  - intel: avs: Update topology file for HDAudio codecs
  - intel: avs: Update topology file for HDMI codecs
  - intel: avs: Update topology file for Digital Microphone Array
  - intel: avs: Update topology file for I2S Dialog 7219
  - xe: Update GUC to v70.44.1 for BMG and LNL
  - i915: Update GUC to v70.44.1 for i915 platforms
  - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
  - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
  - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
  - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
  - QCA: Add 8 bluetooth nvm files for WCN785x btusb
  - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
  - qcom: update firmware binary for SM8250
  - mediatek: Add new mt8195 SOF firmware
  - mediatek: Add new mt8188 SOF firmware
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
  - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
  - intel_vpu: Update NPU firmware
  - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
  - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
  - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
  - amdgpu: update dcn 4.01 firmware to 0.1.3.0
  - amdgpu: update dcn 3.5 firmware to 0.1.0.0
  - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
  - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
  - qcom: Add DSP firmware for QCS8300 platform
  - mediatek: Add MT8188 SCP firmware
  - copy-firmware: fail gracefully if moreutils parallel is installed
  - copy-firmware: make script smarter about bad parameters
  - copy-firmware: add usage help text
  - linux-firmware: Update firmware file for Intel BlazarI core
  - qcom: Add Audio firmware for Lenovo Slim 7x
  - qcom: Add Audio firmware for Lenovo T14s
  - amdgpu: DMCUB updates for various ASICs
  Resolves: RHEL-85120, RHEL-77950, RHEL-86837


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250604-17
changelog:
  - 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - xe: Update GUC to v70.45.2 for BMG, LNL
  - i915: Update GUC to v70.45.2 for DG2
  - xe: Update LNL GSC to v104.0.5.1429
  - amdgpu: DMCUB updates for various ASICs
  - qcom: add QUPv3 firmware for QCS8300 platform
  - Intel IPU7: Add firmware binary files
  - ice: update wireless_edge package to 1.3.23.0
  - ice: update comms package to 1.3.55.0
  - ice: update package to 1.3.43.0
  - linux-firmware: Update firmware file for Intel Pulsar core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - linux-firmware: Update firmware file for Intel Quasar core
  - linux-firmware: Update firmware file for Intel Solar core
  - linux-firmware: Update firmware file for Intel Magnetar core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - iwlwifi: add Bz/gl FW for core96-76 release
  - iwlwifi: update ty/So/Ma firmwares for core96-76 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
  - iwlwifi: update firmwares for 8000 series
  - iwlwifi: update 7265D firmware
  - mediatek MT7925: update bluetooth firmware to 20250526153203
  - linux-firmware: update firmware for MT7925 WiFi device
  - qcom: sc8280xp: FW blob updates for X13s
  - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
  - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
  - cirrus: cs35l41: Fix firmware links for several ASUS laptops
  Resolves: RHEL-92555


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250708-18
changelog:
  - nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
  - Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - xe: Add fan_control v203.0.0.0 for BMG
  - amdgpu: Add DCN 3.6
  - amdgpu: Add PSP 14.0.5
  - amdgpu: Add SDMA 6.1.3
  - amdgpu: Add GC 11.5.3
  - mediatek MT7921: update bluetooth firmware to 20250625154126
  - qcom/adreno: document firmware revisions
  - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
  - qcom: Add sdx61 Foxconn vendor firmware image file
  - Revert "linux-firmware: Update firmware file for Intel Pulsar core"
  - qcom/adreno: sort entries in WHENCE
  - xe: First HuC release for Pantherlake
  - xe: First GuC release for Pantherlake
  - linux-firmware: update firmware for MT7921 WiFi device
  - rtw89: 8922a: update fw to v0.35.80.0
  - rtw89: 8852c: update fw to v0.27.129.1
  - rtw89: 8852c: update fw to v0.27.128.0
  - WHENCE: extract license texts
  - WHENCE: expand the advansys license statement
  - WHENCE: some older AMD drivers are MIT licensed
  - qcom: update firmware binary for SM8550
  - amdgpu: DMCUB updates for DCN401
  - qcom: venus-5.4: add the firmware binary for qcs615
  - Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
  - amdgpu: update dmcub fw for dcn401
  - qcom: Add sdx61 Foxconn vendor firmware image file
  - brcm: Fix symlinks for Khadas VIM SDIO wifi config
  - amdgpu: update renoir firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update sdma 7.0.1 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update psp 14.0.4 firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: add raven2 ip discovery firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update sdma 7.0.0 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update vcn 4.0.6 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: add picasso ip discovery firmware
  - amdgpu: add raven ip discovery firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update smu 13.0.7 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update gc 10.3.6 firmware
  - amdgpu: update smu 13.0.10 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navi10 firmware
  - amdgpu: add smu 13.0.0 kicker firmware
  - amdgpu: add psp 13.0.0 kicker firmware
  - amdgpu: add gc 11.0.0 kicker firmware
  - amdgpu: add vcn 5.0.1 firmware
  - amdgpu: add sdma 4.4.4 firmware
  - amdgpu: add psp 13.0.12 firmware
  - amdgpu: add gc 9.5.0 firmware
  - amdgpu: add arcturus IP discovery firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update beige_goby firmware
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update dimgrey_cavefish firmware
  - amdgpu: update aldebaran firmware
  - WHENCE: fix subtly incorrect licensing
  - amdgpu: update dmcub fw for dcn32 and dcn401
  - mediatek: Update mt8186 SCP firmware
  - amdgpu: Update DMCUB fw for DCN401 & DCN315
  - WHENCE: unify Driver statements
  - qcom: add gpu firmwares for X1P42100 chipset
  - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
  - rtl_nic: update firmware of RTL8153A
  - qcom: sc8280xp: Updated power FW for X13s
  - linux-firmware: update firmware for MT7986
  - linux-firmware: update firmware for MT7981
  - linux-firmware: update firmware for MT7916
  - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
  - Revert "iwlwifi: add Bz/gl FW for core96-76 release"
  - amdgpu: DMCUB updates for various ASICs
  - mediatek MT7922: update bluetooth firmware to 20250523103438
  - mediatek MT7921: update bluetooth firmware to 20250523111333
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  Resolves: RHEL-95393, RHEL-100947


author: Jiri Konecny <jkonecny@redhat.com> - 40.22.3.22-1
changelog:
  - Fix RDP question will switch to GUI instead of TUI (jkonecny)
    Resolves: RHEL-77162
  - rpmostree: Use `--merge` for kargs (walters)
    Resolves: RHEL-73029
  - Revert "dracut: Remove 'linear' from modules to load" (vtrefny)
    Resolves: RHEL-76805


author: Radek Vykydal <rvykydal@redhat.com> - 40.22.3.23-1
changelog:
  - security: add a development note for certificates import in initramfs
    (rvykydal)
    Related: RHEL-77156
  - security: do not issue warning on existing certificate file during dump
    (rvykydal)
    Resolves: RHEL-77156
  - Add systemd override to make /usr RW in Dracut (mkolman)
    Resolves: RHEL-77192
  - network: pass NM global dns configuration to the installed system (rvykydal)
    Resolves: RHEL-71415
  - network: pass global dns initrd option to the installed system (rvykydal)
    Resolves: RHEL-71415


author: Radek Vykydal <rvykydal@redhat.com> - 40.22.3.25-1
changelog:
  - network: add dnsconfd to installer environment (rvykydal)
    Resolves: RHEL-79800
  - network: add dnsconfd to selected packages if used in installer (rvykydal)
    Resolves: RHEL-79802


author: Radek Vykydal <rvykydal@redhat.com> - 40.22.3.26-1
changelog:
  - network: start dnsconfd in initramfs (rvykydal)
    Resolves: RHEL-80302
  - network: enable dnsconfd service on installed system if required (rvykydal)
    Resolves: RHEL-80011
  - network: pass 16-dns-backend.conf to target system (rvykydal)
    Resolves: RHEL-80232
  - netowrk: enable dnsconfd service in installer environment (rvykydal)
    Resolves: RHEL-80011


author: Martin Kolman <mkolman@redhat.com> - 40.22.3.27-1
changelog:
  - Update the tests/README.rst file (jkonecny)
    Related: RHEL-48821
  - Move shell testing to a separated directory (jkonecny)
    Related: RHEL-48821
  - Enable dynamic bash commands disable for tests (jkonecny)
    Related: RHEL-48821
  - Add test for config_get dracut function (jkonecny)
    Related: RHEL-48821
  - Fix trailing `/` when downloading stage2 image (jkonecny)
    Resolves: RHEL-48821
  - Fix whitespace chars broke Dracut config parsing (jkonecny)
    Related: RHEL-48821


author: Martin Kolman <mkolman@redhat.com> - 40.22.3.28-1
changelog:
  - network: update NM autoconnections configuration for centos (rvykydal)
    Resolves: RHEL-67815
  - Run restorecon after copying logs (champetier.etienne)
    Resolves: RHEL-86788
  - s390x - enable raid1 as a stage2 device (dan)
    Resolves: RHEL-83924
    Resolves: INSTALLER-4148
  - edns: restart dnsconfd only after the first kickstart parsing (rvykydal)
    Resolves: RHEL-83931
  - edns: allow dnsconfd name resolution for kickstart fetching (rvykydal)
    Resolves: RHEL-83931
  - network: disable autoconnections on RHEL also for BOOTIF option (rvykydal)
    Resolves: RHEL-69400
  - security: fix dnsconfd backend option check in initramfs (rvykydal)
    Resolves: RHEL-83576


author: Jiri Konecny <jkonecny@redhat.com> - 40.22.3.29-1
changelog:
  - liveinst: Propagate the AT-SPI bus address to Anaconda for Wayland (neal)
    Resolves: RHEL-88645
  - Revert "Do not copy resolv.conf to target system at the end of installation"
    (mkolman)
    Resolves: RHEL-84110
  - rpm_ostree/installation.py: fix image deployment on s390x (nikita)
    Resolves: RHEL-88558


author: Jiri Konecny <jkonecny@redhat.com> - 40.22.3.30-1
changelog:
  - Revert "s390x - enable raid1 as a stage2 device" (jkonecny)
    Reverts: RHEL-83924
  - pyanaconda: module_manager: fix ciclic import (k.koukiou)
    Related: RHEL-85415
  - pyanaconda: bootloader: fix ImportError (k.koukiou)
    Related: RHEL-85415
  - ruff: enable isort rules and autofix all isort warnings (jkonecny)
    Resolves: RHEL-85415


author: Jiri Konecny <jkonecny@redhat.com> - 40.22.3.31-1
changelog:
  - bootloader: drop write_config_console, just preserve console= (awilliam)
    Resolves: RHEL-79961
  - flatpak: Fix Flatpak source generation from DNF (jkonecny)
    Related: RHEL-75804
  - flatpak: Add constants for Flatpak (jkonecny)
    Related: RHEL-75804
  - flatpak: Change log level for source processing (jkonecny)
    Related: RHEL-75804
  - flatpak: Improve log for setting refs for install (jkonecny)
    Related: RHEL-75804
  - flatpak: Improve documentation (jkonecny)
    Related: RHEL-75804
  - flatpak: `NoSourceError` to `SourceSetupError` (jkonecny)
    Related: RHEL-75804
  - Fix imports in flatpak payload (jkonecny)
    Related: RHEL-75804
  - When installing Flatpaks from a local repository, disable download (otaylor)
    Related: RHEL-75804
  - Add additional logging to Flatpak code (jkonecny)
    Related: RHEL-75804
  - Fix directory where flatpak blobs are stored (jkonecny)
    Related: RHEL-75804
  - Add FlatpakManager tests (jkonecny)
    Related: RHEL-75804
  - Improve FlatpakManager testing (jkonecny)
    Related: RHEL-75804
  - Add tests for Flatpak source.py (jkonecny)
    Related: RHEL-75804
  - Add tests for Flatpak payload utils (jkonecny)
    Related: RHEL-75804
  - Extract flatpak.source utils to a separate module (jkonecny)
    Related: RHEL-75804
  - Add Flatpak tests for the Flatpak module (jkonecny)
    Related: RHEL-75804
  - Do not allow any sources for Flatpak payload (jkonecny)
    Related: RHEL-75804
  - Support payload with no default source (jkonecny)
    Related: RHEL-75804
  - Add new API for Flatpak to CalculateSizeWithTask (jkonecny)
    Related: RHEL-75804
  - Add side_payload to PayloadBase object (jkonecny)
    Related: RHEL-75804
  - Add more logs for easier Flatpak module debugging (jkonecny)
    Related: RHEL-75804
  - Call calculate_size of the Flatpak manager (jkonecny)
    Related: RHEL-75804
  - Improve logging of the Flatpak module (jkonecny)
    Related: RHEL-75804
  - Support Flatpak preinstallation as part of a DNF install (otaylor)
    Resolves: RHEL-75804
  - anaconda.spec: Add Flatpak client to Requires (otaylor)
    Resolves: RHEL-75804
  - Extract pick_download_location(), calculate_required_space() utilities
    (otaylor)
    Resolves: RHEL-75804
  - Move hardcoded flatpak remote to configuration (jkonecny)
    Related: RHEL-75804
  - payload/rpm-ostree: Include program output in exception (walters)
    Resolves: RHEL-83926


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)


author: Nick Clifton <nickc@redhat.com> - 12.91-1
changelog:
  - Annocheck: Fix resource leak.  (RHEL-79256)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79473)


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-3
changelog:
  - CHANGELOG.md was missing in some places
  - In legacy role, sed repalced unexpected strings at some places
    Resolves: RHEL-23455


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.3-1
changelog:
  - Add support for running SQL Server as a SELinux unconfined application with SELinux in enforcing mode on RHEL 9
    Resolves: RHEL-16342
  - ExcludeArch: i686


author: Sergei Petrosian <spetrosi@redhat.com> - 2.5.2-1
changelog:
  - Use new adutil functionality to enable AES encryption
    Resolves: RHEL-68490
  - Add mssql_tools_versions, mssql_tls_self_sign to allow installing different versions of mssql-tools
    Resolves: RHEL-68468
  - Deprecate mssql_accept_microsoft_odbc_driver_17_for_sql_server_eula
    Resolves: RHEL-69315


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.1-1
changelog:
  - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database
    Resolves: RHEL-101355
  - Add secondary_role_allow_connections and mssql_ha_read_only_routing_list
    Resolves: RHEL-101356


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.2-1
changelog:
  - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database
    Resolves: RHEL-101355


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.16.13-1
changelog:
  - ansible-core 2.16.13 release (RHEL-69036)
  - Add back ansible-test subpackage and drop doc subpackage
  - Fix CVE-2024-8775 (Exposure of Sensitive Information in Ansible
    Vault Files Due to Improper Logging) (RHEL-59076)
  - Fix CVE-2024-9902 (Ansible-core user may read/write unauthorized
    content) (RHEL-69034)


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.16.14-1
changelog:
  - ansible-core 2.16.14 release (RHEL-69763)
  - Fix CVE-2024-11079 (Unsafe Tagging Bypass via hostvars Object in
    Ansible-Core) (RHEL-66996)


author: Thomas Woerner <twoerner@redhat.com> - 1.14.0-1
changelog:
  - Update to version 1.14.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.0
    Resolves: RHEL-67567
  - Multi sudorule management with the ipasudorule module
    Resolves: RHEL-61433


author: Thomas Woerner <twoerner@redhat.com> - 1.14.1-1
changelog:
  - Update to version 1.14.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.1
    Resolves: RHEL-67567
  - Fix requirements for ansible-core
    Resolves: RHEL-68648


author: Thomas Woerner <twoerner@redhat.com> - 1.14.2-1
changelog:
  - Update to version 1.14.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2
    Resolves: RHEL-67567
  - ipareplica: Pass ipareplica_ip_addresses to ipaclient
    Resolves: RHEL-40228
  - ipagroup: Correctly handle externalmember in member actions
    Resolves: RHEL-70023
  - ipasudorule: Evaluate all members related to hosts and users
    Resolves: RHEL-68441
  - ipacert: Correctly handle removFromCRL revocation
    Resolves: RHEL-70021
  - Collection: No more role module duplication
    Resolves: RHEL-71124


author: Thomas Woerner <twoerner@redhat.com> - 1.14.3-1
changelog:
  - Update to version 1.14.3
    Resolves: RHEL-67567
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-70023


author: Thomas Woerner <twoerner@redhat.com> - 1.14.4-1
changelog:
  - Update to version 1.14.4
    Resolves: RHEL-67567
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-70023


author: Thomas Woerner <twoerner@redhat.com> - 1.14.5-1
changelog:
  - Update to version 1.14.5
    Resolves: RHEL-67567
  - ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343)
    Resolves: RHEL-78229


author: Jerry James <loganjerry@gmail.com> - 1.2-34
changelog:
  - Build with log4j support in non-bootstrap mode
  - Convert the License tag to SPDX
  - Update the project URL


author: Neal Gompa <ngompa@fedoraproject.org> - 1.0.2-1
changelog:
  - Update to 1.0.2
  - Clean up some pre-1.0 scriptlet cruft
  - Resolves: RHEL-31497 (Backport latest bulid from Fedora 40)


author: Alessandro Astone <ales.astone@gmail.com> - 1.0.2-2
changelog:
  - Backport patch to fix installing swcatalog
  - Resolves: RHEL-31497 (Backport latest build from Fedora 40)


author: Luboš Uhliarik <luhliari@redhat.com> - 1.7.5-1
changelog:
  - new version 1.7.5
  - Resolves: RHEL-56637 - apr: Lax permissions in Apache Portable Runtime shared
    memory (CVE-2023-49582)


author: Joe Orton <jorton@redhat.com> - 1.6.3-18
changelog:
  - drop ENGINE support from apr_crypto (RHEL-33728)
  - fix (harmless) gcc snprintf warning in testbuckets.c


author: Luboš Uhliarik <luhliari@redhat.com> - 1.6.3-19
changelog:
  - Resolves: RHEL-50386 - drop unnecessary apr-util-devel dependencies
  - Related: RHEL-33728 - drop ENGINE support from apr_crypto


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-1
changelog:
  - Rebase to 4.0.3
  - Pluginst must have .conf suffix, otherwise skipped
    Resolves: RHEL-58838
  - ausearch checkpoint inode fix
    Resolves: RHEL-62333
  - Audisp-filter: filter audit events and forward them to other plugins
    Resolves: RHEL-5199
  - Log to console when system is halted due to audit not having enough storage
    Resolves: RHEL-990
  - auditctl: remove misleasing error with --input file
    Resolves: RHEL-5200
  - Remove ProtectKernelModules=true from service file
    Resolves: RHEL-59571
  - Update syscall tables to reflect current kernel
    Resolves: RHEL-46969
  - af_unix: Restore old behavior
    Resolves: RHEL-39955
  - Add systemd-tempfiles.d for audit when root fs is read-only
    Resolves: RHEL-45311
  - ausearch fix error reporting
    Resolves: RHEL-32808
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-59561


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-2
changelog:
  - Add auditd.cron (5) man page for time-based log rotation description
    Resolves: RHEL-77141
  - Remove HALT from space_left_action
  - Broadcast warning to users when auditd is about to halt
    Resolves: RHEL-73111
  - Fix TTY hostname in log messages
    Resolves: RHEL-79476
  - permtab: remove unsupported syscalls from rules
    Resolves: RHEL-59560
  - Restore permission on audit.rules


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.1-1
changelog:
  - New upstream version 1.14.1
  - Use github tarballs again.
  - New binary augprint.
  - New bash-completions subpackage.


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.3
changelog:
  - lenses/tmpfiles.aug: Permit '$' character in /usr/lib/tmpfiles.d/*.conf
    resolves: RHEL-76283
  - lenses/multipath.aug: Support all possible values for find_multipaths
  - lenses/systemd.aug: Allow "+"(fullprivileges) command flag


author: Pavel Březina <pbrezina@redhat.com> - 1.5.0-1
changelog:
  - Rebase to 1.5.0
  - "minimal" profile was removed and replaced with "local". (rhbz#2253180)
  - "local" profile is now default (rhbz#2253180)


author: Pavel Březina <pbrezina@redhat.com> - 1.5.0-4
changelog:
  - Add back with-files-access-provider
  - Remove outdated scriptlets
  - Group merging added to nsswitch.conf group in all profiles
  - myhostname is put right before dns module in nsswitch.conf hosts (rhbz#2257197)
  - Internal packaging changes


author: Fedora Release Engineering <releng@fedoraproject.org> - 1:5.1.9-7
changelog:
  - RHEL-39412 - Remove autofs dependency on libnsl2
    - remove BuildRequires: libnsl2-devel.
  - Resolves: RHEL-39412


author: Ian Kent <ikent@redhat.com> - 1:5.1.9-9
changelog:
  - RHEL-32639 - [10.0-beta] starting autofs leads to core dump
    - bring the existing patches up to date with upstream.
      - update the configure script.
      - the two existing patches were renamed upstream.
        autofs-configure-c99.patch => autofs-5.1.9-fix-ldap_parse_page_control-check.patch.
        autofs-c99.patch => autofs-5.1.9-Fix-incompatible-function-pointer-types-in-cyrus-sasl-module.patch
    - fix crash in make_options_string().
  - Resolves: RHEL-32639


author: Ian Kent <ikent@redhat.com> - 1:5.1.9-10
changelog:
  - Upstream bug fix sync.
    - fix always recreate credential cache.
    - fix get parent multi-mount check in try_remount().
    - fix deadlock in remount.
    - fix amd external mount error handling.
    - fix amd external mount mount handling.
    - don't free ext mount if mounted.
    - refactor amd function do_program_mount().
    - refactor umount_amd_ext_mount().
    - add flags argument to amd do_program_mount().
    - fix amd cache options not copied.
    - seperate amd mount and entry flags.
    - make iocl ops ->timeout() handle per-dentry expire.
    - refactor amd mount options handling.
    - add some unimplemented amd map options.


author: Ian Kent <ikent@redhat.com> - 1:5.1.9-12
changelog:
  - RHEL-87525 - autofs hang - autofs-5.1.4-114.el8_10.2 [rhel-10]
    - fix submount shutdown race.
    - fix deadlock in master_notify_submount().
    - fix lock ordering deadlock in expire_cleanup().
  - Resolves: RHEL-87525


author: Ian Kent <ikent@redhat.com> - 1:5.1.9-13
changelog:
  - RHEL-90571 - autofs: segfault while dereferencing null mapent [rhel-10]
    - fix handling of ignored offsets.
    - fix invalidated map entry handling in hosts module.
  - Resolves: RHEL-90571


author: Petr Menšík <pemensik@redhat.com> - 0.8-22
changelog:
  - Enable unit tests during check
  - Prevent crashes on some invalid DBus calls
  - Provide versioned howl compatibility package
  - Correct bootstrap option


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Jens Petersen <petersen@redhat.com> - 0.2-1
changelog:
  - add PROMPT_DIR_COLOR to change the dir color (Thomas Steenholdt, #2239152)
  - also check for bash default prompt for login shell (Sam Morris, #2248853)
  - add PROMPT_BRACKETS to surround the prompt with traditional brackets
    (based on feedback from Thomas Steenholdt, #2239152)


author: Jens Petersen <petersen@redhat.com> - 0.3-1
changelog:
  - add PROMPT_SEPARATOR and PROMPT_DIRECTORY default variables (#2239152)
  - add optional PROMPT_START and PROMPT_END (replaces PROMPT_BRACKETS)
  - add prompt_default(), prompt_traditional(), and prompt_default_os()
  - expand README.md


author: Jens Petersen <petersen@redhat.com> - 0.4-1
changelog:
  - define PROMPT_COLOR
  - add PROMPT_USERHOST default variable
  - add colorpre and colorsuf variables
  - drop PROMPT_ERROR
  - drop built-in container support for now
  - reset color after $ prompt
  - only define default functions if setting PS1


author: Jens Petersen <petersen@redhat.com> - 0.4.2-1
changelog:
  - test for BASH_VERSION to avoid running for other shells
    (#2279643, Nathan Grennan)
  - fix condition regression introduced in 0.4.1 linux console change
  - rename prompt_color_force variable to bash_prompt_color_force


author: Jerome Marchand <jmarchan@redhat.com> - 0.29.1-1
changelog:
  - Rebase to the latest release version (#2253688)
  - Enable libbpf-tools on s390x (#2249458)
  - Misc 0.29.1 fixes


author: Jerome Marchand <jmarchan@redhat.com> - 0.30.1-1
changelog:
  - Rebase to the latest version (RHEL-32379)
  - Really prevent the loading of compromised headers (CVE-2024-2314)
  - Add python3-pyelftools dependency
  - Exclude unsupported tools


author: Jerome Marchand <jmarchan@redhat.com> - 0.34.0-1
changelog:
  - Rebase to the latest version (RHEL-78921)
  - Rebuild with LLVM 20 (RHEL-81772)
  - Silence warning of trace tools (RHEL-68952)
  - Fix bpf-runqlen (RHEL-91190)
  - Fix sslsniff and sofdsnoop (RHEL-58348)
  - Fix slabratetop (RHEL-58810)
  - Fix funclatency funcslower and gethostlatency on s390x (RHEL-68947)
  - Fix bpf-klockstat on aarch64 and ppc64 (RHEL-83001)
  - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-75529)
  - Fix multiples ppc64 tools (RHEL-58147)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.33-1
changelog:
  - Update to 9.16.33 (rhbz#2342784)
  - Make relative documentation links
  - Permanently remove DLZ parts build


author: Andrea Bolognani <abologna@redhat.com> - 2.41-54
changelog:
  - Fix BuildRequires for non-gold architectures.  (RHEL-85855)
  - Fix RISC-V ld testsuite failures (thanks Nick Clifton).  (RHEL-85855)


author: Arjun Shankar <arjun@redhat.com> - 3.8.2-6
changelog:
  - Analyse bison sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222079)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.10.0-17
changelog:
  - Do not remove PVs from devices file if disabled or doesn't exist
    Resolves: RHEL-65846
  - iscsi: Use node.startup=onboot option for Login
    Resolves: RHEL-53719
  - tests: Make sure selinux_test doesn't try to create mountpoints
    Resolves: RHEL-78988


author: Vojtech Trefny <vtrefny@redhat.com> - 3.10.0-18
changelog:
  - Get the actual PV format size for LVMPV format
    Resolves: RHEL-74076
  - Include additional information in PartitioningError
    Resolves: RHEL-84686


author: Vojtech Trefny <vtrefny@redhat.com> - 3.10.0-19
changelog:
  - Make ActionDestroyFormat optional when the device is also scheduled to be removed
    Resolves: RHEL-84685
    Resolves: RHEL-84663


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.19-7
changelog:
  - Update IANA numbers
  - Apply patch from CentOS Stream, never applied upstream:
    Disable retry of pre-session "Get cipher suites" command as some
    BMCs are ignoring it (#1831158)
  - Apply patches from Debian, never applied upstream:
    - fix tsol buffer overflow,
      https://sourceforge.net/p/ipmitool/mailman/message/24405281/
    - fix non-analog sensor readings, https://sourceforge.net/p/ipmitool/bugs/490/
  - Update /var/run to /run in ipmievd.service that systemd warns about (#2100475)


author: Patrick Palka <ppalka@redhat.com> - 1.83.0-0
changelog:
  - Rebase to 1.83.0
  - See https://fedoraproject.org/wiki/Changes/F40Boost183
  - Drop patch for accumulators library that has since been applied upstream.
  - Fix spurious Boost.Regex test failures.


author: Viktor Malik <vmalik@redhat.com> - 0.21.1-1
changelog:
  - Rebased to version 0.21.1
  - Resolves: RHEL-36076
  - Rebuilt for LLVM 18
  - Resolves: RHEL-27729
  - Enable gating
  - Resolves: RHEL-45249


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.7.7-1
changelog:
  - Rebase to version 3.7.7
  - Fixing SAST issues, accepted by upstream
  - Resolves: RHEL-39391 RHEL-67895


author: Arjun Shankar <arjun@redhat.com> - 2.0.20230521-2
changelog:
  - Analyse byacc sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222081)


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.303-101
changelog:
  - Update to CKBI 2.69_v8.0.303 from NSS 3.101.1
  -    GLOBALTRUST 2020 root CA certificate set CKA_NSS_{SERVER|EMAIL}_DISTRUST_AFTER

  Wed Jul 03 2024 Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.68_v8.0.302-101
  - Update to CKBI 2.68_v8.0.302 from NSS 3.101
  -    Removing:
  -     # Certificate "Verisign Class 1 Public Primary Certification Authority - G3"
  -     # Certificate "Verisign Class 2 Public Primary Certification Authority - G3"
  -     # Certificate "Security Communication Root CA"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Symantec Class 1 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 2 Public Primary Certification Authority - G6"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor ECA-1"
  -    Adding:
  -     # Certificate "TrustAsia Global Root CA G3"
  -     # Certificate "TrustAsia Global Root CA G4"
  -     # Certificate "CommScope Public Trust ECC Root-01"
  -     # Certificate "CommScope Public Trust ECC Root-02"
  -     # Certificate "CommScope Public Trust RSA Root-01"
  -     # Certificate "CommScope Public Trust RSA Root-02"
  -     # Certificate "D-Trust SBR Root CA 1 2022"
  -     # Certificate "D-Trust SBR Root CA 2 2022"
  -     # Certificate "Telekom Security SMIME ECC Root 2021"
  -     # Certificate "Telekom Security TLS ECC Root 2020"
  -     # Certificate "Telekom Security SMIME RSA Root 2023"
  -     # Certificate "Telekom Security TLS RSA Root 2023"
  -     # Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
  -     # Certificate "SECOM Trust.net"
  -     # Certificate "VeriSign Class 2 Public Primary Certification Authority - G3"
  -     # Certificate "SSL.com Code Signing RSA Root CA 2022"
  -     # Certificate "SSL.com Code Signing ECC Root CA 2022"


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.303-101.1
changelog:
  - Temporarily generate the directory-hash files in %install ...(next item)
  - Add list of ghost files from directory-hash to %files


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.303-101.2
changelog:
  - update-ca-trust: copy directory-hash symlinks to /etc/pki/tls/certs
  - Remove /etc/pki/tls/cert.pem symlink so that it isn't loaded by default


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - with python3-Cython -> python3dist(cython) < 3~~


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - revert python3-Cython -> python3dist(cython) < 3~~


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-2
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Miroslav Lichvar <mlichvar@redhat.com> 4.6.1-1
changelog:
  - update to 4.6.1 (RHEL-61876)
  - keep PHC refclock reachable when dropping samples due to high delay
    (RHEL-65843)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.6.1-2
changelog:
  - improve description of refresh directive (RHEL-91788)
  - improve logging of selection failures (RHEL-91787 RHEL-91789 RHEL-91791)
  - fix sourcedir reloading to not multiply sources (RHEL-95017)


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 18.1.8-1
changelog:
  - Update to LLVM 18.1.2 (RHEL-28056)
  - Remove llvm17 compat package (RHEL-30890)
  - Workaround for GFX11.5 export priority (RHEL-49746)


author: Nikita Popov <npopov@redhat.com> - 19.1.7-1
changelog:
  - Update to LLVM 19.1.7 (RHEL-57456)
  - Remove llvm18 compat package (RHEL-57457)
  - Remove generated html content from llvm-doc subpackage (RHEL-58900)
  - Enable LLVM_ENABLE_ZSTD=ON (RHEL-70325)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-19
changelog:
  - ci-Fix-metric-setting-for-ifcfg-network-connections-for.patch [RHEL-65016]
  - ci-fix-Render-bridges-correctly-for-v2-on-sysconfig-wit.patch [RHEL-65019]
  - ci-fix-Render-v2-bridges-correctly-on-network-manager-w.patch [RHEL-65019]
  - Resolves: RHEL-65016
    (Configuring metric for default gateway is not working [rhel-10])
  - Resolves: RHEL-65019
    (NoCloud - network_config bridges incorrectly configured [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-20
changelog:
  - ci-Remove-python3-jsonschema-dependency.patch [RHEL-65849]
  - Resolves: RHEL-65849
    ([RHEL-10] Drop cloud-init dependency on python-jsonschema)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-21
changelog:
  - ci-Prevent-NM-from-handling-DNS-when-network-interfaces.patch [RHEL-65769]
  - Resolves: RHEL-65769
    ([RHEL-10] Prevent NM from handling DNS when network interfaces have DNS config)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-1
changelog:
  - Rebase to 24.4 [RHEL-66254]
  - Resolves: RHEL-66254
    ([RHEL-10] Rebase cloud-init to 24.4 version)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-2
changelog:
  - Fix config missed on rebase [RHEL-77206]
  - Resolves: RHEL-77206
    (cloud-init has reacquired a dependency on python-jsonschema)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-3
changelog:
  - ci-Use-log_with_downgradable_level-for-user-password-wa.patch [RHEL-73667]
  - ci-net-sysconfig-do-not-remove-all-existing-settings-of.patch [RHEL-79727]
  - Resolves: RHEL-73667
    (Suggest to change some log messages from warning to info after rebase cloud-init-24.4 [rhel-10])
  - Resolves: RHEL-79727
    ([c10s] cloud-init remove 'NOZEROCONF=yes' from /etc/sysconfig/network)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-4
changelog:
  - ci-fix-NM-reload-and-bring-up-individual-network-conns-.patch [RHEL-81896]
  - Resolves: RHEL-81896
    (DataSourceNoCloudNet network configuration is ineffective [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-5
changelog:
  - ci-feat-aliyun-datasource-support-crawl-metadata-at-onc.patch [RHEL-88659]
  - Resolves: RHEL-88659
    (cloudinit backport optimization features on Alibaba Cloud)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-6
changelog:
  - ci-fix-Don-t-attempt-to-identify-non-x86-OpenStack-inst.patch [RHEL-100617]
  - ci-fix-strict-disable-in-ds-identify-on-no-datasources-.patch [RHEL-100617]
  - Resolves: RHEL-100617
    (CVE-2024-6174 cloud-init: From CVEorg collector [rhel-10.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.33-9
changelog:
  - cu-Drop-obsolete-gdisk-soft-dependency.patch [RHEL-36095]
  - Resolves: RHEL-36095
    (Remove cloud-utils-growpart dependency on obsolete gdisk)


author: Packit <hello@packit.dev> - 336.2-1
changelog:
  - storage: Revert "Use mdraid metadata version 1.0 when in Anaconda mode" (rhbz#2352953)
  - Translation updates (rhbz#2354986)


author: Packit <hello@packit.dev> - 339-1
changelog:
  - Add cockpit/ws arm64 container
  - Storage: Disk Self-Test error warnings on the overview page
  - Bug fixes and translation updates


author: Packit <hello@packit.dev> - 332-1
changelog:
  - The "shareable" attribute of disks is no longer modified by Cockpit
  - Bug fixes and translation updates


author: Packit <hello@packit.dev> - 15-1
changelog:
  - Config: Update to authselect with-tlog feature
  - stylelint: handle stylelint-scss deprecation
  - Add ruff configuration
  - package.json: drop flowtype plugin
  - package.json: drop po2json
  - package.json: document the required nodejs version
  - fmf: Plumb through $TEST_* variables for unexpected messages
  - tests: Use mc for testPlayBinary
  - package.json: drop deprecated eslint-plugin-standard
  - Revert "build: add support for /pybridge scenario"
  - Player: Stop making the Terminal object state
  - build.js: support flags
  - packaging: Update spec License: to SPDX format
  - build.js: Fix LINT env variable check
  - Tests: Allow charset journal messages
  - Update to the new root creation function
  - package.json: Bump stylelint to 15
  - test: add check for sssd config id_provider proxy
  - Tests: Allow invalid non-UTF8 journal messages
  - Add xterm-canvas-addon dependency for rendering
  - Minor Eslint fixes
  - Tests: Update data list to PF5 for testAppMenu
  - Update org.cockpit-project.session-recording.metainfo.xml
  - Makefile: bump our test/common dependency
  - patternfly-5-overrides should be auto-imported by the page.scss file
  - Drop obsolete pf-m-redhat-font class


author: Justin Stephenson <jstephen@redhat.com> - 17-1
changelog:
  - Rebase to upstream release 17
  - Config: Use authselect enable-feature when possible
  - Test: Move from CDP to BiDi
  - Replace jQuery extend() with standard JS spread
  - Convert to TypeScript
  - Convert Application to a functional component
  - package.json: Drop date-fns
  - Various test fixes and build related fixes


author: Jindrich Novy <jnovy@redhat.com> - 1.0.5-1
changelog:
  - composefs-1.0.5-1.el10
  - update to https://github.com/containers/composefs/releases/tag/v1.0.5
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 1.0.6-1
changelog:
  - update to the latest upstream release
    https://github.com/containers/composefs/releases/tag/v1.0.6 Related:
    RHEL-60292


author: Jindrich Novy <jnovy@redhat.com> - 1.0.7-1
changelog:
  - composefs-1.0.7-1.el10
  - update to https://github.com/containers/composefs/releases/tag/v1.0.7
  - Related: RHEL-60292


author: Jindrich Novy <jnovy@redhat.com> - 4:2.235.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.235.0
  - Resolves: RHEL-80476


author: Jindrich Novy <jnovy@redhat.com> - 4:2.236.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.236.0
  - Resolves: RHEL-80476


author: Jindrich Novy <jnovy@redhat.com> - 4:2.237.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.237.0
  - Resolves: RHEL-85671


author: Jindrich Novy <jnovy@redhat.com> - 4:2.238.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.238.0
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 4:2.239.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.239.0
  - Related: RHEL-80817


author: Lokesh Mandvekar <lsm5@redhat.com> - 1-14
changelog:
  - rebuild with updated dependencies:
    [python-]podman 4.8.0, buildah 1.33.2, skopeo 1.14.0,
    aardvark-dns and netavark 1.9.0
  - Related: Jira:RHEL-2112


author: Lokesh Mandvekar <lsm5@redhat.com> - 5:0.62.0-2
changelog:
  - fetch TMT podman revdep tests from podman dist-git
  - needs at least podman 5.4.0-7.el10
  - Related: RHEL-80817


author: Lukáš Zaoral <lzaoral@redhat.com> - 9.5-1
changelog:
  - rebase to latest upstream version
  - sync i18n patch with SUSE (Kudos to Berny Völker!)
  - add some test dependencies to execute additional part of the upstream test-suite
  - enable LTO on ppc64le (RHEL-39977)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.9-2
changelog:
  - Resolves: RHEL-96073

  - exec: Add support for env STATE_DIRECTORY
  - init: Use LogsDirectory in systemd unit file


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-6
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/114398, ada/114708, c/115290, c++/99678, c++/115239, c++/115283,
  	c++/115378, c++/115511, driver/115440, fortran/83865, jit/115442,
  	libstdc++/114958, libstdc++/115247, libstdc++/115308,
  	rtl-optimization/115281, target/109549, target/111343, target/115253,
  	target/115353, target/115360, tree-optimization/115544
    - fix s390x ICEs with vector permutations from memory (#2293207, #2292501)


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-7
changelog:
  - update from releases/gcc-14 branch
    - PRs c/114930, c/115502, c/115587, c++/115198, c++/115358, c++/115504,
  	c++/115624, fortran/114019, fortran/115390, libstdc++/115454,
  	libstdc++/115575, libstdc++/115668, target/106069, target/114846,
  	target/115342, target/115355, target/115608, tree-optimization/115278,
  	tree-optimization/115508
  - revert the August 2016 workaround for python bytecode compilation (#2294381)


author: Jakub Jelinek <jakub@redhat.com> 14.2.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.2 release
    - PRs analyzer/114899, c++/99241, c++/99242, c++/104981, c++/106760,
  	c++/111890, c++/115165, c++/115476, c++/115550, c++/115561,
  	c++/115583, c++/115623, c++/115754, c++/115783, c++/115865,
  	c++/115897, c++/115900, c++/115986, fortran/59104, fortran/84006,
  	fortran/93635, fortran/98534, fortran/99798, fortran/100027,
  	fortran/103115, fortran/103312, fortran/113363, fortran/115700,
  	ipa/111613, ipa/113291, ipa/113787, ipa/114207, ipa/115033,
  	ipa/115277, ipa/116055, libstdc++/113376, libstdc++/114387,
  	libstdc++/115399, libstdc++/115482, libstdc++/115522,
  	libstdc++/115585, libstdc++/115807, libstdc++/115854,
  	libstdc++/116070, middle-end/115527, middle-end/115836,
  	middle-end/115887, pch/115312, rtl-optimization/115049,
  	rtl-optimization/115565, target/87376, target/88236, target/97367,
  	target/98762, target/105090, target/113715, target/114759,
  	target/114890, target/114936, target/114988, target/115068,
  	target/115153, target/115188, target/115351, target/115389,
  	target/115456, target/115457, target/115459, target/115475,
  	target/115526, target/115554, target/115562, target/115591,
  	target/115611, target/115691, target/115725, target/115726,
  	target/115752, target/115763, target/115840, target/115872,
  	target/115978, target/115981, target/115988, target/116035,
  	testsuite/115826, testsuite/116061, tree-optimization/113673,
  	tree-optimization/115382, tree-optimization/115646,
  	tree-optimization/115669, tree-optimization/115694,
  	tree-optimization/115701, tree-optimization/115723,
  	tree-optimization/115841, tree-optimization/115843,
  	tree-optimization/115867, tree-optimization/115868,
  	tree-optimization/116034, tree-optimization/116057


author: Joseph Myers <josmyers@redhat.com> - 14.2.1-6
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/114593, ada/114636, ada/114640, ada/115535, ada/116190,
  	ada/116430, ada/116551, c/116726, c/117230, c++/88313, c++/96097,
  	c++/112288, c++/115296, c++/115361, c++/115656, c++/115987,
  	c++/116071, c++/116219, c++/116223, c++/116276, c++/116320,
  	c++/116327, c++/116369, c++/116384, c++/116418, c++/116424,
  	c++/116449, c++/116476, c++/116492, c++/116534, c++/116567,
  	c++/116606, c++/116636, c++/116676, c++/116678, c++/116929,
  	c++/117054, c++/117107, c++/117259, c++/117274, fortran/79685,
  	fortran/84868, fortran/100273, fortran/108889, fortran/116530,
  	ipa/109985, ipa/115815, ipa/116410, jit/117275, libstdc++/37475,
  	libstdc++/108619, libstdc++/113663, libstdc++/116038,
  	libstdc++/116159, libstdc++/116381, libstdc++/116529,
  	libstdc++/116549, libstdc++/116641, libstdc++/116754,
  	libstdc++/116755, libstdc++/116777, libstdc++/116857,
  	libstdc++/117085, libstdc++/117094, libstdc++/117135,
  	libstdc++/117321, libstdc++/117406, lto/116361, lto/116614,
  	middle-end/115110, middle-end/115426, middle-end/115641,
  	middle-end/116258, middle-end/116259, middle-end/116454,
  	middle-end/116891, middle-end/116898, middle-end/116899,
  	middle-end/117086, middle-end/117249, middle-end/117354,
  	rtl-optimization/116783, rtl-optimization/117327, sanitizer/117209,
  	target/85624, target/112108, target/113384, target/115464,
  	target/115860, target/116007, target/116033, target/116043,
  	target/116174, target/116189, target/116237, target/116287,
  	target/116295, target/116390, target/116407, target/116415,
  	target/116512, target/116617, target/116627, target/116738,
  	target/116839, target/116883, target/116921, target/116953,
  	target/116962, target/117116, target/117159, target/117240,
  	target/117296, target/117318, testsuite/70150, testsuite/116238,
  	tree-optimization/107467, tree-optimization/113281,
  	tree-optimization/116156, tree-optimization/116166,
  	tree-optimization/116224, tree-optimization/116258,
  	tree-optimization/116274, tree-optimization/116290,
  	tree-optimization/116380, tree-optimization/116460,
  	tree-optimization/116481, tree-optimization/116501,
  	tree-optimization/116585, tree-optimization/116610,
  	tree-optimization/116768, tree-optimization/116850,
  	tree-optimization/116879, tree-optimization/116907,
  	tree-optimization/116982, tree-optimization/116990,
  	tree-optimization/117041, tree-optimization/117104,
  	tree-optimization/117287
    - add hint #34 to aarch64 sanitizer asm stubs if -mbranch-protection=standard
      (#2306353)


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-65532)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-73475)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-73585)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-2
changelog:
  - update from releases/gcc-14 branch (RHEL-83953)
    - GCC 14.3 release
    - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
  	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
  	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
  	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
  	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
  	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
  	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
  	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
  	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
  	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
  	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
  	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
  	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
  	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
  	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
  	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
  	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
  	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
  	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
  	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
  	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
  	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
  	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
  	c++/120125, c++/120161, d/114434, d/115249, d/116373,
  	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
  	d/119112, d/119139, d/119817, d/119826, debug/101533,
  	driver/117739, driver/119727, fortran/59252, fortran/81978,
  	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
  	fortran/106948, fortran/108434, fortran/108454,
  	fortran/109066, fortran/110993, fortran/116706,
  	fortran/117434, fortran/118080, fortran/118640,
  	fortran/118683, fortran/118750, fortran/119054,
  	fortran/119380, fortran/119656, fortran/119986,
  	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
  	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
  	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
  	libfortran/120196, libgcc/101075, libgcc/119151,
  	libgcc/119796, libstdc++/21334, libstdc++/90389,
  	libstdc++/99832, libstdc++/100249, libstdc++/101527,
  	libstdc++/101587, libstdc++/104395, libstdc++/105258,
  	libstdc++/105609, libstdc++/106612, libstdc++/108487,
  	libstdc++/108760, libstdc++/108846, libstdc++/110498,
  	libstdc++/112490, libstdc++/112803, libstdc++/114758,
  	libstdc++/114945, libstdc++/115046, libstdc++/115285,
  	libstdc++/115939, libstdc++/116212, libstdc++/116440,
  	libstdc++/116471, libstdc++/117121, libstdc++/117921,
  	libstdc++/117983, libstdc++/118083, libstdc++/118158,
  	libstdc++/118160, libstdc++/118185, libstdc++/118413,
  	libstdc++/118699, libstdc++/118811, libstdc++/119121,
  	libstdc++/119135, libstdc++/119429, libstdc++/119469,
  	libstdc++/119593, libstdc++/119671, libstdc++/120198,
  	libstdc++/120548, lto/91299, lto/113207, lto/114501,
  	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
  	middle-end/111285, middle-end/113546, middle-end/114877,
  	middle-end/115871, middle-end/115913, middle-end/117498,
  	middle-end/117811, middle-end/118140, middle-end/118411,
  	middle-end/118819, middle-end/118950, middle-end/119119,
  	middle-end/119204, middle-end/119219, middle-end/119706,
  	middle-end/119808, middle-end/120547, modula2/115032,
  	modula2/115112, modula2/118703, modula2/118761,
  	preprocessor/108900, preprocessor/116047, preprocessor/120061,
  	rtl-optimization/115568, rtl-optimization/116564,
  	rtl-optimization/117186, rtl-optimization/117239,
  	rtl-optimization/117506, rtl-optimization/118320,
  	rtl-optimization/118638, rtl-optimization/118662,
  	rtl-optimization/118739, rtl-optimization/119071,
  	rtl-optimization/119291, rtl-optimization/119689,
  	rtl-optimization/119785, target/86772, target/106544,
  	target/110901, target/113257, target/115258, target/115485,
  	target/116036, target/116086, target/116111, target/116149,
  	target/116240, target/116256, target/116305, target/116308,
  	target/116550, target/116591, target/116592, target/116593,
  	target/116693, target/116720, target/116809, target/116827,
  	target/116927, target/117286, target/117383, target/117483,
  	target/117544, target/117682, target/117878, target/118067,
  	target/118137, target/118154, target/118182, target/118184,
  	target/118329, target/118357, target/118501, target/118531,
  	target/118561, target/118601, target/118623, target/118685,
  	target/118776, target/118813, target/118815, target/118825,
  	target/118835, target/118843, target/118844, target/118892,
  	target/118942, target/119084, target/119133, target/119172,
  	target/119235, target/119327, target/119340, target/119383,
  	target/119386, target/119408, target/119450, target/119533,
  	target/119547, target/119549, target/119572, target/119610,
  	target/119784, target/119834, target/120441, target/120480,
  	testsuite/52641, testsuite/116448, testsuite/118127,
  	testsuite/118597, tree-optimization/117358,
  	tree-optimization/120638 tree-optimization/87984,
  	tree-optimization/98845, tree-optimization/111873,
  	tree-optimization/112859, tree-optimization/113197,
  	tree-optimization/114052, tree-optimization/115347,
  	tree-optimization/115494, tree-optimization/116098,
  	tree-optimization/116125, tree-optimization/116412,
  	tree-optimization/116749, tree-optimization/116906,
  	tree-optimization/116922, tree-optimization/117113,
  	tree-optimization/117119, tree-optimization/117243,
  	tree-optimization/117424, tree-optimization/117919,
  	tree-optimization/117979, tree-optimization/118476,
  	tree-optimization/118522, tree-optimization/118605,
  	tree-optimization/118653, tree-optimization/118689,
  	tree-optimization/118717, tree-optimization/118915,
  	tree-optimization/118922, tree-optimization/118924,
  	tree-optimization/118953, tree-optimization/118976,
  	tree-optimization/119057, tree-optimization/119096,
  	tree-optimization/119145, tree-optimization/119351,
  	tree-optimization/119399, tree-optimization/119417,
  	tree-optimization/119534, tree-optimization/119706,
  	tree-optimization/119707, tree-optimization/119722,
  	tree-optimization/119778, tree-optimization/120048,
  	tree-optimization/120156


author: Paul Wouters <paul.wouters@aiven.io - 2.9.11-1
changelog:
  - Resolves: rhbz#2123955 cracklib-2.9.11 is available
  - Remove old patches, port remaining patches to 2.9.11
  - Use man pages from doc/ instead of pulling them from debian


author: Veronika Hanulikova <vhanulik@redhat.com> - 2.9.11-7
changelog:
  - Add missing man page for create-cracklib-dict (RHEL-39972)
  - Preserve special characters in cracklib-format (RHEL-39972)


author: Tao Liu <ltao@redhat.com> - 1.6.4-6
changelog:
  - Fix the hardening issue "FAIL: bind-now test because not linked with -Wl,-z,now"
  - add gating.yaml


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.3-1
changelog:
  - Update to 1.0.3
  - Set compression level 10 for zstd and zck
  - Introduce new --no-pretty option to reduce metadata size
  - Use gzip compression by default when --compatibility is specified
  - Default changelog limit restored for --compatibility
  - Use epoch-friendly sub-package interdependencies
  - Enable sqlite shared cache on connection level
  - Fix const-correctness with libxml2-2.12.0
  - Allow specifying zck compression only


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.4-1
changelog:
  - Update to 1.0.4 (RHEL-38831)
  - Extend the --compatibility flag to cover other defaults
  - mergerepo_c and modifyrepo_c now make "pretty" indented xml
  - Fix building due to bash-completion repackaging


author: Petr Pisar <ppisar@redhat.com> - 1.1.2-3
changelog:
  - Fix a file descriptor and a memory leak in an error path of
    cr_detect_compression() (RHEL-45645)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250404-1.gitca0e9a5
changelog:
  - openssl: stop generating `openssl` in favour of `opensslcnf`
  - gnutls: support P384-MLKEM1024
  - openssl: specify default key size for req (openssl does not consume it yet)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250424-1.git9267dee
changelog:
  - LEGACY/DEFAULT/FUTURE: enable hybrid ML-KEM and pure ML-DSA
  - drop crypto-policies-pq-preview subpackage, TEST-PQ goes into main one
  - NO-PQ: introduce
  - openssl: fix enabling integrity-only ciphersuites (still need min_rsa_size=0)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250602-1.gita6d4d0c
changelog:
  - openssl: fix mistakes in integrity-only cipher definitions
  - FIPS: enable hybrid ML-KEM (TLS only) and pure ML-DSA
  - AD-SUPPORT-LEGACY: resurrect subpolicy as present in RHEL-9


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250714-1.git95bf40e
changelog:
  -  sequoia: add sha3, x25519, ed25519, x448, ed448, but not for rpm-sequoia
  -  sequoia, rpm-sequoia: use ignore_invalid with sha3, x25519, ...
  -  sequoia: Add PQC algorithm
  -  sequoia: Do not include EdDSA in FIPS policy
  -  sequoia: Generate AEAD policy
  -  openssl: send one PQ and one classic key_share; prioritize PQ groups
  -  FIPS: deprioritize X25519-MLKEM768 over P256-MLKEM768 for openssl...
  -  python, policies, tests: alias X25519-MLKEM768 to MLKEM768-X25519
  -  gnutls: enable ML-DSA, for both secure-sig and secure-sig-for-cert


author: Ondrej Kozina <okozina@redhat.com> - 2.7.0-2
changelog:
  - Rebuild for OpenSSL Argon2 implementation (OpenSSL 3.2)
  - patch: Do not compile unused internal argon2 implementation


author: Ondrej Kozina <okozina@redhat.com> - 2.7.5-1
changelog:
  - Update to cryptsetup 2.7.5
  - patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
  - patch: Enable Argon2 in FIPS with openssl backend.
  - Resolves: RHEL-57036 RHEL-57037 RHEL-61581


author: Vladis Dronov <vdronov@redhat.com> - 15.9-26
changelog:
  - Update cscope to 15.9-26 from Fedora (RHEL-65464)
  - Fix signal handling at exit
  - Add emacs-nw and emacs-gtk+x11 to supported emacs flavors
  - Minor edits in the rpm scripts
  - Make xemacs a bcond


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-4
changelog:
  - RHEL-54297 cups source rpm doesn't actually build lspp support
  - RHEL-49447 Fix garbage uri when adding discovered print in web ui


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-8
changelog:
  - RHEL-45525 cups-2.4.10-2.el10: RHEL SAST Automation: address 1 High impact true positive(s)
  - RHEL-60354 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-4
changelog:
  - 2253985 - cups-browsed crashes when remote CUPS queue found by DNS-SD is not able to response on IPP Get-Printer-Attributes
  - fix several issues reported by openscanhub


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-6
changelog:
  - RHEL-51349 Cups browsing with 'Autoclustering on' cannot find printer clusters for HA due incorrect orientation-requested-default


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-7
changelog:
  - CVE-2024-47176 cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source
  - RHEL-17124 [cups-browsed] Prints to remote RAW queues are converted to PDF documents


author: Jacek Migacz <jmigacz@redhat.com> - 8.6.0-8
changelog:
  - disable OpenSSL Engine API support (RHEL-30436)
  - setopt: Fix disabling all protocols (CVE-2024-2004)
  - http2: push headers better cleanup (CVE-2024-2398)


author: Jacek Migacz <jmigacz@redhat.com> - 8.9.1-2
changelog:
  - add gating configuration (RHEL-52103)
  - sigpipe: init the struct so that first apply ignores (RHEL-53327)


author: Jacek Migacz <jmigacz@redhat.com> - 8.12.1-2
changelog:
  - revert using tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)
    (temporary revert to workaround another issue RHEL-85608)


author: Martin Osvald <mosvald@redhat.com> - 3.8.3-1
changelog:
  - Fix CVE-2024-34055
  - Fix wrong symlinks to imtest utilities
  - Convert to %autorelease and %autochangelog


author: Filip Janus <fjanus@redhat.com> - 2.1.28-21
changelog:
  - Remove BerkeleyDB converting tool. It was intended to be removed in
    RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
    Resolves: RHEL-43136


author: Jens Petersen <petersen@redhat.com> - 4.1-1
changelog:
  - make IME installation condition on service(graphical-login)
    instead of xorg-x11-server-Xorg (RHEL-36747)
  - drop sil-mingzat-fonts recommends from fonts-en
  - use Hebrew fonts for Yiddish (#2284093)


author: Akira TAGOH <tagoh@redhat.com> - 4.1-2
changelog:
  - Update package names for renaming
    google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts
    google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-4
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).
  - Workaround for NVMe WWID changing after kernel update.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-1
changelog:
  - Update source to upstream version 0.9.9
    * Previous patches 0014-0015 are included in the soruce tarball
    * Patch 0001 is from the upstream staging branch
  - Rename redhat patches
    * Previous patches 0001-0013 are now 0002-0014
  - Install /lib/udev/rules.d/99-z-dm-mpath-late.rules
  - Resolves: RHEL-50698


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-7
changelog:
  - Add 0018-multipath-tools-move-DEFAULT_SOCKET-definition-into-.patch
  - Add 0019-multipath-tools-add-helper-mpath_fill_sockaddr__.patch
  - Add 0020-libmpathutil-add-support-for-Unix-pathname-sockets.patch
  - Add 0021-libmpathutil-move-systemd_listen_fds-support-into-mu.patch
  - Add 0022-multipathd-make-uxsock_listen-take-a-pointer-to-fd.patch
  - Add 0023-multipathd-allow-receiving-two-socket-fds-from-syste.patch
  - Add 0024-multipathd-listen-on-pathname-and-abstract-socket-by.patch
  - Add 0025-libmpathcmd-try-both-abstract-and-pathname-sockets.patch
  - Add 0026-libmpathcmd-honor-MULTIPATH_SOCKET_NAME-environment-.patch
  - Add 0027-multipathd-honor-MULTIPATH_SOCKET_NAME-environment-v.patch
  - Add 0028-multipath-clean-up-find_multipaths-documentation.patch
  - Add 0029-multipathd-Add-multipathd-man-page-section-about-soc.patch
    * Fixes RHEL-82180 ("RFE: Enable multipathd to communicate with a
      process in another network namespace")
  - Resolves: RHEL-82180


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-9
changelog:
  - Add 0030-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
  - Add 0031-libmultipath-add-helper-function-check_path_wwid_cha.patch
  - Add 0032-multipathd-re-add-paths-skipped-because-they-were-of.patch
    * Fixes RHEL-82535 ("multipathd does not monitor multipath devices
      created externally while there are offline paths.")
  - Resolves: RHEL-82535


author: Than Ngo <than@redhat.com> - 3.10-1
changelog:
  - Fix bz#2208831, update to 3.10
  - Fix bz#2196671, diff -D no longer fails to output #ifndef lines introduced in 3.9


author: Petr Pisar <ppisar@redhat.com> - 4.20.0-7
changelog:
  - More specific error message on a locked OSTree system or a bootc system
    without a usr-overlay (RHEL-49671)


author: Evan Goode <egoode@redhat.com> - 4.20.0-15
changelog:
  - Mark transient transactions in DNF history (RHEL-84515)
  - Warn/disallow changes outside /usr, /etc with --transient (RHEL-84501)


author: Evan Goode <egoode@redhat.com> - 4.6.0-1
changelog:
  - Update to 4.6.0 (RHEL-38831)
  - Added pre-transaction plugin
  - needs-restarting: get systemd boot time from UnitsLoadStartTimestamp
    (RHEL-35577)


author: Jan Kolarik <jkolarik@redhat.com> - 4.7.0-1
changelog:
  - Update to 4.7.0 (RHEL-38831)
  - docs: Documentation of needs-restarting boot time (RHEL-35577)
  - man: Prepare pages for dnf5 switch
  - spec: Prepare for switch of dnf5 in Rawhide


author: Petr Pisar <ppisar@redhat.com> - 4.7.0-5
changelog:
  - Remove debug plugin (i.e. dnf debug-dump and and debug-restore commands)
    (RHEL-23706)
  - Enable leaves and show-leaves plugins (RHEL-44922)


author: Tomas Korbar <tkorbar@redhat.com> - 1.7.3-2
changelog:
  - Rebuild because of infrastructure problems
  - Resolves: RHEL-92412
  - Resolves: RHEL-88534
  - Resolves: RHEL-81709


author: Ondrej Sloup <osloup@redhat.com> - 1.0-83
changelog:
  - Use %patch -P N instead of deprecated %patchN
  - Use RPM macros in the spec file for paths
  - Add comments, improve the structure
  - Unify paths in patch files
  - Simplify install script


author: Ales Nezbeda <anezbeda@redhat.com> - 1.79.2-22
changelog:
  - Add missing SPDX licenses to license tag
  - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/396#note_1975708712
  - Related: RHEL-37894


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.5.2-1
changelog:
  - Rebase to PKI 11.5.2
  - CVE-2023-4727 pki-core: dogtag ca: token authentication bypass vulnerability


author: Andrew Hughes <gnu.andrew@redhat.com> - 11.5.4-2
changelog:
  - Rebuilt with java-21-openjdk as default JDK:
    https://issues.redhat.com/browse/RHEL-34597
  - Resolves: RHEL-54649


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.6.0-1
changelog:
  - Rebase to PKI 11.6.0
  - Resolves: RHEL-70108
  - Resolves: RHEL-75585
  - Resolves: RHEL-75546
  - Resolves: RHEL-74371
  - Resolves: RHEL-63015


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-14
changelog:
  - fix CVE-2024-23185: very large headers can cause resource exhaustion
    when parsing message (RHEL-55218)
  - fix CVE-2024-23184: using a large number of address headers may trigger
    a denial of service (RHEL-55205)


author: Pavel Valena <pvalena@redhat.com> - 102-1
changelog:
  - Update to dracut 102.
    Resolves: RHEL-43460,RHEL-32237,RHEL-32506,RHEL-43460,RHEL-47145,RHEL-49744,RHEL-53350


author: Pavel Valena <pvalena@redhat.com> - 102-2
changelog:
  - fix(nfs): set correct ownership and permissions for statd directory
  - fix(resume): do not include resume if swap is on netdevice
  - feat(dracut-init.sh): give --force-add precedence over --omit
  - feat(lsinitrd.sh): look for initrd in /usr/lib/modules/
  - feat(fips): include fips module unconditionally
  - fix(nfs): include also entries from /usr/lib/{passwd,group}
  - fix(dracut-functions): avoid awk in get_maj_min()
    Resolves: RHEL-39404,RHEL-47145,RHEL-53350,RHEL-53361,RHEL-53431,RHEL-53791,RHEL-54650


author: Pavel Valena <pvalena@redhat.com> - 102-3
changelog:
  - revert(dracut-init.sh): add module to mods_to_load before checking dependencies
  - fix(squash): remove cyclic dependency
  - fix(dracut.sh): exit when installing the squash loader fails
  - fix(squash-lib): harden against empty $initdir
    Resolves: RHEL-43460


author: Pavel Valena <pvalena@redhat.com> - 103-1
changelog:
  - Update to dracut 103.
  - feat(fips-crypto-policies): make c-p follow FIPS mode automatically
  - fix(fips-crypto-policies): make it depend on fips dracut module
    Resolves: RHEL-59678,RHEL-65204


author: Pavel Valena <pvalena@redhat.com> - 105-1
changelog:
  - build: upgrade to dracut 105
  - fix(systemd-ask-password): do not half-install systemd-ask-password-wall
  - fix(pcsc): add libpcsclite_real.so.*
  - revert: "fix(rescue): make rescue always no-hostonly"
  - fix(dracut-install): initize fts pointer
  - feat: add openssl module
  - build: make erofs the default requirement for squash subpackage
    Resolves: RHEL-65204,RHEL-68935,RHEL-76323


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-8
changelog:
  - dtc-Properly-harden-built-packages.patch [RHEL-33493]
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-10
changelog:
  - Fix missing dynamic tags for aarch64 python3 pylibfdt
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-12
changelog:
  - dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448]
  - dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448]
  - Resolves: RHEL-64318
    ([RHEL10][CS10] dtc fails to build with Swig 4.3.0)
  - Resolves: RHEL-65448
    ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10)


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-45148
  - Add gating.yaml
  - Add "Provides: pahole"
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Gregory Bell <grbell@redhat.com> - 1.30-1
changelog:
  - New release: 1.30
  - Better detection of abort during DWARF loader thread processing
  - pahole now detects presence of libbpf APIs and BTF features using weak function
    declarations when built using a shared library libbpf
  - Type tags are emitted for BPF arena pointers with new BTF "attributes" feature
  - New release: 1.29
  - Multithreading is now in the DWARF loader using a jobs queue and a pool of worker threads.
  - The BTF encoding now is always reproducible, and as fast/faster than before.
  - The memory consumption is reduced.
  - Support for multiple BTF_DECL_TAGs pointing to same tag.
  - Verify that pfunct prints btf_decl_tags read from BTF.
  - Don't print functions twice when using 'pfunct -f function_name'.
  - New release: 1.28
  - Various improvements to reduce the memory footprint of pahole, notably when doing BTF encoding.
  - Show flexible arrays statistics
  - Add '--padding N' and '--padding_ge N' to show structs with paddings
  - Introduce --running_kernel_vmlinux to find a vmlinux that matches the build-id of the running kernel.
  - Don't stop pfunct output at the first function that matches a filter, show all of them
  - Allow encoding data about all global variables, not just per CPU ones
  - Handle .BTF_ids section endianness, fully supporting cross builds
  - Generate decl tags for bpf_fastcall for eligible kfuncs
  - Add "distilled_base" BTF feature to split BTF generation.
  - Use the ELF_C_READ_MMAP mode with libelf, reducing peak memory utilization
  - Allow overriding /sys/kernel/btf/vmlinux via the PAHOLE_VMLINUX_BTF_FILENAME env var
  - Allow setting the list of compile units via PAHOLE_LANG_EXCLUDE env var
  - Serialize access to elfutils dwarf_getlocation().
  - Honour --lang_exclude when merging LTO built CUs.
  - Add the debuginfod client cache directory to the vmlinux search path.
  - Print the CU's language when a tag isn't supported.
  - Initial support for GNU_formal_parameter_pack, GNU_template_parameter_pack, template_value_param and template_type_param DWARF tags.
  - Improve the parameter parsing by checking DW_OP_[GNU_]entry_value
  - Introduce a tests/ directory with regression tests


author: Brian J. Murrell <brian@interlinx.bc.ca> - 1.47.0-5
changelog:
  - Recommends: /usr/sbin/sendmail rather than sendmail as many packages
    can provide a /usr/sbin/sendmail command


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.12.6-1
changelog:
  - Update to 0.12.6 (close RHBZ#2162811)
  - Update License to SPDX
  - Document and/or unbundle all bundled libraries


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-11
changelog:
  - edk2-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66234]
  - edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66234]
  - Resolves: RHEL-66234
    ([Regression] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-12
changelog:
  - edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-64642]
  - Resolves: RHEL-64642
    ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20241117-2
changelog:
  - edk2-Fix-amd-sev-firmware-file-for-amd-snp.patch [RHEL-72446]
  - Resolves: RHEL-72446
    ( QEMU should creating new json file that will correctly describe firmware for amd-sev-snp [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250221-1
changelog:
  - Rebase to edk2-stable202502 [RHEL-75592]
  - Resolves: RHEL-75592
    (rebase to edk2-stable202502)
  - Resulves: RHEL-82646
    (fix typo in fwcfg file name)
  - Resolves: RHEL-82837
    (The newer revocation file and Server 2025 required to update it)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250221-2
changelog:
  - edk2-.distro-drop-setup-macro-in-specfile-comment.patch [RHEL-85759]
  - edk2-.distro-switch-to-rhel-10-build-config.patch [RHEL-85759]
  - edk2-.distro-add-riscv64-sub-rpm.patch [RHEL-85759]
  - Resolves: RHEL-85759
    (RFE: Add riscv64 build and sub-package)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250221-3
changelog:
  - edk2-.distro-make-sure-virt-firmware-is-new-enough.patch [RHEL-85759]
  - Resolves: RHEL-85759
    (RFE: Add riscv64 build and sub-package)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250523-1
changelog:
  - Rebase to edk2-stable202505 [RHEL-82556]
  - Resolves: RHEL-82556
    ([edk2,rhel-10] rebase to edk2-stable202505)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250523-2
changelog:
  - edk2-add-qemu-vars-builds-to-build-config-and-file-lists.patch [RHEL-2908]
  - edk2-add-dbx-update-script.patch [RHEL-96866]
  - edk2-update-dbx-to-20250610.patch [RHEL-96866]
  - Resolves: RHEL-2908
    ([aarch64][EDK2] UEFI writable variable service in QEMU)
  - Resolves: RHEL-96866
    ([edk2,rhel-10] dbx update 20250610)


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Erico Nunes <ernunes@redhat.com> - 9.0.0-4
changelog:
  - Split xdriinfo into its own package
  - Remove xdriinfo additional source build and autotools dependencies


author: Aaron Merey <amerey@redhat.com> - 0.191-3
changelog:
  - eu-srcfiles directly links to libdebuginfod.so so explicitly
    Require elfutils-debuginfod-client not just Recommends


author: Aaron Merey <amerey@redhat.com> - 0.192-1
changelog:
  - Upgrade to upstream elfutils 0.192
  - Drop upstreamed patches
    elfutils-0.190-riscv-flatten.patch
    elfutils-0.191-riscv-flatten.patch
    elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.192-libelf-static.patch


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-fix-configure-conditional.patch
    elfutils-0.192-fix-free.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-stacktrace-lto.patch


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 5.3.0-2
changelog:
  - Install module initialization script for fish as configuration snippet for
    this shell via alternatives (#2196379)


author: Abhi Das <adas@redhat.com> - 1.8.2-2
changelog:
  - Rebase to 1.8.2-2 for zstd and multithreading support and
    Remove erroneously added gating.yaml
    Resolves: RHEL-68370


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.51.1-6
changelog:
  - Fixed buffer overflow in SetUpPhonemeTable function at synthdata.c
    Resolves: CVE-2023-49990
  - Fixed buffer underflow in CountVowelPosition function at synthdata.c
    Resolves: CVE-2023-49991
  - Fixed buffer overflow in RemoveEnding at dictionary.c
    Resolves: CVE-2023-49992
  - Fixed buffer overflow in ReadClause function at readclause.c
    Resolves: CVE-2023-49993
  - Fixed floating point exception in PeaksToHarmspect at wavegen.c
    Resolves: CVE-2023-49994


author: Milan Crha <mcrha@redhat.com> - 3.52.0-1
changelog:
  - Resolves: RHEL-30204 (Backport Fedora 40 changes)
  - Update to 3.52.0
  - Add patch to allow reconfiguring the dbus-prefix without rebuilding;
    this is needed to make EDS work with the new Flatpak infrastructure.
  - Remove support _eds_dbus_services_prefix - this was only used by
    F38 and earlier Flatpak builds.


author: Radovan Sroka <rsroka@redhat.com> - 1.3.3-102
changelog:
  RHEL 10.1 ERRATUM
  - RPMDB crashes with SIGBUS when updating the RPMDB repeatedly
  Resolves: RHEL-94540
  - File /run/fapolicyd differs from RPM expectations
  Resolves: RHEL-94536
  - fapolicyd.service badly instructs how to start after nss-user-lookup.target
  Resolves: RHEL-94538
  - fapolicy rule containing 'pattern=normal' produces error
  Resolves: RHEL-94537


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-1
changelog:
  - new upstream release
    Resolves: RHEL-65332
  - ha-cloud-support: add awscli2 dependency
    Resolves: RHEL-60021
  - fence_bladecenter fix SyntaxWarning: invalid escape sequence '\s'
    Resolves: RHEL-57063
  - build: remove python-poetry-core BuildRequires
    Resolves: RHEL-60893


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-5
changelog:
  - fence_azure_arm: use azure-identity instead of msrestazure, which has
    been deprecated
    Resolves: RHEL-76495


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-6
changelog:
  - fence_ibm_vpc: refresh bearer-token if token data is corrupt, and
    avoid edge-case of writing empty token file
    Resolves: RHEL-83520


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-7
changelog:
  - fence_sbd: get devices from SBD_DEVICE env variable if devices
    parameter isnt set
    Resolves: RHEL-79799


author: Trent Piepho <tpiepho@gmail.com> - 3.3.10-6
changelog:
  - Enable AVX2 on x86-86
  - Enable NEON on aarch64
  - Clean up precision list
  - Fix for OpenMPI build with < 4 processors
  - Fix building with no enabled MPI types
  - Enable single precision Altivec on PPC
  - Enable CNTVCT_EL0 support on ARMv8


author: Fedora Release Engineering <releng@fedoraproject.org> - 3.3.10-10
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix i686 build by disabling openmpi
  - Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build
    https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075)
  - Disable mpich on s390x to fix the build


author: Miguel Martín <mmartinv@redhat.com> - 0.5.3-1
changelog:
  * chore: update CONTRIBUTING with additional deps by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/721
   * Fix the aws-nitro-enclaves patches and serveral problems reported by clippy by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/722
   * New makefile targets by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/725
   * Packit changes by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/726
   * chore: bump openssl from 0.10.66 to 0.10.70 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/733
   * chore: bump for 0.5.3 release by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/738


   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.2...v0.5.3
  - Resolves: RHEL-77724


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Jan Grulich <jgrulich@redhat.com - 128.4.0-2
changelog:
  - Enable PipeWire camera support for RHEL 10
    + backport upstream fixes for PipeWire camera support
    Resolves: RHEL-64749


author: Jan Grulich <jgrulich@redhat.com> - 1.16.0-1
changelog:
  - Update to 1.16.0
    Resolves: RHEL-72779
  - Add support for preinstalling Flatpaks
    Resolves: RHEL-26066


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-14
changelog:
  - Analyse flex sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222083)


author: Akira TAGOH <tagoh@redhat.com> - 2.14.2-5
changelog:
  - Update 65-nonlatin.conf to 69-nonlatin.conf
    This basically provides substitutes for certain languages and is helpful
    to determine default behavior though, we have per-package config for similar purpose.
    Since 65 is mostly used for default fonts and this config prevents some behavior for
    packages named something coming later than "nonlatin" in the alphabetical order.
    So moving this to the safer priority.
    This would fixes an issue, particularly Lohit Marathi vs Lohit Devanagari after
    updating their priorities from 65 to 66.


author: Zdenek Dohnal <zdohnal@redhat.com> - 4.0-77.20230810
changelog:
  - update to foomatic-db-4.0-20230810
  - fix xargs in %prep to work with files with spaces
  - fix rpm warnings about patch macros
  - SPDX migration


author: Marek Kasik <mkasik@redhat.com> - 2:3.10.3-3
changelog:
  - Initialize function pointers after resource allocation
  - Fixes CVE-2025-4478
  - Resolves: RHEL-91583


author: Richard W.M. Jones <rjones@redhat.com> - 3.14.1-2
changelog:
  - Force fuse3 and fuse3-libs versions to be identical
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/LYQUYUAS7FG6FFGJBBWP7XEV563V4LBS/


author: Jakub Martisko <jamartis@redhat.com> - 5.2.2-1
changelog:
  - New upstream release - 5.2.2
  - Disable the pma test for now (it breaks the build right now).
  Resolves rhbz#2124101


author: Jakub Martisko <jamartis@redhat.com> - 5.3.0-1
changelog:
  - New upstream release - 5.3.0
  - libsigsegv should no longer be needed for the build
  Resolves rhbz#2247650


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 15.0-7
changelog:
  - Man page and documentation updates (RHEL-95996)
  - Support scl-style quoted invocation (RHEL-94760)


author: Marek Polacek <polacek@redhat.com> 15.1.1-1
changelog:
  - update from releases/gcc-15 branch
    - GCC 15.1 release
    - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407


author: Marek Polacek <polacek@redhat.com> 15.1.1-2
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
     c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
     c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
     fortran/102900, fortran/119928, fortran/119986, fortran/120049,
     fortran/120107, fortran/120139, fortran/120163, fortran/120179,
     fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
     libfortran/120152, libfortran/120153, libfortran/120158,
     libfortran/120196, libstdc++/118260, libstdc++/119427,
     libstdc++/119714, libstdc++/120029, libstdc++/120114,
     libstdc++/120159, libstdc++/120187, libstdc++/120190,
     libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
     modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
     preprocessor/120061, target/119610, testsuite/119909,
     tree-optimization/111873, tree-optimization/119712,
     tree-optimization/120043, tree-optimization/120048,
     tree-optimization/120074, tree-optimization/120089,
     tree-optimization/120143, tree-optimization/120211


author: Siddhesh Poyarekar <siddhesh@redhat.com> 15.1.1-2.2
changelog:
  - Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282)
  - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
    (RHEL-84680)


author: Marek Polacek <polacek@redhat.com> 15.1.1-2.3
changelog:
  - ship libstdc++.modules.json (RHEL-97043)
  - configure with --with-long-double-format=ieee (RHEL-97055)


author: Keith Seitz <keiths@redhat.com>
changelog:
  - Backport "gdb: s390: Add arch14 record/replay support"
    (Andreas Arnez, RHEL-36225)
  - Backport "Add support for Power11 options"
    (Peter Bergner, RHEL-36518)
  - Backport "Sync x86 disassembler with (proposed) gdb-15.1 release."
    (many authors, RHEL-36527)


author: Guinevere Larsen <blarsen@redhat.com>
changelog:
  - Backport series Infcalls from B/P conditions in multi-threaded inferiors
    (Andrew Burgess, RHEL-13298)


author: Keith Seitz <keiths@redhat.com> - 14.2-1.el10
changelog:
  - Rebase to gdb-14.2 and update all bug references:
    RHEL-39326 "better support for $pc not saved"
    RHEL-39325 "Infcalls from B/P conditions in multi-threaded inferiors"
    RHEL-39324 "gdb: s390: Add arch14 record/replay support"
    RHEL-24764 "Add support for Power11 options"
    RHEL-34213 "Sync x86 disassembler with (proposed) gdb-15.1 release."
    (Keith Seitz, RHEL-33256)


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 2.7.0-3
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Neal Gompa <ngompa@centosproject.org> - 2.7.2-1
changelog:
  - Update to 2.7.2
    + Backport fixes from upstream to use BeaconDB
    + Use BeaconDB for the default location services source
    Resolves: RHEL-79063


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-9
changelog:
  - RHEL-38835 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-12
changelog:
  - RHEL-44771 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-12
changelog:
  - RHEL-46149 CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter
  - RHEL-46131 CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc()
  - RHEL-46112 CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters
  - RHEL-46076 CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter()
  - RHEL-44727 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-15
changelog:
  - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling
  - RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Ondřej Pohořelský <opohorel@redhat.com> - 2.45.2-1
changelog:
  - update to 2.45.2
  - add glibc-utils BuildRequires
  - build docs with asciidoc instead of a asciidoctor
  - drop git-p4 subpackage
  - Resolves: RHEL-45572, RHEL-45215


author: Arjun Shankar <arjun@redhat.com> - 2.39-29
changelog:
  - Sync with upstream branch release/2.39/master,
    commit dcaf51b41e259387602774829c45222d0507f90a:
  - elf: Change ldconfig auxcache magic number (bug 32231)
  - Make tst-strtod-underflow type-generic
  - Add crt1-2.0.o for glibc 2.0 compatibility tests
  - Add tests of more strtod special cases
  - Add more tests of strtod end pointer
  - Make tst-strtod2 and tst-strtod5 type-generic
  - powerpc64le: Build new strtod tests with long double ABI flags (bug 32145)
  - Do not set errno for overflowing NaN payload in strtod/nan (bug 32045)
  - Improve NaN payload testing
  - Make __strtod_internal tests type-generic
  - Fix strtod subnormal rounding (bug 30220)
  - More thoroughly test underflow / errno in tst-strtod-round
  - Test errno setting on strtod overflow in tst-strtod-round
  - Add tests of fread
  - stdio-common: Add new test for fdopen
  - libio: Attempt wide backup free only for non-legacy code
  - debug: Fix read error handling in pcprofiledump
  - elf: Fix tst-dlopen-tlsreinit1.out test dependency
  - elf: Avoid re-initializing already allocated TLS in dlopen (bug 31717)
  - elf: Clarify and invert second argument of _dl_allocate_tls_init
  - elf: Support recursive use of dynamic TLS in interposed malloc
  - nptl: Use <support/check.h> facilities in tst-setuid3
  - posix: Use <support/check.h> facilities in tst-truncate and tst-truncate64
  - ungetc: Fix backup buffer leak on program exit [BZ #27821]
  - ungetc: Fix uninitialized read when putting into unused streams [BZ #27821]
  - Make tst-ungetc use libsupport
  - stdio-common: Add test for vfscanf with matches longer than INT_MAX [BZ #27650]
  - support: Add FAIL test failure helper
  - string: strerror, strsignal cannot use buffer after dlmopen (bug 32026)
  - Define __libc_initial for the static libc
  - x86: Fix bug in strchrnul-evex512 [BZ #32078]
  - Adjust check-local-headers test for libaudit 4.0
  - x32/cet: Support shadow stack during startup for Linux 6.10
  - x86-64: Remove sysdeps/x86_64/x32/dl-machine.h
  - support: Add options list terminator to the test driver
  - manual/stdio: Further clarify putc, putwc, getc, and getwc
  - Fix name space violation in fortify wrappers (bug 32052)
  - resolv: Fix tst-resolv-short-response for older GCC (bug 32042)
  - Add mremap tests
  - mremap: Update manual entry
  - linux: Update the mremap C implementation [BZ #31968]
  - Enhanced test coverage for strncmp, wcsncmp
  - Enhance test coverage for strnlen, wcsnlen


author: Florian Weimer <fweimer@redhat.com> - 2.39-34
changelog:
  - Sync with upstream branch release/2.39/master,
    commit 808a84a8b81468b517a4d721fdc62069cb8c211f:
  - Fix underallocation of abort_msg_s struct (CVE-2025-0395)
  - x86/string: Fixup alignment of main loop in str{n}cmp-evex [BZ #32212]
  - x86: Improve large memset perf with non-temporal stores [RHEL-29312]
  - x86: Avoid integer truncation with large cache sizes (bug 32470)
  - math: Exclude internal math symbols for tests [BZ #32414]
  - malloc: add indirection for malloc(-like) functions in tests [BZ #32366]
  - Pass -nostdlib -nostartfiles together with -r [BZ #31753]
  - nptl: initialize cpu_id_start prior to rseq registration
  - nptl: initialize rseq area prior to registration


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.1-12
changelog:
  - Release bump due to internal issue with the build system (missing debug symbols)
    Related: RHEL-24118


author: Dhanuka Warusadura <dhanuka@gnome.org> - 42.1-6
changelog:
  - ssh-agent: update build instructions to disable ssh component
  - Introduced conditional builds based on ssh component required or not


author: Matthias Clasen <mclasen@redhat.com> - 3.36.0-14
changelog:
  - Use autosetup
  - Rename 14.patch to gnome-menus-01.patch
  - Rearrange after design review
  - Resolves: RHEL-65839


author: Tomas Popela <tpopela@redhat.com> - 3.36.0-16
changelog:
  - Fix Calculator to be presented
  - Papers should be in Utilities and not in Graphics and Office
  - Resolves: RHEL-65839


author: Olivier Fourdan <ofourdan@redhat.com> - 0.0.11-5
changelog:
  - Fix abort when disconnecting from libei
  - Fix restarting the daemon state after a client has disconnected
    Resolves: RHEL-89455


author: Kalev Lember <klember@redhat.com> - 45.0-5
changelog:
  - Drop downstream patch that downgraded pretty_env_logger dep to 0.4
  - Don't use both meson and cargo for building
  - Migrate to SPDX license


author: Parag Nemade <pnemade AT redhat DOT com> - 1:1.002-0.15.20130214
changelog:
  - Un-retire this package in F38+ (#2162532)
  - Update as per suggestions given in rename package review (#2166813)


author: Akira TAGOH <tagoh@redhat.com> - 20200215-15
changelog:
  - Drop the font unification which causes a lot of problems.
    Resolves: rhbz#2186711, rhbz#2144373, rhbz#2096153, rhbz#517789


author: Akira TAGOH <tagoh@redhat.com> - 20240101-4
changelog:
  - Updates to monthly release of 24.1.1
  - Remove substitute config for Symbol.
    Resolves: rhbz#2259962


author: Akira TAGOH <tagoh@redhat.com> - 20240201-2
changelog:
  - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
    Resolves: rhbz#2265259


author: Akira TAGOH <tagoh@redhat.com> - 20240301-3
changelog:
  - Add google-noto-fonts-all, google-noto-fonts-all-vf, and
    google-noto-fonts-all-static meta packages.


author: Akira TAGOh <tagoh@redhat.com> - 20240401-4
changelog:
  - Fix a typo in config.
  - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
  - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
    Resolves: RHEL-47289


author: Akira TAGOH <tagoh@redhat.com> - 1:2.004-5
changelog:
  - Drop Conflict: google-noto-sans-cjk-vf-fonts to get them installed together.
    fontconfig basically estimate same score for both but static font still has
    a priority because of path name. This works as a workaround for some issues
    related to variable fonts.
    Resolves: rhbz #2240646


author: Akira TAGOH <tagoh@redhat.com> - 1:2.004-5
changelog:
  - Drop Conflict: google-noto-sans-cjk-fonts to get them installed together.
    fontconfig basically estimate same score for both but static font still has
    a priority because of path name. This works as a workaround for some issues
    related to variable fonts.
    Resolves: rhbz #2240646


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-11
changelog:
  - internalize scons (RHEL-14750)
  - add missing IPv6 support
  - add note about limited Red Hat support
  - drop unneeded API-compatibility patch
  - fix busy wait when reading from gpsd socket
  - fix some issues reported by coverity and shellcheck


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-14
changelog:
  - fix annobin coverage (RHEL-33496)
  - add conflicts for gpsd-minimal (RHEL-33651)
  - drop compat subpackage (RHEL-33651)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-15
changelog:
  - fix icon path in desktop files (RHEL-34158)
  - replace gpsd-minimal conflicts with obsoletes (RHEL-33651)


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-10
changelog:
  - Resolves RHEL-67042: update selinux policy for valkey datasource
  - Resolves RHEL-61900: allow mssql datasource in selinux policy


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-12
changelog:
  - Resolves RHEL-68657: Update configurations to allow loading the valkey datasource
  - Clean up the grafana.ini file


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-13
changelog:
  - Resolves RHEL-68657: Update configurations to allow loading the valkey datasource
  - Revert changes that break older custom dashboards


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-20
changelog:
  - Resolves RHEL-97520: Rework grafana-selinux spec file sections
  - Resolves RHEL-92648: Add additional SELinux rules for grafana-selinux package to allow LDAP connections


author: Sam Feifer <sfeifer@redhat.com> - 5.2.1-1
changelog:
  - Resolves RHEL-67043: update to 5.2.0/1 tagged upstream community sources, see CHANGELOG
  - Resolves RHEL-16337: added PCP Vector Top Consumers dashboard in new release


author: Parag Nemade <pnemade AT redhat DOT com> - 1.3.14-13
changelog:
  - Migrate to SPDX license expression
  - Drop Netscape license reference as no test file using it in 1.3.x releases


author: Sayan Paul <paul.sayan@gmail.com> - 0.15.7-1
changelog:
  - Update to 0.15.7
  - Reword warning message for disabled checks
  - Fixed the issue that boot_counter cannot be unset and some scripts do not have executable permissions
  - Packit: only use IoT relevant branches


author: Antonio Murdaca <antoniomurdaca@gmail.com> - 0.15.8-1
changelog:
  * ci: add ci test for pull request by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/164
   * ci: add more wait time for fallback by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/167
   * ci: fix ansible check failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/169
   * ci: add test case of bootc anaconda iso by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/171
   * test github token by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/174
   * update github action by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/177
   * Update greenboot-ci.yaml by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/179
   * ci: fix iso case failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/173
   * ci: add support for fedora rawhide by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/181
   * ci: fix rahide failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/183
   * ci: fix podman retry issue by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/185
   * ci: add centos-stream-9 support by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/187
   * ci: add rhel 9.6 support by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/190
   * ci: fix rhel 9.6 anaconda case failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/193
   * ci: fix secret error by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/195
   * specfile: Stop building on ix86 by @travier in https://github.com/fedora-iot/greenboot/pull/197
   * rollback: if no bootc, fallback to rpm-ostree by @runcom in https://github.com/fedora-iot/greenboot/pull/199
   * fix:fail early for any required script failure by @say-paul in https://github.com/fedora-iot/greenboot/pull/198
   * Release 0.15.8 by @runcom in https://github.com/fedora-iot/greenboot/pull/202

   * @travier made their first contribution in https://github.com/fedora-iot/greenboot/pull/197

   **Full Changelog**: https://github.com/fedora-iot/greenboot/compare/v0.15.7...v0.15.8
  - Resolves: RHEL-78242


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.23.0-1
changelog:
  - Rebase to version 1.23.0
  - Several files were removed from groff package
  - Several files were added to groff package


author: Marta Lewandowska <mlewando@redhat.com> - 2.12-15
changelog:
  - 99-grub-mkconfig.install: Disable BLS and run grub2-mkconfig when GRUB_ENABLE_BLSCFG is disable
  - Resolves: #RHEL-86261


author: Wim Taymans <wtaymans@redhat.com> - 1.24.10-1
changelog:
  - Update to 1.24.10
    Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996
    Resolves: RHEL-70960, RHEL-70947, RHEL-70934


author: Tomas Popela <tpopela@redhat.com> - 3.24.43-2
changelog:
  - Don't require package gtk-immodules-imsettings as it isn't part of
    RHEL 10 (it's built from GTK 2 SRPM which isn't presented)
  - Resolves: RHEL-38223


author: Matthias Clasen <mclasen@redhat.com> - 3.24.43-4
changelog:
  - Stop relying on xpms in the testsuite
    Resolves: RHEL-69453
  - Avoid criticals on headless systems
    Resolves: RHEL-40884
  - Hide emoji chooser unless explicitly requested
    Resolves: RHEL-65214


author: Richard W.M. Jones <rjones@redhat.com> - 1.52.1-1
changelog:
  - New stable version 1.52.1
  - Rebase on top of patches from RHEL 9.5
  - Reboot Windows between each firstboot script to improve reliability
    resolves: RHEL-56319
  - customize: Implement --inject-blnsvr operation
    resolves: RHEL-56330
  - Add support for nbd+unix:// URIs
    resolves: RHEL-56332


author: Richard W.M. Jones <rjones@redhat.com> - 1.52.2-2
changelog:
  - Rebase to guestfs-tools 1.52.2
    resolves: RHEL-56812
  - Replace Jansson with json-c
    resolves: RHEL-65295


author: Richard W.M. Jones <rjones@redhat.com> - 1.54.0-2
changelog:
  - Rebase to guestfs-tools 1.54.0
    resolves: RHEL-81734
  - virt-builder, virt-v2v & other tools with -v and --install causes dnf5 error
    resolves: RHEL-83201
  - virt-drivers fails on opensuse guest if kernel-source is installed
    resolves: RHEL-92604
  - builder: Update link to templates to use https
    resolves: RHEL-94873


author: Zdenek Dohnal <zdohnal@redhat.com> - 5.3.4-11
changelog:
  - GTK2 is not in CentOS Stream 10, dont ship libs-ui subpackage there
  - Add other licenses to License tag and use SPDX identifiers to comply with FPG


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.0-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0
  - Resolves: RHEL-67315


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.1-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1
  - Resolves: RHEL-67315


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.2-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.3-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.4-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4
  - Resolves: RHEL-83030


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.6-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.6
  - Related: RHEL-80817


author: Jakub Martisko <jamartis@redhat.com> - 1.13-1
changelog:
  - Rebase to gzip 1.13
  - There's a bug on s390x: https://lists.gnu.org/archive/html/bug-gzip/2023-10/msg00000.html
  - Revert the s390x build options in the next release
  Resolves: rhbz#2232890


author: Petr Dancak <pdancak@redhat.com> - 3.23.12-9
changelog:
  - enable following links with curl in all use cases
    Resolves: RHEL-84817
  - hp-plugin-download wrongly parsed file type
    Resolves: RHEL-97437


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.61-1
changelog:
  - new version 2.4.61
  - Resolves: RHEL-45753 - httpd: Potential SSRF in 
    mod_rewrite (CVE-2024-39573)
  - Resolves: RHEL-45757 - httpd: null pointer dereference in
    mod_proxy (CVE-2024-38477)
  - Resolves: RHEL-45776 - httpd: Improper escaping of output in
    mod_rewrite (CVE-2024-38475)
  - Resolves: RHEL-45791 - httpd: Encoding problem in 
    mod_proxy (CVE-2024-38473)
  - Resolves: RHEL-45811 - httpd: Substitution encoding issue in 
    mod_rewrite (CVE-2024-38474)
  - Resolves: RHEL-46051 - httpd: Security issues via backend applications 
    whose response headers are malicious or exploitable (CVE-2024-38476)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-3
changelog:
  - Resolves: RHEL-53632 - RFE: httpd, add IP_FREEBIND support for Listen
  - Resolves: RHEL-53722 - [RFE] ProxyWebsocketIdleTimeout from
    httpd mod_proxy_wstunnel


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-1
changelog:
  - new version 2.4.63
  - Resolves: RHEL-76358 - httpd rebase to 2.4.63
  - Resolves: RHEL-73414 - RewriteRule proxying to UDS (unix domain socket)
    configured in .htaccess doesn't work on httpd-2.4.62-1
  - Resolves: RHEL-66489 - Apache HTTPD no longer parse PHP files with unicode
    characters in the name


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20180807-1
changelog:
  - Use new upstream which provide more wordlist
  - Update to new SPDX license
  - Resolves:rhbz#2218154 - Drop dependency on aspell


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20190319-1
changelog:
  - Use new upstream which provide more wordlist
  - Update to new SPDX license
  - Resolves:rhbz#2218155 - Drop dependency on aspell


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20070116-32
changelog:
  - Use new source archive generated using Farsi aspell dictionary
  - Resolves:rhbz#2218158 - Drop dependency on aspell


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20040505-31
changelog:
  - Use new source archive generated using Manx aspell dictionary
  - Resolves:rhbz#2218159 - Drop dependency on aspell


author: Parag Nemade <pnemade AT redhat DOT com> - 0.1-3
changelog:
  - Fix Source and URL tags
  - Use correct upstream source tarball
  - Add Supplements for langpacks-ka
  - Enable this package to be used for EL < 9 version


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20090415-29
changelog:
  - Use new source archive generated using Kirghiz aspell dictionary
  - Resolves:rhbz#2218161 - Drop dependency on aspell


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.46.20220731git
changelog:
  - hpvd-Add-support-for-patching-hyperv-daemons.patch [RHEL-40107 RHEL-40679]
  - hpvd-Do-not-set-NM_CONTROLLED-no.patch [RHEL-40107 RHEL-40679]
  - hpvd-Add-vmbus_testing-tool-build-files.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [RHEL-40107 RHEL-40679]
  - hpvd-Use-filename-for-connection-profile.patch [RHEL-40107 RHEL-40679]
  - hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [RHEL-40107 RHEL-40679]
  - hpvd-tools-hv-Remove-an-extraneous-the.patch [RHEL-40107 RHEL-40679]
  - hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [RHEL-40107 RHEL-40679]
  - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-40107 RHEL-40679]
  - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-40107 RHEL-40679]
  - hpvd-Remove-hyperv_fcopy_daemon-as-the-c10s-kernel-does-n.patch [RHEL-40107 RHEL-40679]
  - Resolves: RHEL-40107
    ([Hyper-V][RHEL10] Request to update hypervkvpd related file /usr/libexec/hypervkvpd/hv_set_ifconfig same as RHEL 9.5 hv_set_ifconfig file.)
  - Resolves: RHEL-40679
    ([Hyper-V][RHEL10] Request to update hyperv-daemons vmbus_testing, hv_kvp_daemon.c, hv_vss_daemon.c files as same as RHEL 9.5)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.47.20220731git
changelog:
  - hpvd-Add-support-for-newer-fcopy-UIO-hyperv-daemons-modul.patch [RHEL-44617]
  - hpvd-Update-main-package-dep-on-hypervfcopyd-to-be-arch-d.patch [RHEL-44617]
  - hpvd-Particularize-hypervfcopyd-service-requirements.patch [RHEL-44617]
  - Resolves: RHEL-44617
    ([RHEL-10] Add support for fcopy UIO userland module in hyperv-daemons)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.49.20220731git
changelog:
  - hpvd-Use-NetworkManager-information-to-report-DHCP-settin.patch [RHEL-65434]
  - hpvd-Use-NetworkManager-information-to-report-DNS-setting.patch [RHEL-65434]
  - Resolves: RHEL-65434
    ([Hyper-V][RHEL-10]KVP daemon inspects /etc/sysconfig/network-scripts/ifcfg-* files to get DHCP information)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.50.20220731git
changelog:
  - hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95811]
  - Resolves: RHEL-95811
    ([RHEL-10]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 10)


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31~beta1-11
changelog:
  - Disable ibus-panel rich condition in RHEL
  - Delete ibus-xx-desktop-testing-mutter.patch
  - Delete libXtst-devel dependency
  - Replace gnome-terminal with ptyxis
  - Install gnome-desktop-testing for RHEL
  - Delete xorg-x11-server-Xvfb gnome-session-xsession
  - Delete build packages for gnome-desktop-testing for RHEL
  - Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific
  - Fix CI test case conditions
  - Add no-overview@fthx until gnome-shell-extension-no-overview is available
  - Add gnome-headless-session@.service until GDM will provide it


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31-1
changelog:
  - Bump to 1.5.31
  - Delete RHEL specific packages
  - Update installed packages in CI
  - configure option for Flatpak build
  - Move xinit post scripts
  - Require gnome-shell-extension-no-overview in RHEL


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.16-16
changelog:
  - tests: Update packages with comps-f41
  - Add base-graphical
  - Add fonts default
  - Delete libcanberra-gtk3, libproxy-duktape
  - Delete tmt for RHEL CI


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.16-18
changelog:
  - Update CI for RHEL10
  - Add no-overview@fthx until gnome-shell-extension-no-overview is available
  - Add gnome-headless-session@.service until GDM will provide it


author: Mike FABIAN <mfabian@redhat.com> - 1.4.27-1
changelog:
  - Update to 1.4.27
  - Prefer commit to "return FALSE;" for space, and other keys
    where the msymbol name is exactly one character, add a
    sleep for Return.  This is to avoid ordering problems in
    mutter.
    (Resolves: https://github.com/ibus/ibus-m17n/issues/72)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.28-1
changelog:
  - Update to 1.4.28
  - Translation update from Weblate (Russian (ru), new, 100%)
  - Build against gtk3 by default (Resolves:
    https://github.com/ibus/ibus-m17n/issues/73)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.29-1
changelog:
  - Update to 1.4.29
  - Translation update from Weblate (Malayalam (ml), new, 100%, Swedish (sv)
    100%)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.29-5
changelog:
  - Resolves: RHELMISC-5984 Fix CI tests better: Check for existence of
    directory instead of checking Fedora version.


author: Mike FABIAN <mfabian@redhat.com> - 1.17.3-1
changelog:
  - Update to 1.17.3
  - Support several backends for playing sounds
    Resolves: rhbz#2237674 https://bugzilla.redhat.com/show_bug.cgi?id=2237674
  - Update Unihan_Variants.txt and regenerate engine/chinese_variants.py to Unicode Version 15.1.0


author: Mike FABIAN <mfabian@redhat.com> - 1.17.4-1
changelog:
  - Update to 1.17.4
  - Fix compose support for ibus >= 1.5.28
    (Resolves: https://github.com/mike-fabian/ibus-table/issues/145)
  - Translation update from Weblate (New language, Russian, (ru) 80%)
  - Use “<developer><name>…</name></developer>” in ibus-table.appdata.xml instead of “<developer_name>…</developer_name>”
    Because </developer_name> is deprecated and it makes the build fail on Fedora rawhide.


author: Mike FABIAN <mfabian@redhat.com> - 1.17.6-2
changelog:
  - Resolves: RHEL-36633 Do not require gnome-session, gnome-shell, gnome-
    shell-extension-no-overview for the CI test


author: Mike FABIAN <mfabian@redhat.com> - 1.8.11-1
changelog:
  - Update to 1.8.11
  - Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt
    (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7)
  - Improve “improve_jyutping.py” to allow comments in the table
  - Update of jyutping.txt for Unicode 15.0.0 final release


author: Mike FABIAN <mfabian@redhat.com> - 1.8.12-1
changelog:
  - Update to 1.8.12
  - appdata.xml files are now included upstream, remove from the .spec file
  - Migrate license tags to SPDX format


author: Mike FABIAN <mfabian@redhat.com> - 2.25.4-1
changelog:
  - Resolves: RHEL-31506 Update to 2.25.4
  - Pass key which triggered cancel command to application if
    self._min_char_complete == 0 and there are no candidates (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/505)
  - Update emoji annotations from CLDR
  - Translation update from Weblate (ka 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.6-1
changelog:
  - Resolves: RHEL-31506 Update to 2.25.6
  - If Shift+something is pressed and then released, do not swallow the
    release of the Shift key (Resolves: https://github.com/mike-fabian/ibus-
    typing-booster/issues/504)
  - Decrease grid_row_spacing from 5 to 1 pixels to make the setup tool still
    fit on a 1024x768 pixel screen


author: Mike FABIAN <mfabian@redhat.com> - 2.25.7-1
changelog:
  - Resolves: RHEL-31506 Release 2.25.7
  - Don’t use forward_key_event() on Gnome Wayland if the key might be a
    keyboard shortcut using a modifier (Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/507)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.9-1
changelog:
  - Resolves: RHEL-36638 Update to 2.25.9 and Remove dependency on Xvfb from
    CI tests
  - Translation update from Weblate (cs 100%)
  - Update emoji annotations from CLDR
  - Drop Python < 3.6 support
  - Fix test_0_gtk.py: typing booster now avoids clearing the input in
    do_reset() when the preedit is empty
  - Remove dependency on Xvfb from ibus-typing-booster.spec
  - Support compose sequences containing ASCII keys written as <U00XX> code
    points (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/510)
  - Translation update from Weblate (pt 91.3%)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.11-1
changelog:
  - Resolves: RHEL-31506 Update to 2.25.11
  - Yet another fix to make it possible again to use keys with Unicode
    keysyms in keybindings and make it work with all known versions of ibus
    (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/497)
  - Use NFC when doing the cursor correction after committing a preedit using
    space (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/515)
  - Fix for ibus-1.5.30: Make it possible again to use keys with Unicode
    keysyms in keybindings (Resolves: https://github.com/mike-fabian/ibus-
    typing-booster/issues/497)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.12-1
changelog:
  - Resolves: RHEL-36633 Do not require gnome-session, gnome-shell, gnome-
    desktop-testing, ibus-desktop-testing, gnome-shell-extension-no-overview
    for the CI test


author: Martin Gieseking <martin.gieseking@uos.de> - 0.32.3-14
changelog:
  - updated License field (https://src.fedoraproject.org/rpms/icoutils/pull-request/2)
  - updated %patch to new syntax


author: Andrew Hughes <gnu.andrew@redhat.com> - 5.5.0-3
changelog:
  - Rebuilt with java-21-openjdk as default JDK:
    https://issues.redhat.com/browse/RHEL-34597
  - Resolves: RHEL-54331


author: Andrew Hughes <gnu.andrew@redhat.com> - 5.5.0-3
changelog:
  - Rebuilt with java-21-openjdk as default JDK:
    https://issues.redhat.com/browse/RHEL-34597
  - Resolves: RHEL-54333


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2.19.0-1
changelog:
  - Rebase to https://github.com/coreos/ignition/releases/tag/v2.19.0
  - Update ignition-edge commit https://github.com/fedora-iot/ignition-edge/pull/2


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 7.0.2-2
changelog:
  - Fix possible use of an undefined value as an ARRAY reference in ParserNonXS.pm
    (causes FTBFS of a2ps)
    Resolves: #2171433


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 7.1-4
changelog:
  - Fix memory/resource leaks, insufficient memory allocations and
    variable declarations without initializer
    Resolves: RHEL-43595


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-12
changelog:
  - Resolves: RHEL-72580 A slow HSM can cause IPA server installation to fail setting up certificate tracking


author: Thomas Woerner <twoerner@redhat.com> - 4.12.2-13
changelog:
  - Resolves: RHEL-67912 Add DNS over TLS Support, Require bind 32:9.18.33-2 and new bind-dyndb-ldap 11.11-1


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-14
changelog:
  - Resolves: RHEL-78766 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-77965 ipa-server-install failing on slow hsm


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-16
changelog:
  - Resolves: RHEL-84648 ipa-cacert-manage install fails with CAs having the same subject DN (subject key mismatch info)
  - Resolves: RHEL-84279 IPU 9 -> 10: ipa-server breaks the in-place upgrade due to failed scriptlet
  - Resolves: RHEL-84275 Search size limit tooltip has Search time limit tooltip text
  - Resolves: RHEL-81200 Ipa client --raw --structured throws internal error
  - Resolves: RHEL-68803 ipa-migrate with LDIF file from backup of remote server, fails with error 'change collided with another change'
  - Resolves: RHEL-67686 [RFE] IDM support UIDs up to 4,294,967,293
  - Resolves: RHEL-67633 ipa-healthcheck has tests which call fips-mode-setup
  - Resolves: RHEL-4845 Protect *all* IPA service principals


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-17
changelog:
  - Resolves: RHEL-88043 Server installation: dot-forwarder not added as a forwarder
  - Resolves: RHEL-86481 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-85788 ipa-sidgen: fix memory leak in ipa_sidgen_add_post_op()
  - Resolves: RHEL-88899 [RFE] Add check on CA cert expiry for ipa-cert-fix


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-18
changelog:
  - Resolves: RHEL-89979 Support OpenSSL provider API
  - Resolves: RHEL-25007 [RFE] Give warning when adding user with UID out of any ID range
  - Resolves: RHEL-93484 Unable to modify IPA config; --ipaconfigstring="" causes internal error
  - Resolves: RHEL-89834 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-88833 kdb: ipadb_get_connection() succeeds but returns null LDAP context
  - Resolves: RHEL-79072 ipa idrange-add --help should be more clear about required options
  - Resolves: RHEL-68803 ipa-migrate with LDIF file from backup of remote server, fails with error 'change collided with another change'
  - Resolves: RHEL-30825 IDM - When creating an ID range, should require a RID


author: Rob Crittenden <rcritten@redhat.com> - 0.16-2
changelog:
  - Don't fail if a service name cannot be looked up in LDAP
  - Disable the ipa-ods-exporter service check


author: Rob Crittenden <rcritten@redhat.com> - 0.16-6
changelog:
  - Skip DogtagCertsConfigCheck for PKI versions >= 11.5.0 (RHEL-39701)
  - Need to change log file permissions of IPA as per CIS benchmark (RHEL-44305)


author: Phil Sutter <psutter@redhat.com> - 7.22-4
changelog:
  - Add legacy actions for service save support
  - ipset-services to depend on iptables-nft-services
  - Require kernel-modules-extra


author: Phil Sutter <psutter@redhat.com> [1.8.11-1.el10]
changelog:
  - Add requirement on kernel-modules-extra (Phil Sutter) [RHEL-65224]
  - Rebase onto upstream version 1.8.11 (Phil Sutter) [RHEL-66725]


author: Phil Sutter <psutter@redhat.com> [1.8.11-4.el10]
changelog:
  - Fix for RPM build warnings '--with legacy' (Phil Sutter) [RHEL-67473]
  - spec: Use bcond macro (Phil Sutter) [RHEL-67473]


author: Phil Sutter <psutter@redhat.com> [1.8.11-6.el10]
changelog:
  - nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725]
  - nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725]


author: Phil Sutter <psutter@redhat.com> [1.8.11-9.el10]
changelog:
  - xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061]
  - extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286]


author: Jan Macku <jamacku@redhat.com> - 20240905-3
changelog:
  - Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (RHEL-94582)


author: Brian C. Lane <bcl@redhat.com> - 1.2.5-1
changelog:
  - New Version 1.2.5 (bcl)
    Resolves: RHEL-45005
  - testpyisomd5sum.py: Use a consistent iso size (bcl)
  - Remove quiet from iso creation, size seems wrong (bcl)
  - workflows: Move to Fedora 39 and checkout v4 (bcl)
  - Add support for riscv64 (davidlt)
  - workflows: Update to use actions/checkout (bcl)
  - Add a GitHub Action to run tests (bcl)
  - Add mips64 (wangray1021)
  - testpyisomd5sum.py: Support genisoimage, Python 2 (ryan)


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.5.0.11-5
changelog:
  - Document rationale for gtk-update-icon-cache being in posttrans
  - Remove extra spaces in posttrans files section headers
  - Resolves: RHEL-71488


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-6
changelog:
  - Transition to the devkit build by not defining pkgos
  - Exempt x86_64 from the static libs debuginfo test until portable uses an older DWARF version
  - Sync the copy of the portable specfile with the devkit version
  - Include the devkit specfile and patches
  - Document the devkit in README.md
  - Resolves: RHEL-74407


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-1
changelog:
  - Update to jdk-21.0.6+7 (GA)
  - Update release notes to 21.0.6+7
  - Sync the copy of the portable & devkit specfiles with the latest update
  - Include the latest devkit patches
  - Update README.md to list an easier way of disabling the devkit
  - Bump tzdata requirement to 2024b for JDK-8339637
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **
  - Resolves: RHEL-73565
  - Resolves: RHEL-74005


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-2
changelog:
  - Attempt to avoid conflicts between subpackages
    - Make javadoc packages depend on headless package for legal documentation
    - Only include legal subdirectory in headless package, not demo, src & javadoc{,-zip}
    - Change javadoc-zip to just own the top-level directory, not include the entire subtree
  - Resolves: RHEL-78710


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-3
changelog:
  - Cleanup java_javadoc_rpo macro, removing unused argument and duplicated Requires
  - Related: RHEL-78710


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-1
changelog:
  - Update to jdk-21.0.7+6 (GA)
  - Update release notes to 21.0.7+6
  - Rebase FIPS support against 21.0.7+5
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86986
  - Resolves: RHEL-86636


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-2
changelog:
  - Add local version of JDK-8351500 for early interim release before 21.0.8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-90310


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Bump portablerelease to match riscv64 patched version
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-92631


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland
  - Resolves: RHEL-102686


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 6.2.0-10
changelog:
  - Switch to OpenJDK 21 as default JDK/JRE
  - Drop generated Requires on JRE
  - Drop subpackages related to Java other than 21
  - Resolves: RHEL-49822, RHEL-51276, RHEL-51276


author: Čestmír Kalina <ckalina@redhat.com> - 0.29giteedfcb
changelog:
  - Bump release and update to the latest upstream version
    Fix DW_TAG_unspecified_type issue
    Resolves: RHEL-52280


author: Martin Osvald <mosvald@redhat.com> - 2.6.1-4
changelog:
  - Add missing changes to service files so kea starts as non-root
  - Fix startup failures during upgrade due to wrong permissions and
    ownership


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-96.el10]
changelog:
  - x86/CPU/AMD: Print the reason for the last reset (Steve Best) [RHEL-89439]
  - Documentation: Add AMD Zen debugging document (Steve Best) [RHEL-89439]
  - platform/x86/amd/pmc: Use FCH_PM_BASE definition (Steve Best) [RHEL-89439]
  - i2c: piix4, x86/platform: Move the SB800 PIIX4 FCH definitions to <asm/amd/fch.h> (Steve Best) [RHEL-89439]
  - i2c: piix4: Make CONFIG_I2C_PIIX4 dependent on CONFIG_X86 (Steve Best) [RHEL-89439]
  - unmaintain ahci_xgene, ahci_seattle and hisi_sas_main (Tomas Henzl) [RHEL-81214]
  - s390/cpumf: Update CPU Measurement facility extended counter set support (Mete Durlu) [RHEL-90739]
  - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-94262] {CVE-2025-37738}
  - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-93643] {CVE-2025-23150}
  - lockd: add netlink control interface (Scott Mayhew) [RHEL-71698]
  - macintosh: declare ctl_table as const (José Expósito) [RHEL-88416]
  - tty: Make sysctl table const (José Expósito) [RHEL-88416]
  - sysctl: allow registration of const struct ctl_table (José Expósito) [RHEL-88416]
  - sysctl: move internal interfaces to const struct ctl_table (José Expósito) [RHEL-88416]
  - bpf: Constify ctl_table argument of filter function (José Expósito) [RHEL-88416]
  - hrtimers: Introduce hrtimer_setup() to replace hrtimer_init() (José Expósito) [RHEL-88416]
  - hrtimers: Add missing hrtimer_init() trace points (José Expósito) [RHEL-88416]
  - mm/migrate: Add migrate_device_pfns (José Expósito) [RHEL-88416]
  - mm: allow compound zone device pages (José Expósito) [RHEL-88416]
  - mm/mm_init: move p2pdma page refcount initialisation to p2pdma (José Expósito) [RHEL-88416]
  - drm: Move for_each_if() to util_macros.h for wider use (José Expósito) [RHEL-88416]
  - ksm: add ksm involvement information for each process (CKI Backport Bot) [RHEL-84770]
  - MAINTAINERS: Add CCA and pKVM CoCO guest support to the ARM64 entry (Mark Salter) [RHEL-80338]
  - selftests/mm: rename pkey register macro (Mark Salter) [RHEL-80338]
  - scripts/decode_stacktrace.sh: fix decoding of lines with an additional info (Mark Salter) [RHEL-80338]
  - scripts/decode_stacktrace.sh: remove trailing space (Mark Salter) [RHEL-80338]
  - redhat/configs: Enable ARM_CCA_GUEST (Mark Salter) [RHEL-80338]
  - arm64: Fix 5-level paging support in kexec/hibernate trampoline (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Get rid of TRFCR_ELx SysregFields (Mark Salter) [RHEL-80338]
  - arm64: Remove duplicate included header (Mark Salter) [RHEL-80338]
  - arm64/Kconfig: Drop EXECMEM dependency from ARCH_WANTS_EXECMEM_LATE (Mark Salter) [RHEL-80338]
  - arm64: asm: Fix typo in pgtable.h (Mark Salter) [RHEL-80338]
  - arm64/mm: Ensure adequate HUGE_MAX_HSTATE (Mark Salter) [RHEL-80338]
  - arm64/mm: Drop INIT_MM_CONTEXT() (Mark Salter) [RHEL-80338]
  - Documentation: Update the behaviour of "kvm-arm.mode" (Mark Salter) [RHEL-80338]
  - arm64: rsi: Add automatic arm-cca-guest module loading (Mark Salter) [RHEL-80338]
  - arm64: Document Arm Confidential Compute (Mark Salter) [RHEL-80338]
  - virt: arm-cca-guest: TSM_REPORT support for realms (Mark Salter) [RHEL-80338]
  - arm64: Add missing registrations of hwcaps (Mark Salter) [RHEL-80338]
  - arm64/hwcap: Remove stray references to SF8MMx (Mark Salter) [RHEL-80338]
  - kselftest/arm64: Add 2024 dpISA extensions to hwcap test (Mark Salter) [RHEL-80338]
  - KVM: arm64: Allow control of dpISA extensions in ID_AA64ISAR3_EL1 (Mark Salter) [RHEL-80338]
  - arm64/hwcap: Describe 2024 dpISA extensions to userspace (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Update ID_AA64SMFR0_EL1 to DDI0601 2024-12 (Mark Salter) [RHEL-80338]
  - arm64: Filter out SVE hwcaps when FEAT_SVE isn't implemented (Mark Salter) [RHEL-80338]
  - arm64/sme: Move storage of reg_smidr to __cpuinfo_store_cpu() (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Update ID_AA64ISAR2_EL1 to DDI0601 2024-09 (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Update ID_AA64ZFR0_EL1 to DDI0601 2024-09 (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Update ID_AA64FPFR0_EL1 to DDI0601 2024-09 (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Update ID_AA64ISAR3_EL1 to DDI0601 2024-09 (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Update ID_AA64PFR2_EL1 to DDI0601 2024-09 (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Get rid of CPACR_ELx SysregFields (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Convert *_EL12 accessors to Mapping (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Get rid of the TCR2_EL1x SysregFields (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Allow a 'Mapping' descriptor for system registers (Mark Salter) [RHEL-80338]
  - arm64/cpufeature: Refactor conditional logic in init_cpu_ftr_reg() (Mark Salter) [RHEL-80338]
  - arm64: cpufeature: Add HAFT to cpucap_is_possible() (Mark Salter) [RHEL-80338]
  - arm64: mm: Test for pmd_sect() in vmemmap_check_pmd() (Mark Salter) [RHEL-80338]
  - arm64/mm: Replace open encodings with PXD_TABLE_BIT (Mark Salter) [RHEL-80338]
  - arm64/mm: Rename pte_mkpresent() as pte_mkvalid() (Mark Salter) [RHEL-80338]
  - arm64: Kconfig: force ARM64_PAN=y when enabling TTBR0 sw PAN (Mark Salter) [RHEL-80338]
  - arm64/mm: Fix Boot panic on Ampere Altra (Mark Salter) [RHEL-80338]
  - arm64/mm: Override PARange for !LPA2 and use it consistently (Mark Salter) [RHEL-80338]
  - arm64/mm: Reduce PA space to 48 bits when LPA2 is not enabled (Mark Salter) [RHEL-80338]
  - bpf, arm64: Emit A64_{ADD,SUB}_I when possible in emit_{lse,ll_sc}_atomic() (Mark Salter) [RHEL-80338]
  - bpf, arm64: Factor out emit_a64_add_i() (Mark Salter) [RHEL-80338]
  - bpf, arm64: Simplify if logic in emit_lse_atomic() (Mark Salter) [RHEL-80338]
  - redhat configs: enable CONFIG_HISILICON_ERRATUM_162100801 (Mark Salter) [RHEL-80338]
  - arm64: realm: Use aliased addresses for device DMA to shared buffers (Mark Salter) [RHEL-80338]
  - dma: Introduce generic dma_addr_*crypted helpers (Mark Salter) [RHEL-80338]
  - dma: Fix encryption bit clearing for dma_to_phys (Mark Salter) [RHEL-80338]
  - arm64: stacktrace: Don't WARN when unwinding other tasks (Mark Salter) [RHEL-80338]
  - arm64: stacktrace: Skip reporting LR at exception boundaries (Mark Salter) [RHEL-80338]
  - kselftest/arm64: mte: Skip the hugetlb tests if MTE not supported on such mappings (Mark Salter) [RHEL-80338]
  - kselftest/arm64: mte: Use the correct naming for tag check modes in check_hugetlb_options.c (Mark Salter) [RHEL-80338]
  - arm64/signal: Silence sparse warning storing GCSPR_EL0 (Mark Salter) [RHEL-80338]
  - irqchip/gicv3-its: Add workaround for hip09 ITS erratum 162100801 (Mark Salter) [RHEL-80338]
  - clocksource/drivers/arm_arch_timer: Use of_property_present() for non-boolean properties (Mark Salter) [RHEL-80338]
  - kselftest/arm64: Ensure stable names for GCS stress test results (Mark Salter) [RHEL-80338]
  - kselftest/arm64: Validate that GCS push and write permissions work (Mark Salter) [RHEL-80338]
  - arm64: cpufeature: Add GCS to cpucap_is_possible() (Mark Salter) [RHEL-80338]
  - arm64: disable ARCH_CORRECT_STACKTRACE_ON_KRETPROBE tests (Mark Salter) [RHEL-80338]
  - crypto: arm64/crct10dif - Remove remaining 64x64 PMULL fallback code (Mark Salter) [RHEL-80338]
  - crypto: arm64/crct10dif - Use faster 16x64 bit polynomial multiply (Mark Salter) [RHEL-80338]
  - crypto: arm64/crct10dif - Remove obsolete chunking logic (Mark Salter) [RHEL-80338]
  - arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (Mark Salter) [RHEL-80338]
  - arm64/ptrace: Clarify documentation of VL configuration via ptrace (Mark Salter) [RHEL-80338]
  - arm64/mm: Change protval as 'pteval_t' in map_range() (Mark Salter) [RHEL-80338]
  - arm64: uprobes: Optimize cache flushes for xol slot (Mark Salter) [RHEL-80338]
  - arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG (Mark Salter) [RHEL-80338]
  - arm64/mm: Sanity check PTE address before runtime P4D/PUD folding (Mark Salter) [RHEL-80338]
  - arm64/fpsimd: Fix a typo (Mark Salter) [RHEL-80338]
  - arm64: Expose ID_AA64ISAR1_EL1.XS to sanitised feature consumers (Mark Salter) [RHEL-80338]
  - arm64: Return early when break handler is found on linked-list (Mark Salter) [RHEL-80338]
  - arm64/mm: Drop _PROT_SECT_DEFAULT (Mark Salter) [RHEL-80338]
  - arm64: Add command-line override for ID_AA64MMFR0_EL1.ECV (Mark Salter) [RHEL-80338]
  - arm64: head: Drop SWAPPER_TABLE_SHIFT (Mark Salter) [RHEL-80338]
  - arm64: cpufeature: add POE to cpucap_is_possible() (Mark Salter) [RHEL-80338]
  - selftests/mm: Enable pkey_sighandler_tests on arm64 (Mark Salter) [RHEL-80338]
  - selftests/mm: Use generic pkey register manipulation (Mark Salter) [RHEL-80338]
  - arm64: signal: Remove unused macro (Mark Salter) [RHEL-80338]
  - arm64: signal: Remove unnecessary check when saving POE state (Mark Salter) [RHEL-80338]
  - arm64/scs: Drop unused prototype __pi_scs_patch_vmlinux() (Mark Salter) [RHEL-80338]
  - arm64/scs: Deal with 64-bit relative offsets in FDE frames (Mark Salter) [RHEL-80338]
  - arm64/scs: Fix handling of DWARF augmentation data in CIE/FDE frames (Mark Salter) [RHEL-80338]
  - arm64: preserve pt_regs::stackframe during exec*() (Mark Salter) [RHEL-80338]
  - arm64: stacktrace: unwind exception boundaries (Mark Salter) [RHEL-80338]
  - arm64: stacktrace: split unwind_consume_stack() (Mark Salter) [RHEL-80338]
  - arm64: stacktrace: report recovered PCs (Mark Salter) [RHEL-80338]
  - arm64: stacktrace: report source of unwind data (Mark Salter) [RHEL-80338]
  - arm64: stacktrace: move dump_backtrace() to kunwind_stack_walk() (Mark Salter) [RHEL-80338]
  - arm64: use a common struct frame_record (Mark Salter) [RHEL-80338]
  - arm64: pt_regs: swap 'unused' and 'pmr' fields (Mark Salter) [RHEL-80338]
  - arm64: pt_regs: rename "pmr_save" -> "pmr" (Mark Salter) [RHEL-80338]
  - arm64: pt_regs: remove stale big-endian layout (Mark Salter) [RHEL-80338]
  - arm64: pt_regs: assert pt_regs is a multiple of 16 bytes (Mark Salter) [RHEL-80338]
  - arm64: Support AT_HWCAP3 (Mark Salter) [RHEL-80338]
  - binfmt_elf: Wire up AT_HWCAP3 at AT_HWCAP4 (Mark Salter) [RHEL-80338]
  - arm64/crc32: Implement 4-way interleave using PMULL (Mark Salter) [RHEL-80338]
  - arm64/crc32: Reorganize bit/byte ordering macros (Mark Salter) [RHEL-80338]
  - arm64/lib: Handle CRC-32 alternative in C code (Mark Salter) [RHEL-80338]
  - arm64: Use SYSTEM_OFF2 PSCI call to power off for hibernate (Mark Salter) [RHEL-80338]
  - arm64: mops: Document requirements for hypervisors (Mark Salter) [RHEL-80338]
  - arm64: lib: Use MOPS for copy_page() and clear_page() (Mark Salter) [RHEL-80338]
  - arm64: lib: Use MOPS for memcpy() routines (Mark Salter) [RHEL-80338]
  - arm64: mops: Document booting requirement for HCR_EL2.MCE2 (Mark Salter) [RHEL-80338]
  - arm64: mops: Handle MOPS exceptions from EL1 (Mark Salter) [RHEL-80338]
  - arm64: probes: Disable kprobes/uprobes on MOPS instructions (Mark Salter) [RHEL-80338]
  - arm64: optimize flush tlb kernel range (Mark Salter) [RHEL-80338]
  - arm64: tlbflush: add __flush_tlb_range_limit_excess() (Mark Salter) [RHEL-80338]
  - arm64: insn: Simulate nop instruction for better uprobe performance (Mark Salter) [RHEL-80338]
  - arm64: probes: Remove probe_opcode_t (Mark Salter) [RHEL-80338]
  - arm64: probes: Cleanup kprobes endianness conversions (Mark Salter) [RHEL-80338]
  - arm64: probes: Move kprobes-specific fields (Mark Salter) [RHEL-80338]
  - arm64: asm-offsets: remove PREEMPT_DISABLE_OFFSET (Mark Salter) [RHEL-80338]
  - arm64: asm-offsets: remove DMA_{TO,FROM}_DEVICE (Mark Salter) [RHEL-80338]
  - arm64: asm-offsets: remove VM_EXEC and PAGE_SZ (Mark Salter) [RHEL-80338]
  - arm64: asm-offsets: remove MM_CONTEXT_ID (Mark Salter) [RHEL-80338]
  - arm64: asm-offsets: remove COMPAT_{RT_,SIGFRAME_REGS_OFFSET (Mark Salter) [RHEL-80338]
  - arm64: asm-offsets: remove VMA_VM_* (Mark Salter) [RHEL-80338]
  - arm64: asm-offsets: remove TSK_ACTIVE_MM (Mark Salter) [RHEL-80338]


author: Julio Faracco <jfaracco@redhat.com> [6.12.0-97.el10]
changelog:
  - memcg: always call cond_resched() after fn() (Radostin Stoyanov) [RHEL-81199]
  - memcg: fix soft lockup in the OOM process (Radostin Stoyanov) [RHEL-81199] {CVE-2024-57977}
  - r8169: switch away from deprecated pcim_iomap_table (Izabela Bakollari) [RHEL-89042]
  - r8169: increase max jumbo packet size on RTL8125/RTL8126 (Izabela Bakollari) [RHEL-89042]
  - r8169: add support for Intel Killer E5000 (Izabela Bakollari) [RHEL-89042]
  - r8169: don't scan PHY addresses > 0 (Izabela Bakollari) [RHEL-89042]
  - r8169: remove redundant hwmon support (Izabela Bakollari) [RHEL-89042]
  - r8169: add support for RTL8125D rev.b (Izabela Bakollari) [RHEL-89042]
  - r8169: adjust version numbering for RTL8126 (Izabela Bakollari) [RHEL-89042]
  - r8169: remove unused flag RTL_FLAG_TASK_RESET_NO_QUEUE_WAKE (Izabela Bakollari) [RHEL-89042]
  - r8169: use helper r8169_mod_reg8_cond to simplify rtl_jumbo_config (Izabela Bakollari) [RHEL-89042]
  - r8169: align WAKE_PHY handling with r8125/r8126 vendor drivers (Izabela Bakollari) [RHEL-89042]
  - r8169: improve rtl_set_d3_pll_down (Izabela Bakollari) [RHEL-89042]
  - r8169: improve __rtl8169_set_wol (Izabela Bakollari) [RHEL-89042]
  - r8169: remove leftover locks after reverted change (Izabela Bakollari) [RHEL-89042]
  - r8169: improve initialization of RSS registers on RTL8125/RTL8126 (Izabela Bakollari) [RHEL-89042]
  - r8169: fix inconsistent indenting in rtl8169_get_eth_mac_stats (Izabela Bakollari) [RHEL-89042]
  - r8169: add support for RTL8125D (Izabela Bakollari) [RHEL-89042]
  - r8169: enable EEE at 2.5G per default on RTL8125B (Izabela Bakollari) [RHEL-89042]
  - r8169: remove rtl_dash_loop_wait_high/low (Izabela Bakollari) [RHEL-89042]
  - r8169: avoid duplicated messages if loading firmware fails and switch to warn level (Izabela Bakollari) [RHEL-89042]
  - r8169: replace custom flag with disable_work() et al (Izabela Bakollari) [RHEL-89042]
  - r8169: don't take RTNL lock in rtl_task() (Izabela Bakollari) [RHEL-89042]
  - r8169: implement additional ethtool stats ops (Izabela Bakollari) [RHEL-89042]
  - r8169: enable SG/TSO on selected chip versions per default (Izabela Bakollari) [RHEL-89042]
  - r8169: remove original workaround for RTL8125 broken rx issue (Izabela Bakollari) [RHEL-89042]
  - r8169: don't apply UDP padding quirk on RTL8126A (Izabela Bakollari) [RHEL-89042]
  - r8169: add support for the temperature sensor being available from RTL8125B (Izabela Bakollari) [RHEL-89042]
  - perf trace: Add missing perf_tool__init() (Anubhav Shelat) [RHEL-83635]
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (Tony Camuso) [RHEL-93188]
  - HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (Tony Camuso) [RHEL-93188]
  - HID: intel-ish-hid: ipc: Add Panther Lake PCI device IDs (Tony Camuso) [RHEL-93188]
  - HID: intel-thc: fix CONFIG_HID dependency (Tony Camuso) [RHEL-93188]
  - HID: intel-ish-hid: Send clock sync message immediately after reset (Tony Camuso) [RHEL-93188]
  - HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell (Tony Camuso) [RHEL-93188]
  - HID: intel-ish-hid: Remove unused ishtp_cl_get_tx_* (Tony Camuso) [RHEL-93188]
  - HID: intel-ish-hid: Remove unused ishtp_cl_tx_empty (Tony Camuso) [RHEL-93188]
  - HID: intel-ish-hid: Remove unused ishtp_dev_state_str (Tony Camuso) [RHEL-93188]
  - HID: intel-ish-hid: Add firmware version sysfs attributes (Tony Camuso) [RHEL-93188]
  - HID: Fix typo in the comment (Tony Camuso) [RHEL-93188]
  - HID: ishtp-hid-client: replace fake-flex arrays with flex-array members (Tony Camuso) [RHEL-93188]
  - selftests: netfilter: fix conntrack stress test failures on debug kernels (Florian Westphal) [RHEL-76546]
  - selftests: netfilter: add conntrack stress test (Florian Westphal) [RHEL-76546]
  - netfilter: nf_conntrack: speed up reads from nf_conntrack proc file (Florian Westphal) [RHEL-76546]
  - NFSv4.2: fix listxattr to return selinux security label (Olga Kornievskaia) [RHEL-87405]
  - loop: add file_start_write() and file_end_write() (Ming Lei) [RHEL-96222]
  - loop: don't require ->write_iter for writable files in loop_configure (Ming Lei) [RHEL-96222]
  - redhat/configs: Enable CONFIG_PROVE_RAW_LOCK_NESTING for debug kernel (Waiman Long) [RHEL-79908]
  - locking/lockdep: Enforce PROVE_RAW_LOCK_NESTING only if ARCH_SUPPORTS_RT (Waiman Long) [RHEL-79908]
  - lockdep: Enable PROVE_RAW_LOCK_NESTING with PROVE_LOCKING. (Waiman Long) [RHEL-79908]
  - bdev: use bdev_io_min() for statx block size (Ming Lei) [RHEL-88003]
  - powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap (Mamatha Inamdar) [RHEL-95931]
  - powerpc/vas: Return -EINVAL if the offset is non-zero in mmap() (Mamatha Inamdar) [RHEL-95931]
  - mptcp: Remove unused declaration mptcp_set_owner_r() (Davide Caratti) [RHEL-84538]
  - selftests: mptcp: validate MPJoin HMacFailure counters (Davide Caratti) [RHEL-84538]
  - mptcp: only inc MPJoinAckHMacFailure for HMAC failures (Davide Caratti) [RHEL-84538]
  - selftests: mptcp: close fd_in before returning in main_loop (Davide Caratti) [RHEL-84538]
  - selftests: mptcp: fix incorrect fd checks in main_loop (Davide Caratti) [RHEL-84538]
  - mptcp: fix NULL pointer in can_accept_new_subflow (Davide Caratti) [RHEL-84538] {CVE-2025-23145}
  - mptcp: sockopt: fix getting freebind & transparent (Davide Caratti) [RHEL-84538]
  - mptcp: sockopt: fix getting IPV6_V6ONLY (Davide Caratti) [RHEL-84538]
  - mptcp: Fix data stream corruption in the address announcement (Davide Caratti) [RHEL-84538]
  - tcp: ulp: diag: more info without CAP_NET_ADMIN (Davide Caratti) [RHEL-84538]
  - tcp: ulp: diag: always print the name if any (Davide Caratti) [RHEL-84538]
  - mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (Davide Caratti) [RHEL-84538] {CVE-2025-21938}
  - mptcp: reset when MPTCP opts are dropped after join (Davide Caratti) [RHEL-84538]
  - mptcp: always handle address removal under msk socket lock (Davide Caratti) [RHEL-84538] {CVE-2025-21875}
  - mptcp: micro-optimize __mptcp_move_skb() (Davide Caratti) [RHEL-84538]
  - mptcp: dismiss __mptcp_rmem() (Davide Caratti) [RHEL-84538]
  - net: dismiss sk_forward_alloc_get() (Davide Caratti) [RHEL-84538]
  - mptcp: cleanup mem accounting (Davide Caratti) [RHEL-84538]
  - mptcp: move the whole rx path under msk socket lock protection (Davide Caratti) [RHEL-84538]
  - mptcp: drop __mptcp_fastopen_gen_msk_ackseq() (Davide Caratti) [RHEL-84538]
  - mptcp: consolidate subflow cleanup (Davide Caratti) [RHEL-84538]
  - mptcp: pm: userspace: flags: clearer msg if no remote addr (Davide Caratti) [RHEL-84538]
  - selftests: mptcp: connect: -f: no reconnect (Davide Caratti) [RHEL-84538]
  - mptcp: blackhole only if 1st SYN retrans w/o MPC is accepted (Davide Caratti) [RHEL-84538]
  - mptcp: handle fastopen disconnect correctly (Davide Caratti) [RHEL-84538] {CVE-2025-21705}
  - mptcp: pm: only set fullmesh for subflow endp (Davide Caratti) [RHEL-84538] {CVE-2025-21706}
  - mptcp: consolidate suboption status (Davide Caratti) [RHEL-84538] {CVE-2025-21707}
  - selftests: mptcp: avoid spurious errors on disconnect (Davide Caratti) [RHEL-84538]
  - mptcp: fix spurious wake-up on under memory pressure (Davide Caratti) [RHEL-84538]
  - mptcp: be sure to send ack when mptcp-level window re-opens (Davide Caratti) [RHEL-84538]
  - mptcp: sysctl: avail sched: remove write access (Davide Caratti) [RHEL-84538]
  - mptcp: prevent excessive coalescing on receive (Davide Caratti) [RHEL-84538]
  - mptcp: don't always assume copied data in mptcp_cleanup_rbuf() (Davide Caratti) [RHEL-84538]
  - mptcp: fix recvbuffer adjust on sleeping rcvmsg (Davide Caratti) [RHEL-84538]
  - mptcp: remove unneeded lock when listing scheds (Davide Caratti) [RHEL-84538]
  - mptcp: implement mptcp_pm_connection_closed (Davide Caratti) [RHEL-84538]
  - dim: pass dim_sample to net_dim() by reference (CKI Backport Bot) [RHEL-89803]
  - dim: make dim_calc_stats() inputs const pointers (CKI Backport Bot) [RHEL-89803]
  - saner replacement for debugfs_rename() (Jose Ignacio Tornos Martinez) [RHEL-86507]


author: Julio Faracco <jfaracco@redhat.com> [6.12.0-98.el10]
changelog:
  - fs/file.c: add fast path in find_next_fd() (Ian Kent) [RHEL-38569]
  - fs/file.c: conditionally clear full_fds (Ian Kent) [RHEL-38569]
  - fs/file.c: remove sanity_check and add likely/unlikely in alloc_fd() (Ian Kent) [RHEL-38569]
  - redhat/kernel.spec: drop modules-extra-matched for noarch (Jan Stancek) [RHEL-95740]
  - tracing/osnoise: Allow arbitrarily long CPU string (Tomas Glozar) [RHEL-86520]
  - RDMA/irdma: Remove deliver net device event (Kamal Heib) [RHEL-87577]
  - RDMA/irdma: Remove unused irdma_cqp_*_fpm_val_cmd functions (Kamal Heib) [RHEL-87577]
  - ovl: don't require "metacopy=on" for "verity" (Miklos Szeredi) [RHEL-82858]
  - ovl: relax redirect/metacopy requirements for lower -> data redirect (Miklos Szeredi) [RHEL-82858]
  - ovl: make redirect/metacopy rejection consistent (Miklos Szeredi) [RHEL-82858]
  - ovl: remove unused forward declaration (Miklos Szeredi) [RHEL-82858]
  - ovl: don't allow datadir only (Miklos Szeredi) [RHEL-82858]
  - smb: client: fix UAF in decryption with multichannel (CKI Backport Bot) [RHEL-94466] {CVE-2025-37750}
  - Merge DRM changes from upstream v6.13..v6.14 (José Expósito) [RHEL-75957]
  - Merge DRM changes from upstream v6.12..v6.13 (José Expósito) [RHEL-75957]
  - selftests/bpf: lwt_seg6local: Move test to test_progs (Hangbin Liu) [RHEL-82844]
  - selftests/bpf: lwt_seg6local: Remove unused routes (Hangbin Liu) [RHEL-82844]
  - selftests/bpf: add missing header include for htons (Hangbin Liu) [RHEL-82844]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-99.el10]
changelog:
  - scsi: storvsc: Explicitly set max_segment_size to UINT_MAX (Ewan D. Milne) [RHEL-97171]
  - i2c: tegra: check msg length in SMBUS block read (Steve Dunnagan) [RHEL-89166]
  - nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request (Olga Kornievskaia) [RHEL-82689]
  - nfsd: fix access checking for NLM under XPRTSEC policies (Olga Kornievskaia) [RHEL-82689]
  - net: rename netns_local to netns_immutable (Ivan Vecera) [RHEL-92678]
  - selftests: Add IPv6 link-local address generation tests for GRE devices. (Guillaume Nault) [RHEL-94024]
  - tpm: remove kmalloc failure error message (Štěpán Horáček) [RHEL-72764]
  - tpm: tis: Double the timeout B to 4s (Štěpán Horáček) [RHEL-72764]
  - char: tpm: tpm-buf: Add sanity check fallback in read helpers (Štěpán Horáček) [RHEL-72764]
  - tpm: Make chip->{status,cancel,req_canceled} opt (Štěpán Horáček) [RHEL-72764]
  - tpm: End any active auth session before shutdown (Štěpán Horáček) [RHEL-72764]
  - tpm_crb: Clean-up and refactor check for idle support (Štěpán Horáček) [RHEL-72764]
  - tpm/tpm_ftpm_tee: fix struct ftpm_tee_private documentation (Štěpán Horáček) [RHEL-72764]
  - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-72764]
  - tpm, tpm_tis: Fix timeout handling when waiting for TPM status (Štěpán Horáček) [RHEL-72764]
  - tpm: Convert warn to dbg in tpm2_start_auth_session() (Štěpán Horáček) [RHEL-72764]
  - tpm: Lazily flush auth session when getting random data (Štěpán Horáček) [RHEL-72764]
  - tpm: ftpm_tee: remove incorrect of_match_ptr annotation (Štěpán Horáček) [RHEL-72764]
  - tpm: do not start chip while suspended (Štěpán Horáček) [RHEL-72764]
  - char: tpm: cr50: Add new device/vendor ID 0x50666666 (Štěpán Horáček) [RHEL-72764]
  - char: tpm: cr50: Move i2c locking to request/relinquish locality ops (Štěpán Horáček) [RHEL-72764]
  - char: tpm: cr50: Use generic request/relinquish locality ops (Štěpán Horáček) [RHEL-72764]
  - tpm: ibmvtpm: Set TPM_OPS_AUTO_STARTUP flag on driver (Štěpán Horáček) [RHEL-72764]
  - libstub,tpm: do not ignore failure case when reading final event log (Štěpán Horáček) [RHEL-72764]
  - tpm: fix unsigned/signed mismatch errors related to __calc_tpm2_event_size (Štěpán Horáček) [RHEL-72764]
  - tpm: do not ignore memblock_reserve return value (Štěpán Horáček) [RHEL-72764]
  - tpm: fix signed/unsigned bug when checking event logs (Štěpán Horáček) [RHEL-72764]
  - openvswitch: Stricter validation for the userspace action (Eelco Chaudron) [RHEL-84563]
  - openvswitch: Fix unsafe attribute parsing in output_userspace() (Eelco Chaudron) [RHEL-84563]
  - net: openvswitch: fix nested key length validation in the set() action (Eelco Chaudron) [RHEL-84563] {CVE-2025-37789}
  - net: openvswitch: remove misbehaving actions length check (Eelco Chaudron) [RHEL-84563]
  - openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (Eelco Chaudron) [RHEL-81497 RHEL-84563] {CVE-2025-21761}
  - openvswitch: fix lockup on tx to unregistering netdev with carrier (Eelco Chaudron) [RHEL-84563] {CVE-2025-21681}
  - openvswitch: Pass on secpath details for internal port rx. (Eelco Chaudron) [RHEL-84563]
  - selftests: mptcp: remove rp_filter configuration (Hangbin Liu) [RHEL-80284]
  - selftests: netfilter: remove rp_filter configuration (Hangbin Liu) [RHEL-80284]
  - selftests: net: use setup_ns for SRv6 tests and remove rp_filter configuration (Hangbin Liu) [RHEL-80284]
  - selftests: net: use setup_ns for bareudp testing (Hangbin Liu) [RHEL-80284]
  - selftests: net: remove redundant rp_filter configuration (Hangbin Liu) [RHEL-80284]
  - selftests: net: disable rp_filter after namespace initialization (Hangbin Liu) [RHEL-80284]
  - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-81403] {CVE-2025-21764}
  - tools: ynl: add all headers to makefile deps (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - selftests: drv-net: add missing trailing backslash (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - testing: net-drv: add basic shaper test (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - net-shapers: implement cap validation in the core (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - net: shaper: implement introspection support (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - netlink: spec: add shaper introspection support (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - net-shapers: implement shaper cleanup on queue deletion (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - net-shapers: implement delete support for NODE scope shaper (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - net-shapers: implement NL group operation (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - net-shapers: implement NL set and delete operations (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - net-shapers: implement NL get operation (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - netlink: spec: add shaper YAML spec (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - genetlink: extend info user-storage to match NL cb ctx (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - perf: arm_cspmu: nvidia: monitor all ports by default (Michael Petlan) [RHEL-89489]
  - perf: arm_cspmu: nvidia: enable NVLINK-C2C port filtering (Michael Petlan) [RHEL-89489]
  - perf: arm_cspmu: nvidia: fix sysfs path in the kernel doc (Michael Petlan) [RHEL-89489]
  - perf: arm_cspmu: nvidia: remove unsupported SCF events (Michael Petlan) [RHEL-89489]
  - ice: Fix deinitializing VF in error path (Petr Oros) [RHEL-87628] {CVE-2025-21883}
  - ice: add E830 HW VF mailbox message limit support (Petr Oros) [RHEL-87628]
  - x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() (Waiman Long) [RHEL-69285]


author: Julio Faracco <jfaracco@redhat.com> [6.12.0-100.el10]
changelog:
  - rv: Update RHEL kconfigs for 6.15 upstream code (Gabriele Monaco) [RHEL-92308]
  - rv: Fix out-of-bound memory access in rv_is_container_monitor() (Gabriele Monaco) [RHEL-92308]
  - rv: Fix missing unlock on double nested monitors return path (Gabriele Monaco) [RHEL-92308]
  - handle man-page for rv-mon-sched in redhat/kernel.spec.template (Gabriele Monaco) [RHEL-92308]
  - Documentation/rv: Add sched pages to the indices (Gabriele Monaco) [RHEL-92308]
  - tools/rv: Allow rv list to filter for container (Gabriele Monaco) [RHEL-92308]
  - Documentation/rv: Add docs for the sched monitors (Gabriele Monaco) [RHEL-92308]
  - verification/dot2k: Add support for nested monitors (Gabriele Monaco) [RHEL-92308]
  - tools/rv: Add support for nested monitors (Gabriele Monaco) [RHEL-92308]
  - rv: Add scpd, snep and sncid per-cpu monitors (Gabriele Monaco) [RHEL-92308]
  - rv: Add snroc per-task monitor (Gabriele Monaco) [RHEL-92308]
  - rv: Add sco and tss per-cpu monitors (Gabriele Monaco) [RHEL-92308]
  - rv: Add option for nested monitors and include sched (Gabriele Monaco) [RHEL-92308]
  - sched: Add sched tracepoints for RV task model (Gabriele Monaco) [RHEL-92308]
  - rv: Add license identifiers to monitor files (Gabriele Monaco) [RHEL-92308]
  - tracing: Fix DECLARE_TRACE_CONDITION (Gabriele Monaco) [RHEL-92308]
  - rv: Reset per-task monitors also for idle tasks (Gabriele Monaco) [RHEL-92308]
  - verification/dot2k: Implement event type detection (Gabriele Monaco) [RHEL-92308]
  - verification/dot2k: Auto patch current kernel source (Gabriele Monaco) [RHEL-92308]
  - verification/dot2k: Simplify manual steps in monitor creation (Gabriele Monaco) [RHEL-92308]
  - rv: Simplify manual steps in monitor creation (Gabriele Monaco) [RHEL-92308]
  - verification/dot2k: Add support for name and description options (Gabriele Monaco) [RHEL-92308]
  - verification/dot2k: More robust template variables (Gabriele Monaco) [RHEL-92308]
  - verification/dot2k: Unify main.c templates (Gabriele Monaco) [RHEL-92308]
  - verification/dot2k: Fix template directory detection (Gabriele Monaco) [RHEL-92308]
  - Documentation/rv: Fix typos (Gabriele Monaco) [RHEL-92308]
  - verification/dot2: Improve dot parser robustness (Gabriele Monaco) [RHEL-92308]
  - rv: Fix a typo (Gabriele Monaco) [RHEL-92308]
  - tools/rv: Correct the grammatical errors in the comments (Gabriele Monaco) [RHEL-92308]
  - tools/rv: Correct the grammatical errors in the comments (Gabriele Monaco) [RHEL-92308]
  - unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-92674]
  - tcp: add LINUX_MIB_PAWS_TW_REJECTED counter (Antoine Tenart) [RHEL-88891]
  - tcp: add TCP_RFC7323_TW_PAWS drop reason (Antoine Tenart) [RHEL-88891]
  - udp: expand SKB_DROP_REASON_UDP_CSUM use (Antoine Tenart) [RHEL-88891]
  - tcp: add four drop reasons to tcp_check_req() (Antoine Tenart) [RHEL-88891]
  - tcp: add a drop_reason pointer to tcp_check_req() (Antoine Tenart) [RHEL-88891]
  - af_unix: Use consume_skb() in connect() and sendmsg(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Reuse out_pipe label in unix_stream_sendmsg(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Clean up error paths in unix_stream_sendmsg(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Set error only when needed in unix_stream_sendmsg(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Clean up error paths in unix_stream_connect(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Set error only when needed in unix_stream_connect(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Set drop reason in unix_dgram_disconnected(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Set drop reason in unix_stream_read_skb(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Set drop reason in manage_oob(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Set drop reason in __unix_gc(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Set drop reason in unix_sock_destructor(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Set drop reason in unix_release_sock(). (Antoine Tenart) [RHEL-88891]
  - net: dropreason: Gather SOCKET_ drop reasons. (Antoine Tenart) [RHEL-88891]
  - tcp: add LINUX_MIB_PAWS_OLD_ACK SNMP counter (Antoine Tenart) [RHEL-88891]
  - tcp: add TCP_RFC7323_PAWS_ACK drop reason (Antoine Tenart) [RHEL-88891]
  - tcp: add drop_reason support to tcp_disordered_ack() (Antoine Tenart) [RHEL-88891]
  - net: bridge: add skb drop reasons to the most common drop points (Antoine Tenart) [RHEL-88891]
  - net: vxlan: rename SKB_DROP_REASON_VXLAN_NO_REMOTE (Antoine Tenart) [RHEL-88891]
  - net/sched: Add drop reasons for AQM-based qdiscs (Antoine Tenart) [RHEL-88891]
  - net_sched: sch_cake: Add drop reasons (Antoine Tenart) [RHEL-88891]
  - net_sched: sch_fq: add three drop_reason (Antoine Tenart) [RHEL-88891]
  - netfilter: br_netfilter: remove unused conditional and dead code (Antoine Tenart) [RHEL-88891]
  - ipv4: route: fix drop reason being overridden in ip_route_input_slow (Antoine Tenart) [RHEL-88891]
  - ip: Return drop reason if in_dev is NULL in ip_route_input_rcu(). (Antoine Tenart) [RHEL-88891]
  - net: ip: fix unexpected return in fib_validate_source() (Antoine Tenart) [RHEL-88891]
  - net: ip: make ip_route_use_hint() return drop reasons (Antoine Tenart) [RHEL-88891]
  - net: ip: make ip_mkroute_input/__mkroute_input return drop reasons (Antoine Tenart) [RHEL-88891]
  - net: ip: make ip_route_input() return drop reasons (Antoine Tenart) [RHEL-88891]
  - net: ip: make ip_route_input_noref() return drop reasons (Antoine Tenart) [RHEL-88891]
  - net: ip: make ip_route_input_rcu() return drop reasons (Antoine Tenart) [RHEL-88891]
  - net: ip: make ip_route_input_slow() return drop reasons (Antoine Tenart) [RHEL-88891]
  - net: ip: make ip_mc_validate_source() return drop reason (Antoine Tenart) [RHEL-88891]
  - net: ip: make ip_route_input_mc() return drop reason (Antoine Tenart) [RHEL-88891]
  - net: ip: make fib_validate_source() support drop reasons (Antoine Tenart) [RHEL-88891]
  - objtool, x86/hweight: Remove ANNOTATE_IGNORE_ALTERNATIVE (Joe Lawrence) [RHEL-94124]
  - jump_label: adjust inline asm to be consistent (Joe Lawrence) [RHEL-94124]
  - objtool: Speed up SHT_GROUP reindexing (Joe Lawrence) [RHEL-94124]
  - objtool: Fix up st_info in COMDAT group section (Joe Lawrence) [RHEL-94124]
  - objtool/rust: add one more `noreturn` Rust function for Rust 1.87.0 (Joe Lawrence) [RHEL-94124]
  - objtool/rust: add one more `noreturn` Rust function for Rust 1.86.0 (Joe Lawrence) [RHEL-94124]
  - objtool: Remove ANNOTATE_IGNORE_ALTERNATIVE from CLAC/STAC (Joe Lawrence) [RHEL-94124]
  - objtool, xen: Fix INSN_SYSCALL / INSN_SYSRET semantics (Joe Lawrence) [RHEL-94124]
  - objtool: Stop UNRET validation on UD2 (Joe Lawrence) [RHEL-94124]
  - objtool: Split INSN_CONTEXT_SWITCH into INSN_SYSCALL and INSN_SYSRET (Joe Lawrence) [RHEL-94124]
  - objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret() (Joe Lawrence) [RHEL-94124]
  - objtool: Fix X86_FEATURE_SMAP alternative handling (Joe Lawrence) [RHEL-94124]
  - x86/hweight: Use asm_inline() instead of asm() (Joe Lawrence) [RHEL-94124]
  - x86/hweight: Use ASM_CALL_CONSTRAINT in inline asm() (Joe Lawrence) [RHEL-94124]
  - x86/hweight: Use named operands in inline asm() (Joe Lawrence) [RHEL-94124]
  - x86: use proper 'clac' and 'stac' opcode names (Joe Lawrence) [RHEL-94124]
  - KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 <=> 1 VM count transitions (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Prevent installing hugepages when mem attributes are changing (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Update dump_ghcb() to use the GHCB snapshot fields (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Check and free obsolete roots in kvm_mmu_reload() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Check that the high 32bits are clear in kvm_arch_vcpu_ioctl_run() (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Do not use kvm_rip_read() unconditionally for KVM_PROFILING (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Do not use kvm_rip_read() unconditionally in KVM tracepoints (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: WARN if an invalid posted interrupt IRTE entry is added (Maxim Levitsky) [RHEL-82917]
  - iommu/amd: WARN if KVM attempts to set vCPU affinity without posted intrrupts (Maxim Levitsky) [RHEL-82917]
  - iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Explicitly treat routing entry type changes as changes (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Reset IRTE to host control if *new* route isn't postable (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Allocate IR data using atomic allocation (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Don't update IRTEs if APICv/AVIC is disabled (Maxim Levitsky) [RHEL-82917]
  - KVM: arm64, x86: make kvm_arch_has_irq_bypass() inline (Maxim Levitsky) [RHEL-82917]
  - tools headers: Update the KVM headers with the kernel sources (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Use separate subclasses for PI wakeup lock to squash false positive (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Assert that IRQs are disabled when putting vCPU on PI wakeup list (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Explicitly zero-initialize on-stack CPUID unions (Maxim Levitsky) [RHEL-82917]
  - KVM: Allow building irqbypass.ko as as module when kvm.ko is a module (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Wrap sanity check on number of TDP MMU pages with KVM_PROVE_MMU (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add option to rseq test to override /dev/cpu_dma_latency (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (Maxim Levitsky) [RHEL-82917] {CVE-2025-23141}
  - Documentation: kvm: remove KVM_CAP_MIPS_TE (Maxim Levitsky) [RHEL-82917]
  - Documentation: kvm: organize capabilities in the right section (Maxim Levitsky) [RHEL-82917]
  - Documentation: kvm: fix some definition lists (Maxim Levitsky) [RHEL-82917]
  - Documentation: kvm: drop "Capability" heading from capabilities (Maxim Levitsky) [RHEL-82917]
  - Documentation: kvm: give correct name for KVM_CAP_SPAPR_MULTITCE (Maxim Levitsky) [RHEL-82917]
  - Documentation: KVM: KVM_GET_SUPPORTED_CPUID now exposes TSC_DEADLINE (Maxim Levitsky) [RHEL-82917]
  - selftests: kvm: list once tests that are valid on all architectures (Maxim Levitsky) [RHEL-82917]
  - selftests: kvm: bring list of exit reasons up to date (Maxim Levitsky) [RHEL-82917]
  - selftests: kvm: revamp MONITOR/MWAIT tests (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: block KVM_CAP_SYNC_REGS if guest state is protected (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add infrastructure for secure TSC (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Push down setting vcpu.arch.user_set_tsc (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: move vm_destroy callback at end of kvm_arch_destroy_vm (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Remove the unreachable case for 0x80000022 leaf in __do_cpuid_func() (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Use named operands in inline asm (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Extract checks on entry/exit control pairs to a helper macro (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Invalidate "next" SNP VMSA GPA even on failure (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Use guard(mutex) to simplify SNP vCPU state updates (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Mark VMCB dirty before processing incoming snp_vmsa_gpa (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Use guard(mutex) to simplify SNP AP Creation error handling (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Simplify request+kick logic in SNP AP Creation handling (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Require AP's "requested" SEV_FEATURES to match KVM's view (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Don't change target vCPU state on AP Creation VMGEXIT error (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Refuse to attempt VRMUN if an SEV-ES+ guest has an invalid VMSA (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Always set mp_state to RUNNABLE on wakeup from HLT (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Relax assertion on HLT exits if CPU supports Idle HLT (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Inject #GP if memory operand for INVPCID is non-canonical (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM-Enter (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Remove tdp_mmu_for_each_pte() (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Decouple EPT RWX bits from EPT Violation protection bits (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Remove EPT_VIOLATIONS_ACC_*_BIT defines (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Fix spelling mistake "UFFDIO_CONINUE" -> "UFFDIO_CONTINUE" (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Always use IBPB to properly virtualize IBRS (Maxim Levitsky) [RHEL-82917]
  - x86/bugs: Use a static branch to guard IBPB on vCPU switch (Maxim Levitsky) [RHEL-82917]
  - x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Maxim Levitsky) [RHEL-82917]
  - KVM: Drop kvm_arch_sync_events() now that all implementations are nops (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Fold guts of kvm_arch_sync_events() into kvm_arch_pre_destroy_vm() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Unload MMUs during vCPU destruction, not before (Maxim Levitsky) [RHEL-82917]
  - KVM: Assert that a destroyed/freed vCPU is no longer visible (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Don't load/put vCPU when unloading its MMU during teardown (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Add Idle HLT intercept support (Maxim Levitsky) [RHEL-82917]
  - tools headers: Update the x86 headers with the kernel sources (Maxim Levitsky) [RHEL-82917]
  - x86/cpufeatures: Add CPUID feature bit for Idle HLT intercept (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Provide helpers to set the error code (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Convert plain error code numbers to defines (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Pass XFD_ERR as pseudo-payload when injecting #NM (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Don't modify guest XFD_ERR if CR0.TS=1 (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Use a dedicated flow for queueing re-injected exceptions (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Rename and invert async #PF's send_user_only flag to send_always (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Don't inject PV async #PF if SEND_ALWAYS=0 and guest state is protected (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add a nested (forced) emulation intercept test for x86 (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Synthesize nested VM-Exit for supported emulation intercepts (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Allow the caller to provide instruction length on nested VM-Exit (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add a #define for the architectural max instruction length (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Plumb the emulator's starting RIP into nested intercept checks (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Plumb the src/dst operand types through to .check_intercept() (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Consolidate missing X86EMUL_INTERCEPTED logic in L2 emulation (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Emulate HLT in L2 if it's not intercepted (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Allow emulating RDPID on behalf of L2 (Maxim Levitsky) [RHEL-82917]
  - KVM: nSVM: Pass next RIP, not current RIP, for nested VM-Exit on emulation (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Check PAUSE_EXITING, not BUS_LOCK_DETECTION, on PAUSE emulation (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Override TSC_STABLE flag for Xen PV clocks in kvm_guest_time_update() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Setup Hyper-V TSC page before Xen PV clocks (during clock update) (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Remove per-vCPU "cache" of its reference pvclock (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Pass reference pvclock as a param to kvm_setup_guest_pvclock() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Set PVCLOCK_GUEST_STOPPED only for kvmclock, not for Xen PV clock (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Don't bleed PVCLOCK_GUEST_STOPPED across PV clocks (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/xen: Use guest's copy of pvclock when starting timer (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Process "guest stopped request" once per guest time update (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Drop local pvclock_flags variable in kvm_guest_time_update() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Eliminate "handling" of impossible errors during SUSPEND (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Don't take kvm->lock when iterating over vCPUs in suspend notifier (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Update Xen TSC leaves during CPUID emulation (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/xen: Move kvm_xen_hvm_config field into kvm_xen (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/xen: Bury xen_hvm_config behind CONFIG_KVM_XEN=y (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/xen: Consult kvm_xen_enabled when checking for Xen MSR writes (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/xen: Add an #ifdef'd helper to detect writes to Xen MSR (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/xen: Restrict hypercall MSR to unofficial synthetic range (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Walk rmaps (shadow MMU) without holding mmu_lock when aging gfns (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Add support for lockless walks of rmap SPTEs (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Add infrastructure to allow walking rmaps outside of mmu_lock (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Refactor low level rmap helpers to prep for walking w/o mmu_lock (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Only check gfn age in shadow MMU if indirect_shadow_pages > 0 (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Skip shadow MMU test_young if TDP MMU reports page as young (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Age TDP MMU SPTEs without holding mmu_lock (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Always update A/D-disabled SPTEs atomically (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Don't force atomic update if only the Accessed bit is volatile (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Factor out spte atomic bit clearing routine (Maxim Levitsky) [RHEL-82917]
  - KVM: Allow lockless walk of SPTEs when handing aging mmu_notifier event (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add infrastructure for getting vCPU binary stats (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Adjust number of files rlimit for all "standard" VMs (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Get VM's binary stats FD when opening VM (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add struct and helpers to wrap binary stats cache (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Macrofy vm_get_stat() to auto-generate stat name string (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Assert that __vm_get_stat() actually finds a stat (Maxim Levitsky) [RHEL-82917]
  - KVM: Rename kvm_handle_hva_range() (Maxim Levitsky) [RHEL-82917]
  - KVM: SEV: Use long-term pin when registering encrypted memory regions (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Defer runtime updates of dynamic CPUID bits until CPUID emulation (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Query X86_FEATURE_MWAIT iff userspace owns the CPUID feature bit (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Apply TSX_CTRL_CPUID_CLEAR if and only if the vCPU has RTM or HLE (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Use for-loop to iterate over XSTATE size entries (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/cpuid: add type suffix to decimal const 48 fix building warning (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Clear pv_unhalted on all transitions to KVM_MP_STATE_RUNNABLE (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Introduce kvm_set_mp_state() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Use kvfree_rcu() to free old optimized APIC map (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Wake vCPU for PIC interrupt injection iff a valid IRQ was found (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Close VM's binary stats FD when releasing VM (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Fix mostly theoretical leak of VM's binary stats FD (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Actually emit forced emulation prefix for kvm_asm_safe_fep() (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Print out the actual Top-Down Slots count on failure (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Drop the "feature event" param from guest test helpers (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Remove dead code in Intel PMU counters test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Only validate counts for hardware-supported arch events (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Make Intel arch events globally available in PMU counters test (Maxim Levitsky) [RHEL-82917]
  - KVM: SEV: Use to_kvm_sev_info() for fetching kvm_sev_info struct (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Remove unused iommu_domain and iommu_noncoherent from kvm_arch (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/xen: Only write Xen hypercall page for guest writes to MSR (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add helpers for locally (un)blocking IRQs on x86 (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Use data load to trigger LLC references/misses in Intel PMU (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add printf attribute to _no_printf() (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Remove unneeded semicolon (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add defines for AMD PMU CPUID features and properties (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Fix typos in x86's PMU counter test's macro variable use (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Explicitly zero EAX and EBX when PERFMON_V2 isn't supported by KVM (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Fix printf() format goof in SEV smoke test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Ensure all vCPUs hit -EFAULT during initial RO stage (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Don't rely on DebugSwap to restore host DR0..DR3 (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Save host DR masks on CPUs with DebugSwap (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Snapshot the host's DEBUGCTL after disabling IRQs (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Manually context switch DEBUGCTL if LBR virtualization is disabled (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Snapshot the host's DEBUGCTL in common x86 (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Suppress DEBUGCTL.BTF on AMD (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Drop DEBUGCTL[5:2] from guest's effective value (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Assert that STI blocking isn't set after event injection (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow (Maxim Levitsky) [RHEL-82917]
  - kvm: retry nx_huge_page_recovery_thread creation (Maxim Levitsky) [RHEL-82917]
  - vhost_task: fix vhost_task_create() documentation (Maxim Levitsky) [RHEL-82917]
  - vhost: return task creation error instead of NULL (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Process events on nested VM-Exit if injectable IRQ or NMI is pending (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Free vCPUs before freeing VM state (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (Maxim Levitsky) [RHEL-82917] {CVE-2025-21839}
  - KVM: nSVM: Enter guest mode before initializing nested NPT MMU (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add CPUID tests for Hyper-V features that need in-kernel APIC (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Manage CPUID array in Hyper-V CPUID test's core helper (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Mark test_hv_cpuid_e2big() static in Hyper-V CPUID test (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel (Maxim Levitsky) [RHEL-82917] {CVE-2025-21779}
  - KVM: x86/mmu: Ensure NX huge page recovery thread is alive before waking (Maxim Levitsky) [RHEL-82917]
  - KVM: remove kvm_arch_post_init_vm (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Fix spelling mistake "initally" -> "initially" (Maxim Levitsky) [RHEL-82917]
  - KVM: Do not restrict the size of KVM-internal memory regions (Maxim Levitsky) [RHEL-82917]
  - kvm: defer huge page recovery vhost task to later (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Return RET_PF* instead of 1 in kvm_mmu_page_fault() (Maxim Levitsky) [RHEL-82917]
  - KVM: Disallow all flags for KVM-internal memslots (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Drop double-underscores from __kvm_set_memory_region() (Maxim Levitsky) [RHEL-82917]
  - KVM: Add a dedicated API for setting KVM-internal memslots (Maxim Levitsky) [RHEL-82917]
  - KVM: Assert slots_lock is held when setting memory regions (Maxim Levitsky) [RHEL-82917]
  - KVM: Open code kvm_set_memory_region() into its sole caller (ioctl() API) (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Use str_enabled_disabled() helper in svm_hardware_setup() (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Fix comment of handle_vmx_instruction() (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Reinstate __exit attribute for vmx_exit() (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Use str_enabled_disabled() helper in sev_hardware_setup() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Avoid double RDPKRU when loading host/guest PKRU (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Use LVT_TIMER instead of an open coded literal (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Prevent aliased memslot GFNs (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Don't zap valid mirror roots in kvm_tdp_mmu_zap_all() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Take root types for kvm_tdp_mmu_invalidate_all_roots() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Propagate tearing down mirror page tables (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Propagate building mirror page tables (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Propagate attr_filter to MMU notifier callbacks (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Support mirror root for TDP MMU (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Take root in tdp_mmu_for_each_pte() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Introduce KVM MMU root types to specify page table type (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Extract root invalid check from tdx_mmu_next_root() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Support GFN direct bits (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Take struct kvm in iter loops (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Make kvm_tdp_mmu_alloc_root() return void (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Add an is_mirror member for union kvm_mmu_page_role (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Add an external pointer to struct kvm_mmu_page (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add a VM type define for TDX (Maxim Levitsky) [RHEL-82917]
  - KVM: Add member to struct kvm_gfn_range to indicate private/shared (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Zap invalid roots with mmu_lock holding for write at uninit (Maxim Levitsky) [RHEL-82917]
  - KVM: guest_memfd: Remove RCU-protected attribute from slot->gmem.file (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Refactor __kvm_emulate_hypercall() into a macro (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Always complete hypercall via function callback (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Bump hypercall stat prior to fully completing hypercall (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Move "emulate hypercall" function declarations to x86.h (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add a helper to check for user interception of KVM hypercalls (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: clear vcpu->run->hypercall.ret before exiting for KVM_EXIT_HYPERCALL (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Remove hwapic_irr_update() from kvm_x86_ops (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Honor event priority when emulating PI delivery during VM-Enter (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Use vmcs01's controls shadow to check for IRQ/NMI windows at VM-Enter (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Drop manual vmcs01.GUEST_INTERRUPT_STATUS.RVI check at VM-Enter (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Check for pending INIT/SIPI after entering non-root mode (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Explicitly update vPPR on successful nested VM-Enter (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Allow toggling bits in MSR_IA32_RTIT_CTL when enable bit is cleared (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Defer SVI update to vmcs01 on EOI when L2 is active w/o VID (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add information about pending requests to kvm_exit tracepoint (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add interrupt injection information to the kvm_entry tracepoint (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add test case for MMIO during vectoring on x86 (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add and use a helper function for x86's LIDT (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Handle event vectoring error in check_emulate_instruction() (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Handle event vectoring error in check_emulate_instruction() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Try to unprotect and retry on unhandleable emulation failure (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add emulation status for unhandleable exception vectoring (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add function for vectoring error generation (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Use only local variables (no bitmask) to init kvm_cpu_caps (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Explicitly track feature flags that are enabled at runtime (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Explicitly track feature flags that require vendor enabling (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Rename "SF" macro to "SCATTERED_F" (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Pull CPUID capabilities from boot_cpu_data only as needed (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add a macro for features that are synthesized into boot_cpu_data (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Drop superfluous host XSAVE check when adjusting guest XSAVES caps (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Replace (almost) all guest CPUID feature queries with cpu_caps (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Shuffle code to prepare for dropping guest_cpuid_has() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Update guest cpu_caps at runtime for dynamic CPUID-based features (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Update OS{XSAVE,PKE} bits in guest CPUID irrespective of host support (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Drop unnecessary check that cpuid_entry2_find() returns right leaf (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Avoid double CPUID lookup when updating MWAIT at runtime (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Initialize guest cpu_caps based on KVM support (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Treat MONTIOR/MWAIT as a "partially emulated" feature (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Extract code for generating per-entry emulated CPUID information (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Initialize guest cpu_caps based on guest CPUID (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Replace guts of "governed" features with comprehensive cpu_caps (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Rename "governed features" helpers to use "guest_cpu_cap" (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Advertise HYPERVISOR in KVM_GET_SUPPORTED_CPUID (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Advertise TSC_DEADLINE_TIMER in KVM_GET_SUPPORTED_CPUID (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Remove all direct usage of cpuid_entry2_find() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Move kvm_find_cpuid_entry{,_index}() up near cpuid_entry2_find() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Always operate on kvm_vcpu data in cpuid_entry2_find() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Remove unnecessary caching of KVM's PV CPUID base (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Clear PV_UNHALT for !HLT-exiting only when userspace sets CPUID (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Swap incoming guest CPUID into vCPU before massaging in KVM_SET_CPUID2 (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add a macro to init CPUID features that KVM emulates in software (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add a macro to init CPUID features that ignore host kernel support (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Harden CPU capabilities processing against out-of-scope features (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: #undef SPEC_CTRL_SSBD in cpuid.c to avoid macro collisions (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Handle kernel- and KVM-defined CPUID words in a single helper (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add a macro to precisely handle aliased 0x1.EDX CPUID features (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add a macro to init CPUID features that are 64-bit only (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Rename kvm_cpu_cap_mask() to kvm_cpu_cap_init() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Unpack F() CPUID feature flag macros to one flag per line of code (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Account for max supported CPUID leaf when getting raw host CPUID (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Do reverse CPUID sanity checks in __feature_leaf() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Don't update PV features caches when enabling enforcement capability (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Zero out PV features cache when the CPUID leaf is not present (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Update x86's KVM PV test to match KVM's disabling exits behavior (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Fix a bad TEST_REQUIRE() in x86's KVM PV test (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Drop the now unused KVM_X86_DISABLE_VALID_EXITS (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Reject disabling of MWAIT/HLT interception when not allowed (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Disallow KVM_CAP_X86_DISABLE_EXITS after vCPU creation (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Drop now-redundant MAXPHYADDR and GPA rsvd bits from vCPU creation (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/pmu: Drop now-redundant refresh() during init() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Move __kvm_is_valid_cr4() definition to x86.h (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Verify KVM stuffs runtime CPUID OS bits on CR4 writes (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Refresh vCPU CPUID cache in __vcpu_get_cpuid_entry() (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Assert that vcpu->cpuid is non-NULL when getting CPUID entries (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Update x86's set_sregs_test to match KVM's CPUID enforcement (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Account for KVM-reserved CR4 bits when passing through CR4 on VMX (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Explicitly do runtime CPUID updates "after" initial setup (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Do all post-set CPUID processing during vCPU creation (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Limit use of F() and SF() to kvm_cpu_cap_{mask,init_kvm_defined}() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Use feature_bit() to clear CONSTANT_TSC when emulating CPUID (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Override ARCH for x86_64 instead of using ARCH_DIR (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Use canonical $(ARCH) paths for KVM selftests directories (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Provide empty 'all' and 'clean' targets for unsupported ARCHs (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Verify KVM correctly handles mprotect(PROT_READ) (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add a read-only mprotect() phase to mmu_stress_test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Precisely limit the number of guest loops in mmu_stress_test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Use vcpu_arch_put_guest() in mmu_stress_test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Enable mmu_stress_test on arm64 (Maxim Levitsky) [RHEL-82917]
  - KVM: sefltests: Explicitly include ucall_common.h in mmu_stress_test.c (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Compute number of extra pages needed in mmu_stress_test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Only muck with SREGS on x86 in mmu_stress_test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Rename max_guest_memory_test to mmu_stress_test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Check for a potential unhandled exception iff KVM_RUN succeeded (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Assert that vcpu_{g,s}et_reg() won't truncate (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Return a value from vcpu_get_reg() instead of using an out-param (Maxim Levitsky) [RHEL-82917]
  - KVM: Move KVM_REG_SIZE() definition to common uAPI header (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Remove redundant TLB flush on guest CR4.PGE change (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Macrofy SEV=n versions of sev_xxx_guest() (Maxim Levitsky) [RHEL-82917]
  - KVM/x86: add comment to kvm_mmu_do_page_fault() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Plumb in the vCPU to kvm_x86_ops.hwapic_isr_update() (Maxim Levitsky) [RHEL-82917]
  - KVM: Drop hack that "manually" informs lockdep of kvm->lock vs. vcpu->mutex (Maxim Levitsky) [RHEL-82917]
  - KVM: Don't BUG() the kernel if xa_insert() fails with -EBUSY (Maxim Levitsky) [RHEL-82917]
  - Revert "KVM: Fix vcpu_array[0] races" (Maxim Levitsky) [RHEL-82917]
  - KVM: Grab vcpu->mutex across installing the vCPU's fd and bumping online_vcpus (Maxim Levitsky) [RHEL-82917]
  - KVM: Verify there's at least one online vCPU when iterating over all vCPUs (Maxim Levitsky) [RHEL-82917]
  - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (Maxim Levitsky) [RHEL-82917] {CVE-2024-58083}
  - Documentation: kvm: fix typo in api.rst (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: let it be known that ignore_msrs is a bad idea (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: don't include '<linux/find.h>' directly (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Treat TDP MMU faults as spurious if access is already allowed (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Play nice with protected guests in complete_hypercall_exit() (Maxim Levitsky) [RHEL-82917] {CVE-2024-55881}
  - KVM: SVM: Disable AVIC on SNP-enabled system without HvInUseWrAllowed feature (Maxim Levitsky) [RHEL-82917]
  - tools headers: Sync x86 kvm and cpufeature headers with the kernel (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Break CONFIG_KVM_X86's direct dependency on KVM_INTEL || KVM_AMD (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: add back X86_LOCAL_APIC dependency (Maxim Levitsky) [RHEL-82917]
  - Revert "KVM: VMX: Move LOAD_IA32_PERF_GLOBAL_CTRL errata handling out of setup_vmcs_config()" (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: switch hugepage recovery thread to vhost_task (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: expose MSR_PLATFORM_INFO as a feature MSR (Maxim Levitsky) [RHEL-82917]
  - Documentation: KVM: fix malformed table (Maxim Levitsky) [RHEL-82917]
  - Documentation: kvm: reorganize introduction (Maxim Levitsky) [RHEL-82917]
  - Documentation: kvm: replace section numbers with links (Maxim Levitsky) [RHEL-82917]
  - Documentation: kvm: fix a few mistakes (Maxim Levitsky) [RHEL-82917]
  - KVM: powerpc: remove remaining traces of KVM_CAP_PPC_RMA (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Drop per-VM zapped_obsolete_pages list (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Remove KVM's MMU shrinker (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: WARN if huge page recovery triggered during dirty logging (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Rename make_huge_page_split_spte() to make_small_spte() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Recover TDP MMU huge page mappings in-place instead of zapping (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Refactor TDP MMU iter need resched check (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Demote the WARN on yielded in xxx_cond_resched() to KVM_MMU_WARN_ON (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Check yielded_gfn for forward progress iff resched is needed (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Ensure KVM supports AVX for SEV-ES VMSA FPU test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Drop manual XCR0 configuration from SEV smoke test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Drop manual XCR0 configuration from state test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Drop manual XCR0 configuration from AMX test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Drop manual CR4.OSXSAVE enabling from CR4/CPUID sync test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Verify XCR0 can be "downgraded" and "upgraded" (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Configure XCR0 to max supported value by default (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Rework OSXSAVE CR4=>CPUID test to play nice with AVX insns (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Mask off OSPKE and OSXSAVE when comparing CPUID entries (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Precisely mask off dynamic fields in CPUID test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add a testcase for disabling feature MSRs init quirk (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Verify get/set PERF_CAPABILITIES w/o guest PDMC behavior (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Remove ordering check b/w MSR_PLATFORM_INFO and MISC_FEATURES_ENABLES (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Reject userspace attempts to access ARCH_CAPABILITIES w/o support (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Remove restriction that PMU version > 0 for PERF_CAPABILITIES (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Reject userspace attempts to access PERF_CAPABILITIES w/o PDCM (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Quirk initialization of feature MSRs to KVM's max configuration (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Disallow changing MSR_PLATFORM_INFO after vCPU has run (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Co-locate initialization of feature MSRs in kvm_arch_vcpu_create() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Document an erratum in KVM_SET_VCPU_EVENTS on Intel CPUs (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: AMD's IBPB is not equivalent to Intel's IBPB (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Advertise AMD_IBPB_RET to userspace (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Fix a comment inside __kvm_set_or_clear_apicv_inhibit() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Fix a comment inside kvm_vcpu_update_apicv() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Batch TLB flushes when zapping collapsible TDP MMU SPTEs (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Drop @max_level from kvm_mmu_max_mapping_level() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Don't emit TLB flushes when aging SPTEs for mmu_notifiers (Maxim Levitsky) [RHEL-82917]
  - KVM: Allow arch code to elide TLB flushes when aging a young page (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Set Dirty bit for new SPTEs, even if _hardware_ A/D bits are disabled (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Dedup logic for detecting TLB flushes on leaf SPTE changes (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Stop processing TDP MMU roots for test_age if young SPTE found (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Process only valid TDP MMU roots when aging a gfn range (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Use Accessed bit even when _hardware_ A/D bits are disabled (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Set shadow_dirty_mask for EPT even if A/D bits disabled (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Set shadow_accessed_mask for EPT even if A/D bits disabled (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Add a dedicated flag to track if A/D bits are globally enabled (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: WARN and flush if resolving a TDP MMU fault clears MMU-writable (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Fold mmu_spte_update_no_track() into mmu_spte_update() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Drop ignored return value from kvm_tdp_mmu_clear_dirty_slot() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Don't flush TLBs when clearing Dirty bit in shadow MMU (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Don't force flush if SPTE update clears Accessed bit (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Fold all of make_spte()'s writable handling into one if-else (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Always set SPTE's dirty bit if it's created as writable (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Flush remote TLBs iff MMU-writable flag is cleared from RO SPTE (Maxim Levitsky) [RHEL-82917]
  - KVM: Protect vCPU's "last run PID" with rwlock, not RCU (Maxim Levitsky) [RHEL-82917]
  - KVM: Return '0' directly when there's no task to yield to (Maxim Levitsky) [RHEL-82917]
  - KVM: Rework core loop of kvm_vcpu_on_spin() to use a single for-loop (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Use ARRAY_SIZE for array length (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Remove unused macro in the hardware disable test (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Remove the unused variable "gpa" in __invept() (Maxim Levitsky) [RHEL-82917]
  - KVM: Don't grab reference on VM_MIXEDMAP pfns that have a "struct page" (Maxim Levitsky) [RHEL-82917]
  - KVM: Drop APIs that manipulate "struct page" via pfns (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Don't mark "struct page" accessed when zapping SPTEs (Maxim Levitsky) [RHEL-82917]
  - KVM: Make kvm_follow_pfn.refcounted_page a required field (Maxim Levitsky) [RHEL-82917]
  - KVM: s390: vsie: fix virtual/physical address in unpin_scb() (Maxim Levitsky) [RHEL-82917]
  - KVM: s390: Use kvm_release_page_dirty() to unpin "struct page" memory (Maxim Levitsky) [RHEL-82917]
  - KVM: Drop gfn_to_pfn() APIs now that all users are gone (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: Explicitly require struct page memory for Ultravisor sharing (Maxim Levitsky) [RHEL-82917]
  - KVM: arm64: Use __gfn_to_page() when copying MTE tags to/from userspace (Maxim Levitsky) [RHEL-82917]
  - KVM: Add support for read-only usage of gfn_to_page() (Maxim Levitsky) [RHEL-82917]
  - KVM: Convert gfn_to_page() to use kvm_follow_pfn() (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: Use kvm_vcpu_map() to map guest memory to patch dcbz instructions (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: Remove extra get_page() to fix page refcount leak (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: Use kvm_faultin_pfn() to handle page faults on Book3s PR (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: Book3S: Mark "struct page" pfns dirty/accessed after installing PTE (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: Drop unused @kvm_ro param from kvmppc_book3s_instantiate_page() (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: Use __kvm_faultin_pfn() to handle page faults on Book3s Radix (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: Use __kvm_faultin_pfn() to handle page faults on Book3s HV (Maxim Levitsky) [RHEL-82917]
  - KVM: arm64: Use __kvm_faultin_pfn() to handle memory aborts (Maxim Levitsky) [RHEL-82917]
  - KVM: arm64: Mark "struct page" pfns accessed/dirty before dropping mmu_lock (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: e500: Use __kvm_faultin_pfn() to handle page faults (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: e500: Mark "struct page" pfn accessed before dropping mmu_lock (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: e500: Mark "struct page" dirty in kvmppc_e500_shadow_map() (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Use __kvm_faultin_page() to get APIC access page/pfn (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Hold mmu_lock until page is released when updating APIC access page (Maxim Levitsky) [RHEL-82917]
  - KVM: Move x86's API to release a faultin page to common KVM (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Don't mark unused faultin pages as accessed (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Put refcounted pages instead of blindly releasing pfns (Maxim Levitsky) [RHEL-82917]
  - KVM: guest_memfd: Provide "struct page" as output from kvm_gmem_get_pfn() (Maxim Levitsky) [RHEL-82917]
  - KVM: guest_memfd: Pass index, not gfn, to __kvm_gmem_get_pfn() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Convert page fault paths to kvm_faultin_pfn() (Maxim Levitsky) [RHEL-82917]
  - KVM: Add kvm_faultin_pfn() to specifically service guest page faults (Maxim Levitsky) [RHEL-82917]
  - KVM: Move declarations of memslot accessors up in kvm_host.h (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Mark pages/folios dirty at the origin of make_spte() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Add helper to "finish" handling a guest page fault (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Add common helper to handle prefetching SPTEs (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Put direct prefetched pages via kvm_release_page_clean() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Add "mmu" prefix fault-in helpers to free up generic names (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Don't fault-in APIC access page during initial allocation (Maxim Levitsky) [RHEL-82917]
  - KVM: Disallow direct access (w/o mmu_notifier) to unpinned pfn by default (Maxim Levitsky) [RHEL-82917]
  - KVM: Get writable mapping for __kvm_vcpu_map() only when necessary (Maxim Levitsky) [RHEL-82917]
  - KVM: Pass in write/dirty to kvm_vcpu_map(), not kvm_vcpu_unmap() (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Mark vmcs12's APIC access page dirty when unmapping (Maxim Levitsky) [RHEL-82917]
  - KVM: Pin (as in FOLL_PIN) pages during kvm_vcpu_map() (Maxim Levitsky) [RHEL-82917]
  - KVM: Migrate kvm_vcpu_map() to kvm_follow_pfn() (Maxim Levitsky) [RHEL-82917]
  - KVM: pfncache: Precisely track refcounted pages (Maxim Levitsky) [RHEL-82917]
  - KVM: Move kvm_{set,release}_page_{clean,dirty}() helpers up in kvm_main.c (Maxim Levitsky) [RHEL-82917]
  - KVM: Provide refcounted page as output field in struct kvm_follow_pfn (Maxim Levitsky) [RHEL-82917]
  - KVM: Use plain "struct page" pointer instead of single-entry array (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Drop pointless msr_bitmap_map field from struct nested_vmx (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Rely on kvm_vcpu_unmap() to track validity of eVMCS mapping (Maxim Levitsky) [RHEL-82917]
  - KVM: Use NULL for struct page pointer to indicate mremapped memory (Maxim Levitsky) [RHEL-82917]
  - KVM: Explicitly initialize all fields at the start of kvm_vcpu_map() (Maxim Levitsky) [RHEL-82917]
  - KVM: Remove pointless sanity check on @map param to kvm_vcpu_(un)map() (Maxim Levitsky) [RHEL-82917]
  - KVM: Introduce kvm_follow_pfn() to eventually replace "gfn_to_pfn" APIs (Maxim Levitsky) [RHEL-82917]
  - KVM: Drop unused "hva" pointer from __gfn_to_pfn_memslot() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Drop kvm_page_fault.hva, i.e. don't track intermediate hva (Maxim Levitsky) [RHEL-82917]
  - KVM: Replace "async" pointer in gfn=>pfn with "no_wait" and error code (Maxim Levitsky) [RHEL-82917]
  - KVM: Drop extra GUP (via check_user_page_hwpoison()) to detect poisoned page (Maxim Levitsky) [RHEL-82917]
  - KVM: Return ERR_SIGPENDING from hva_to_pfn() if GUP returns -EGAIN (Maxim Levitsky) [RHEL-82917]
  - KVM: Annotate that all paths in hva_to_pfn() might sleep (Maxim Levitsky) [RHEL-82917]
  - KVM: Drop @atomic param from gfn=>pfn and hva=>pfn APIs (Maxim Levitsky) [RHEL-82917]
  - KVM: Rename gfn_to_page_many_atomic() to kvm_prefetch_pages() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Use gfn_to_page_many_atomic() when prefetching indirect PTEs (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Mark page/folio accessed only when zapping leaf SPTEs (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Mark folio dirty when creating SPTE, not when zapping/modifying (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Mark new SPTE as Accessed when synchronizing existing SPTE (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Invert @can_unsync and renamed to @synchronizing (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Don't overwrite shadow-present MMU SPTEs when prefaulting (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Skip the "try unsync" path iff the old SPTE was a leaf SPTE (Maxim Levitsky) [RHEL-82917]
  - KVM: Add kvm_release_page_unused() API to put pages that KVM never consumes (Maxim Levitsky) [RHEL-82917]
  - x86/virt: Move SEV-specific parsing into arch/x86/virt/svm (Maxim Levitsky) [RHEL-82917]
  - KVM: s390: selftests: Add regression tests for SORTL and DFLTCC CPU subfunctions (Maxim Levitsky) [RHEL-82917]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-101.el10]
changelog:
  - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-99005] {CVE-2025-21991}
  - vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (CKI Backport Bot) [RHEL-97117] {CVE-2025-37799}
  - scsi: smartpqi: Delete a stray tab in pqi_is_parity_write_stream() (Don Brace) [RHEL-96279]
  - scsi: smartpqi: Update driver version to 2.1.34-035 (Don Brace) [RHEL-96279]
  - scsi: smartpqi: Fix smp_processor_id() call trace for preemptible kernels (Don Brace) [RHEL-96279]
  - scsi: smartpqi: Enhance WWID logging logic (Don Brace) [RHEL-96279]
  - scsi: smartpqi: Add new PCI IDs (Don Brace) [RHEL-96279]
  - scsi: smartpqi: Take drives offline when controller is offline (Don Brace) [RHEL-96279]
  - scsi: smartpqi: Use is_kdump_kernel() to check for kdump (Don Brace) [RHEL-96279]
  - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-91254]
  - sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator (Phil Auld) [RHEL-92921]
  - sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash (Phil Auld) [RHEL-92921]
  - cpufreq/sched: Set need_freq_update in ignore_dl_rate_limit() (Phil Auld) [RHEL-92921]
  - cpufreq/sched: Explicitly synchronize limits_changed flag handling (Phil Auld) [RHEL-92921]
  - cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS (Phil Auld) [RHEL-92921]
  - sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-92921]
  - include/{topology,cpuset}: Move dl_rebuild_rd_accounting to cpuset.h (Phil Auld) [RHEL-92921]
  - sched/topology: Stop exposing partition_sched_domains_locked (Phil Auld) [RHEL-92921]
  - cgroup/cpuset: Remove partition_and_rebuild_sched_domains (Phil Auld) [RHEL-92921]
  - sched/topology: Remove redundant dl_clear_root_domain call (Phil Auld) [RHEL-92921]
  - sched/deadline: Rebuild root domain accounting after every update (Phil Auld) [RHEL-92921]
  - sched/deadline: Generalize unique visiting of root domains (Phil Auld) [RHEL-92921]
  - sched/topology: Wrappers for sched_domains_mutex (Phil Auld) [RHEL-92921]
  - sched/deadline: Ignore special tasks when rebuilding domains (Phil Auld) [RHEL-92921]
  - tracing: Use preempt_model_str() (Phil Auld) [RHEL-92921]
  - x86: Rely on generic printing of preemption model (Phil Auld) [RHEL-92921]
  - s390: Rely on generic printing of preemption model (Phil Auld) [RHEL-92921]
  - powerpc: Rely on generic printing of preemption model (Phil Auld) [RHEL-92921]
  - Revert "powerpc: traps: Use PREEMPT_RT" (Phil Auld) [RHEL-92921]
  - arm64: Rely on generic printing of preemption model (Phil Auld) [RHEL-92921]
  - lib/dump_stack: Use preempt_model_str() (Phil Auld) [RHEL-92921]
  - sched: Add a generic function to return the preemption string (Phil Auld) [RHEL-92921]
  - Revert "sched/core: Reduce cost of sched_move_task when config autogroup" (Phil Auld) [RHEL-92921]
  - rseq: Fix segfault on registration when rseq_cs is non-zero (Phil Auld) [RHEL-92921]
  - rseq: Update kernel fields in lockstep with CONFIG_DEBUG_RSEQ=y (Phil Auld) [RHEL-92921]
  - rseq: Fix rseq registration with CONFIG_DEBUG_RSEQ (Phil Auld) [RHEL-92921]
  - rseq: Fix rseq unregistration regression (Phil Auld) [RHEL-92921]
  - rseq: Validate read-only fields under DEBUG_RSEQ config (Phil Auld) [RHEL-92921]
  - sched/membarrier: Fix redundant load of membarrier_state (Phil Auld) [RHEL-92921]
  - sched: Clarify wake_up_q()'s write to task->wake_q.next (Phil Auld) [RHEL-92921]
  - freezer, sched: Report frozen tasks as 'D' instead of 'R' (Phil Auld) [RHEL-92921]
  - dm mpath: replace spin_lock_irqsave with spin_lock_irq (Benjamin Marzinski) [RHEL-89481]
  - dm-mpath: Don't grab work_mutex while probing paths (Benjamin Marzinski) [RHEL-89481]
  - dm mpath: Interface for explicit probing of active paths (Benjamin Marzinski) [RHEL-89481]
  - dm: Allow .prepare_ioctl to handle ioctls directly (Benjamin Marzinski) [RHEL-89481]
  - redhat/configs: Enable CONFIG_PCIE_TPH (Ivan Vecera) [RHEL-94973]
  - PCI/TPH: Restore TPH Requester Enable correctly (CKI Backport Bot) [RHEL-94973]
  - PCI/TPH: Add TPH documentation (CKI Backport Bot) [RHEL-94973]
  - PCI/TPH: Add Steering Tag support (CKI Backport Bot) [RHEL-94973]
  - PCI: Add TLP Processing Hints (TPH) support (CKI Backport Bot) [RHEL-94973]
  - powerpc/pseries/iommu: create DDW for devices with DMA mask less than 64-bits (Eder Zulian) [RHEL-92470]
  - redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-92667]
  - lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-92667]
  - lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-92667]
  - lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-92667]
  - lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-92667]
  - lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-92667]
  - lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-92667]
  - lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-92667]
  - lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-92667]
  - lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-92667]
  - lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-92667]
  - lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-92667]
  - lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-92667]
  - lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-92667]
  - lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-92667]
  - lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-92667]
  - crypto: qat - switch to standard pattern for PCI IDs (Vladis Dronov) [RHEL-72768]
  - crypto: qat - remove BITS_IN_DWORD() (Vladis Dronov) [RHEL-72768]
  - crypto: qat - remove initialization in device class (Vladis Dronov) [RHEL-72768]
  - crypto: qat - add shutdown handler to qat_c3xxx (Vladis Dronov) [RHEL-72768 RHEL-84366]
  - crypto: qat - remove redundant prototypes in qat_c3xxx (Vladis Dronov) [RHEL-72768 RHEL-84366]
  - crypto: qat - add shutdown handler to qat_c62x (Vladis Dronov) [RHEL-72768 RHEL-84366]
  - crypto: qat - remove redundant prototypes in qat_c62x (Vladis Dronov) [RHEL-72768 RHEL-84366]
  - crypto: qat - add shutdown handler to qat_dh895xcc (Vladis Dronov) [RHEL-72768 RHEL-84366]
  - crypto: qat - remove redundant prototypes in qat_dh895xcc (Vladis Dronov) [RHEL-72768 RHEL-84366]
  - crypto: qat - add shutdown handler to qat_420xx (Vladis Dronov) [RHEL-72768 RHEL-84366]
  - crypto: qat - add shutdown handler to qat_4xxx (Vladis Dronov) [RHEL-72768 RHEL-84366]
  - crypto: qat - remove access to parity register for QAT GEN4 (Vladis Dronov) [RHEL-72768]
  - crypto: qat - set parity error mask for qat_420xx (Vladis Dronov) [RHEL-72768]
  - crypto: qat - optimize allocations for fw authentication (Vladis Dronov) [RHEL-72768]
  - crypto: qat - remove redundant FW image size check (Vladis Dronov) [RHEL-72768]
  - crypto: qat - remove unused members in suof structure (Vladis Dronov) [RHEL-72768]
  - crypto: qat - introduce fuse array (Vladis Dronov) [RHEL-72768]
  - crypto: qat - add macro to write 64-bit values to registers (Vladis Dronov) [RHEL-72768]
  - crypto: qat - refactor service parsing logic (Vladis Dronov) [RHEL-72768]
  - crypto: qat - do not export adf_cfg_services (Vladis Dronov) [RHEL-72768]
  - crypto: qat - reorder objects in qat_common Makefile (Vladis Dronov) [RHEL-72768]
  - crypto: qat - fix object goals in Makefiles (Vladis Dronov) [RHEL-72768]
  - crypto: qat - set command ids as reserved (Vladis Dronov) [RHEL-72768]
  - crypto: drivers - Use str_enable_disable-like helpers [partial] (Vladis Dronov) [RHEL-72768]
  - redhat: automotive: remove tech preview message (Scott Weaver) [RHEL-77268]
  - redhat: automotive: define CONFIG_RH_AUTOMOTIVE (Scott Weaver) [RHEL-77268]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-102.el10]
changelog:
  - emulex/benet: correct command version selection in be_cmd_get_stats() (Dennis Chen) [RHEL-72657]
  - emulex/benet: Annotate flash_cookie as nonstring (Dennis Chen) [RHEL-72657]
  - be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink (Dennis Chen) [RHEL-72657]
  - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-83569]
  - treewide: Switch/rename to timer_delete[_sync]() (Dennis Chen) [RHEL-83569]
  - i40e: use generic unrolled_count() macro (Dennis Chen) [RHEL-83569]
  - i40e: Remove unused i40e_dcb_hw_get_num_tc (Dennis Chen) [RHEL-83569]
  - i40e: Remove unused i40e_asq_send_command_v2 (Dennis Chen) [RHEL-83569]
  - i40e: Remove unused i40e_commit_partition_bw_setting (Dennis Chen) [RHEL-83569]
  - i40e: Remove unused i40e_del_filter (Dennis Chen) [RHEL-83569]
  - i40e: Remove unused i40e_get_cur_guaranteed_fd_count (Dennis Chen) [RHEL-83569]
  - i40e: Deadcode profile code (Dennis Chen) [RHEL-83569]
  - i40e: Remove unused i40e_(read|write)_phy_register (Dennis Chen) [RHEL-83569]
  - i40e: Remove unused i40e_blink_phy_link_led (Dennis Chen) [RHEL-83569]
  - i40e: Deadcode i40e_aq_* (Dennis Chen) [RHEL-83569]
  - ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-91256]
  - net: hsr: remove synchronize_rcu() from hsr_add_port() (Felix Maurer) [RHEL-84547]
  - net: hsr: must allocate more bytes for RedBox support (Felix Maurer) [RHEL-84547]
  - net: hsr: fix fill_frame_info() regression vs VLAN packets (Felix Maurer) [RHEL-84547]
  - net: hsr: avoid potential out-of-bound access in fill_frame_info() (Felix Maurer) [RHEL-84547]
  - net: hsr: fix hsr_init_sk() vs network/transport headers. (Felix Maurer) [RHEL-84547]
  - bonding: assign random address if device address is same as bond (Hangbin Liu) [RHEL-84037]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-103.el10]
changelog:
  - redhat/spec: package full bpftool in selftests (Gregory Bell) [RHEL-91378]
  - redhat: add more namespace selftests to kernel-modules-internal package (Joel Savitz) [RHEL-95481]
  - selftests/memfd/memfd_test: fix possible NULL pointer dereference (Joel Savitz) [RHEL-94834]
  - mr: consolidate the ipmr_can_free_table() checks. (CKI Backport Bot) [RHEL-96599]
  - ipv6: Align behavior across nexthops during path selection (CKI Backport Bot) [RHEL-96599]
  - ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS (CKI Backport Bot) [RHEL-96599]
  - ipv6: Do not consider link down nexthops in path selection (CKI Backport Bot) [RHEL-96599]
  - ipv6: Start path selection from the first nexthop (CKI Backport Bot) [RHEL-96599]
  - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-96599] {CVE-2025-22063}
  - scsi: sd_zbc: block: Respect bio vector limits for REPORT ZONES buffer (Ewan D. Milne) [RHEL-94045]
  - scsi: Improve CDL control (Ewan D. Milne) [RHEL-94045]
  - scsi: core: Clear flags for scsi_cmnd that did not complete (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_transport_srp: Replace min/max nesting with clamp() (Ewan D. Milne) [RHEL-94045]
  - scsi: st: Tighten the page format heuristics with MODE SELECT (Ewan D. Milne) [RHEL-94045]
  - scsi: st: ERASE does not change tape location (Ewan D. Milne) [RHEL-94045]
  - scsi: st: Fix array overflow in st_setup() (Ewan D. Milne) [RHEL-94045]
  - scsi: core: Use a switch statement when attaching VPD pages (Ewan D. Milne) [RHEL-94045]
  - scsi: logging: Fix scsi_logging_level bounds (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_error: Add comments to scsi_check_sense() (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Fix uninitialized variable use (Ewan D. Milne) [RHEL-94045]
  - scsi: core: Fix missing lock protection (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Do not sleep in atomic sections (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Simplify command handling (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Remove a reference to in_use_bm (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Remove sdebug_device_access_info (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Add support for partitioning the tape (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Reset tape setting at device reset (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Add compression mode page for tapes (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Add read support and update locate for tapes (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Add write support with block lengths and 4 bytes of data (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Add READ BLOCK LIMITS and modify LOAD for tapes (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: First fixes for tapes (Ewan D. Milne) [RHEL-94045]
  - scsi: usb: Rename the RESERVE and RELEASE constants (Ewan D. Milne) [RHEL-94045]
  - scsi: st: Add sysfs file position_lost_in_reset (Ewan D. Milne) [RHEL-94045]
  - scsi: st: Modify st.c to use the new scsi_error counters (Ewan D. Milne) [RHEL-94045]
  - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (Ewan D. Milne) [RHEL-94045]
  - scsi: st: Restore some drive settings after reset (Ewan D. Milne) [RHEL-94045]
  - net: ena: Support persistent per-NAPI config. (Dennis Chen) [RHEL-94831]
  - treewide: Switch/rename to timer_delete[_sync]() (Dennis Chen) [RHEL-94831]
  - net: ena: Fix incorrect indentation (Dennis Chen) [RHEL-94831]
  - net: ena: remove devm from ethtool (Dennis Chen) [RHEL-94831]
  - net: ena: Remove deadcode (Dennis Chen) [RHEL-94831]
  - net: ena: Remove autopolling mode (Dennis Chen) [RHEL-94831]
  - ena: Link queues to NAPIs (Dennis Chen) [RHEL-94831]
  - ena: Link IRQs to NAPI instances (Dennis Chen) [RHEL-94831]
  - mm: fix finish_fault() handling for large folios (Aristeu Rozanski) [RHEL-83854]
  - selftests/bpf: Remove with_addr.sh and with_tunnels.sh (Jerome Marchand) [RHEL-78201]
  - Build cpp selftests without source fortification (Jerome Marchand) [RHEL-78201]
  - libbpf: Fix implicit memfd_create() for bionic (Jerome Marchand) [RHEL-78201]
  - bpf: Use preempt_count() directly in bpf_send_signal_common() (Jerome Marchand) [RHEL-78201]
  - selftests: bpf: test batch lookup on array of maps with holes (Jerome Marchand) [RHEL-78201]
  - bpf: skip non exist keys in generic_map_lookup_batch (Jerome Marchand) [RHEL-78201]
  - bpf: Handle allocation failure in acquire_lock_state (Jerome Marchand) [RHEL-78201]
  - bpf: verifier: Disambiguate get_constant_map_key() errors (Jerome Marchand) [RHEL-78201]
  - bpf: selftests: Test constant key extraction on irrelevant maps (Jerome Marchand) [RHEL-78201]
  - bpf: verifier: Do not extract constant map keys for irrelevant maps (Jerome Marchand) [RHEL-78201]
  - bpf: Fix softlockup in arena_map_free on 64k page kernel (Jerome Marchand) [RHEL-78201 RHEL-83206] {CVE-2025-21851}
  - bpf: Fix deadlock when freeing cgroup storage (Jerome Marchand) [RHEL-78201 RHEL-83311] {CVE-2024-58088}
  - bpf: avoid holding freeze_mutex during mmap operation (Jerome Marchand) [RHEL-78201 RHEL-83351] {CVE-2025-21853}
  - bpf: unify VM_WRITE vs VM_MAYWRITE use in BPF map mmaping logic (Jerome Marchand) [RHEL-78201]
  - bpf: Remove unnecessary BTF lookups in bpf_sk_storage_tracing_allowed (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Add some tests related to 'may_goto 0' insns (Jerome Marchand) [RHEL-78201]
  - bpf: Remove 'may_goto 0' instruction in opt_remove_nops() (Jerome Marchand) [RHEL-78201]
  - bpf: Allow 'may_goto 0' instruction in verifier (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Add test case for the freeing of bpf_timer (Jerome Marchand) [RHEL-78201]
  - bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT (Jerome Marchand) [RHEL-78201]
  - bpf: Free element after unlock in __htab_map_lookup_and_delete_elem() (Jerome Marchand) [RHEL-78201]
  - bpf: Bail out early in __htab_map_lookup_and_delete_elem() (Jerome Marchand) [RHEL-78201]
  - bpf: Free special fields after unlock in htab_lru_map_delete_node() (Jerome Marchand) [RHEL-78201]
  - libbpf: Work around kernel inconsistently stripping '.llvm.' suffix (Jerome Marchand) [RHEL-78201]
  - bpf: selftests: verifier: Add nullness elision tests (Jerome Marchand) [RHEL-78201]
  - bpf: verifier: Support eliding map lookup nullness (Jerome Marchand) [RHEL-78201]
  - bpf: verifier: Add missing newline on verbose() call (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Add distilled BTF test about marking BTF_IS_EMBEDDED (Jerome Marchand) [RHEL-78201]
  - libbpf: Fix incorrect traversal end type ID when marking BTF_IS_EMBEDDED (Jerome Marchand) [RHEL-78201]
  - libbpf: Fix return zero when elf_begin failed (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Fix btf leak on new btf alloc failure in btf_distill test (Jerome Marchand) [RHEL-78201]
  - veristat: Load struct_ops programs only once (Jerome Marchand) [RHEL-78201]
  - bpf: Send signals asynchronously if !preemptible (Jerome Marchand) [RHEL-78201]
  - veristat: Document verifier log dumping capability (Jerome Marchand) [RHEL-78201]
  - bpftool: Fix control flow graph segfault during edge creation (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Add a test for kprobe multi with unique_match (Jerome Marchand) [RHEL-78201]
  - libbpf: Add unique_match option for multi kprobe (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} from bpf_selem_free() (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} from bpf_local_storage_free() (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} from bpf_local_storage_alloc() (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} from bpf_selem_alloc() (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable,enable} in bpf_cpumask_release() (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} in bpf_obj_free_fields() (Jerome Marchand) [RHEL-78201]
  - bpf: Disable migration before calling ops->map_free() (Jerome Marchand) [RHEL-78201]
  - bpf: Disable migration in bpf_selem_free_rcu (Jerome Marchand) [RHEL-78201]
  - bpf: Disable migration when cloning sock storage (Jerome Marchand) [RHEL-78201]
  - bpf: Disable migration when destroying sock storage (Jerome Marchand) [RHEL-78201]
  - bpf: Disable migration when destroying inode storage (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} from bpf_task_storage_lock helpers (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} from bpf_cgrp_storage_lock helpers (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} in htab_elem_free (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} in ->map_for_each_callback (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} from LPM trie (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Add kprobe session recursion check test (Jerome Marchand) [RHEL-78201]
  - bpf: Return error for missed kprobe multi bpf program execution (Jerome Marchand) [RHEL-78201]
  - bpf: Fix range_tree_set() error handling (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: add -std=gnu11 to BPF_CFLAGS and CFLAGS (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Handle prog/attach type comparison in veristat (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: add -fno-strict-aliasing to BPF_CFLAGS (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: test bpf_for within spin lock section (Jerome Marchand) [RHEL-78201]
  - bpf: Allow bpf_for/bpf_repeat calls while holding a spinlock (Jerome Marchand) [RHEL-78201]
  - bpf/tests: Add 32 bits only long conditional jump tests (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Avoid generating untracked files when running bpf selftests (Jerome Marchand) [RHEL-78201]
  - bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing (Jerome Marchand) [RHEL-78201]
  - bpf: Use refcount_t instead of atomic_t for mmap_count (Jerome Marchand) [RHEL-78201]
  - bpf: Remove unused MT_ENTRY define (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: fix veristat comp mode with new stats (Jerome Marchand) [RHEL-78201]
  - bpf: Fix holes in special_kfunc_list if !CONFIG_NET (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Add testcases for BPF_MUL (Jerome Marchand) [RHEL-78201]
  - bpf, verifier: Improve precision of BPF_MUL (Jerome Marchand) [RHEL-78201]
  - libbpf: Set MFD_NOEXEC_SEAL when creating memfd (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Clear out Python syntax warnings (Jerome Marchand) [RHEL-78201]
  - bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (Jerome Marchand) [RHEL-78201]
  - bpftool: Link zstd lib required by libelf (Jerome Marchand) [RHEL-78201]
  - veristat: Fix top source line stat collection (Jerome Marchand) [RHEL-78201]
  - bpf: lsm: Remove hook to bpf_task_storage_free (Jerome Marchand) [RHEL-78201]
  - bpf: Fix configuration-dependent BTF function references (Jerome Marchand) [RHEL-78201]
  - selftest/bpf: Replace magic constants by macros (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Add tests for fd_array_cnt (Jerome Marchand) [RHEL-78201]
  - libbpf: prog load: Allow to use fd_array_cnt (Jerome Marchand) [RHEL-78201]
  - bpf: Add fd_array_cnt attribute for prog_load (Jerome Marchand) [RHEL-78201]
  - bpf: Refactor check_pseudo_btf_id (Jerome Marchand) [RHEL-78201]
  - bpf: Move map/prog compatibility checks (Jerome Marchand) [RHEL-78201]
  - bpf: Add a __btf_get_by_fd helper (Jerome Marchand) [RHEL-78201]
  - bpftool: bash: Add bash completion for root_id argument (Jerome Marchand) [RHEL-78201]
  - bpftool: btf: Support dumping a specific types from file (Jerome Marchand) [RHEL-78201]
  - bpftool: btf: Validate root_type_ids early (Jerome Marchand) [RHEL-78201]
  - bpftool: man: Add missing format argument to command description (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: make BPF_TARGET_ENDIAN non-recursive to speed up *.bpf.o build (Jerome Marchand) [RHEL-78201]
  - libbpf: Extend linker API to support in-memory ELF files (Jerome Marchand) [RHEL-78201]
  - libbpf: Pull file-opening logic up to top-level functions (Jerome Marchand) [RHEL-78201]
  - bpftool: Probe for ISA v4 instruction set extension (Jerome Marchand) [RHEL-78201]
  - kbuild/btf: Propagate CONFIG_WERROR to resolve_btfids (Jerome Marchand) [RHEL-78201]
  - tools/resolve_btfids: Add --fatal_warnings option (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Fix fill_link_info selftest on powerpc (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Add more stats into veristat (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Consolidate kernel modules into common directory (Jerome Marchand) [RHEL-78201]
  - libbpf: Fix segfault due to libelf functions not setting errno (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Add IRQ save/restore tests (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Expand coverage of preempt tests to sleepable kfunc (Jerome Marchand) [RHEL-78201]
  - bpf: Improve verifier log for resource leak on exit (Jerome Marchand) [RHEL-78201]
  - bpf: Introduce support for bpf_local_irq_{save,restore} (Jerome Marchand) [RHEL-78201]
  - bpf: Refactor mark_{dynptr,iter}_read (Jerome Marchand) [RHEL-78201]
  - bpf: Refactor {acquire,release}_reference_state (Jerome Marchand) [RHEL-78201]
  - bpf: Consolidate locks and reference state in verifier state (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: ensure proper root namespace cleanup when test fail (Jerome Marchand) [RHEL-78201]
  - bpf: Refactor bpf_tracing_func_proto() and remove bpf_get_probe_write_proto() (Jerome Marchand) [RHEL-78201]
  - bpf: Remove bpf_probe_write_user() warning message (Jerome Marchand) [RHEL-78201]
  - libbpf: Improve debug message when the base BTF cannot be found (Jerome Marchand) [RHEL-78201]
  - libbpf: don't adjust USDT semaphore address if .stapsdt.base addr is missing (Jerome Marchand) [RHEL-78201]
  - samples/bpf: Remove unused variable (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: remove test_flow_dissector.sh (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: migrate bpf flow dissectors tests to test_progs (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: add network helpers to generate udp checksums (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: use the same udp and tcp headers in tests under test_progs (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: document pseudo-header checksum helpers (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: move ip checksum helper to network helpers (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Enable generic tc actions in selftests config (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: migrate flow_dissector namespace exclusivity test (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: add gre packets testing to flow_dissector (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: expose all subtests from flow_dissector (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: re-split main function into dedicated tests (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: replace CHECK calls with ASSERT macros in flow_dissector test (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: use ASSERT_MEMEQ to compare bpf flow keys (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: add a macro to compare raw memory (Jerome Marchand) [RHEL-78201]
  - sched/isolation: Make use of more than one housekeeping cpu (Phil Auld) [RHEL-8694]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-104.el10]
changelog:
  - ibmvnic: Use kernel helpers for hex dumps (CKI Backport Bot) [RHEL-89030] {CVE-2025-22104}
  - perf: Fix dangling cgroup pointer in cpuctx (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Fix crash in icl_update_topdown_event() (Michael Petlan) [RHEL-78197]
  - s390/cpumf: Fix double free on error in cpumf_pmu_event_init() (Michael Petlan) [RHEL-78197]
  - s390/cpum_sf: Simplify release of SDBs and SDBTs (Michael Petlan) [RHEL-78197]
  - s390/cpum_sf: Fix and protect memory allocation of SDBs with mutex (Michael Petlan) [RHEL-78197]
  - s390/cpum_sf: Rework call to sf_disable() (Michael Petlan) [RHEL-78197]
  - s390/cpum_sf: Handle CPU hotplug remove during sampling (Michael Petlan) [RHEL-78197]
  - s390/cpum_sf: Fix format string in pr_err() (Michael Petlan) [RHEL-78197]
  - s390/cpum_sf: Use sf_buffer_available() (Michael Petlan) [RHEL-78197]
  - s390/cpum_sf: Consistently use goto out for function exit (Michael Petlan) [RHEL-78197]
  - s390/cpum_sf: Do not re-enable event after deletion (Michael Petlan) [RHEL-78197]
  - s390/cpum_sf: Set bit PMU_F_ENABLED enabled after lpp() invocation (Michael Petlan) [RHEL-78197]
  - s390/cpum_cf: Correct typo CYLCE (Michael Petlan) [RHEL-78197]
  - radix-tree: add missing cleanup.h (Michael Petlan) [RHEL-78197]
  - perf tests metric-only perf stat: Fix tests 84 and 86 s390 (Michael Petlan) [RHEL-78197]
  - perf trace: Support --summary-mode=cgroup (Michael Petlan) [RHEL-78197]
  - perf test: Add perf trace summary test (Michael Petlan) [RHEL-78197]
  - perf trace: Implement syscall summary in BPF (Michael Petlan) [RHEL-78197]
  - perf trace: Add missing thread__put() in thread__e_machine() (Michael Petlan) [RHEL-78197]
  - perf trace: Free the files.max entry in files->table (Michael Petlan) [RHEL-78197]
  - perf trace: Fix leaks of 'struct thread' in set_filter_loop_pids() (Michael Petlan) [RHEL-78197]
  - perf trace: Fix leaks of 'struct thread' in fprintf_sys_enter() (Michael Petlan) [RHEL-78197]
  - perf tools: Fix arm64 source package build (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync sound/asound.h with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync linux/prctl.h with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync arch/xtensa/kernel/syscalls/syscall.tbl with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync arch/sparc/kernel/syscalls/syscall.tbl with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync arch/sh/kernel/syscalls/syscall.tbl with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync arch/arm/tools/syscall.tbl with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync arch/x86/entry/syscalls/syscall_32.tbl with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync asm-generic/mman.h with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync asm/cputype.h with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync scripts/syscall.tbl with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync asm/kvm.h with kernel (Michael Petlan) [RHEL-78197]
  - perf tools: Fix in-source libperf build (Michael Petlan) [RHEL-78197]
  - perf tools: Fix arm64 build by generating unistd_64.h (Michael Petlan) [RHEL-78197]
  - tools headers: Update the syscall table with the kernel sources (Michael Petlan) [RHEL-78197]
  - perf tools: Remove evsel__handle_error_quirks() (Michael Petlan) [RHEL-78197]
  - perf libunwind arm64: Fix missing close parens in an if statement (Michael Petlan) [RHEL-78197]
  - tools headers: Update the uapi/linux/perf_event.h copy with the kernel sources (Michael Petlan) [RHEL-78197]
  - tools/include: make uapi/linux/types.h usable from assembly (Michael Petlan) [RHEL-78197]
  - perf bpf-filter: Fix a parsing error with comma (Michael Petlan) [RHEL-78197]
  - perf report: Fix a memory leak for perf_env on AMD (Michael Petlan) [RHEL-78197]
  - perf trace: Fix wrong size to bpf_map__update_elem call (Michael Petlan) [RHEL-78197]
  - perf tools: annotate asm_pure_loop.S (Michael Petlan) [RHEL-78197]
  - perf python: Fix setup.py mypy errors (Michael Petlan) [RHEL-78197]
  - perf test: Address attr.py mypy error (Michael Petlan) [RHEL-78197]
  - perf build: Add pylint build tests (Michael Petlan) [RHEL-78197]
  - perf build: Add mypy build tests (Michael Petlan) [RHEL-78197]
  - perf build: Rename TEST_LOGS to SHELL_TEST_LOGS (Michael Petlan) [RHEL-78197]
  - tools/build: Don't pass test log files to linker (Michael Petlan) [RHEL-78197]
  - perf bench sched pipe: fix enforced blocking reads in worker_thread (Michael Petlan) [RHEL-78197]
  - perf build: filter all combinations of -flto for libperl (Michael Petlan) [RHEL-78197]
  - perf vendor events arm64 AmpereOneX: Fix frontend_bound calculation (Michael Petlan) [RHEL-78197]
  - perf vendor events arm64: AmpereOne/AmpereOneX: Mark LD_RETIRED impacted by errata (Michael Petlan) [RHEL-78197]
  - perf trace: Fix evlist memory leak (Michael Petlan) [RHEL-78197]
  - perf trace: Fix BTF memory leak (Michael Petlan) [RHEL-78197]
  - perf trace: Make syscall table stable (Michael Petlan) [RHEL-78197]
  - perf syscalltbl: Mask off ABI type for MIPS system calls (Michael Petlan) [RHEL-78197]
  - perf build: Remove Makefile.syscalls (Michael Petlan) [RHEL-78197]
  - perf syscalltbl: Use lookup table containing multiple architectures (Michael Petlan) [RHEL-78197]
  - perf trace beauty: Add syscalltbl.sh generating all system call tables (Michael Petlan) [RHEL-78197]
  - perf thread: Add support for reading the e_machine type for a thread (Michael Petlan) [RHEL-78197]
  - perf dso: Add support for reading the e_machine type for a dso (Michael Petlan) [RHEL-78197]
  - perf syscalltbl: Remove struct syscalltbl (Michael Petlan) [RHEL-78197]
  - perf trace: Reorganize syscalls (Michael Petlan) [RHEL-78197]
  - perf syscalltbl: Remove syscall_table.h (Michael Petlan) [RHEL-78197]
  - perf dso: kernel-doc for enum dso_binary_type (Michael Petlan) [RHEL-78197]
  - perf dso: Move libunwind dso_data variables into ifdef (Michael Petlan) [RHEL-78197]
  - perf report: Disable children column for data type profiling (Michael Petlan) [RHEL-78197]
  - perf report: Allow hierarchy mode for --children (Michael Petlan) [RHEL-78197]
  - perf sort: Keep output fields in the same level (Michael Petlan) [RHEL-78197]
  - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-78197]
  - perf: intel-tpebs: Fix incorrect usage of zfree() (Michael Petlan) [RHEL-78197]
  - perf cpumap: Increment reference count for online cpumap (Michael Petlan) [RHEL-78197]
  - perf dso: fix dso__is_kallsyms() check (Michael Petlan) [RHEL-78197]
  - perf kwork: Remove unreachable judgments (Michael Petlan) [RHEL-78197]
  - perf python: Check if there is space to copy all the event (Michael Petlan) [RHEL-78197]
  - perf python: Don't keep a raw_data pointer to consumed ring buffer space (Michael Petlan) [RHEL-78197]
  - perf python: Decrement the refcount of just created event on failure (Michael Petlan) [RHEL-78197]
  - perf python tracepoint.py: Change the COMM using setproctitle if available (Michael Petlan) [RHEL-78197]
  - perf python: Fixup description of sample.id event member (Michael Petlan) [RHEL-78197]
  - perf test dso-data: Correctly free test file in read test (Michael Petlan) [RHEL-78197]
  - perf dso: Use lock annotations to fix asan deadlock (Michael Petlan) [RHEL-78197]
  - perf mutex: Add annotations for LOCKS_EXCLUDED and LOCKS_RETURNED (Michael Petlan) [RHEL-78197]
  - perf test: Add pipe output testing for annotate (Michael Petlan) [RHEL-78197]
  - perf test: Fixes to variable expansion and stdout for diff test (Michael Petlan) [RHEL-78197]
  - perf libunwind: Fixup conversion perf_sample->user_regs to a pointer (Michael Petlan) [RHEL-78197]
  - perf script: Update brstack syntax documentation (Michael Petlan) [RHEL-78197]
  - perf script: Fix typo in branch event mask (Michael Petlan) [RHEL-78197]
  - perf hist stdio: Do bounds check when printing callchains to avoid UB with new gcc versions (Michael Petlan) [RHEL-78197]
  - perf units: Fix insufficient array space (Michael Petlan) [RHEL-78197]
  - perf annotate: Add --code-with-type option. (Michael Petlan) [RHEL-78197]
  - perf annotate: Implement code + data type annotation (Michael Petlan) [RHEL-78197]
  - perf annotate: Factor out __hist_entry__get_data_type() (Michael Petlan) [RHEL-78197]
  - perf annotate: Pass hist_entry to annotate functions (Michael Petlan) [RHEL-78197]
  - perf annotate: Pass annotation_options to annotation_line__print() (Michael Petlan) [RHEL-78197]
  - perf annotate: Remove unused len parameter from annotation_line__print() (Michael Petlan) [RHEL-78197]
  - perf annotate-data: Add annotated_data_type__get_member_name() (Michael Petlan) [RHEL-78197]
  - perf ftrace: Use atomic inc to update histogram in BPF (Michael Petlan) [RHEL-78197]
  - perf ftrace: Remove an unnecessary condition check in BPF (Michael Petlan) [RHEL-78197]
  - perf ftrace: Fix latency stats with BPF (Michael Petlan) [RHEL-78197]
  - perf test stat: Additional topdown grouping tests (Michael Petlan) [RHEL-78197]
  - perf x86 evlist: Update comments on topdown regrouping (Michael Petlan) [RHEL-78197]
  - perf parse-events: Corrections to topdown sorting (Michael Petlan) [RHEL-78197]
  - perf tools: Improve handling of hybrid PMUs in perf_event_attr__fprintf (Michael Petlan) [RHEL-78197]
  - perf python tracepoint: Switch to using parse_events (Michael Petlan) [RHEL-78197]
  - perf python: Add evlist.config to set up record options (Michael Petlan) [RHEL-78197]
  - perf python: Add evlist all_cpus accessor (Michael Petlan) [RHEL-78197]
  - perf python: Avoid duplicated code in get_tracepoint_field (Michael Petlan) [RHEL-78197]
  - perf python: Update ungrouped evsel leader in clone (Michael Petlan) [RHEL-78197]
  - perf python: Add optional cpus and threads arguments to parse_events (Michael Petlan) [RHEL-78197]
  - perf python: Add member access to a number of evsel variables (Michael Petlan) [RHEL-78197]
  - perf python: Add evlist enable and disable methods (Michael Petlan) [RHEL-78197]
  - perf evlist: Add success path to evlist__create_syswide_maps (Michael Petlan) [RHEL-78197]
  - perf debug: Avoid stack overflow in recursive error message (Michael Petlan) [RHEL-78197]
  - perf symbol: Support .gnu_debugdata for symbols (Michael Petlan) [RHEL-78197]
  - perf tools: Add LZMA decompression from FILE (Michael Petlan) [RHEL-78197]
  - perf tools: Add dummy functions for !HAVE_LZMA_SUPPORT (Michael Petlan) [RHEL-78197]
  - perf mem: Don't leak mem event names (Michael Petlan) [RHEL-78197]
  - perf vendor events riscv: Add SiFive P650 events (Michael Petlan) [RHEL-78197]
  - perf vendor events riscv: Add SiFive P550 events (Michael Petlan) [RHEL-78197]
  - perf vendor events riscv: Add SiFive Bullet version 0x0d events (Michael Petlan) [RHEL-78197]
  - perf vendor events riscv: Add SiFive Bullet version 0x07 events (Michael Petlan) [RHEL-78197]
  - perf vendor events riscv: Update SiFive Bullet events (Michael Petlan) [RHEL-78197]
  - perf vendor events riscv: Remove leading zeroes (Michael Petlan) [RHEL-78197]
  - perf vendor events riscv: Rename U74 to Bullet (Michael Petlan) [RHEL-78197]
  - perf util: Remove unused perf_config__refresh (Michael Petlan) [RHEL-78197]
  - perf util: Remove unused perf_pmus__default_pmu_name (Michael Petlan) [RHEL-78197]
  - perf util: Remove unused perf_data__update_dir (Michael Petlan) [RHEL-78197]
  - perf util: Remove unused pstack__pop (Michael Petlan) [RHEL-78197]
  - perf util: Remove unused perf_color_default_config (Michael Petlan) [RHEL-78197]
  - perf tests: Fix data symbol test with LTO builds (Michael Petlan) [RHEL-78197]
  - perf report: Fix memory leaks in the hierarchy mode (Michael Petlan) [RHEL-78197]
  - perf report: Use map_symbol__copy() when copying callchains (Michael Petlan) [RHEL-78197]
  - perf annotate: Return errors from disasm_line__parse_powerpc() (Michael Petlan) [RHEL-78197]
  - perf annotate: Add annotation_options.disassembler_used (Michael Petlan) [RHEL-78197]
  - perf report: Do not process non-JIT BPF ksymbol events (Michael Petlan) [RHEL-78197]
  - perf test: Fix leak in "Synthesize attr update" test (Michael Petlan) [RHEL-78197]
  - perf machine: Fix insertion of PERF_RECORD_KSYMBOL related kernel maps (Michael Petlan) [RHEL-78197]
  - perf maps: Add missing map__set_kmap_maps() when replacing a kernel map (Michael Petlan) [RHEL-78197]
  - perf maps: Fixup maps_by_name when modifying maps_by_address (Michael Petlan) [RHEL-78197]
  - perf maps: Set the kmaps for newly created/added kernel maps (Michael Petlan) [RHEL-78197]
  - perf script: Fix output type for dynamically allocated core PMU's (Michael Petlan) [RHEL-78197]
  - perf bench: Fix perf bench syscall loop count (Michael Petlan) [RHEL-78197]
  - perf test: Simplify data symbol test (Michael Petlan) [RHEL-78197]
  - perf test: Add timeout to datasym workload (Michael Petlan) [RHEL-78197]
  - perf test: Add trace record and replay test (Michael Petlan) [RHEL-78197]
  - perf test: Skip perf trace tests when running as non-root (Michael Petlan) [RHEL-78197]
  - perf test trace_btf_general: Fix shellcheck warning (Michael Petlan) [RHEL-78197]
  - perf trace: Add tests for BTF general augmentation (Michael Petlan) [RHEL-78197]
  - perf test: Skip perf probe tests when running as non-root (Michael Petlan) [RHEL-78197]
  - perf test: Add --metric-only to perf stat output tests (Michael Petlan) [RHEL-78197]
  - perf arm-spe: Support previous branch target (PBT) address (Michael Petlan) [RHEL-78197]
  - perf arm-spe: Add branch stack (Michael Petlan) [RHEL-78197]
  - perf arm-spe: Set sample flags with supplement info (Michael Petlan) [RHEL-78197]
  - perf arm-spe: Fill branch operations and events to record (Michael Petlan) [RHEL-78197]
  - perf arm-spe: Decode transactional event (Michael Petlan) [RHEL-78197]
  - perf arm-spe: Extend branch operations (Michael Petlan) [RHEL-78197]
  - perf arm-spe: Fix load-store operation checking (Michael Petlan) [RHEL-78197]
  - perf script: Add not taken event for branch stack (Michael Petlan) [RHEL-78197]
  - perf script: Add not taken event for branches (Michael Petlan) [RHEL-78197]
  - perf script: Separate events from branch types (Michael Petlan) [RHEL-78197]
  - perf script: Refactor sample_flags_to_name() function (Michael Petlan) [RHEL-78197]
  - perf script: Make printing flags reliable (Michael Petlan) [RHEL-78197]
  - perf stat: Fix non-uniquified hybrid legacy events (Michael Petlan) [RHEL-78197]
  - perf tools: Skip BPF sideband event for userspace profiling (Michael Petlan) [RHEL-78197]
  - perf test: Fix spelling mistake "sythesizing" -> "synthesizing" (Michael Petlan) [RHEL-78197]
  - perf build: Fix in-tree build due to symbolic link (Michael Petlan) [RHEL-78197]
  - perf arm-spe: Report error if set frequency (Michael Petlan) [RHEL-78197]
  - perf lock: Report owner stack in usermode (Michael Petlan) [RHEL-78197]
  - perf lock: Make rb_tree helper functions generic (Michael Petlan) [RHEL-78197]
  - perf lock: Retrieve owner callstack in bpf program (Michael Petlan) [RHEL-78197]
  - perf lock: Add bpf maps for owner stack tracing (Michael Petlan) [RHEL-78197]
  - perf cpumap: Reduce cpu size from int to int16_t (Michael Petlan) [RHEL-78197]
  - perf list: Document -v option deduplication feature (Michael Petlan) [RHEL-78197]
  - perf pmu: Don't double count common sysfs and json events (Michael Petlan) [RHEL-78197]
  - perf ftrace latency: allow to hide empty buckets (Michael Petlan) [RHEL-78197]
  - perf ftrace latency: variable histogram buckets (Michael Petlan) [RHEL-78197]
  - perf annotate-data: Handle direct use of stack pointer without fbreg (Michael Petlan) [RHEL-78197]
  - perf report: Fix sample number stats for branch entry mode (Michael Petlan) [RHEL-78197]
  - perf machine: Reuse module path buffer (Michael Petlan) [RHEL-78197]
  - perf hwmon_pmu: Switch event discovery to io_dir__readdir (Michael Petlan) [RHEL-78197]
  - perf parse-events: Switch tracepoints to io_dir__readdir (Michael Petlan) [RHEL-78197]
  - perf events: Remove scandir in thread synthesis (Michael Petlan) [RHEL-78197]
  - perf header: Switch mem topology to io_dir__readdir (Michael Petlan) [RHEL-78197]
  - perf maps: Switch modules tree walk to io_dir__readdir (Michael Petlan) [RHEL-78197]
  - perf parse-events: Tidy name token matching (Michael Petlan) [RHEL-78197]
  - perf tools: Improve startup time by reducing unnecessary stat() calls (Michael Petlan) [RHEL-78197]
  - perf report: Fix input reload/switch with symbol sort key (Michael Petlan) [RHEL-78197]
  - perf report: Support switching data w/ and w/o callchains (Michael Petlan) [RHEL-78197]
  - perf report: Switch data file correctly in TUI (Michael Petlan) [RHEL-78197]
  - perf tools: Fix up some comments and code to properly use the event_source bus (Michael Petlan) [RHEL-78197]
  - perf list: Also append PMU name in verbose mode (Michael Petlan) [RHEL-78197]
  - perf vendor events arm64: Fix incorrect CPU_CYCLE in metrics expr (Michael Petlan) [RHEL-78197]
  - perf hist: Shrink struct hist_entry size (Michael Petlan) [RHEL-78197]
  - perf test: Add tests for latency and parallelism profiling (Michael Petlan) [RHEL-78197]
  - perf report: Add latency and parallelism profiling documentation (Michael Petlan) [RHEL-78197]
  - perf report: Add --latency flag (Michael Petlan) [RHEL-78197]
  - perf report: Add latency output field (Michael Petlan) [RHEL-78197]
  - perf report: Add parallelism filter (Michael Petlan) [RHEL-78197]
  - perf report: Switch filtered from u8 to u16 (Michael Petlan) [RHEL-78197]
  - perf report: Add parallelism sort key (Michael Petlan) [RHEL-78197]
  - perf report: Add machine parallelism (Michael Petlan) [RHEL-78197]
  - perf tools: Fix compile error on sample->user_regs (Michael Petlan) [RHEL-78197]
  - perf tools: Fix compilation error on arm64 (Michael Petlan) [RHEL-78197]
  - tools build: Fix a number of Wconversion warnings (Michael Petlan) [RHEL-78197]
  - perf sample: Make user_regs and intr_regs optional (Michael Petlan) [RHEL-78197]
  - perf test stat_all_metrics: Ensure missing events fail test (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Tigerlake events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update SkylakeX events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Skylake metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Sierraforest events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Sapphirerapids events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Rocketlake events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Meteorlake events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update/add Lunarlake events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update IcelakeX events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Icelake events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update HaswellX events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Haswell events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update/add Graniterapids events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update GrandRidge events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update EmeraldRapids events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Add Clearwaterforest events (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update CascadelakeX events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update BroadwellX events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update BroadwellDE events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Broadwell events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Add Arrowlake events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update AlderlakeN events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Alderlake events/metrics (Michael Petlan) [RHEL-78197]
  - perf tools: Use symfs when opening debuginfo by path (Michael Petlan) [RHEL-78197]
  - perf trace: Add --summary-mode option (Michael Petlan) [RHEL-78197]
  - perf tools: Get rid of now-unused rb_resort.h (Michael Petlan) [RHEL-78197]
  - perf trace: Convert syscall_stats to hashmap (Michael Petlan) [RHEL-78197]
  - perf trace: Allocate syscall stats only if summary is on (Michael Petlan) [RHEL-78197]
  - perf tools: Deadcode removal (Michael Petlan) [RHEL-78197]
  - perf stat: Changes to event name uniquification (Michael Petlan) [RHEL-78197]
  - perf stat: Don't merge counters purely on name (Michael Petlan) [RHEL-78197]
  - perf test: Use cycles event in perf record test for leader_sampling (Michael Petlan) [RHEL-78197]
  - perf test: Fix perf record test for precise_max (Michael Petlan) [RHEL-78197]
  - perf: Always feature test reallocarray (Michael Petlan) [RHEL-78197]
  - perf vendor events arm64: Add V3 events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events arm64: Add N3 events/metrics (Michael Petlan) [RHEL-78197]
  - perf trace: Fix return value of trace__fprintf_tp_fields (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value. (Michael Petlan) [RHEL-78197] {CVE-2025-37936}
  - perf/x86/intel/ds: Fix counter backwards of non-precise events counters-snapshotting (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Check the X86 leader for pebs_counter_event_group (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Only check the group flag for X86 leader (Michael Petlan) [RHEL-78197]
  - perf/core: Change to POLLERR for pinned events with error (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Add Panther Lake support (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Allow to update user space GPRs from PEBS records (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Don't clear perf metrics overflow bit unconditionally (Michael Petlan) [RHEL-78197]
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR (Michael Petlan) [RHEL-78197]
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX (Michael Petlan) [RHEL-78197]
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR (Michael Petlan) [RHEL-78197]
  - perf: Fix hang while freeing sigtrap event (Michael Petlan) [RHEL-78197] {CVE-2025-37747}
  - perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init (Michael Petlan) [RHEL-78197] {CVE-2025-37878}
  - perf/core: Fix child_total_time_enabled accounting bug at task exit (Michael Petlan) [RHEL-78197]
  - tools/testing/selftests/powerpc/pmu: Update comment description to mention ISA v3.1 for power10 and above (Michael Petlan) [RHEL-78197]
  - tools/testing/selftests/powerpc: Add check for power11 pvr for pmu selfests (Michael Petlan) [RHEL-78197]
  - tools/testing/selftests/powerpc: Enable pmu selftests for power11 (Michael Petlan) [RHEL-78197]
  - arch/powerpc/perf: Update get_mem_data_src function to use saved values of sier and mmcra regs (Michael Petlan) [RHEL-78197]
  - arch/powerpc/perf: Check the instruction type before creating sample with perf_mem_data_src (Michael Petlan) [RHEL-78197]
  - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-78197]
  - perf: arm_pmu: Move PMUv3-specific data (Michael Petlan) [RHEL-78197]
  - perf/x86/intel, x86/cpu: Replace Pentium 4 model checks with VFM ones (Michael Petlan) [RHEL-78197]
  - x86/mm/pat: Replace Intel x86_model checks with VFM ones (Michael Petlan) [RHEL-78197]
  - x86/cpu/intel: Replace Family 5 model checks with VFM ones (Michael Petlan) [RHEL-78197]
  - x86/cpu/intel: Replace Family 15 checks with VFM ones (Michael Petlan) [RHEL-78197]
  - x86/cpu/intel: Replace early Family 6 checks with VFM ones (Michael Petlan) [RHEL-78197]
  - x86/microcode: Update the Intel processor flag scan check (Michael Petlan) [RHEL-78197]
  - x86/cpu: Update Intel Family comments (Michael Petlan) [RHEL-78197]
  - perf/x86/intel, x86/cpu: Simplify Intel PMU initialization (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Use cache cpu-type for hybrid PMU selection (Michael Petlan) [RHEL-78197]
  - perf: Clean up pmu specific data (Michael Petlan) [RHEL-78197]
  - perf/x86: Remove swap_task_ctx() (Michael Petlan) [RHEL-78197]
  - perf/x86/lbr: Fix shorter LBRs call stacks for the system-wide mode (Michael Petlan) [RHEL-78197]
  - perf: Supply task information to sched_task() (Michael Petlan) [RHEL-78197]
  - perf: attach/detach PMU specific data (Michael Petlan) [RHEL-78197]
  - locking/percpu-rwsem: Add guard support (Michael Petlan) [RHEL-78197]
  - perf: Save PMU specific data in task_struct (Michael Petlan) [RHEL-78197]
  - perf: Extend per event callchain limit to branch stack (Michael Petlan) [RHEL-78197]
  - perf/ring_buffer: Allow the EPOLLRDNORM flag for poll (Michael Petlan) [RHEL-78197]
  - perf/core: Use POLLHUP for pinned events in error (Michael Petlan) [RHEL-78197]
  - perf/core: Use sysfs_emit() instead of scnprintf() (Michael Petlan) [RHEL-78197]
  - perf/core: Remove optional 'size' arguments from strscpy() calls (Michael Petlan) [RHEL-78197]
  - perf/x86/intel/bts: Check if bts_ctx is allocated when calling BTS functions (Michael Petlan) [RHEL-78197]
  - perf/x86: Annotate struct bts_buffer::buf with __counted_by() (Michael Petlan) [RHEL-78197]
  - perf/core: Clean up perf_try_init_event() (Michael Petlan) [RHEL-78197]
  - perf/core: Fix perf_mmap() failure path (Michael Petlan) [RHEL-78197]
  - perf/core: Detach 'struct perf_cpu_pmu_context' and 'struct pmu' lifetimes (Michael Petlan) [RHEL-78197]
  - perf/core: Lift event->mmap_mutex in perf_mmap() (Michael Petlan) [RHEL-78197]
  - perf/core: Remove retry loop from perf_mmap() (Michael Petlan) [RHEL-78197]
  - perf/core: Further simplify perf_mmap() (Michael Petlan) [RHEL-78197]
  - perf/core: Simplify the perf_mmap() control flow (Michael Petlan) [RHEL-78197]
  - perf/bpf: Robustify perf_event_free_bpf_prog() (Michael Petlan) [RHEL-78197]
  - perf/core: Introduce perf_free_addr_filters() (Michael Petlan) [RHEL-78197]
  - perf/core: Add this_cpc() helper (Michael Petlan) [RHEL-78197]
  - perf/core: Merge struct pmu::pmu_disable_count into struct perf_cpu_pmu_context::pmu_disable_count (Michael Petlan) [RHEL-78197]
  - perf/core: Simplify perf_event_alloc() (Michael Petlan) [RHEL-78197]
  - perf/core: Simplify perf_init_event() (Michael Petlan) [RHEL-78197]
  - perf/core: Simplify perf_pmu_register() (Michael Petlan) [RHEL-78197]
  - perf/core: Simplify the perf_pmu_register() error path (Michael Petlan) [RHEL-78197]
  - perf/core: Simplify the perf_event_alloc() error path (Michael Petlan) [RHEL-78197]
  - perf/hw_breakpoint: Return EOPNOTSUPP for unsupported breakpoint type (Michael Petlan) [RHEL-78197]
  - perf/x86/intel/bts: Allocate bts_ctx only if necessary (Michael Petlan) [RHEL-78197]
  - perf/core: Move perf_event sysctls into kernel/events (Michael Petlan) [RHEL-78197]
  - const_structs.checkpatch: add ctl_table (Michael Petlan) [RHEL-78197]
  - sysctl: make internal ctl_tables const (Michael Petlan) [RHEL-78197]
  - perf amd ibs: Sync arch/x86/include/asm/amd-ibs.h header with the kernel (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Update DTLB/PageSize decode logic (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Add support for OP Load Latency Filtering (Michael Petlan) [RHEL-78197]
  - x86/events/amd/iommu: Increase IOMMU_NAME_SIZE (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Support PEBS counters snapshotting (Michael Petlan) [RHEL-78197]
  - perf: Avoid the read if the count is already updated (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Avoid disable PMU if !cpuc->enabled in sample read (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Apply static call for drain_pebs (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Ceil sample_period to min_period (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Add ->check_period() callback (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Add PMU specific minimum period (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Don't allow freq mode event creation through ->config interface (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Fix ->config to sample period calculation for OP PMU (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Remove pointless sample period check (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Remove IBS_{FETCH|OP}_CONFIG_MASK macros (Michael Petlan) [RHEL-78197]
  - kernel/fork: only call untrack_pfn_clear() on VMAs duplicated for fork() (Nico Pache) [RHEL-77742]
  - mm/hugetlb: fix nid mismatch in alloc_surplus_hugetlb_folio() (Nico Pache) [RHEL-77742]
  - mm: (un)track_pfn_copy() fix + doc improvements (Nico Pache) [RHEL-77742]
  - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Nico Pache) [RHEL-77742]
  - mm/page_alloc: fix deadlock on cpu_hotplug_lock in __accept_page() (Nico Pache) [RHEL-77742]
  - slab: ensure slab->obj_exts is clear in a newly allocated slab page (Nico Pache) [RHEL-77742] {CVE-2025-37774}
  - mm: fix apply_to_existing_page_range() (Nico Pache) [RHEL-77742]
  - mm: fix filemap_get_folios_contig returning batches of identical folios (Nico Pache) [RHEL-77742]
  - mm/hugetlb: fix set_max_huge_pages() when there are surplus pages (Nico Pache) [RHEL-77742]
  - mm/compaction: fix bug in hugetlb handling pathway (Nico Pache) [RHEL-77742]
  - mm: lock PGDAT_RECLAIM_LOCKED with acquire memory ordering (Nico Pache) [RHEL-77742]
  - mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock (Nico Pache) [RHEL-77742]
  - mm/hugetlb: update nr_huge_pages and surplus_huge_pages together (Nico Pache) [RHEL-77742]
  - mm: remove the access_ok() call from gup_fast_fallback() (Nico Pache) [RHEL-77742]
  - mm/damon/ops: have damon_get_folio return folio even for tail pages (Nico Pache) [RHEL-77742]
  - mm, percpu: do not consider sleepable allocations atomic (Nico Pache) [RHEL-77742]
  - x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range() (Nico Pache) [RHEL-77742] {CVE-2025-22090}
  - lockdep/mm: Fix might_fault() lockdep check of current->mm->mmap_lock (Nico Pache) [RHEL-77742]
  - mm: slub: call WARN() when detecting a slab corruption (Nico Pache) [RHEL-77742]
  - mm: slub: Print the broken data before restoring them (Nico Pache) [RHEL-77742]
  - mm/page_alloc: fix memory accept before watermarks gets initialized (Nico Pache) [RHEL-77742]
  - memcg: drain obj stock on cpu hotplug teardown (Nico Pache) [RHEL-77742]
  - mm/huge_memory: drop beyond-EOF folios with the right number of refs (Nico Pache) [RHEL-77742] {CVE-2025-22000}
  - mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT (Nico Pache) [RHEL-77742]
  - mm/vma: do not register private-anon mappings with khugepaged during mmap (Nico Pache) [RHEL-77742]
  - mm/migrate: fix shmem xarray update during migration (Nico Pache) [RHEL-77742] {CVE-2025-22015}
  - mm/hugetlb: fix surplus pages in dissolve_free_huge_page() (Nico Pache) [RHEL-77742]
  - filemap: move prefaulting out of hot write path (Nico Pache) [RHEL-77742]
  - Revert "mm/page_alloc.c: don't show protection in zone's ->lowmem_reserve[] for empty zone" (Nico Pache) [RHEL-77742]
  - NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (Nico Pache) [RHEL-77742] {CVE-2025-21908}
  - mm: abort vma_modify() on merge out of memory failure (Nico Pache) [RHEL-77742] {CVE-2025-21932}
  - hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio (Nico Pache) [RHEL-77742] {CVE-2025-21931}
  - mm: memory-hotplug: check folio ref count first in do_migrate_range (Nico Pache) [RHEL-77742]
  - mm: memory-failure: update ttu flag inside unmap_poisoned_folio (Nico Pache) [RHEL-77742] {CVE-2025-21907}
  - mm: hugetlb: avoid fallback for specific node allocation of 1G pages (Nico Pache) [RHEL-77742]
  - memcg: avoid dead loop when setting memory.max (Nico Pache) [RHEL-77742]
  - mm,madvise,hugetlb: check for 0-length range after end address adjustment (Nico Pache) [RHEL-77742]
  - mm: gup: fix infinite loop within __get_longterm_locked (Nico Pache) [RHEL-77742]
  - kfence: skip __GFP_THISNODE allocations on NUMA systems (Nico Pache) [RHEL-77742]
  - mm: kmemleak: fix upper boundary check for physical address objects (Nico Pache) [RHEL-77742]
  - mm/vmscan: fix hard LOCKUP in function isolate_lru_folios (Nico Pache) [RHEL-77742]
  - mm/compaction: fix UBSAN shift-out-of-bounds warning (Nico Pache) [RHEL-77742] {CVE-2025-21815}
  - mm/hugetlb: don't map folios writable without VM_WRITE when copying during fork() (Nico Pache) [RHEL-77742]
  - readahead: properly shorten readahead when falling back to do_page_cache_ra() (Nico Pache) [RHEL-77742]
  - readahead: don't shorten readahead window in read_pages() (Nico Pache) [RHEL-77742]
  - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-81470] {CVE-2025-21759}
  - netfilter: ipset: fix region locking in hash types (CKI Backport Bot) [RHEL-96611]
  - KVM: selftests: access_tracking_perf_test: Add option to skip the sanity check (Maxim Levitsky) [RHEL-92771]
  - KVM: selftests: Extract guts of THP accessor to standalone sysfs helpers (Maxim Levitsky) [RHEL-92771]
  - selftests: net: use slowwait to make sure IPv6 setup finished (Hangbin Liu) [RHEL-83477]
  - selftests: net: use slowwait to stabilize vrf_route_leaking test (Hangbin Liu) [RHEL-84202]
  - selftests/mm: restore default nr_hugepages value during cleanup in hugetlb_reparenting_test.sh (Chunyu Hu) [RHEL-87655]
  - selftest/mm: make hugetlb_reparenting_test tolerant to async reparenting (Chunyu Hu) [RHEL-87655]
  - selftests/mm: generate a temporary mountpoint for cgroup filesystem (Chunyu Hu) [RHEL-87655]
  - scsi: lpfc: Copyright updates for 14.4.0.9 patches (Dick Kennedy) [RHEL-89473]
  - scsi: lpfc: Update lpfc version to 14.4.0.9 (Dick Kennedy) [RHEL-89473]
  - scsi: lpfc: Create lpfc_vmid_info sysfs entry (Dick Kennedy) [RHEL-89473]
  - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Dick Kennedy) [RHEL-89473]
  - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Dick Kennedy) [RHEL-89473]
  - scsi: lpfc: Notify FC transport of rport disappearance during PCI fcn reset (Dick Kennedy) [RHEL-89473]
  - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Dick Kennedy) [RHEL-89473]
  - scsi: lpfc: Use memcpy() for BIOS version (Dick Kennedy) [RHEL-89473]
  - scsi: lpfc: Restore clearing of NLP_UNREG_INP in ndlp->nlp_flag (Dick Kennedy) [RHEL-89473]
  - selftests: netfilter: nft_queue.sh: include file transfer duration in log message (CKI Backport Bot) [RHEL-99472]
  - selftests: netfilter: nft_queue.sh: fix warnings with socat 1.8.0.0 (CKI Backport Bot) [RHEL-99472]
  - selftests: netfilter: run conntrack_dump_flush in netns (CKI Backport Bot) [RHEL-99472]
  - selftests: netfilter: Add missing gitignore file (CKI Backport Bot) [RHEL-99472]
  - selftests: netfilter: nft_nat.sh: add test for reverse clash with nat (CKI Backport Bot) [RHEL-99656]
  - netfilter: nf_nat: also check reverse tuple to obtain clashing entry (CKI Backport Bot) [RHEL-99656]
  - ipvs: fix uninit-value for saddr in do_output_route4 (CKI Backport Bot) [RHEL-99471]
  - ipvs: prevent integer overflow in do_ip_vs_get_ctl() (CKI Backport Bot) [RHEL-99471]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-105.el10]
changelog:
  - loop: move lo_set_size() out of queue freeze (Ming Lei) [RHEL-88159]
  - scsi: qla2xxx: Update version to 10.02.09.400-k (Nilesh Javali) [RHEL-90558]
  - scsi: qla2xxx: Supported speed displayed incorrectly for VPorts (Nilesh Javali) [RHEL-90558]
  - scsi: qla2xxx: Fix NVMe and NPIV connect issue (Nilesh Javali) [RHEL-90558]
  - scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt (Nilesh Javali) [RHEL-90558]
  - scsi: qla2xxx: Move FCE Trace buffer allocation to user control (Nilesh Javali) [RHEL-90558]
  - scsi: qla2xxx: Fix abort in bsg timeout (Nilesh Javali) [RHEL-90558]


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-17
changelog:
  - Support storing of __crc_* symbols in sections other than .rodata.
  - Work around a change in type of __crc_* symbols for some kmods printed by nm
    on ppc64le and s390x.


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-19
changelog:
  - Capture local __crc_* symbols for "Provides: kernel()".
  - Add support for XZ compression for the symvers file.
  - Fix "Provides: kernel()" generation when both __kcrctab and __kcrctab_gpl
    are present.
  - Fix regression for "Provides:" generation in cases when modversions are stored
    in a section that is over 64K in size.
  - Speedup and cleanup changes in find-provides.ksyms and find-requires.ksyms.
  - Fix regex usage in kmod.attr. (Denys Vlasenko)
  - Implement modalias "Provides:" grouping. (Denys Vlasenko)
  - Speedup and cleanup changes in modalias.prov and kmod.attr. (Denys Vlasenko)


author: Tomas Halman <thalman@redhat.com> - 1.3-1
changelog:
  - Rebase to version 1.3
  - Resolves: RHEL-59677 - khci won't work with Quarkus-based Keycloak due to missing /auth path


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 7.9.0-7
changelog:
  - Use TLS on revocation notification webhook
  - Include system installed CA certificates when verifying webhook server
    certificate
  - Include the CA certificates added via configuration file option
    'trusted_server_ca'


author: Julien Rische <jrische@redhat.com> - 1.21.3-1
changelog:
  - New upstream version (1.21.3)
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45387 RHEL-45378
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-47284
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-47287
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-47285
  - Make TCP waiting time configurable
    Resolves: RHEL-47278


author: Julien Rische <jrische@redhat.com> - 1.21.3-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55427
  - Fix various issues detected by static analysis
    Resolves: RHEL-45165
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-56070


author: Julien Rische <jrische@redhat.com> - 1.21.3-6
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74373
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56058
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-71881


author: Julien Rische <jrische@redhat.com> - 1.21.3-8
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88705
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88047
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-74295


author: Mike FABIAN <mfabian@redhat.com> - 0.0.63-1
changelog:
  - Update to 0.0.63
  - Add more translations from CLDR
  - Get translation changes from CLDR
  - Japanese: prefer anthy over kkc
    (Thanks to adam Williamson: https://github.com/mike-fabian/langtable/pull/17)
  - Use skipTerritory also in list_keyboards(), list_consolefonts(), and list_timezones()
    (Resolves: https://github.com/mike-fabian/langtable/issues/18)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.64-1
changelog:
  - Update to 0.0.64
  - Add new public functions list_all_{languages,locales,keyboards,territories,timezones,scripts,input_methods,console_fonts}
    (See also the discussion at: https://gitlab.gnome.org/GNOME/gnome-desktop/-/merge_requests/159)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.65-1
changelog:
  - Update to 0.0.65
  - Add wuu, tok, glk, gbm, ssy
  - Remove aa_ER.UTF-8@saaho
  - Add kv_RU.UTF-8, chr_RU.UTF-8
  - Add EU, EZ
  - Improve README and Makefile (Resolves: https://github.com/mike-
    fabian/langtable/issues/19)
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Parag Nemade <pnemade AT fedoraproject DOT org> - 2.015-16
changelog:
  - Convert to new fonts packaging guidelines
  - Migrate to SPDX license expression
  - Drop very very old obsoletes for google-lato-fonts
  - Add gating CI tests in Fedora


author: Petr Menšík <pemensik@redhat.com> - 1.8.3-15
changelog:
  - Remove unneeded openssl/engine.h causing build failures
  - Explicitly disable openssl engine (RHEL-33736)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.8.7-1
changelog:
  - libX11 1.8.7
    - CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms()
    - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in
      PutSubImage()
    - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
     a heap overflow
    - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
    - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: José Expósito <jexposit@redhat.com> - 1.8.7-4
changelog:
  - Fix XTS test XCopyColormapAndFree/5 hangs
    Resolves: https://issues.redhat.com/browse/RHEL-40132
  - Fix RHEL SAST Automation errors
    Resolves: https://issues.redhat.com/browse/RHEL-34918


author: Karel Zak <kzak@redhat.com> - 2.40.2-3
changelog:
  - revert recent uuidd mode changes
  - rebase rhel specific patches
  - fix uuidd-tmpfiles.conf (upstream patch)
  - remove unused patches


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-6
changelog:
  - Fix passing size for pvresize over DBus
    Resolves: RHEL-45872
  - Upstream kernel VDO support
    Resolves: RHEL-31953


author: Vojtech Trefny <vtrefny@redhat.com> - 2.8-21
changelog:
  - New version - 2.8 (Vojtech Trefny)
  - ci: Do not use release descriptions for Packit builds (Vojtech Trefny)
  - Do not hardcode pylint executable name in Makefile (Vojtech Trefny)
  - Remove unused test dependencies variables from Makefile (Vojtech Trefny)
  - docs: Remove information about Python 2 support (Vojtech Trefny)
  - Various docstring fixes (Vojtech Trefny)
  - Replace C++ style comments with C style (Vojtech Trefny)
  - Make use of error optional (Vojtech Trefny)
  - spec: Fix source archive URL (Vojtech Trefny)
  - ci: Add Packit automation for downstream builds (Vojtech Trefny)
  - spec: Bump release to 21 for Packit daily builds (Vojtech Trefny)
  - ci: Use Packit for daily builds in Copr (Vojtech Trefny)
  - ci: Remove GitHub action for RPM builds (Vojtech Trefny)
  - ci: Add Packit configuration for RPM builds on pull requests (Vojtech Trefny)
  - configure.ac: Remove invalid email address for bug reports (Vojtech Trefny)
  - ci: Update chroots for RPM builds (Vojtech Trefny)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Added translation using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - misc: Remove "warn: false" from Ansible "command" (Vojtech Trefny)
  - Translated using Weblate (Georgian) (Temuri Doghonadze)
  - spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny)
  - Added translation using Weblate (Georgian) (Temuri Doghonadze)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Update Fedora versions for RPM build tests (Vojtech Trefny)
  - ci: Rename csmock.Dockerfile to ci.Dockerfile (Vojtech Trefny)
  - ci: Update the csmock GitHub actions configuration (Vojtech Trefny)
  - ci: Run rpmbuild tests in GitHub actions (Vojtech Trefny)
  - Add a GitHub action for running csmock static analysis (Vojtech Trefny)
  - README: Remove the Travis CI badge (Vojtech Trefny)
  - Sync spec with downstream (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.9-21
changelog:
  - New version - 2.9 (Vojtech Trefny)
  - build: Exit before AC_OUTPUT on error (Tomas Bzatek)
  - tests: fix locale tests on musl (triallax)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Manually prepare spec file for Packit (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - New version - 2.10 (Vojtech Trefny)
  - Rename 'master' branch to 'main' (Vojtech Trefny)
  - remove dependency on python3-six and python2 crumbs (Alexandre Detiste)
  - ci: Bump actions/checkout from v3 to v4 (Vojtech Trefny)
  - Squashed 'translation-canary/' changes from 4d4e65b..5bb8125 (Vojtech Trefny)
  - dist: Fix release number in spec (Vojtech Trefny)


author: Hans de Goede <hdegoede@redhat.com> - 0.3.1-3
changelog:
  - Add patches to fix pipewire keeping UVC cameras open all the time causing
    significant laptop battery drain:
    https://gitlab.freedesktop.org/pipeawire/pipewire/-/issues/2669


author: Kate Hsuan <hpa@redhat.com> - 0.3.2-2
changelog:
  - Disable lc-compliance
  - Removed the gtest dependency from the libcamera-tools package
  - Resolves: RHEL-73503


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 2.69-1
changelog:
  - Update to 2.69 (with contribs from Yanko Kaneti <yaneti@declera.com>, and Andrew G. Morgan <morgan@kernel.org>)
  - Update license to SPDX (by Anderson Toshiyuki Sasaki <ansasaki@redhat.com>)
  - Make file lists more explicit to avoid accidental ABI changes (Dominik Mierzejewski <dominik@greysector.net>)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.69-4
changelog:
  - Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>)
  - Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.7.0-8
changelog:
  - Update license to SPDX format
  - spec file tidy/modernization
    - use modern cmake build and install
    - properly own include directories in the devel package
    - de-glob some files to follow packaging guidelines


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.10.2-1
changelog:
  - Update to version 0.10.2 ( resolves: rhbz#1880885 )
  - Revise specs per packaging guidelines for globs of soname


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-6
changelog:
  - RHEL-26148 - fix grayscale/color raster printing via AirPrint
  - RHEL-29726 Backport fix for typo influencing image filtering from CMYK to CMY


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60322 CVE-2024-47076 libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes


author: Pavel Cahyna <pcahyna@redhat.com> - 6.1.3-8
changelog:
  - migrated to SPDX license, originally from Fedora by <msuchy>
  - Correct License: some files are GPL 2 or GPL 3, but not later


author: Pavol Žáčik <pzacik@redhat.com> - 2.1.12-13
changelog:
  - Update license identifiers to SPDX in subpackages
  - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c


author: Attila Lakatos <alakatos@redhat.com> - 1.2304.0-1
changelog:
  - Rebase to 1.2304.0 (new release number scheme, now like rsyslog)
  Resolves: rhbz#2183193
  - Address CVE-2020-12762
  Resolves: rhbz#2203170


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.1-1
changelog:
  - New stable branch version 1.52.1
  - Remove lua, perl, ruby, php and gobject bindings in RHEL
  - Remove gdisk dependency for RHEL
    resolves: RHEL-35998


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-1
changelog:
  - Rebase to libguestfs 1.52.2 (along the stable branch)
  - Remove dependency on syslinux packages
    resolves: RHEL-50565


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-4
changelog:
  - Synchronize patches with RHEL 9.5
    resolves: RHEL-56325
  - appliance/init: Don't set impossible "noop" disk scheduler
    resolves: RHEL-56157


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-5
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56810
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62989
  - Replace Jansson with json-c
    resolves: RHEL-65293
  - Remove squashfs-tools on RHEL
    resolves: RHEL-68937
  - Fix perl-Sys-Guestfs debuginfo
    resolves: RHEL-68973


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.56.0-1.el10.1
changelog:
  - Rebase to libguestfs 1.56.0
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170
  - Add btrfs-scrub-full API
    resolves: RHEL-91936
  - Add e2fsck forceno flag
    resolves: RHEL-92599
  - Capture and raise qemu-img stderr
    resolves: RHEL-92239
  - Ignore btrfs snapshots of roots
    resolves: RHEL-93109


author: Richard W.M. Jones <rjones@redhat.com> - 10.0-2
changelog:
  - Import package into CentOS Stream 10
  - Remove resolves refs to work around check-gitbz bug (RHELBLD-14966)
  - Add gating tests
  - Set ExclusiveArch/ExcludeArch to the same as for libguestfs


author: Tomas Popela <tpopela@redhat.com> - 1.0.5-19
changelog:
  - Disable python support. This package is only in RHEL 10, because
    tracker-miners requires it and it doesn't need the Python bits.
  - Resolves: RHEL-52843


author: Jerry James <loganjerry@gmail.com> - 3.28.0-1
changelog:
  - Update to 3.28.0
  - Install internal.h for MuseScore
  - Drop ancient obsoletes
  - Build the python package with dist-info
  - Add tables subpackage for the noarch data
  - Complete and correct SPDX migration
  - Remove need for chrpath
  - Minor spec file cleanups


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49802
  - Print full NBD error from server
    resolves: RHEL-50667


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-1
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Tomas Popela <tpopela@redhat.com> - 0.8.3-5
changelog:
  - Drop the requirement on docbook5-style-xsl as it will be removed from RHEL.
    As it was used to build the man page, add the man page in the native format.
  - Resolves: RHEL-45565


author: Dmitry Belyavskiy - 0.10.1-1
changelog:
  - Rebase to 0.10.1 version (CVE-2024-36405)
    Resolves: RHEL-40699
  - Use dlopen for OpenSSL algos implementation
    Resolves: RHEL-46598
  - Correct license naming
    Resolves: RHEL-45265


author: José Expósito <jexposit@redhat.com> - 0.16-13
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29742


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60335 CVE-2024-47175 libppd: remote command injection via attacker controlled data in PPD file


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Remi Collet <remi@remirepo.net> - 0.12.0-1
changelog:
  - update to 0.12.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/749
  - add patch to fix version in pkgconfig file, from
    https://github.com/alanxz/rabbitmq-c/pull/751


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - lr_gpg_check_signature: Forward PGP error messages from RPM
  - PGP: fix: Support importing binary public keys in librpm backend
  - PGP: Enable creating a UID directory for GnuGP agent socket in /run/gnupg/user
  - PGP: Set a default creation SELinux labels on GnuPG directories


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1 (RHEL-38831)
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (RHEL-35699)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Petr Pisar <ppisar@redhat.com> - 1.18.0-2
changelog:
  - Use librpmio instead of gpgme for handling PGP keys (RHEL-47106)
  - Fix a memory leak in select_next_target() (RHEL-35699)


author: Romain Geissler <romain.geissler@amadeus.com> - 0.21.2-8
changelog:
  - Backport packaging of mock service from Fedora in order to consume it in EPEL
    Resolves: RHEL-81780


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-3
changelog:
  - restorecon: Include <selinux/label.h> (RHEL-53852)
  - Fix integer comparison issues when compiling for 32-bit


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - setexecfilecon: Remove useless rc check (RHEL-35586)
  - matchpathcon: RESOURCE_LEAK: Variable "con" (RHEL-35584)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Than Ngo <than@redhat.com> - 1.1.19-13
changelog:
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    Resolves: RHEL-86305


author: Michal Hlavinka <mhlavink@redhat.com> - 1.1.0-7
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Matej Mužila <mmuzila@redhat.com> - 4.5.0-3
changelog:
  - New upstream release 4.5.0 (#2153870)
  - Fix CVE-2022-3570, CVE-2022-2867, CVE-2022-2868, CVE-2022-2869, CVE-2022-2519,
    CVE-2022-2953, CVE-2022-3597, CVE-2022-3598, CVE-2022-3599, CVE-2022-3626,
    CVE-2022-3627, CVE-2022-3970 (#2142735, #2118854, #2118867, #2118875,


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-1
changelog:
  - Version 2.10.1
  - Default to ntfs-3g for stability reasons (#2182206)
  - Use Recommends: for filesystem tools (#2169848)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-3
changelog:
  - Use a SPDX license tag
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - udiskslinuxmanager: Fix use after free
  - tests: Fix targetcli_config.json


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.90-4
changelog:
  - Rebase to upstream 2.10.90 (pre-)release
  - lvm2: Try opening for unused device detection harder (RHEL-39935)


author: Kate Hsuan <hpa@redhat.com> - 1.0.28-1
changelog:
  - Update to the upstream version 1.0.28
  - Update to the upstream version 1.0.28
  - Fix automake-1.17 issue since the release was based on automake-1.17


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-1
changelog:
  - Rebased to libvirt-10.10.0 (RHEL-50577)
  - The rebase also fixes the following bugs:
      RHEL-58152, RHEL-65187, RHEL-65268, RHEL-66222, RHEL-66223
      RHEL-68066, RHEL-69449


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-2
changelog:
  - util: Fix typo in virNetDevOpenvswitchInterfaceSetQos (RHEL-69840)
  - qemu: tpm: do not update profile name for transient domains (RHEL-69774)
  - qemu: Enable I/O APIC if needed (RHEL-71414)
  - cpu_map: Sort data files in meson.build (RHEL-70129)
  - sync_qemu_models_i386: Update meson.build (RHEL-70129)
  - sync_qemu_models_i386: Generate missing -v1 variants (RHEL-70129)
  - cpu_map: Add 486-v1 CPU model (RHEL-70129)
  - cpu_map: Add pentium-v1 CPU model (RHEL-70129)
  - cpu_map: Add pentium2-v1 CPU model (RHEL-70129)
  - cpu_map: Add pentium3-v1 CPU model (RHEL-70129)
  - cpu_map: Add coreduo-v1 CPU model (RHEL-70129)
  - cpu_map: Add n270-v1 CPU model (RHEL-70129)
  - cpu_map: Add core2duo-v1 CPU model (RHEL-70129)
  - cpu_map: Add qemu32-v1 CPU model (RHEL-70129)
  - cpu_map: Add kvm32-v1 CPU model (RHEL-70129)
  - cpu_map: Add qemu64-v1 CPU model (RHEL-70129)
  - cpu_map: Add kvm64-v1 CPU model (RHEL-70129)
  - cpu_map: Add Conroe-v1 CPU model (RHEL-70129)
  - cpu_map: Add Penryn-v1 CPU model (RHEL-70129)
  - cpu_map: Add KnightsMill-v1 CPU model (RHEL-70129)
  - cpu_map: Add athlon-v1 CPU model (RHEL-70129)
  - cpu_map: Add phenom-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G1-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G2-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G3-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G4-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G5-v1 CPU model (RHEL-70129)
  - cpu_map: Add EPYC-Genoa-v1 CPU model (RHEL-70129)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-3
changelog:
  - qemu: Enable I/O APIC even more frequently (RHEL-71414)
  - cpu_map: Add avx10* CPU features (RHEL-71897)
  - cpu_map: Add GraniteRapids-v2 CPU model (RHEL-71897)
  - cpu_map: Add sha512, sm3, and sm4 CPU features (RHEL-71898)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-4
changelog:
  - conf, docs: Add support for direct and extended tlbflush features (RHEL-73088)
  - qemu: Add support for direct and extended tlbflush features (RHEL-73088)
  - conf: refactor hyperv features formatting (RHEL-73088)
  - conf: Adjust hyperv tlbflush formatting (RHEL-73088)
  - qemu_migration: Do not consider post-copy active in postcopy-recover (RHEL-73699)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-5
changelog:
  - qemu: allow migration of guest with mdev vGPU to VF vGPU (RHEL-68065)
  - storage_file: Refuse qcow2 images with empty string as 'data_file' (RHEL-70627)
  - virstoragetest: Add case for qcow2 image with empty string as 'data_file' (RHEL-70627)
  - qemu: snapshot: delete disk image only if parent snapshot is external (RHEL-74040)
  - storage_file: de-modularize the local file backend (RHEL-73506)
  - libvirt.spec: Move ownership of 'storage-file' backends directory to gluster (RHEL-73506)
  - tools: ssh-proxy: Check for domain status before parsing its CID (RHEL-75589)
  - qemu: re-use existing ActualNetDef for more interface types during update-device (RHEL-74492)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-6
changelog:
  - build: Bump minimum glib2 version to 2.66.0 (RHEL-76802)
  - qemuProcessHandleIOError: Refactor to extract 'priv' instead of 'driver' (RHEL-76802)
  - qemu: Handle quirks of 'device' field of BLOCK_IO_ERROR event in monitor code (RHEL-76802)
  - qemu: Rename 'diskAlias' to 'device' in qemu IO error event handling (RHEL-76802)
  - qemuProcessHandleIOError: Rename local variables (RHEL-76802)
  - qemuMonitorJSONHandleIOError: Do not munge 'reason' field of IO error event (RHEL-76802)
  - qemuProcessHandleIOError: Prefer lookup by node name (RHEL-76802)
  - qemuMonitorJSONHandleIOError: Propagate new 'qom-path' field (RHEL-76802)
  - virStorageSource: Add fields for storing last I/O error message (RHEL-76802)
  - qemuProcessHandleIOError: Populate I/O error reason to virStorageSource (RHEL-76802)
  - qemuProcessHandleIOError: Log IO errors in the VM log file (RHEL-76802)
  - libxlDomainGetMessages: Add existing flags to 'virCheckFlags' (RHEL-76802)
  - virDomainObjGetMessages: Refactor using GPtrArray (RHEL-76802)
  - virDomainGetMessages: Introduce VIR_DOMAIN_MESSAGE_IOERRORS (RHEL-76802)
  - include: libvirt-domain: Reword documentation for @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-76802)
  - include: libvirt-domain: Add 'message' @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-76802)
  - qemuSnapshotForEachQcow2: Don't initialize 'nrollback' (RHEL-78186)
  - qemu: process: Export qemuPrepareNVRAM for use in snapshot code (RHEL-78186)
  - qemu: snapshot: Ensure that NVRAM image exists when taking inactive internal snapshot (RHEL-78186)
  - qemuxmlconftest: Allow testing of the 'writable' flag for passed FDs for disks (RHEL-78353)
  - qemuxmlconftest: Add testing of FDs with 'writable' flag in 'disk-source-fd' (RHEL-78353)
  - qemu: domain: Initialize FD passthrough for a virStorageSource before using it (RHEL-78353)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-7
changelog:
  - qemu_migration: Refactor qemuMigrationSrcRestoreDomainState (RHEL-1071)
  - qemu_migration: Do not automatically resume domain after I/O error (RHEL-1071)
  - qemucapabilitiestest: Add data for the qemu-10.0 dev cycle on x86_64 (RHEL-78398)
  - qemucapabilitiestest: Update 'caps_10.0.0_x86_64' to 'v9.2.0-1636-gffaf7f0376' (RHEL-78398)
  - qemu: capabilies: Introduce QEMU_CAPS_BLOCKDEV_SET_ACTIVE (RHEL-78398)
  - qemu: monitor: Add monitor backend for 'blockdev-set-active' (RHEL-78398)
  - qemu: migration: Reactivate block nodes after migration if VM is left paused (RHEL-78398)
  - conf: change virDomainHostdevInsert() to return void (RHEL-77086)
  - qemu: fix qemu validation to forbid guest-side IP address for type='vdpa' (RHEL-77086)
  - qemu: validate that model is virtio for vhostuser and vdpa interfaces in the same place (RHEL-77086)
  - qemu: automatically set model type='virtio' for interface type='vhostuser' (RHEL-77086)
  - qemu: do all vhostuser attribute validation in qemu driver (RHEL-77086)
  - conf/qemu: make <source> element *almost* optional for type=vhostuser (RHEL-77086)
  - qemu: use switch instead of if in qemuProcessPrepareDomainNetwork() (RHEL-77086)
  - qemu: make qemuPasstCreateSocketPath() public (RHEL-77086)
  - qemu: complete vhostuser + passt support (RHEL-77086)
  - qemu: fail validation if a domain def has vhostuser/passt but no shared mem (RHEL-77086)
  - docs: improve type='user' docs to higlight differences between SLIRP and passt (RHEL-77086)
  - docs: document using passt backend with <interface type='vhostuser'> (RHEL-77086)
  - utils: Canonicalize paths before comparing them (RHEL-79165)


author: Jiri Denemark <jdenemar@redhat.com> - 11.1.0-1
changelog:
  - Rebased to libvirt-11.1.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-7041, RHEL-7042, RHEL-7104, RHEL-7342, RHEL-20294
      RHEL-41264, RHEL-52493, RHEL-58933, RHEL-70656, RHEL-71042
      RHEL-71810, RHEL-72021, RHEL-72052, RHEL-72192, RHEL-72994
      RHEL-79088, RHEL-79460, RHEL-79465, RHEL-79953


author: Jiri Denemark <jdenemar@redhat.com> - 11.2.0-1
changelog:
  - Rebased to libvirt-11.2.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-7035, RHEL-24046, RHEL-40077, RHEL-58151, RHEL-68043
      RHEL-71883, RHEL-72994, RHEL-77552, RHEL-80166, RHEL-80533
      RHEL-80688, RHEL-81731, RHEL-81890, RHEL-83148, RHEL-84257
      RHEL-84688
  - cpu_map: Install Ampere-1 ARM CPU models (RHEL-71662)


author: Jiri Denemark <jdenemar@redhat.com> - 11.3.0-1
changelog:
  - Rebased to libvirt-11.3.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-27172, RHEL-79088, RHEL-82411, RHEL-84257, RHEL-85320
      RHEL-85414, RHEL-85672, RHEL-86523, RHEL-86776, RHEL-86778


author: Ville-Pekka Vainio <vpvainio@iki.fi> - 4.3.2-1
changelog:
  - New upstream release
  - Update C++ standard from C++11 to C++14
  - Compilation fixes for recent versions of GCC
  - Small fixes to Finnish grammar checker


author: David King <dking@redhat.com> - 2.12.5-6
changelog:
  - Fix CVE-2025-6021 (RHEL-96495)
  - Fix CVE-2025-49794 (RHEL-96395)
  - Fix CVE-2025-49795 (RHEL-96408)
  - Fix CVE-2025-49796 (RHEL-96421)


author: Joerg Schmidbauer <jschmidb@de.ibm.com> - 1.2.0
changelog:
  - Support for get/set intermediate iv for CBC and XTS
  - Support for internal iv for GCM
  - Exploit KBLOB2PROTK3 ioctl for clear AES and EC keys
  - Fix AES EP11 version 6 key support for generate and import_clear


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-4
changelog:
  - update selinux policy (RHEL-29728)
  - limit unicast message rate per address and grant duration (RHEL-29738)
  - allow old syntax of SET SUBSCRIBE_EVENTS_NP command (RHEL-29738)
  - fix loading and reloading of leapfile (RHEL-29738)
  - fix ts2phc to handle large NMEA delay (RHEL-29737)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.3-1
changelog:
  - update to 4.3 (RHEL-54718)
  - add holdover support to ts2phc (RHEL-54716)
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-54719)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-54724)
  - fix ts2phc to correctly handle leap seconds (RHEL-54721)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58210)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60055)
  - support static sink clocks in phc2sys automatic mode (RHEL-69145)
  - don't require -O option without -a and -w in phc2sys (RHEL-69699)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-3
changelog:
  - add experimental option for external PPS in ts2phc automatic mode
    (RHEL-89605)
  - add command to set external grandmaster properties (RHEL-91310)
  - refresh link status on faults (RHEL-89811)


author: Martin Osvald <mosvald@redhat.com> - 2.1.1-1
changelog:
  - New version 2.1.1 (rhbz#2250290)
  - Fix incorrect upstream URL and SourceX (rhbz#2249526)
  - SPDX migration


author: Brian C. Lane <bcl@redhat.com> 40.5.3-1
changelog:
  - tito: Add RHEL tagger with support for rhbz and RHEL (bcl)
    Related: RHEL-31830
  - livemedia-creator: Use /usr/libexec/qemu-kvm on supported arches (bcl)
    Related: RHEL-31830
  - spec: edk2-aarch64 has the UEFI firmware on aarch64 (bcl)
    Related: RHEL-31830
  - Add prefixdevname to Anaconda image (msekleta)
    Related: RHEL-30010
  - spec: exclude the files section for lmc-virt on ppc64le (bcl)
    Resolves: RHEL-31830


author: Brian C. Lane <bcl@redhat.com> 40.5.4-1
changelog:
  - tito: Add tito to container's test-packages (bcl)
    Related: RHEL-31830
  - creator: Fix pylint error in run_creator (bcl)
    Related: RHEL-31830
  - livemedia-creator: Check for BIOS vs. UEFI qemu support (bcl)
    Related: RHEL-31830
  - livemedia-creator: Enable s390x virt support (bcl)
    Related: RHEL-31830
  - livemedia-creator: Make use of virtio devices more generic (bcl)
    Related: RHEL-31830
  - Set requirement on lorax-templates-rhel for prefixdevname change (bcl)
    Related: RHEL-30010


author: Brian C. Lane <bcl@redhat.com> 40.5.5-1
changelog:
  - templates: Synchronize generic templates with lorax-templates-rhel (bcl)
    Related: RHEL-35396
  - docs: Update livemedia-creator documentation for RHEL 10 (bcl)
    Related: RHEL-31853
  - livemedia-creator: The --make-tar option requires tar (bcl)
    Related: RHEL-31853
  - docs: Update example kickstarts for RHEL/CentOS (bcl)
    Resolves: RHEL-31853
  - lorax: Change default rootfs size to 3GiB (bcl)
    Resolves: RHEL-32504


author: Brian C. Lane <bcl@redhat.com> 40.5.6-1
changelog:
  - New lorax documentation - 40.5.6 (bcl)
    Related: RHEL-48606
  - ltmpl: Remove * from docstring (bcl)
    Related: RHEL-48606
  - docs: Update intersphinx and add _static dir (bcl)
    Related: RHEL-48606
  - docs: Document --rootfs-type options (bcl)
    Related: RHEL-48606
  - erofs: Use dedupe and all-fragments options (bcl)
    Related: RHEL-48606
  - imgutils: mkfs.erofs options should come first (bcl)
    Related: RHEL-48606
  - Accept but ignore the old --squashfs-only argument (awilliam)
    Related: RHEL-48606
  - Add compression.erofs section to lorax.conf (bcl)
    Resolves: RHEL-48606
  - Add erofs and erofs-ext4 support to --rootfs-type (bcl)
    Related: RHEL-48606
  - Replace squashfs_only with rootfs_type (bcl)
    Related: RHEL-48606
  - imgutils: Add mkerofs function and test (bcl)
    Related: RHEL-48606
  - runtime-postinstall: Make sure blacklist_exceptions has been removed (jstodola)
    Resolves: RHEL-53721


author: Brian C. Lane <bcl@redhat.com> 40.5.7-1
changelog:
  - templates: Sync template changes from lorax-templates-rhel (bcl)
    Resolves: RHEL-54713
  - tests: Add a test to make sure redhat-release-eula isn't included (bcl)
    Related: RHEL-54381


author: Brian C. Lane <bcl@redhat.com> 40.5.8-1
changelog:
  - tests: Fix mkksiso unit test (bcl)
    Related: RHEL-61778
  - pylint: Print astroid version (bcl)
    Related: RHEL-61778
  - Extend help for --updates and --ks parameters (jkonecny)
    Related: RHEL-61778
  - Fix --updates the updates image wasn't loaded (jkonecny)
    Resolves: RHEL-61778
  - Implement --replace also for S390 (sebastian.stark)
    Related: RHEL-61778
  - mkksiso: option --replace to replace arbitrary text in boot config.  (sebastian.stark)
    Related: RHEL-61778
  - livemedia: Add isomd5sum (bcl)
    Resolves: RHEL-58896


author: Brian C. Lane <bcl@redhat.com> 40.5.9-1
changelog:
  - tests: Swap nomodeset for inst.text in mkksiso test data (bcl)
    Related: RHEL-66603
  - templates: Change nomodeset / basic graphics to use inst.text (bcl)
    Resolves: RHEL-66603
  - templates: Drop nomodeset / basic graphics menu from live configs (bcl)
    Related: RHEL-66603


author: Brian C. Lane <bcl@redhat.com> 40.5.10-1
changelog:
  - erofs: Change the erofs compression default to zstd (bcl)
    Related: RHEL-48606
  - Revert "tests: Swap nomodeset for inst.text in mkksiso test data" (bcl)
    Related: RHEL-66603
  - Revert "templates: Change nomodeset / basic graphics to use inst.text" (bcl)
    Related: RHEL-66603
  - Revert "templates: Drop nomodeset / basic graphics menu from live configs" (bcl)
    Related: RHEL-66603


author: Brian C. Lane <bcl@redhat.com> 40.5.11-1
changelog:
  - erofs: Make smaller lzma erofs images by default (bcl)
    Related: RHEL-48606
  - Revert "erofs: Change the erofs compression default to zstd" (bcl)
    Related: RHEL-48606


author: Brian C. Lane <bcl@redhat.com> 40.5.12-1
changelog:
  - mkksiso: Fix rebuilding the efiboot.img on some systems (bcl)
    Resolves: RHEL-83202
  - livemedia-creator: Set 0755 permission on / cpio overlay (bcl)
    Resolves: RHEL-83519


author: Brian C. Lane <bcl@redhat.com> - 10.0-49
changelog:
  - SERIAL: Bump to 48 to match spec change for mass rebuild (bcl)
  - firmware: Exclude installation of audio firmware (bcl)
    Related: RHEL-44311
  - tests: Replace $stream with 10-stream (bcl)
    Related: RHEL-44311
  - runtime-install: Only install qcom-firmware on aarch64 (bcl)
    Related: RHEL-44311
  - runtime-cleanup: Cleanup firmware moved to brcmfmac-firmware (bcl)
    Related: RHEL-44311
  - runtime-cleanup: Cleanup firmware moved to intel-audio-firmware (bcl)
    Related: RHEL-44311
  - runtime-cleanup: Cleanup firmware moved to dvb-firmware (bcl)
    Related: RHEL-44311
  - runtime-cleanup: qcom firmware is now in the qcom-firmware package (bcl)
    Related: RHEL-44311
  - Drop Tiger VNC from templates (mkolman)
    Resolves: RHEL-38741


author: Brian C. Lane <bcl@redhat.com> - 10.0-50
changelog:
  - runtime-cleanup: Fix gshadow typo (bcl)
    Resolves: RHEL-35396
  - runtime-install: Add redhat-release-eula (bcl)
    Related: RHEL-35396
  - kernel: Keep nvram module (bcl)
    Resolves: RHEL-36443
  - kernel: Keep hid-multitouch module (bcl)
    Resolves: RHEL-49546


author: Brian C. Lane <bcl@redhat.com> - 10.0-53
changelog:
  - runtime-cleanup: fonttosfnt no longer installed (bcl)
    Resolves: RHEL-54717
  - Use the same page args in all the per-arch templates (bcl)
    Resolves: RHEL-54535
  - Remove manual /root/lorax-packages.log creation (bcl)
    Resolves: RHEL-54534
  - Remove libuser.conf (bcl)
    Resolves: RHEL-54533


author: Brian C. Lane <bcl@redhat.com> - 10.0-55
changelog:
  - SERIAL: Bump to 54 to match spec change for mass rebuild (bcl)
    Related: RHEL-67586
  - tests: Fix the repos used for the test (bcl)
    Related: RHEL-67586
  - runtime-cleanup: Newer glibc installs /usr/sbin/ldconfig (bcl)
    Resolves: RHEL-67586


author: Brian C. Lane <bcl@redhat.com> - 10.1-1
changelog:
  - Bump release version to 10.1 (bcl)
    Related: RHEL-91929
  - Add a boot menu for fips=1 (bcl)
    Resolves: RHEL-91929


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9.0-dev.12.1
changelog:
  - %{gpgverify} sources
  - remove upstreamed patches
  - update to new upstream release
  - use compressed man pages


author: Thomas E. Dickey <dickey@invisible-island.net> - 2.9.0-3
changelog:
  - add brotli build-dependency
  - restore formerly-empty sample files
  - remove a couple of obsolete workarounds for installing


author: Mike FABIAN <mfabian@redhat.com> - 1.8.1-1
changelog:
  - Update to 1.8.1
  - Remove inscript2-20210820.tar.gz because it is now included upstream
  - Remove m17n-db-1.8.0-ml-mozhi-savannah-bug-59681.patch because it is included upstream
  - Remove unicode.mim because the improvement is included upstream


author: Mike FABIAN <mfabian@redhat.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Remove bn-national-jatiya input method (included upstream)
  - Remove si-sayura input method (included upstream)
  - Remove mr-gamabhana input method (included upstream)
  - Update German translations (100%)
  - Remove m17n-db-1.8.0-inscript2-mni-sat.patch (included upstream)
  - Remove m17n-db-1.6.5-number_pad_itrans-222634.patch
    This patch is not needed, numbers are typed in language representation
    when using the number pad with numlock on even without this patch.
    (I.e. the problem reported in https://bugzilla.redhat.com/show_bug.cgi?id=222634
     is still fixed)
  - Add icon for hu-rovas-post input method
  - Remove m17n-db-1.6.5-kn-itrans_key-summary_bug228806.patch
    (See: https://git.savannah.nongnu.org/cgit/m17n/m17n-db.git/commit/?id=f10cfe21d49afbef40bdc681ff70563b6154eac0
    after these upstream changes to kn-itrans, the summary added by the patch is wrong)
  - Remove m17n-db-1.6.5-bn-itrans-bug182227.patch
    (This patch removed mappings which are "not in ITRANS Bengali table", nevertheless
     these mappings might be useful to some users, better keep them for the time being)
  - Remove m17n-db-1.6.5-kn-inscript-ZWNJ-bug440007.patch (included upstream)
  - Remove m17n-db-1.7.0-fix-e-o-mappings.patch (included upstream)
  - Remvove fix for ld mapping in MIM/bo-ewts.mim (include upstream)
    (See: https://bugzilla.redhat.com/show_bug.cgi?id=1487512)
  - MIM/bo-ewts.mim: remove whitespace in rn and brn mapping


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - kok-inscript2-deva, mr-inscript, mr-inscript2: Fix digit 0
  - ta-vutam: Change the header comment to a description
  - mr-gamabhana: icon resized to 48x48
  - latn1-pre: add icon
  - ar-translit: add icon
  - ath-phonetic: add icon
  - bla-phonetic: add icon
  - cr-western: add icon
  - iu-phonetic: add icon
  - nsk-phonetic: add icon
  - oj-phonetic: add icon
  - uk-kbd: add icon
  - eo-vi-sistemo: add icon
  - Rename the .mim files of some eo input methods to improve search for the icons
  - Workarounds for doxygen


author: Mike FABIAN <mfabian@redhat.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - New input methods from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
    sa-vedic-itrans, dra-iso-15919-itrans, hi-brahmi-itrans, ks-sharada-itrans,
    mr-modi-itrans, sa-brahmi-itrans, sa-grantha-itrans, sa-iso-15919-itrans,
    sa-sharada-itrans, sa-inscript, sa-iast-vedic
  - hi-itrans: Updates from "विश्वासो वासुकिजः (Vishvas Vasuki)" <vishvas.vasuki@gmail.com>
  - ne-trad-ttf: Update from author,  Santosh Pradhan <sapradhan8@gmail.com>
  - ja-trycode: Add icon.
  - ks-inscript: Add icon.
  - mai-inscript: Add icon.
  - ml-enhanced-inscript: Add icon.
  - mr-itrans: Add icon.
  - hi-remington: Add icon.
  - mr-typewriter: Add icon.
  - mr-phonetic: Add icon.
  - ne-rom-translit: Add icon.
  - zh-pinyin-yi: Add icon.
  - unicode: Add icon.
  - da-post: Add icon.
  - bo-ewts: Add icon.
  - bo-tcrc: Add icon.
  - kn-typewriter: Add icon.
  - grc-mizuochi: Add icon.
  - fr-azerty: Add icon.
  - hi-optitransv2: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - kn-optitransv2: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - sa-itrans: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - kn-itrans: Updates from "विश्वासो वासुकिजः (Vishvas Vasuki)" <vishvas.vasuki@gmail.com> and some extra bug fixes.
  - lsymbol: Some additions from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)" and
    some more improvements: Use emoji presentation when possible, better grouping in groups of 6, better description
  - math-latex: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
    New option "with-backslash-prefix".
  - ks-kbd: Fix typo in description, add icon.
  - ug-kbd: Add icon.
  - tai-sonla-kbd.png: Add icon.
  - mni-inscript2-mtei.png: Add icon.
  - sat-inscript2-olck.png: Add icon.
  - or-phonetic.png: Add icon.
  - sa-harvard-kyoto.png: Add icon.
  - pa-anmollipi.png: Add icon.
  - pa-remington.png: Add icon.
  - si-singlish.png: Add icon.
  - ta-lk-renganathan.png: Add icon.
  - te-rts.png: Add icon.
  - vi-han.png: Add icon.
  - vi-nomvni: Make existing icon work.
  - vi-nomtelex: Make existing icon work.
  - lsymbol: Add icon.
  - ssymbol: Add icon.


author: Mike FABIAN <mfabian@redhat.com> - 1.8.5-1
changelog:
  - Update to 1.8.5
  - new-newa-traditional-extended: New input method by Swornim Nakarmi <svarnim.nakahmi1.618@gmail.com>
  - ml-pn-c: New input method for Malayalam by Ajith R <ajithramayyan at yahoo dot co dot in>
  - en-pn-eqf: This is a slightly modified version of the QWERTY English layout to be used along with the ml-pn-c input method


author: Mike FABIAN <mfabian@redhat.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Fix parallel builds by switching from absolute to relative paths
    (Resolves: https://savannah.nongnu.org/bugs/index.php?61377)
  - enable parallel builds in the spec file

  - Update to 1.8.1
  - Remove m17n-lib-c99.patch (included upstream)
  - Remove Fix-segmentation-fault-when-using-ibus-m17n-with-vi-telex-in-gedit-in-wayland.patch
    (included upstream)


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Fixes to be able to create m17n-docs-1.8.3: Fix doxygen tags, change all EUC-JP files to UTF-8


author: Mike FABIAN <mfabian@redhat.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - Fixes “typedef in m17n-core.h causing error when compiling with C++ code”
    (Resolves: https://savannah.nongnu.org/bugs/index.php?64566)


author: DJ Delorie <dj@redhat.com> - 1:4.4.1-3
changelog:
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Michal Schorm <mschorm@redhat.com> - 3.1.20-2
changelog:
  - Fix minimal required version of mariadb-connector-c as per:
    https://mariadb.com/kb/en/mariadb-connector-odbc-3-1-20-release-notes/


author: Jindrich Novy <jnovy@redhat.com> - 1:4.8.31-1
changelog:
  - update to 4.8.31
  - drop upstreamed python3 patch
  - rename fish -> shell
  - drop obsolete smb option


author: Xiao Ni <xni@redhat.com> - 4.4-1
changelog:
  - Update to mdadm 4.4 and latest upstream
  - Resolves: RHEL-86676, RHEL-72803, RHEL-88793, RHEL-88791


author: Fabio Valentini <decathorpe@gmail.com> - 1.2.0-3
changelog:
  - Rebuild for fixed frame pointer compiler flags in Rust RPM macros.
  - Slightly modernize Rust packaging (drop ExclusiveArch, __cargo_skip_build).


author: Alex Williamson <alex.williamson@redhat.com> - 1.3.0-1
changelog:
  - New upstream release: https://github.com/mdevctl/mdevctl/releases/tag/v1.3.0
  - Note upstream moved default script location from /etc/mdevctl.d/scripts.d
    to /usr/lib/mdevctl/scripts.d.  Both locations are currently supported, the
    new locations is recommended.


author: Kairui Song <ryncsn@gmail.com> - 0.2.5-1
changelog:
  - Update to upstream latest release.
  - Fix crash when wrong reporter type is used.
  - Fix a few tracing error.


author: Konstantin Kostiuk <kkostiuk@redhat.com> 109.1.0
changelog:
  - RHEL-57014 - Rebase qemu-ga to 9.1.0
  - RHEL-32297 - guest agent public ssh injection api support for Windows
  - RHEL-36718 - The version of mingw-qemu-ga-win doesn't match inside query and via command 'guest-info'
  - Set version to 109.1.0


author: Kostiantyn Kostiuk <kkostiuk@redhat.com> 110.0.0-1
changelog:
  - RHEL-83547 - Rebase mingw-qemu-ga-win to QEMU 10.0.0 
  - RHEL-96980 - mingw-qga: Drop mingw-pixman build deps
  - RHEL-98947 - [mingw-qemu-ga-win] MSI installer ignore VSS installation result 
  - RHEL-11824 - [QGA] VSS installation retry, if previously VSS service was not un-registered correctly


author: Tomas Korbar <tkorbar@redhat.com> - 1.14.3-3
changelog:
  - Fix building with gcc 14
  - incompatible-pointer-types warnings became errors, but they've
  been present for a long time and posed no threat, thus revert
  the behaviour
  - Resolves: rhbz#2259155


author: Joe Orton <jorton@redhat.com> - 1.14.5-2
changelog:
  - update to 1.14.5 (#2331047)
  - use %autosetup
  - enable tests by default again
  - conditionalize Ruby tests (Yaakov Selkowitz)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-1
changelog:
  - new version 2.0.29
  - Resolves: RHEL-45807 - mod_http2: DoS by null pointer in websocket over
    HTTP/2 (CVE-2024-36387)


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_proxy_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-55407 - Rebase mod_proxy_cluster to upstream 1.3.20.Final release


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Cristian Le <cristian.le@mpsd.mpg.de> - 4.1.2-13
changelog:
  - Added CMAKE_PREFIX_PATH to the module file to unsure that CMake projects
    find the available MPI enabled packages, libraries, executables, etc.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.17.10-11
changelog:
  - Remove redundand restorecon call, redirect safe to ignore output
    to /dev/null, mark module directory to avoid rpm verification
    Resolves: RHEL-67894


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Richard W.M. Jones <rjones@redhat.com> - 1.40.0-2
changelog:
  - Rebase to nbdkit 1.40.0
    related: RHEL-49594
  - Send the last error to the NBD client
    resolves: RHEL-50666


author: Richard W.M. Jones <rjones@redhat.com> - 1.42.5-1
changelog:
  - Rebase to nbdkit 1.42.5
    resolves: RHEL-78830
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-time-limit-filter.
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819
  - Add support for VDDK 9.0.0.0
    resolves: RHEL-99467


author: Florian Weimer <fweimer@redhat.com> - 11.02.00-5
changelog:
  - GCC 14 compatibility fixes:
    Drop netpbm-cmuwtopbm.patch to fix an out-of-bounds stack write (#2259450)
    Stub out unused converter/other/jpeg2000/libjasper_compat.c (#2259448)


author: Phil Sutter <psutter@redhat.com> - 1:1.0.9-1
changelog:
  - Fix devel sub-package description
  - Utilize pyproject-rpm-macros for the python sub-package
  - new version 1.0.9


author: Phil Sutter <psutter@redhat.com> [1.1.1-1.el10]
changelog:
  - monitor: Recognize flowtable add/del events (Phil Sutter) [RHEL-65346]
  - tests: py: Fix for storing payload into missing file (Phil Sutter) [RHEL-65346]
  - json: Support typeof in set and map types (Phil Sutter) [RHEL-65346]
  - json: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - doc: extend description of fib expression (Phil Sutter) [RHEL-65346]
  - tests: monitor: fix up test case breakage (Phil Sutter) [RHEL-65346]
  - src: fix extended netlink error reporting with large set elements (Phil Sutter) [RHEL-65346]
  - rule: netlink attribute offset is uint32_t for struct nlerr_loc (Phil Sutter) [RHEL-65346]
  - mnl: update cmd_add_loc() to take struct nlmsghdr (Phil Sutter) [RHEL-65346]
  - mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc() (Phil Sutter) [RHEL-65346]
  - src: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - libnftables-json: fix raw payload expression documentation (Phil Sutter) [RHEL-65346]
  - tests: shell: fix spurious dump failure in vmap timeout test (Phil Sutter) [RHEL-65346]
  - Rebase onto version 1.1.1 (Phil Sutter) [RHEL-65346]


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.1-3
changelog:
  - Resolves: RHEL-33742 - Disable ENGINE support by default
  - disable ENGINE support by default
  - add engine bcond


author: Joe Orton <jorton@redhat.com> - 2:1.26.2-2
changelog:
  - Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
    start nginx@foobar.service" to start an instance of nginx using
    /etc/nginx/foobar.conf as the configuration.


author: Martin Osvald <mosvald@redhat.com> - 4:7.92-1
changelog:
  - Downgrade Nmap to 7.92 to fix NPSL licensing issue
  - nmap.spec: fix missing versioned Obsoletes and add ncat to Provides


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Support reapply on mac-ref interface. RHEL-86035
  - Support refer route next-hop-interface by mac. RHEL-80547


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91250
  - Support nmpolicy against down iface. RHEL-86240
  - Support removal VLAN connection with empty ifname. RHEL-92916


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-37922
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-1415
  - Support matching by PCI adress. RHEL-80116
  - Apply dispatch changes first. RHEL-94840
  - Fix SRIOV VF reference. RHEL-91588
  - Fix deleting with `fail_over_mac` bond. RHEL-102600


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.101.0-13
changelog:
  - fix the "Allow RSA-OAEP in FIPS mode" patch for the declaration after switch statement
  - fix changelog message for 3.101.0-11


author: Jan Pazdziora <jpazdziora@redhat.com> - 2.23.0-1
changelog:
  - Rebase to 2.23.0 (fedora#2036375)
  - Change upstream to https://github.com/flatcar/nss-altfiles
  - Enable all maps (fedora#2036375)


author: Andreas Schneider <asn@redhat.com> - 1.1.13-1
changelog:
  - Update to version 1.1.13
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.13/CHANGELOG


author: Andreas Schneider <asn@redhat.com> - 1.1.15-1
changelog:
  - Update to version 1.1.15
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.15/CHANGELOG
  - Fix building with cmocka >= 1.1.6


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.5-42.20150602git
changelog:
  - recognize the -m option
  - modernize the specfile
      - use recommended systemd macros
      - fix manual pages installation
      - sort file list and BuildRequires
      - use modern make macros
      - simplify %install section


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.1-4
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Jerry James <loganjerry@gmail.com> - 9-1
changelog:
  - Update OCaml native arches for OCaml 5.1
  - Remove the Python file and some macros (now in ocaml-rpm-macros)
  - Add %ocaml_pkg macro for common declarations


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.7-7
changelog:
  - Provide a switch to restore pre-CVE-2020-10737 behavior
  - Always set the home directory permissions according to HOME_MODE


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-1
changelog:
  - Rebase to 12.4.0 [RHEL-30345]
  - Resolves: [RHEL-30345]
    ([ESXi][RHEL10]open-vm-tools version 12.4.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-2
changelog:
  - ovt-Require-dbus-tools.patch [RHEL-36292]
  - Resolves: RHEL-36292
    ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-3
changelog:
  - ovt-Drop-now-unneeded-gdk-pixbuf-xlib-dependency.patch [RHEL-40732]
  - Resolves: RHEL-40732
    (Drop unneeded gdk-pixbuf-xlib dependency)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.5-1
changelog:
  - Rebase to 12.4.1 [RHEL-45549]
  - Resolves: RHEL-45549
    ([ESXi][RHEL10] open-vm-tools version 12.4.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.5.0-1
changelog:
  - Rebase to 12.5.0 [RHEL-63092]
  - Resolves: RHEL-63092
    ([ESXi][RHEL10] open-vm-tools version 12.5.0 has been released - please rebase)


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-58996, update to 3.24.0
  - Resolves: RHEL-39004, provide opencryptoki CCA Token also on x86_64 and ppc64le
  - Resolves: RHEL-43675, openCryptoki cca token RSA OAEP v2.1 support
  - Resolves: RHEL-43674, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-43676, openCryptoki cca token SHA3 support
  - Resolves: RHEL-24036, support protected keys for extractable keys


author: Than Ngo <than@redhat.com> - 3.24.0-5
changelog:
  - Use systemd-sysusers
  - Modifie the unit file to change file ownership
  - opencryptoki doesn't work in image mode
    Resolves: RHEL-77146


author: Than Ngo <than@redhat.com> - 3.24.0-7
changelog:
  - Resolves: RHEL-80632, tokens are deleted on reboot
  - Related: RHEL-77146, opencryptoki doesn't work in image mode


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-85376, ep11 token: PKCS #11 3.0 - support SHA3
  - Resolves: RHEL-90589, CCA token: basic support of AES-GCM
  - Resolves: RHEL-72964, cca token support cipher keys
  - Resolves: RHEL-72968, Support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-73343, Upgrade openCryptoki to latest version
  - Resolves: RHEL-75144, p11kmip: a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75761, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85374, cca token: Support ECDH to derive AES keys


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73343, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77146, Fix the image mode issue again as bootc expects to use /run/lock


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.10-5
changelog:
  - Fix fortification issues leading to crash in FreeIPA setup
    Upstream PR: https://github.com/opendnssec/opendnssec/pull/842


author: Rafael Jeffman <rjeffman@redhat.com> - 2.1.14-1
changelog:
  - Rebase to stable version 2.1.14
    Resolves: RHEL-75904
  - Use systemd-sysusers to create users
    Resolves: RHEL-4896


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-1
changelog:
  - Rebase to version 2.6.7 (rhbz#2261163)
  - Use systemd-sysusers for ldap user and group (rhbz#2173965)
  - Fix compiler errors (rhbz#2261427)
  - Replace License with SPDX identifier


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-2
changelog:
  - Remove libslapi from the main package (RHEL-35581)
  - Add "servers" conditional which includes libslapi


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71052)
  - Avoid SSL context cleanup during library destruction (RHEL-68424)


author: Veronika Hanulikova <vhanulik@redhat.com> - 0.26.1-1
changelog:
  - Rebase to new upstream release (RHEL-71523)
  - Separate OpenSC into libraries and binaries (RHEL-73314)


author: Michal Ambroz <rebus _AT seznam.cz> - 1:1.3.9-7
changelog:
  - add conditionals to be able to rebuild with opendbx/apt even on EPEL+RHEL
  - cosmetics: rename patches, add comments, use buildroot macro instead of env
  - add explicit build requirement to python3-setuptools, needed for 3.13+


author: Jan Černý <jcerny@redhat.com> - 1:1.4.0-1
changelog:
  - Update to the latest upstream release (RHEL-53981)
  - Remove openscap-devel, openscap-engine-sce-devel and openscap-python3 subpackages


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-1
changelog:
  - Update to OpenSSH 9.9p1
    Resolves: RHEL-60564
  - Separate ssh-keysign to a dedicated package
    Resolves: RHEL-62112
  - Use FIPS KEX defaults in FIPS mode
    Resolves: RHEL-58986


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-2
changelog:
  - Resolve memory management issues after rebase
    Related: RHEL-60564
  - Add extra help information on ssh early failure
    Resolves: RHEL-62718


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-3
changelog:
  - Extra help information should not be printed if stderr is not a TTY
    Resolves: RHEL-63061
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-63190


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-5
changelog:
  - Fix regression of Match directive processing
    Resolves: RHEL-76317
  - Avoid linking issues for openssl logging
    Related: RHEL-63190


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-6
changelog:
  - Fix regression of Match directive processing
    Related: RHEL-76317
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465, CVE-2025-26466).
    Resolves: RHEL-78699
    Resolves: RHEL-78943


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-8
changelog:
  - OpenSSH should not use its own implementation of MLKEM
    Resolves: RHEL-58252
  - Correct processing of Compression directive
    Resolves: RHEL-68346
  - Supress systemd warning
    Resolves: RHEL-84816


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-9
changelog:
  - CVE-2025-32728: Fix logic error in DisableForwarding option
    Resolves: RHEL-86819
  - Provide better error for non-supported private keys
    Resolves: RHEL-68124
  - Ignore bad hostkeys in known_hosts file
    Resolves: RHEL-83644


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-15
changelog:
  - Fix providers no_cache behavior
    Resolves: RHEL-71903
  - Fix pkcs12 command line segfault
    Resolves: RHEL-70878
  - Print key exchange group for hybrid PQC
    Resolves: RHEL-66163
  - Ensure correct fips.so checksum calculation
    Resolves: RHEL-73170
  - Locally configured providers should not interfere with openssl build-time tests
    Resolves: RHEL-76182
  - Load system default cipher string from crypto-policies configuration file
    include /etc/crypto-policies/back-ends/opensslcnf.config and remove
    /etc/crypto-policies/back-ends/openssl.config.
    Resolves: RHEL-71132


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-16
changelog:
  - Fix timing side-channel in ECDSA signature computation (CVE-2024-13176)
    Resolves: RHEL-70879
  - Load system default cipher string from crypto-policies configuration file
    should ignore errors.
    Related: RHEL-71132
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76754
  - Fix segfault on printing the temp key from s_client when connection is not established
    Resolves: RHEL-79045


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
changelog:
  - Rebasing OpenSSL to 3.5
    Resolves: RHEL-80811
    Resolves: RHEL-57022
    Resolves: RHEL-24098
    Resolves: RHEL-24097
    Resolves: RHEL-86865


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-3
changelog:
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-88908
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-88911
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-88913
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-88906
  - Enable sslkeylog support
    Resolves: RHEL-90853
  - Fix UEFI builds
    Resolves: RHEL-89137


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Fix regressions caused by rebase to OpenSSL 3.5
    Related: RHEL-80811
  - Fix UEFI builds on double function definitions
    Resolves: RHEL-93168


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-5
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80811
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-94614


author: Felix Kolwa <fkolwa@redhat.com> - 0.107.0-1
changelog:
  - Version bump to 0.107.0
  - Reset release to 1
  - Update addresses the following CVEs:
  - CVE-2024-34155
  - CVE-2024-34156
  - CVE-2024-42368


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-2
changelog:
  - Bump revision
  - Update tarball name to match upstream 
  - Upgrade the following tarball dependencies:
  - x/sys v0.23.0 to v0.29.0
  - x/crypto v0.26.0 to v0.32.0
  - x/net v0.28.0 to v0.33.0
  - x/sync v0.8.0 to v0.10.0
  - x/term v0.23.0 to v0.28.0
  - x/text v0.17.0 to v0.21.0
  - Update addresses the following CVEs: 
  - CVE-2024-45338
  - CVE-2024-45337
    Resolves: RHEL-78346


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-3
changelog:
  - Bump revision
  - Update tarball golang from 1.21.0 to 1.22.11
  - Update addresses CVE-2024-45336
    Resolves: RHEL-78944


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-4
changelog:
  - Bump revision
  - Fix reversion of previous dependency updates post golang update
    Resolves: RHEL-79109


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-5
changelog:
  - Bump revision
  - Add runtime requirements for shadow-utils and util-linux to ensure successful creation of observability user on installation
  - Modify pre-uninstallation stage to only delete delete the observability user on full uninstallation to prevent the user being deleted during upgrades
    Resolves: RHEL-76915


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-6
changelog:
  - Bump revision
  - Update Golang v1.22.11 to v1.23.0
  - Update x/oauth2 v0.22.0 to v0.27.0
  - Update addresses CVE-2025-22868
    Resolves: RHEL-84025


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-7
changelog:
  - Bump revision
  - Update expr v1.16.9 to v1.17.0
  - Update addresses CVE-2025-29786
    Resolves: RHEL-84153


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-8
changelog:
  - Bump revision
  - Update go-jose v4.0.2 to v4.0.5
  - Update testify v1.9.0 to v1.10.0
  - Update addresses CVE-2025-27144
    Resolves: RHEL-84160


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-9
changelog:
  - Bump revision
  - Update golang-jwt v5.2.1 to v5.2.2
  - Update addresses CVE-2025-30204
    Resolves: RHEL-85035


author: Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-1
changelog:
  - Collector version update
  - Go version update to v1.23.9
  - Update addresses CVE-2025-22871
    Resolves: RHEL-90009


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.3.1-12
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
  - Fix build in all arches, copied from Debian
  - Run autoreconf to make sure that autotools are updated
  - Clean up some trailing white spaces


author: Lukas Tyrychtr <ltyrycht@redhat.com> - 46.1-2
changelog:
  - Explicitly depend on speech-dispatcher, restoring the previous behavior before it split its libs into a separate package


author: Chris Lumens <clumens@redhat.com> - 3.0.0-2
changelog:
  - Rebase on upstream 3.0.0-rc1
  - Default globally-unique to true when clone-node-max > 1
  - Fix regression in crm_resource master resource handling
  - Related: RHEL-61383
  - Resolves: RHEL-56675
  - Resolves: RHEL-60534


author: Chris Lumens <clumens@redhat.com> - 3.0.0-3
changelog:
  - Rebase on upstream 3.0.0-rc2
  - Support X.509 certificates for Pacemaker Remote connections and remote
    CIB administration
  - Fix ability to do rolling upgrades (regression introduced in 3.0.0-rc1)
  - Fix memory leaks in daemons (regressions introduced in 3.0.0-rc1)
  - Ensure ACLs remain valid after CIB upgrades (regression introduced in
    3.0.0-rc1)
  - Related: RHEL-61383
  - Resolves: RHEL-7600


author: Chris Lumens <clumens@redhat.com> - 3.0.0-4
changelog:
  - Rebase on upstream 3.0.0-rc3
  - Log warnings if XSL transforms cannot preserve previous behavior
  - Ensure XSL transforms do not invalidate ACLs
  - Remove build dependency on inkscape
  - Resolves: RHEL-62096
  - Resolves: RHEL-62722


author: Chris Lumens <clumens@redhat.com> - 3.0.0-5
changelog:
  - Rebase on upstream 3.0.0 final release
  - Raise minimum GnuTLS dependency to 3.4.6
  - Move logrotate script back to pacemaker-cli package
  - Clear warnings and errors when resetting scheduler object
  - Resolves: RHEL-61383


author: Chris Lumens <clumens@redhat.com> - 3.0.1-1
changelog:
  - Rebase on upstream 3.0.1-rc1
  - Use dbus to detect completion of systemd resource start/stop actions
  - Add an option for controlling remote node fencing behavior
  - Split large IPC messages into multiple smaller ones
  - Related: RHEL-86085
  - Resolves: RHEL-71181
  - Resolves: RHEL-86146
  - Resolves: RHEL-86144


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5-8
changelog:
  - Make sure redhat-package-notes spec is skipped if _package_note_flags is
    undefined (rbhz#2184553)


author: Sudip Shil <sshil@redhat.com> - 6.0-7
changelog:
  - Convert to new fonts packaging guidelines and SPDX license
  - Update the fonts package
  - https://fedoraproject.org/wiki/Changes/New_Fonts_Packaging


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-2
changelog:
  - Fix static analyzer detected issues. Resolves: RHEL-36475
  - pam_env: fixes for NULL environment variables


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-6
changelog:
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-65223


author: Brian C. Lane <bcl@redhat.com> - 3.5-11
changelog:
  - parted: Fix ending sector location when using kibi IEC suffix (bcl)
  - tests: Fix formatting and snprintf warnings in tests. (bcl)
  - ui: Add checks for prompt being NULL (bcl)
  - strlist: Handle realloc error in wchar_to_str (bcl)
  - libparted: Fix potential NULL dereference in ped_disk_next_partition (bcl)
  - filesys: Check for null from close_fn (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.5.28-1
changelog:
  - Upstream 3.5.28 Alpha release
  - Dropped all patches included in new upstream release
  - Bumped minor version on libparted.so and libparted-fs-resize.so


author: Brian C. Lane <bcl@redhat.com> - 3.6-7
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73220
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73220
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73220
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73220


author: Michal Hlavinka <mhlavink@redhat.com> - 3.13.0-1
changelog:
  - updated to 3.13, adds support for cxl1.1 device link status information (#RHEL-29153)
  - add riscv64 build support (#RHEL-40383)


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Align start of PCP services with systemd presets (RHEL-22723)
  - Improved pcp-xsos command line error diagnostics (RHEL-56836)
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57795)
  - Guard against symlink attacks in pmpost program (RHEL-57797)
  - Update to latest stable version of PCP (RHEL-62801)


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Make pcp-zeroconf start enabled services once again (RHEL-93182)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories
  - Backport some more fixes to the OpenMetrics PMDA
  - Fix a multilib regression in PCP header files


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-509
changelog:
  - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod)
  - Subpackage Term-Table
  - Subpackage Test-Suite2


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.1-512
changelog:
  - Resolves: RHEL-75798
  - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>)
  - Add config.over to make build od perl reproducible
  - Removed unnecessary conversion
  - Add new systemtap-sdt-dtrace to build deps


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.2-513
changelog:
  - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>)
  - Resolves: RHEL-87186


author: Paul Howarth <paul@city-fan.org> - 0.018-1
changelog:
  - Update to 0.018
    - Fix version requirement for CPAN::Meta::Prereqs
    - Move issue tracker to GitHub


author: Paul Howarth <paul@city-fan.org> - 2.07-32
changelog:
  - Package tidy-up
    - Use author-independent source URL
    - Fix "warning: missing braces around initializer [-Wmissing-braces]"
    - Avoid deprecated patch syntax
    - Simplify find command using -empty
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.114-1
changelog:
  - Update to 0.114
    - Data::OptList now requires perl v5.12.0
    - Tests no longer add "-T" to shebang, so do not invoke taint mode


author: Packit <hello@packit.dev> - 6.93-1
changelog:
  - Release: v6.93 (Sullivan Beck)
  - Checkpoint: v6.93 (Sullivan Beck)
  - Remove Travis (Sullivan Beck)
  - Initial checkin of next release cycle: 6.93 (Sullivan Beck)


author: Paul Howarth <paul@city-fan.org> - 1.006000-1
changelog:
  - Update to 1.006000
    - Introduced lexical exporter support on Perl 5.11.2+ using the Lexical::Var
      module
    - Refactored the Perl 5.37.2+ lexical exporter support


author: Paul Howarth <paul@city-fan.org> - 1.006001-1
changelog:
  - Update to 1.006001
    Documentation
    - Don't mention Alt::Lexical::Var::ButSupportModernPerl in manual
    Packaging
    - No longer dynamically recommend Alt::Lexical::Var::ButSupportModernPerl


author: Paul Howarth <paul@city-fan.org> - 1.006002-1
changelog:
  - Update to 1.006002
    Documentation
    - Link to Exporter::Almighty in pod
    - Update copyright dates
    Packaging
    - Set homepage in metadata to https://exportertiny.github.io


author: Michal Josef Špaček <mspacek@redhat.com> - 6.01-34
changelog:
  - Package tests
  - Patch for remove warning in test
  - Simplify build and install phases
  - Update license to SPDX format


author: Paul Howarth <paul@city-fan.org> - 2.205-1
changelog:
  - Update to 2.205
    - Add perl 5.38 to CI matrix
    - Add on workflow_dispatch
    - Add some OO examples


author: Paul Howarth <paul@city-fan.org> - 2.081-1
changelog:
  - Update to 2.081
    - New function set_msg_callback for user defined callback on each SSL message
    - Showcase function in example/ssl_client.pl and example/ssl_server.pl for
      computing JA3S/JA3 fingerprints
    - Fix tracing added in 2.076 to no longer include SSL3_RT_HEADER (noise)


author: Paul Howarth <paul@city-fan.org> - 2.082-1
changelog:
  - Update to 2.082
    - SSL_version default now TLS 1.2+ since TLS 1.1 and lower are deprecated
      (GH#122)
    - Fix output of alert string when debugging (GH#132)
    - Improve regex for hostname validation (GH#130, GH#126)
    - Add can_ciphersuites subroutine for feature checking (GH#127)
    - Utils::CERT_create - die if unexpected arguments are given instead of
      ignoring these
  - Avoid use of deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 2.083-1
changelog:
  - Update to 2.083
    - Fix t/protocol_version.t for OpenSSL versions that don't support SECLEVEL
      (regression from GH#122)


author: Paul Howarth <paul@city-fan.org> - 2.084-1
changelog:
  - Update to 2.084
    - Various fixes for edge cases and build: GH#136, GH#141, GH#142, GH#143,
      GH#145
    - Update documentation to reflect default SSL_version


author: Paul Howarth <paul@city-fan.org> - 2.085-1
changelog:
  - Update to 2.085
    - Fix test that failed due to behavior changes in OpenSSL 3.2 (GH#147)
    - Update PublicSuffix
    - Add examples for TLS JA3/JA4 fingerprinting to tls_fingerprint/


author: Paul Howarth <paul@city-fan.org> - 0.430-9
changelog:
  - Disable extra test in RHEL builds (based on
    https://src.fedoraproject.org/rpms/perl-List-MoreUtils-XS/pull-request/1)
  - Silence build-time warnings about missing bundled modules


author: Paul Howarth <paul@city-fan.org> - 2:0.42.34-1
changelog:
  - 0.4234 bump
  - Use author-independent source URL
  - Fix permissions verbosely
  - Make %files list more explicit


author: Michal Josef Špaček <mspacek@redhat.com> - 6.0.1-42
changelog:
  - Add patch to add tests for other USM scenarios
  - Add patch to rewrite from Digest::SHA1 to Digest::SHA
  - Add patch to rewrite usage of HMAC with same dependencies
  - Add patch to split test files for better readability
  - Improve patch for switch from Socket6 to Socket
  - Package tests
  - Rename patch to better name with source dist version


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list


author: Michal Josef Špaček <mspacek@redhat.com> - 2.014-9
changelog:
  - Fix running of tests in perl-Net-Server-tests subpackage
    Resolves: RHEL-65278
  - Sync OpenSSL Engine patch with upstream


author: Paul Howarth <paul@city-fan.org> - 0.104003-1
changelog:
  - Update to 0.104003 (rhbz#2208530)
    - Add Artistic 1.0 Perl license and make Perl license use it
    - Remove extra "59" from LGPL-2.1
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 0.104004-1
changelog:
  - Update to 0.104004 (rhbz#2209461)
    - Rename Perl Artistic License to avoid confusion in detecting license


author: Paul Howarth <paul@city-fan.org> - 0.991-1
changelog:
  - Update to 0.991
    - Make the requirement for perl v5.12.0 explicit; previously, it was only
      implicit because of prerequisites


author: Paul Howarth <paul@city-fan.org> - 0.929-1
changelog:
  - Update to 0.929 (rhbz#2157199)
    - Update packaging and metadata
  - Use SPDX-format license tag
  - Use %license
  - Fix permissions verbosely
  - Simplify find command using -delete
  - Drop redundant buildroot cleaning in %install section


author: Paul Howarth <paul@city-fan.org> - 1.31-1
changelog:
  - Update to 1.31 (rhbz#2255994)
    - Update docs to recommend YAML::PP
  - Package description updated as per upstream documentation


author: Filip Janus <fjanus@redhat.com> - 1.4.8-5
changelog:
  - Add postgresql_default macro to be able to decide which version of extension
    is the default one in the repository


author: Remi Collet <remi@remirepo.net> - 1:1.10.13-5
changelog:
  - fix PHP 8.2 deprecations using patch from
    https://github.com/pear/pear-core/pull/124
  - use SPDX license IDs


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Remi Collet <remi@remirepo.net> - 2.0.3-12
changelog:
  - fix incompatible pointer types using patch from
    https://github.com/php/pecl-processing-rrd/pull/4
  - build out of sources tree


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.2.7-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix GCC-14 new errors (https://github.com/openpmix/openpmix/pull/3245)


author: Sérgio Basto <sergio@serjux.com> - 4.2.8-1
changelog:
  - Update pmix to 4.2.8
  - Exclude ix86, configure: abort in 32-bit environments
    https://github.com/openpmix/openpmix/pull/2892
    and Open MPI v5.0.x does not support 32 bit
    https://github.com/open-mpi/ompi/issues/11248


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/5e3accd)
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/45c2d1f)
  - fixes "CVE-2025-27144 podman: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-10.1]"
  - Resolves: RHEL-80610


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "CVE-2025-22869 podman: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh [rhel-10.0]"
  - Resolves: RHEL-82776


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/f7bf65c)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/a994a04)
  - fixes "podman tests are failing"
  - Resolves: RHEL-85826


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.8.4-1
changelog:
  - New version
    Resolves: rhbz#2255641
  - Fixed SMTP smuggling vulnerability
    Resolves: CVE-2023-51764


author: Filip Janus <fjanus@redhat.com> - 1.9.7-4.Final
changelog:
  - Add macro postgresql_default to be able set up default version in distro
  - Add symbol postgres-decoderbufs-any


author: Than Ngo <than@redhat.com> - 1.3.12-7
changelog:
  - Add, multipath - drmgr support
  - Fix, SMT state is not honored when new CPUs are added dynamically
  Resolves: RHEL-62938


author: Than Ngo <than@redhat.com> - 2.7.10-1
changelog:
  - Update to 2.7.10
    * Aadd support for multiple platform dumps
    * Add support for light path diagnostics for rtas events
    * Enable correct display of model and system-id for IPS Power systems
    * Fix call home feature for nvmf devices
    * Fix crash in rtas_errd due to invalid -f option values
    * Fix build warnings with GCC-15
  Resolves: RHEL-65188


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Brian C. Lane <bcl@redhat.com> - 3.52.3-1
changelog:
  - btrfs: Remove support for the btrfs command on RHEL10 (bcl)
    Resolves: RHEL-34009
  - Deprecate modularity on RHEL 10 (marusak.matej)
    Resolves: RHEL-34829


author: Brian C. Lane <bcl@redhat.com> - 3.52.4-1
changelog:
  - timezone: Remove the --isUtc, --nontp, and --ntpserver arguments (bcl)
    Related: RHEL-34009
  - packages: Remove the old camel case arguments on RHEL10 (bcl)
    Resolves: RHEL-34009
  - nvdimm: Remove support for the nvdimm command on RHEL10 (bcl)
    Related: RHEL-34009


author: Brian C. Lane <bcl@redhat.com> - 3.52.6-1
changelog:
  - doc/versionremoved: Update VersionChange import for Sphinx 8.0.0 (bcl)
    Related: RHEL-61426
  - workflow: Use python 3.12.7 for testing (bcl)
    Related: RHEL-61426
  - options: adjust to behavior change in upstream _parse_optional (awilliam)
    Resolves: RHEL-61426


author: Brian C. Lane <bcl@redhat.com> - 3.52.7-1
changelog:
  - Add support for inline certificates with `%certificate` section (k.koukiou)
    Resolves: RHEL-61435


author: Brian C. Lane <bcl@redhat.com> - 3.52.8-1
changelog:
  - Update %certificate section documentation (rvykydal)
    Related: RHEL-61435
  - Make %certificate section option --dir mandatory. (rvykydal)
    Resolves: RHEL-76502


author: Brian C. Lane <bcl@redhat.com> - 3.52.9-1
changelog:
  - workflows: Switch to using ubuntu-latest (bcl)
    Related: RHEL-80086
  - Do not remove "md" prefix from RAID names (vtrefny)
    Resolves: RHEL-80086


author: Ondřej Sloup <osloup@redhat.com> - 5.0.0~b1-1
changelog:
  - Rebase to the newest version, test the beta (rhbz#2235122)
  - This release drops Python 2 and adds Python 3.12 support


author: Ondrej Sloup <osloup@redhat.com> - 5.0.0~b4-1
changelog:
  - Rebase to the newest version, test the beta (Related: rhbz#2235401)
  - Remove the hotfix (move of pyodbc.py) as it is fixed in upstream


author: Ondrej Sloup <osloup@redhat.com> - 5.1.0-1
changelog:
  - Rebase to the newest version (Related: rhbz#2262845)
  - Update license tag to the SPDX format (MIT-0)


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.1-1
changelog:
  - Add a temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Related: rhbz#2284187


author: Miro Hrončok <mhroncok@redhat.com> - 1.13.0-1
changelog:
  - Properly escape weird characters from paths in %{pyproject_files} (RPM 4.19+ only)
  - Revert the temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Fixes: rhbz#1990879


author: Python Maint <python-maint@redhat.com> - 1.15.0-1
changelog:
  - Add a possibility to read runtime requirements from pyproject.toml [project] table
  - Fixes: rhbz#2261939
  - Don't generate a dependency on pip when %pyproject_buildrequires -N is used
  - Fixes: rhbz#2294510
  - Even when %_auto_set_build_flags is disabled, set all compiler flags when building wheels
  - Fixes: rhbz#2293616


author: Miro Hrončok <mhroncok@redhat.com> - 1.16.0-1
changelog:
  - %pyproject_buildrequires: Add support for dependency groups (PEP 735), via the -g flag
  - This is implied when used tox testenvs depend on dependency groups (requires tox 4.22+)
  - Fixes: rhbz#2318849


author: Miro Hrončok <miro@hroncok.cz> - 1.16.1-1
changelog:
  - Support for setuptools 70+
  - wheel is no longer generated as a dependency of the default build system


author: Packit <hello@packit.dev> - 0.19.6-1
changelog:
  - [packit] 0.19.6 upstream release
  - Resolves rhbz#2211521 Upstream tag: v0.19.6 Upstream commit: b83949d0


author: Vendula Poncova <vponcova@redhat.com> - 1.7-1
changelog:
  - CI: Use dnf instead of yum to install CentOS packages (vponcova)
  - Documentation: Improve the installation instruction (vponcova)
  - Remove untracked files from the git repository interactively (vponcova)
  - UnixFD: Document the support for Unix file descriptors (vponcova)
  - Documentation: Clean up examples in the documentation (vponcova)
  - Documentation: Simplify the README.md file (vponcova)
  - Documentation: Fix bullet point lists (vponcova)
  - Documentation: Simplify the hostname example (vponcova)
  - CI: Run tests for all supported Python version (vponcova)
  - UnixFD: Handle DBus signals with Unix file descriptors (vponcova)
  - UnixFD: Add tests for DBus properties with Unix file descriptors (vponcova)
  - UnixFD: Clean up tests of DBus calls with Unix file descriptors (vponcova)
  - UnixFD: Clean up tests for swapping Unix file descriptors (vponcova)
  - UnixFD: Clean up `GLibClientUnix` and `GLibServerUnix` (vponcova)
  - UnixFD: Process results of client calls in the low-level library (vponcova)
  - UnixFD: Move the support for Unix file descriptors to dasbus.unix (vponcova)
  - CI: Always pull the latest container image (vponcova)
  - CI: Disable the unhashable-member warning (vponcova)
  - Revert "Don't use pylint from pip on Fedora Rawhide" (vponcova)
  - UnixFD: Move the unit tests to a new file (vponcova)
  - UnixFD: Manage the testing bus on set up and tear down (vponcova)
  - UnixFD: Don't add arguments to the DBusTestCase.setUp method (vponcova)
  - UnixFD: Create a new testing DBus interface (vponcova)
  - UnixFD: Fix the indentation in unit tests (vponcova)
  - Add unit tests for variants with variant types (vponcova)
  - Simplify the code for replacing values of the UnixFD type (vponcova)
  - Add classes for unpacking and unwrapping a variant (vponcova)
  - Don't use pylint from pip on Fedora Rawhide (vponcova)
  - UnixFD: Rename a parameter to server_arguments (vponcova)
  - UnixFD: Revert a change in GLibClient._async_call_finish (vponcova)
  - Raise TimeoutError if a DBus call times out (vponcova)
  - Fix pylint tests in CentOS Stream 8 (vponcova)
  - Fix the ENV instruction in Dockerfiles (vponcova)
  - Fix pylint issues (vponcova)
  - run forked tests using subprocess, instead of multiprocessing (wdouglass)
  - use mutable list for return value in fd_test_async make fd getters more explicit (wdouglass)
  - Add test case for method call only returning fd (jlyda)
  - Always use call_with_unix_fd_list* to properly handle returned fds (jlyda)
  - fix some lint discovered errors (wdouglass)
  - seperate unixfd functionality, to better support systems that don't have them (wdouglass)
  - Remove note in documentation about unsupported Unix file descriptors (wdouglass)
  - Add a test for UnixFD transfer (wdouglass)
  - Allow UnixFDs to be replaced and passed into Gio (wdouglass)
  - Fix rpm lint warnings for OpenSUSE 15.3 (christopher.m.cantalupo)
  - Extend the .coveragerc file (vponcova)
  - Disable builds for Fedora ELN on commits (vponcova)
  - Test Debian with Travis (vponcova)
  - Test Ubuntu with Travis (vponcova)
  - Test CentOS Stream 9 with Travis (vponcova)
  - Use CentOS Stream 8 for testing (vponcova)
  - add remove dbus object function on bus and update tests (matthewcaswell)
  - properly measure coverage across multiprocess test cases (wdouglass)
  - Move handle typing tests into a new class (and a new file) (wdouglass)
  - Add another test for a crazy data type, fix a bug discovered via the test (wdouglass)
  - Add functions for generating/consuming fdlists with variants (wdouglass)
  - Provide a language argument for the code blocks (seahawk1986)
  - Change the type of 'h' glib objects from 'File' to 'UnixFD' (wdouglass)
  - Allow to run tests in a container (vponcova)
  - Add C0209 to the ignore list for pylint (tjoslin)
  - Use the latest distro in Travis CI (vponcova)
  - Always update the container (vponcova)
  - Document limitations of the DBus specification generator (vponcova)


author: Packit <hello@packit.dev> - 1.9.0-1
changelog:
  - Optimize some repo metastuff and prepare v1.9.0 (#364) (nir0s)
  - Actions(deps): Bump actions/setup-python from 4 to 5 (#363) (dependabot[bot])
  - Test on modern versions of CPython and PyPy and macOS (#362) (Christian Clauss)
  - Actions(deps): Bump actions/checkout from 3 to 4 (#361) (dependabot[bot])
  - Refactor `distro.info()` method to return an `InfoDict` (#360) (SCC/楊志璿)
  - Ignore the file '/etc/ec2_version' (Pritam Kulkarni)
  - Add Debian Testing to the tests (#356) (Harshula Jayasuriya)
  - Ignore the file '/etc/board-release' (#353) (Pedro Lamas)
  - Add support for ALT Linux Server 10.1 distribution (#354) (Alexander Stepchenko)
  - Run Python 3.6 on Ubuntu 20.04 for CI and bump isort (#355) (Samuel FORESTIER)
  - Update archlinux resource for tests (Saltaformajo)
  - Resolves rhbz#2255740


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.5-1
changelog:
  - Update to 3.1.5
  - Security fix for CVE-2024-56201
  - Security fix for CVE-2024-56326
  Resolves: RHEL-73095


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-5
changelog:
  - Reduce the type safety as a workaround for build failures in Fedora 40+
  - Fixes: rhbz#2261034
  - Fixes: rhbz#2256232


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-7
changelog:
  - Revert "Reduce the type safety as a workaround for build failures in
    Fedora 40+"
  - The workaround has been moved to Cython


